Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          K4pZ81Iq8idT/MC6uLS6TGhUGI4DvIWznudhcFR/sog=
Subject key identifier:   99:AC:CD:4C:00:DE:6F:B5:92:3B:25:91:10:04:F5:5F:F1:1E:74:3B
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       019769CF020EA536BBA90F0FBAE00DCCADC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          06E2
Signing time:             Fri 13 Jun 2025 15:01:03 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:03 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:03 +0000
Files and hashes:         1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: oHcA/JYkHYeDi244maxeOQBOnwIqJbGh3Jr541wkVvI=)
                          2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:02:0e:a5:36:bb:a9:0f:0f:ba:e0:0d:cc:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: Jun 13 15:01:03 2025 GMT
            Not After : Jun 14 15:01:03 2025 GMT
        Subject: CN=99accd4c00de6fb5923b25911004f55ff11e743b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:18:24:d9:f7:df:42:1c:ea:17:63:bb:2a:f1:
                    90:aa:04:9e:fb:d8:92:19:d8:a3:df:26:ab:6d:7c:
                    f8:22:33:08:04:2e:0b:99:8c:c3:2a:b0:0b:79:1f:
                    85:25:6f:af:dc:13:b6:ce:ec:43:a4:75:85:95:94:
                    ff:d8:cc:a0:18:f0:06:9c:92:0b:7e:da:96:f3:23:
                    04:56:95:38:6d:89:dd:e4:69:07:97:94:f0:1c:c0:
                    c3:c9:7b:5a:ff:47:58:c5:ac:a5:42:89:c9:06:5a:
                    83:85:1c:f6:91:cb:30:e7:4a:fa:e1:d4:31:d0:35:
                    3e:10:71:71:3a:e0:09:52:21:84:24:92:a6:74:12:
                    89:4e:1f:f1:b1:12:0a:40:04:c1:13:91:26:6f:82:
                    5f:65:43:94:f6:53:ba:7f:dd:f0:de:0f:fb:cb:2f:
                    ae:22:fc:82:3b:27:fc:5e:1b:f3:a8:84:31:d0:b8:
                    c2:36:f3:d8:0e:4c:c9:67:a9:38:48:81:42:59:dd:
                    75:d1:b8:3d:f4:d8:ae:2c:2b:71:62:3c:26:4f:47:
                    b2:75:80:66:1e:cd:71:46:7b:82:4a:10:a3:b2:75:
                    87:e4:67:a6:b8:c2:f8:69:9a:f2:9f:30:1c:f0:2c:
                    f3:80:03:5f:3d:d9:ae:54:8a:1c:63:68:78:86:01:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AC:CD:4C:00:DE:6F:B5:92:3B:25:91:10:04:F5:5F:F1:1E:74:3B
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:02:62:c3:25:9b:44:76:b1:0f:94:c8:3a:7a:94:88:22:f9:
         74:f3:80:3c:3e:c6:13:62:96:76:5d:ec:6e:76:64:eb:c9:ef:
         22:bd:8a:9e:9f:0b:42:8c:b1:37:a7:70:b6:da:36:53:e2:50:
         f0:15:45:98:95:7e:d3:89:73:9e:af:29:69:9e:75:7d:12:49:
         34:28:d8:93:91:20:3a:3e:40:81:a8:8d:bf:73:c5:e7:a6:85:
         47:fe:6c:dd:bf:d6:f4:14:69:d5:63:de:d4:04:ae:5e:4e:a1:
         d5:b1:c0:1e:4b:e4:4f:e9:07:56:62:7c:0f:31:e6:83:6b:a8:
         ad:55:a5:c2:c7:89:3e:bd:98:47:3a:8a:f7:27:a5:47:9d:7d:
         ff:31:da:e2:7f:30:a0:ed:dd:0e:07:c4:4e:c7:84:69:b9:36:
         48:09:ec:aa:0d:96:22:3c:ad:d4:03:40:eb:99:6b:94:d3:25:
         fc:e1:38:fb:8e:a7:f5:6f:94:53:05:3f:3c:fe:1f:f7:f4:38:
         2e:3d:58:1c:17:dd:0d:49:6b:f5:b4:dc:4e:48:fa:a7:84:15:
         28:12:7d:61:4e:36:12:d7:a4:85:34:00:65:74:66:9e:f4:d8:
         60:0f:50:04:91:77:f2:7d:9f:60:78:3f:9b:8e:05:4a:38:59:
         1a:b1:60:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzwIOpTa7qQ8PuuANzK3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTIyZmNiNTRhMDkxZDY5MTNmZmU5ZmFmYjk4M2M1N2E0
YWMyMmMwHhcNMjUwNjEzMTUwMTAzWhcNMjUwNjE0MTUwMTAzWjAzMTEwLwYDVQQD
Eyg5OWFjY2Q0YzAwZGU2ZmI1OTIzYjI1OTExMDA0ZjU1ZmYxMWU3NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xgk2fffQhzqF2O7KvGQqgSe+9iS
Gdij3yarbXz4IjMIBC4LmYzDKrALeR+FJW+v3BO2zuxDpHWFlZT/2MygGPAGnJIL
ftqW8yMEVpU4bYnd5GkHl5TwHMDDyXta/0dYxaylQonJBlqDhRz2kcsw50r64dQx
0DU+EHFxOuAJUiGEJJKmdBKJTh/xsRIKQATBE5Emb4JfZUOU9lO6f93w3g/7yy+u
IvyCOyf8XhvzqIQx0LjCNvPYDkzJZ6k4SIFCWd110bg99NiuLCtxYjwmT0eydYBm
Hs1xRnuCShCjsnWH5GemuML4aZrynzAc8CzzgANfPdmuVIocY2h4hgFCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmszUwA3m+1kjslkRAE9V/xHnQ7MB8GA1UdIwQY
MBaAFKCiL8tUoJHWkT/+n6+5g8V6SsIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMt
ZjkyN2U1ODJlYmY5LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMtZjkyN2U1ODJlYmY5
LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggJiwyWb
RHaxD5TIOnqUiCL5dPOAPD7GE2KWdl3sbnZk68nvIr2Knp8LQoyxN6dwtto2U+JQ
8BVFmJV+04lznq8paZ51fRJJNCjYk5EgOj5AgaiNv3PF56aFR/5s3b/W9BRp1WPe
1ASuXk6h1bHAHkvkT+kHVmJ8DzHmg2uorVWlwseJPr2YRzqK9yelR519/zHa4n8w
oO3dDgfETseEabk2SAnsqg2WIjyt1ANA65lrlNMl/OE4+46n9W+UUwU/PP4f9/Q4
Lj1YHBfdDUlr9bTcTkj6p4QVKBJ9YU42EtekhTQAZXRmnvTYYA9QBJF38n2fYHg/
m44FSjhZGrFgoA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:33 2025 by rpki-client