Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          G//w2N1dbYa5zcnpQvR4VT1ywhvFWJlU/urfpRUSFrw=
Subject key identifier:   3D:70:73:DA:91:03:DF:77:D7:F9:2C:76:A3:86:AA:5D:92:5E:75:B7
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       019780C452FD664FD8BBF65F1B3ADBA6BC14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          044A
Signing time:             Wed 18 Jun 2025 02:00:39 +0000
Manifest this update:     Wed 18 Jun 2025 02:00:39 +0000
Manifest next update:     Thu 19 Jun 2025 02:00:39 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: uc/EeFBY82Hsius/EXPyGi9zkgYR5jnTBailzqINY/A=)
                          3: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          4: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
                          5: zuXVABH3iQHva6C3x_7o7gzuXEY.roa (hash: oBzqdMlIWS4N+t9dxQHDBXhwNKLOQHnlyrSOj0n4CXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:c4:52:fd:66:4f:d8:bb:f6:5f:1b:3a:db:a6:bc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Jun 18 02:00:39 2025 GMT
            Not After : Jun 19 02:00:39 2025 GMT
        Subject: CN=3d7073da9103df77d7f92c76a386aa5d925e75b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:79:be:f3:7c:42:02:ff:bc:37:af:4c:0f:
                    cc:93:43:8e:ea:13:c4:c8:dc:34:49:72:8d:ce:9e:
                    26:10:3b:e7:58:7d:4a:1c:ed:5e:15:32:bc:bb:af:
                    32:4e:0d:09:05:30:35:8b:ff:52:63:86:02:5f:72:
                    76:3a:0c:8d:f8:25:3e:2a:36:a2:1b:4f:91:8c:d3:
                    b7:c3:d3:6d:b8:23:61:b5:62:d1:02:0c:aa:f2:15:
                    b4:93:fd:ab:c9:05:ff:95:a2:ac:b0:ab:14:63:a1:
                    5f:ef:bf:6d:d6:bf:88:ba:a2:7b:4c:f4:b7:e9:45:
                    10:2e:9e:01:d1:43:76:8d:6e:ce:e1:75:e7:d1:3f:
                    8c:21:4d:59:9b:70:f6:1c:af:6a:d0:c6:7c:57:05:
                    bc:2c:39:5e:6e:13:d1:01:6c:4d:bc:45:61:45:7c:
                    05:be:0d:67:65:ce:f6:bc:de:e0:7d:b8:d7:9e:36:
                    ea:83:0c:47:65:0e:0b:15:c7:4a:ad:7d:f5:2a:1c:
                    03:44:04:14:c1:95:dd:2a:72:d7:16:46:48:68:26:
                    39:53:d3:e5:3a:33:ca:05:0c:e7:22:3b:7d:c2:f8:
                    cc:63:18:f7:33:be:a3:4c:d8:fd:0b:be:be:bf:a5:
                    cb:b8:2b:22:26:10:c9:7b:4c:f3:de:aa:4d:87:52:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:70:73:DA:91:03:DF:77:D7:F9:2C:76:A3:86:AA:5D:92:5E:75:B7
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2c:49:bc:38:4a:6f:da:b7:4c:a5:32:c5:7a:e5:3c:ed:35:
         1f:b5:ee:d8:24:eb:05:ab:e9:ba:bc:1e:5a:56:51:99:76:b5:
         df:0a:ad:43:1d:4e:74:3a:95:e4:a6:31:9c:f7:56:09:28:aa:
         f9:b0:05:96:ec:37:55:bd:bf:7d:12:27:1b:cc:04:7d:fb:bb:
         b4:c2:f9:b0:ac:cb:6a:32:7f:d2:9f:cf:7c:a3:87:ae:ff:e3:
         3b:50:af:b2:d4:07:58:fc:67:05:04:36:84:6d:9b:e1:95:9f:
         27:b0:40:31:73:15:8f:3b:8d:60:92:05:25:6e:35:97:b3:b2:
         73:c5:0d:5b:7e:72:99:df:41:92:96:85:ed:14:d4:05:8c:b1:
         f2:bd:a7:62:22:7b:a7:8e:27:b7:02:30:81:32:6b:7c:df:30:
         7e:4b:cb:4b:c1:fe:43:dc:38:dc:3b:d0:84:0f:e4:a1:10:ee:
         ef:5e:a9:f8:73:00:50:eb:18:fd:4d:5f:69:86:5e:b1:1d:3c:
         ab:70:80:ef:d1:c8:02:0a:90:1f:0f:2e:24:19:7e:ea:8e:1f:
         79:66:54:79:fb:e6:26:a7:f6:35:d6:93:52:3b:31:a0:64:72:
         4c:af:6e:3a:ba:fa:63:35:4a:6c:de:d2:08:80:ff:96:8f:7d:
         2a:4f:72:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAxFL9Zk/Yu/ZfGzrbprwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmMxNWNmNzJmY2RiODU5NmI3YzY0ODliMTVhNmI3MjBj
MTRlYjUwHhcNMjUwNjE4MDIwMDM5WhcNMjUwNjE5MDIwMDM5WjAzMTEwLwYDVQQD
EygzZDcwNzNkYTkxMDNkZjc3ZDdmOTJjNzZhMzg2YWE1ZDkyNWU3NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfx5vvN8QgL/vDevTA/Mk0OO6hPE
yNw0SXKNzp4mEDvnWH1KHO1eFTK8u68yTg0JBTA1i/9SY4YCX3J2OgyN+CU+Kjai
G0+RjNO3w9NtuCNhtWLRAgyq8hW0k/2ryQX/laKssKsUY6Ff779t1r+IuqJ7TPS3
6UUQLp4B0UN2jW7O4XXn0T+MIU1Zm3D2HK9q0MZ8VwW8LDlebhPRAWxNvEVhRXwF
vg1nZc72vN7gfbjXnjbqgwxHZQ4LFcdKrX31KhwDRAQUwZXdKnLXFkZIaCY5U9Pl
OjPKBQznIjt9wvjMYxj3M76jTNj9C76+v6XLuCsiJhDJe0zz3qpNh1IHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1wc9qRA9931/ksdqOGql2SXnW3MB8GA1UdIwQY
MBaAFN8sFc9y/NuFlrfGSJsVprcgwU61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUt
ZjE4NTNkMTBlNjEwLzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUtZjE4NTNkMTBlNjEw
LzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcixJvDhK
b9q3TKUyxXrlPO01H7Xu2CTrBavpurweWlZRmXa13wqtQx1OdDqV5KYxnPdWCSiq
+bAFluw3Vb2/fRInG8wEffu7tML5sKzLajJ/0p/PfKOHrv/jO1CvstQHWPxnBQQ2
hG2b4ZWfJ7BAMXMVjzuNYJIFJW41l7Oyc8UNW35ymd9BkpaF7RTUBYyx8r2nYiJ7
p44ntwIwgTJrfN8wfkvLS8H+Q9w43DvQhA/koRDu716p+HMAUOsY/U1faYZesR08
q3CA79HIAgqQHw8uJBl+6o4feWZUefvmJqf2NdaTUjsxoGRyTK9uOrr6YzVKbN7S
CID/lo99Kk9y9w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 12:36:53 2025 by rpki-client