Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File:                     RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier:          3LTFzzeIB8ZLCLhJc+8+Yditau7Qkc5QXX1UBlqFPrU=
Subject key identifier:   65:DA:7B:05:8F:9A:BC:8E:82:32:0C:A2:00:31:58:80:2C:83:BD:EE
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer:       /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial:       01976D06C041A78910CE24852CA8E48B5507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number:          05B9
Signing time:             Sat 14 Jun 2025 06:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:48 +0000
Files and hashes:         1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
                          2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: rKV8rpS3XfZ6DJrEBlKxBsdPNwnpJS75NFZRoFaRHmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:c0:41:a7:89:10:ce:24:85:2c:a8:e4:8b:55:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
        Validity
            Not Before: Jun 14 06:00:48 2025 GMT
            Not After : Jun 15 06:00:48 2025 GMT
        Subject: CN=65da7b058f9abc8e82320ca2003158802c83bdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:94:52:01:a5:90:c7:54:60:95:52:25:74:
                    44:8f:0a:a6:9e:f3:ce:68:fc:e0:87:0e:28:5c:19:
                    e4:55:19:26:c6:2d:5a:5a:38:75:df:20:c7:1c:a4:
                    00:b4:c2:0d:db:d0:33:f0:32:dc:ae:eb:d7:e5:43:
                    e0:3c:58:8f:89:55:be:88:ee:7b:e9:85:77:74:39:
                    ba:59:85:e8:49:25:c4:a4:72:2a:49:ff:7c:6f:15:
                    32:0a:9b:30:37:c1:dd:b5:97:ee:9d:b9:0e:5e:93:
                    63:69:11:f6:af:f2:36:38:cd:6c:43:78:85:88:73:
                    21:00:47:c1:80:87:c5:60:c1:5f:8a:8c:83:97:44:
                    35:85:95:fb:c5:da:12:00:fa:7e:a1:1d:72:3c:eb:
                    bf:e2:cf:0f:e6:5a:b1:33:c6:b2:a9:a7:8a:ae:f2:
                    9e:d1:ce:6b:14:46:87:ca:98:c6:ba:77:4e:59:f6:
                    da:05:df:7f:35:6f:42:1e:8f:47:51:3d:1b:43:58:
                    3a:8b:7f:41:c2:26:1f:44:d8:c8:bb:d9:67:64:71:
                    d3:f7:0a:fe:64:06:9d:06:b6:66:bb:81:f6:4c:c4:
                    38:f0:6a:f5:7e:1b:cb:e9:67:ff:57:e8:38:5d:3d:
                    0a:57:e9:13:70:ea:b3:e8:f8:6f:ef:84:df:8a:9d:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:7B:05:8F:9A:BC:8E:82:32:0C:A2:00:31:58:80:2C:83:BD:EE
            X509v3 Authority Key Identifier:
                keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:74:ba:2f:68:a1:88:82:57:21:47:ec:62:79:6f:6c:98:68:
         1a:8e:3c:14:90:00:15:7a:a4:b6:b5:e9:a4:ab:07:69:a2:d2:
         2e:ee:c5:f5:51:09:66:9f:86:ba:01:ea:d3:fd:af:b5:82:29:
         c7:32:e2:8e:4e:94:96:ae:6f:58:d8:90:b4:4d:dd:47:3b:80:
         0c:fe:bc:72:2d:62:b4:28:3f:8c:4f:9a:30:e2:2c:7e:55:5c:
         ae:0f:d6:67:76:92:de:19:39:1b:39:5c:62:ec:e1:04:2c:6c:
         99:58:8c:1e:e0:19:68:bf:5f:c5:e3:91:7d:58:9f:d1:fd:bf:
         bd:9b:3c:9a:c3:7f:49:0c:24:d7:14:1d:e7:90:09:07:62:aa:
         c4:0c:7d:98:ea:46:5a:e6:8c:84:f1:bb:32:60:de:08:aa:ed:
         27:80:9a:21:25:ba:76:f2:a8:72:35:cd:be:6f:c3:a4:e8:b2:
         e5:17:3d:9c:3f:5e:53:bc:d9:7e:52:3a:4a:1d:22:68:3d:50:
         41:cd:14:89:10:aa:98:62:d5:89:a9:68:4f:23:f0:59:8b:5d:
         6b:f4:01:28:37:9a:74:bf:31:c5:c9:7b:22:c0:95:5c:a3:43:
         8c:ec:5e:40:fd:4e:1b:c1:f3:0a:40:36:f5:ff:91:b9:de:8a:
         e9:d0:9a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBsBBp4kQziSFLKjki1UHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDNjYzU5MWNlYmEzODYxMzBmM2M5Zjc0MjY0NThiODg4
N2MyZWIwHhcNMjUwNjE0MDYwMDQ4WhcNMjUwNjE1MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg2NWRhN2IwNThmOWFiYzhlODIzMjBjYTIwMDMxNTg4MDJjODNiZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+OUUgGlkMdUYJVSJXREjwqmnvPO
aPzghw4oXBnkVRkmxi1aWjh13yDHHKQAtMIN29Az8DLcruvX5UPgPFiPiVW+iO57
6YV3dDm6WYXoSSXEpHIqSf98bxUyCpswN8HdtZfunbkOXpNjaRH2r/I2OM1sQ3iF
iHMhAEfBgIfFYMFfioyDl0Q1hZX7xdoSAPp+oR1yPOu/4s8P5lqxM8ayqaeKrvKe
0c5rFEaHypjGundOWfbaBd9/NW9CHo9HUT0bQ1g6i39BwiYfRNjIu9lnZHHT9wr+
ZAadBrZmu4H2TMQ48Gr1fhvL6Wf/V+g4XT0KV+kTcOqz6Phv74Tfip2xuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXaewWPmryOgjIMogAxWIAsg73uMB8GA1UdIwQY
MBaAFETTzFkc66OGEw88n3QmRYuIh8LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5Zjgt
MmJiNjU0MDhkZjc0LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5ZjgtMmJiNjU0MDhkZjc0
LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnS6L2ih
iIJXIUfsYnlvbJhoGo48FJAAFXqktrXppKsHaaLSLu7F9VEJZp+GugHq0/2vtYIp
xzLijk6Ulq5vWNiQtE3dRzuADP68ci1itCg/jE+aMOIsflVcrg/WZ3aS3hk5Gzlc
YuzhBCxsmViMHuAZaL9fxeORfVif0f2/vZs8msN/SQwk1xQd55AJB2KqxAx9mOpG
WuaMhPG7MmDeCKrtJ4CaISW6dvKocjXNvm/DpOiy5Rc9nD9eU7zZflI6Sh0iaD1Q
Qc0UiRCqmGLVialoTyPwWYtda/QBKDeadL8xxcl7IsCVXKNDjOxeQP1OG8HzCkA2
9f+Rud6K6dCa3w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:11 2025 by rpki-client