Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
File:                     1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft (raw, json)
Hash identifier:          J9upNJLQrkEjsIIhPVVAn6bBPNbYl+/EJl6OxU/BI1M=
Subject key identifier:   3E:CE:1A:A5:DC:6C:3F:C9:FF:A5:B2:F9:8B:D4:F8:C5:B6:C1:A7:4E
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Certificate issuer:       /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial:       01976D3E8917DBB2B8096EE2DC16B948A0EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
Manifest number:          038F
Signing time:             Sat 14 Jun 2025 07:01:44 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:44 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:44 +0000
Files and hashes:         1: 1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl (hash: cO2E3tv0Q+U5w3pbGgHr+kld7R3Q7+1QWLAZdqTYkPc=)
                          2: M2pucQblYYW9Ed5SEiQtHoACy2U.roa (hash: DODZnFtncWTHKJyGcnZyitqgS3XB5iWWj/4xm4bmBmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:89:17:db:b2:b8:09:6e:e2:dc:16:b9:48:a0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
        Validity
            Not Before: Jun 14 07:01:44 2025 GMT
            Not After : Jun 15 07:01:44 2025 GMT
        Subject: CN=3ece1aa5dc6c3fc9ffa5b2f98bd4f8c5b6c1a74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:e8:aa:59:05:e5:64:a9:10:08:68:17:33:
                    0a:9b:62:5d:0e:dd:82:16:07:99:d2:50:5a:60:2b:
                    6a:ab:d3:fd:5c:1a:01:8b:6d:af:9c:42:da:3c:7c:
                    b4:56:2c:1e:f8:d3:8a:3c:07:7a:70:3e:ae:e9:39:
                    cb:85:3d:91:0b:1f:a2:68:4d:d7:fe:e4:fd:cb:0d:
                    ab:1a:f1:11:0c:02:f1:a6:69:09:ba:ed:f7:c6:ba:
                    48:47:5f:39:dc:f5:59:64:0f:43:b7:9d:c1:3b:00:
                    a7:21:08:65:7a:e3:38:3d:f7:9d:79:ac:04:43:68:
                    d0:3b:3f:f0:74:2d:3f:a8:a1:35:3c:cb:ba:32:f7:
                    0d:64:6f:bf:e7:5f:88:9c:2b:3f:19:03:ab:94:0a:
                    48:ea:39:c5:2b:e8:33:e3:65:d2:6a:81:d4:a9:1e:
                    de:77:15:80:e5:eb:9d:b0:0b:96:87:90:82:96:91:
                    7f:ee:58:cd:d7:1f:6f:5f:21:ac:4d:45:8f:3b:93:
                    78:a7:44:a3:1c:91:c6:25:7c:85:51:57:97:eb:2d:
                    75:76:6e:de:6f:e7:03:4f:d7:73:37:2a:63:5b:2e:
                    28:dd:16:eb:a2:12:87:0e:af:28:aa:46:32:74:87:
                    f7:e8:d4:96:5c:81:02:a0:dd:76:86:53:94:d9:8e:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CE:1A:A5:DC:6C:3F:C9:FF:A5:B2:F9:8B:D4:F8:C5:B6:C1:A7:4E
            X509v3 Authority Key Identifier:
                keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:65:df:ab:cf:5e:91:3e:45:f7:f7:08:60:16:d2:4a:ea:be:
         bc:66:6a:5e:0d:a2:6a:f3:89:a0:f1:89:21:f9:14:5f:b9:f1:
         9d:b1:00:7d:f3:83:dc:7e:aa:8e:15:ab:e7:0f:1b:b9:ee:4e:
         77:f5:f9:4d:91:da:96:40:d4:76:82:9c:2d:fd:2e:3b:ba:13:
         23:6e:a1:30:44:1a:ee:ef:7c:52:5c:77:08:5a:38:85:f2:c9:
         21:0c:ff:cd:4a:8f:01:0b:5e:9f:29:9b:f9:e0:bf:f6:a9:46:
         e6:e1:c1:3b:41:12:c7:5a:34:6f:9f:20:85:eb:f5:93:5b:ea:
         6e:db:71:2b:0d:e0:80:9b:4c:48:c8:8b:94:b5:f0:2a:5d:7b:
         a4:d7:66:b1:29:8f:15:9c:b0:04:05:82:9f:81:df:f8:7d:55:
         eb:04:c0:f0:ae:89:ec:90:09:c1:e5:54:5b:cb:b9:df:9a:7a:
         53:9e:c0:05:a9:8e:46:b9:ec:45:83:a0:9c:d8:9c:05:87:13:
         bf:9a:63:cd:52:d9:14:a5:b2:79:70:60:4d:c6:12:15:fd:d1:
         a2:81:c0:7a:a0:fd:2d:4a:c5:ab:f1:2c:0d:58:7a:66:45:89:
         0e:d4:34:29:f7:49:fb:a8:ce:72:f8:d2:e2:d0:9d:12:da:44:
         5a:9a:c5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPokX27K4CW7i3Ba5SKDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NmM0MzU5OTI2YWM3ZjNhY2Y4ZGM1MjBlNzg3YTM2NjI3
MTM4N2MwHhcNMjUwNjE0MDcwMTQ0WhcNMjUwNjE1MDcwMTQ0WjAzMTEwLwYDVQQD
EygzZWNlMWFhNWRjNmMzZmM5ZmZhNWIyZjk4YmQ0ZjhjNWI2YzFhNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslLoqlkF5WSpEAhoFzMKm2JdDt2C
FgeZ0lBaYCtqq9P9XBoBi22vnELaPHy0Viwe+NOKPAd6cD6u6TnLhT2RCx+iaE3X
/uT9yw2rGvERDALxpmkJuu33xrpIR1853PVZZA9Dt53BOwCnIQhleuM4PfedeawE
Q2jQOz/wdC0/qKE1PMu6MvcNZG+/51+InCs/GQOrlApI6jnFK+gz42XSaoHUqR7e
dxWA5eudsAuWh5CClpF/7ljN1x9vXyGsTUWPO5N4p0SjHJHGJXyFUVeX6y11dm7e
b+cDT9dzNypjWy4o3RbrohKHDq8oqkYydIf36NSWXIECoN12hlOU2Y4BtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7OGqXcbD/J/6Wy+YvU+MW2wadOMB8GA1UdIwQY
MBaAFNRsQ1mSasfzrPjcUg54ejZicTh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUd4RFdaSnF4X09zLU54U0RuaDZObUp4T0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MjNmMzQtN2IyZC00YWQzLWE0YWMt
NDQxNzliZWUxNDlhLzEvMUd4RFdaSnF4X09zLU54U0RuaDZObUp4T0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MjNmMzQtN2IyZC00YWQzLWE0YWMtNDQxNzliZWUxNDlh
LzEvMUd4RFdaSnF4X09zLU54U0RuaDZObUp4T0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2Xfq89e
kT5F9/cIYBbSSuq+vGZqXg2iavOJoPGJIfkUX7nxnbEAffOD3H6qjhWr5w8bue5O
d/X5TZHalkDUdoKcLf0uO7oTI26hMEQa7u98Ulx3CFo4hfLJIQz/zUqPAQtenymb
+eC/9qlG5uHBO0ESx1o0b58ghev1k1vqbttxKw3ggJtMSMiLlLXwKl17pNdmsSmP
FZywBAWCn4Hf+H1V6wTA8K6J7JAJweVUW8u535p6U57ABamORrnsRYOgnNicBYcT
v5pjzVLZFKWyeXBgTcYSFf3RooHAeqD9LUrFq/EsDVh6ZkWJDtQ0KfdJ+6jOcvjS
4tCdEtpEWprFhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:45 2025 by rpki-client