Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          i5wHr8RwjZnEnmL5uxX552omPP88tjRABxyscKZWYTQ=
Subject key identifier:   EA:9B:2C:E7:02:88:1A:FE:37:7D:05:C3:B9:71:BB:CE:FD:70:46:CE
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       0197722CE4BCAF808CC851F3C3E41AFFC985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0AEC
Signing time:             Sun 15 Jun 2025 06:00:34 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:34 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:34 +0000
Files and hashes:         1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
                          2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
                          3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 3WaQAmlKbTK9uTUsSlTPH0U7cco9UvtxVKQ1BfiSGTk=)
                          4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:e4:bc:af:80:8c:c8:51:f3:c3:e4:1a:ff:c9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Jun 15 06:00:34 2025 GMT
            Not After : Jun 16 06:00:34 2025 GMT
        Subject: CN=ea9b2ce702881afe377d05c3b971bbcefd7046ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:73:c9:a0:0c:be:ff:4d:4a:7e:f3:f8:bc:
                    a3:09:55:67:aa:f3:9e:39:6d:fe:3d:ed:12:b0:95:
                    1a:1b:2e:b3:66:5d:b7:a6:74:5b:78:05:76:f5:ef:
                    1a:ef:e1:d9:9a:aa:f2:90:ea:1e:eb:f8:87:43:0f:
                    54:c9:18:c3:65:30:78:50:ee:81:c8:42:6e:19:6e:
                    63:fa:eb:96:df:5b:b5:87:b2:fe:fb:d1:e0:d2:c6:
                    04:86:9e:a2:b8:84:9d:4d:15:d3:e6:0a:4d:2f:e5:
                    01:5f:9a:f8:a2:f5:b6:2f:2a:93:36:9d:5d:a7:99:
                    02:35:23:47:69:14:65:6b:da:93:7c:63:07:25:b3:
                    29:f7:87:23:03:9c:aa:a3:9d:40:e1:b0:31:62:76:
                    38:4a:14:96:60:07:55:4c:bd:3f:32:ff:32:9f:bc:
                    99:6b:06:1c:3d:1e:00:fc:90:b6:c7:a8:a9:e5:67:
                    0f:f1:b9:fe:f8:0e:4d:34:70:55:76:21:77:60:f5:
                    e4:37:b7:1e:9f:18:8a:5d:18:91:17:78:de:97:96:
                    77:c6:ee:df:43:f7:95:06:f4:94:af:6a:5b:32:fe:
                    6c:01:47:fa:96:da:20:ee:5a:49:12:94:5e:10:fe:
                    6d:32:e4:13:ae:3a:07:be:da:f8:b3:5f:d5:a2:3d:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:2C:E7:02:88:1A:FE:37:7D:05:C3:B9:71:BB:CE:FD:70:46:CE
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:76:b9:3d:96:dc:dc:4f:42:4b:aa:fe:0a:92:86:25:93:
         56:b8:a1:23:8c:e1:1d:59:21:dd:f5:74:50:01:dc:6d:84:2c:
         21:ec:a5:7b:92:38:70:de:9f:f7:c1:8a:f3:ad:65:c1:36:c8:
         c2:38:d2:3e:9e:df:c1:55:09:28:24:82:4b:c8:e5:7a:67:1b:
         80:41:5c:a9:57:08:93:ce:b1:b2:07:4a:ad:99:c6:a5:c8:01:
         57:9b:10:2e:0c:02:a9:a7:dd:fb:03:78:d6:d3:a1:a9:9f:7a:
         cd:01:be:03:9c:61:4f:90:09:57:fd:b9:26:c3:00:bd:15:29:
         85:c5:82:1e:7f:14:cd:d4:b8:a5:3c:b9:d8:7f:52:d6:33:0f:
         90:ab:c5:bd:74:d1:cd:2e:78:66:fc:56:19:a8:2e:d3:2e:5e:
         9f:5a:a3:db:98:5b:0e:1e:b5:7b:3c:dd:de:dd:c2:bd:26:68:
         0f:ee:bd:97:3d:07:f5:f2:40:f1:60:8d:07:df:92:75:ab:a8:
         57:09:c5:39:3b:97:f4:86:f8:37:5a:3f:a0:c6:b0:18:a4:18:
         26:c9:a0:79:86:a2:d9:06:e2:2e:10:55:e5:f7:5d:fb:4c:94:
         d4:c4:96:1f:60:eb:d3:f8:52:9b:93:61:f7:9c:67:29:62:8e:
         bd:b2:4a:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLOS8r4CMyFHzw+Qa/8mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjUwNjE1MDYwMDM0WhcNMjUwNjE2MDYwMDM0WjAzMTEwLwYDVQQD
EyhlYTliMmNlNzAyODgxYWZlMzc3ZDA1YzNiOTcxYmJjZWZkNzA0NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkllzyaAMvv9NSn7z+LyjCVVnqvOe
OW3+Pe0SsJUaGy6zZl23pnRbeAV29e8a7+HZmqrykOoe6/iHQw9UyRjDZTB4UO6B
yEJuGW5j+uuW31u1h7L++9Hg0sYEhp6iuISdTRXT5gpNL+UBX5r4ovW2LyqTNp1d
p5kCNSNHaRRla9qTfGMHJbMp94cjA5yqo51A4bAxYnY4ShSWYAdVTL0/Mv8yn7yZ
awYcPR4A/JC2x6ip5WcP8bn++A5NNHBVdiF3YPXkN7cenxiKXRiRF3jel5Z3xu7f
Q/eVBvSUr2pbMv5sAUf6ltog7lpJEpReEP5tMuQTrjoHvtr4s1/Voj0b2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqbLOcCiBr+N30Fw7lxu879cEbOMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqV2uT2W
3NxPQkuq/gqShiWTVrihI4zhHVkh3fV0UAHcbYQsIeyle5I4cN6f98GK861lwTbI
wjjSPp7fwVUJKCSCS8jlemcbgEFcqVcIk86xsgdKrZnGpcgBV5sQLgwCqafd+wN4
1tOhqZ96zQG+A5xhT5AJV/25JsMAvRUphcWCHn8UzdS4pTy52H9S1jMPkKvFvXTR
zS54ZvxWGagu0y5en1qj25hbDh61ezzd3t3CvSZoD+69lz0H9fJA8WCNB9+Sdauo
VwnFOTuX9Ib4N1o/oMawGKQYJsmgeYai2QbiLhBV5fdd+0yU1MSWH2Dr0/hSm5Nh
95xnKWKOvbJKRg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:29 2025 by rpki-client