Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File:                     b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier:          /KlSnMp192qeX1LCGsSO63/Kzs4Sr28ZrN8O3/FDk68=
Subject key identifier:   F3:05:67:96:71:1A:8E:12:49:85:1A:40:16:41:A4:26:AD:22:42:AB
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer:       /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial:       01976C6204383392BA28934E8EEDBCEF95DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number:          0C84
Signing time:             Sat 14 Jun 2025 03:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:52 +0000
Files and hashes:         1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
                          2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: 1rbikFVq2tzv2KN5x8p599sO7xPsZhH8QtuCZ9VEg+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:04:38:33:92:ba:28:93:4e:8e:ed:bc:ef:95:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
        Validity
            Not Before: Jun 14 03:00:52 2025 GMT
            Not After : Jun 15 03:00:52 2025 GMT
        Subject: CN=f3056796711a8e1249851a401641a426ad2242ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:3d:3e:8a:6e:32:01:05:b4:a4:49:4e:41:
                    54:db:76:1a:a1:8d:a8:c6:01:e7:fb:13:12:7c:3d:
                    31:38:9a:39:69:a7:e2:94:b7:30:dd:2f:62:91:72:
                    07:ce:02:56:b9:ed:69:61:5b:00:84:4c:db:ec:96:
                    ac:ea:ef:5c:da:6f:ad:43:ec:86:ef:da:bb:7c:ae:
                    b9:f8:d2:9d:52:a4:ea:d7:e6:0c:df:96:7d:51:8b:
                    2c:e7:30:87:e9:5d:81:6a:2b:16:ec:0b:f6:65:22:
                    e1:46:8c:a0:38:c8:f1:5c:d4:7b:07:3e:91:bc:ff:
                    74:98:1f:fd:c4:08:3b:d4:a8:10:e3:d7:16:45:c1:
                    e7:a6:39:9f:68:bf:8a:dd:c5:2b:01:10:d5:d9:58:
                    ee:fc:75:cf:41:2d:4d:ad:41:a9:9c:5f:23:f3:ee:
                    55:ae:06:65:a4:6c:4b:42:84:34:b9:64:78:0a:70:
                    04:6b:0d:20:7f:77:46:81:db:78:ca:76:3e:40:7b:
                    a6:3c:1b:b2:5d:28:eb:69:78:1c:27:c1:a8:9f:ee:
                    f4:36:fc:1e:5f:4a:0d:8a:bb:f5:2a:c1:6b:f6:ef:
                    26:3a:13:8d:13:61:74:9c:d5:7c:60:67:89:be:13:
                    f1:e9:dd:64:3b:0c:e3:f2:75:c7:e1:a5:b1:da:83:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:05:67:96:71:1A:8E:12:49:85:1A:40:16:41:A4:26:AD:22:42:AB
            X509v3 Authority Key Identifier:
                keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d8:ee:c5:45:cb:c2:61:a2:12:d5:d9:a1:00:d0:20:24:9f:
         a7:55:af:c2:50:b1:7a:32:e2:0a:97:15:aa:09:c5:b6:fd:37:
         02:48:f6:ad:0d:49:24:5d:9f:b8:42:e5:84:ba:9e:ce:0f:34:
         45:69:84:31:c0:06:0d:88:e8:79:e4:6e:34:b7:68:54:7e:bf:
         68:6f:ef:8d:a5:e3:81:11:c4:e6:ed:a4:f3:ec:60:21:0d:d6:
         95:99:46:6f:28:b8:63:b9:37:ee:18:51:c7:ee:9d:9f:d5:a7:
         4a:14:2b:dd:b6:a2:3c:2a:94:cf:2c:86:51:fa:d9:a3:d5:b6:
         a5:44:bb:b2:06:95:81:94:cd:d1:06:8c:6a:75:5d:5e:b6:9d:
         a4:a0:59:36:51:b6:2a:87:83:86:98:99:af:36:cf:12:44:d0:
         51:f5:a9:8e:7e:8f:8a:88:9d:9a:73:c5:a1:31:0a:47:c5:a9:
         f1:41:03:be:96:ac:d5:92:c7:b7:f3:bb:96:ec:1f:1c:74:06:
         a0:6c:f2:27:99:f2:1f:e4:4a:e9:8f:2b:cc:19:a5:58:f3:0b:
         96:01:94:27:ea:c3:4d:a0:2f:e1:05:6f:61:65:b2:ba:dc:5c:
         b9:6f:d9:2e:92:f9:68:34:d3:12:bb:f8:46:74:3b:26:fa:ed:
         37:ef:e1:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYgQ4M5K6KJNOju2875XdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzliNThhM2JmYTM4YmU5MDkzNmMzMTRmMTRiMGQ5YzM1
OWFjYzEwHhcNMjUwNjE0MDMwMDUyWhcNMjUwNjE1MDMwMDUyWjAzMTEwLwYDVQQD
EyhmMzA1Njc5NjcxMWE4ZTEyNDk4NTFhNDAxNjQxYTQyNmFkMjI0MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtg9PopuMgEFtKRJTkFU23YaoY2o
xgHn+xMSfD0xOJo5aafilLcw3S9ikXIHzgJWue1pYVsAhEzb7Jas6u9c2m+tQ+yG
79q7fK65+NKdUqTq1+YM35Z9UYss5zCH6V2BaisW7Av2ZSLhRoygOMjxXNR7Bz6R
vP90mB/9xAg71KgQ49cWRcHnpjmfaL+K3cUrARDV2Vju/HXPQS1NrUGpnF8j8+5V
rgZlpGxLQoQ0uWR4CnAEaw0gf3dGgdt4ynY+QHumPBuyXSjraXgcJ8Gon+70Nvwe
X0oNirv1KsFr9u8mOhONE2F0nNV8YGeJvhPx6d1kOwzj8nXH4aWx2oOu0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMFZ5ZxGo4SSYUaQBZBpCatIkKrMB8GA1UdIwQY
MBaAFG95tYo7+ji+kJNsMU8UsNnDWazBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMt
NTJkOTgyZDIxZGZmLzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMtNTJkOTgyZDIxZGZm
LzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdjuxUXL
wmGiEtXZoQDQICSfp1WvwlCxejLiCpcVqgnFtv03Akj2rQ1JJF2fuELlhLqezg80
RWmEMcAGDYjoeeRuNLdoVH6/aG/vjaXjgRHE5u2k8+xgIQ3WlZlGbyi4Y7k37hhR
x+6dn9WnShQr3baiPCqUzyyGUfrZo9W2pUS7sgaVgZTN0QaManVdXradpKBZNlG2
KoeDhpiZrzbPEkTQUfWpjn6PioidmnPFoTEKR8Wp8UEDvpas1ZLHt/O7luwfHHQG
oGzyJ5nyH+RK6Y8rzBmlWPMLlgGUJ+rDTaAv4QVvYWWyutxcuW/ZLpL5aDTTErv4
RnQ7JvrtN+/hsA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:59 2025 by rpki-client