Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File:                     3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier:          L7O1bnsFy3T/iFznnOrkH6E2gHNvdARNZBQS6JfQVFc=
Subject key identifier:   38:FB:D1:B1:64:7B:37:9B:32:ED:1F:D9:3B:DF:55:1B:7A:CC:18:3E
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer:       /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial:       01976EBE3E4D75C9DD402DF8657B473097AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number:          1276
Signing time:             Sat 14 Jun 2025 14:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:50 +0000
Files and hashes:         1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: 4pdHpNPurahVx4q2wViux7NB9ObuAao38s4ZCu5CzzQ=)
                          2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
                          3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
                          4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
                          5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:3e:4d:75:c9:dd:40:2d:f8:65:7b:47:30:97:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
        Validity
            Not Before: Jun 14 14:00:50 2025 GMT
            Not After : Jun 15 14:00:50 2025 GMT
        Subject: CN=38fbd1b1647b379b32ed1fd93bdf551b7acc183e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:cf:8f:96:f9:29:60:ac:84:98:87:5c:66:
                    ff:e3:f6:3f:2f:15:06:b6:61:8f:28:bc:a6:ee:29:
                    0e:54:ff:b8:8b:20:d7:74:22:b3:16:4a:19:d5:ed:
                    ab:54:32:47:57:4f:e1:05:18:f7:95:b1:0c:a3:56:
                    7f:b3:bc:c2:86:55:93:f9:54:41:af:21:f8:e3:c1:
                    e1:ec:00:45:bd:86:98:9b:26:14:c8:b1:1d:9b:9b:
                    8c:d3:ea:2f:fc:1d:e8:e5:a4:2a:bd:7f:04:6e:b9:
                    b5:56:41:d9:52:bf:6b:f3:e1:61:d9:49:9a:0d:a8:
                    3e:b0:9b:f1:c3:f7:40:20:5f:1f:7d:09:eb:a6:3b:
                    d9:76:6b:ee:a3:ef:92:fe:27:57:69:c1:0f:47:6c:
                    59:80:18:7f:52:08:8a:25:fa:eb:65:14:02:2e:59:
                    1d:f5:94:d8:49:69:88:d9:28:a3:a2:e3:85:30:28:
                    83:9e:f8:59:60:fc:2d:f9:22:d0:b2:25:34:9f:1f:
                    f3:55:a0:95:a6:f6:2a:00:40:60:f0:8d:bb:48:2e:
                    e8:b3:9b:be:61:c7:1c:8c:f8:ed:e3:91:b0:6a:4e:
                    d9:cc:da:36:6b:53:3a:c6:15:f4:d9:ed:d8:5f:91:
                    fd:18:bf:1e:ec:20:d1:13:1b:cf:d1:f8:53:1d:bc:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:D1:B1:64:7B:37:9B:32:ED:1F:D9:3B:DF:55:1B:7A:CC:18:3E
            X509v3 Authority Key Identifier:
                keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:10:0f:25:3d:c0:0a:a6:d7:0c:b6:94:f8:79:2d:82:50:
         e8:e5:e9:e4:da:21:f4:80:cb:50:9b:22:89:76:e4:a2:eb:8f:
         f1:e3:8b:55:56:9a:b3:b4:da:e3:d6:19:5d:90:72:cf:ee:7f:
         04:81:21:d7:71:3d:70:85:fa:de:e4:67:be:68:b8:8c:85:20:
         44:81:10:7a:56:08:63:fd:44:50:84:5c:64:25:49:7c:df:1b:
         c7:9b:63:38:f3:64:e6:7e:15:c1:fb:a2:f5:98:44:12:28:d0:
         5b:42:17:ab:2e:9b:f9:45:79:69:ce:03:6b:24:e3:af:db:5f:
         5b:dc:11:1e:4e:61:30:0c:1c:7e:fc:99:d4:fd:0a:fc:4d:79:
         f0:0e:c2:a0:56:75:52:54:3f:91:21:78:58:10:73:c9:85:f5:
         1f:cc:39:97:a6:dd:10:9e:6b:21:aa:48:3b:ec:dc:c9:4d:2e:
         77:20:8e:bf:18:db:89:35:0d:40:47:f1:29:37:98:42:9c:12:
         b5:3e:b8:2a:90:07:06:c7:da:e3:25:d2:a0:6a:d0:1b:cb:f8:
         61:5d:a3:b9:c8:e9:ec:6f:b9:16:a2:65:72:9e:06:a6:e8:a0:
         b2:0f:40:21:2e:5f:90:1b:51:ec:eb:62:cd:22:8f:ea:1b:46:
         2a:ac:e5:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvj5NdcndQC34ZXtHMJeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk
YmVmYzgwHhcNMjUwNjE0MTQwMDUwWhcNMjUwNjE1MTQwMDUwWjAzMTEwLwYDVQQD
EygzOGZiZDFiMTY0N2IzNzliMzJlZDFmZDkzYmRmNTUxYjdhY2MxODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjnPj5b5KWCshJiHXGb/4/Y/LxUG
tmGPKLym7ikOVP+4iyDXdCKzFkoZ1e2rVDJHV0/hBRj3lbEMo1Z/s7zChlWT+VRB
ryH448Hh7ABFvYaYmyYUyLEdm5uM0+ov/B3o5aQqvX8Ebrm1VkHZUr9r8+Fh2Uma
Dag+sJvxw/dAIF8ffQnrpjvZdmvuo++S/idXacEPR2xZgBh/UgiKJfrrZRQCLlkd
9ZTYSWmI2SijouOFMCiDnvhZYPwt+SLQsiU0nx/zVaCVpvYqAEBg8I27SC7os5u+
YcccjPjt45Gwak7ZzNo2a1M6xhX02e3YX5H9GL8e7CDRExvP0fhTHbysAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj70bFkezebMu0f2TvfVRt6zBg+MB8GA1UdIwQY
MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt
MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj
LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8gQDyU9
wAqm1wy2lPh5LYJQ6OXp5Noh9IDLUJsiiXbkouuP8eOLVVaas7Ta49YZXZByz+5/
BIEh13E9cIX63uRnvmi4jIUgRIEQelYIY/1EUIRcZCVJfN8bx5tjOPNk5n4Vwfui
9ZhEEijQW0IXqy6b+UV5ac4DayTjr9tfW9wRHk5hMAwcfvyZ1P0K/E158A7CoFZ1
UlQ/kSF4WBBzyYX1H8w5l6bdEJ5rIapIO+zcyU0udyCOvxjbiTUNQEfxKTeYQpwS
tT64KpAHBsfa4yXSoGrQG8v4YV2jucjp7G+5FqJlcp4Gpuigsg9AIS5fkBtR7Oti
zSKP6htGKqzlkw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:17:57 2025 by rpki-client