Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File:                     drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier:          AqyDV4HIZ2OzCexItxHL6E1RqLK12dbklSVyYi2eNbQ=
Subject key identifier:   22:93:C7:37:3A:9D:D8:9D:32:D8:A7:81:72:D0:83:9E:1D:18:BD:F6
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer:       /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial:       019778D3B56F94D50516D8EFBE7123A32457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number:          0218
Signing time:             Mon 16 Jun 2025 13:00:29 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:29 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:29 +0000
Files and hashes:         1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
                          2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: yw44JF/SgH4TkN9jbAYf0NrKOCTQdcWOU26UMsnfjcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d3:b5:6f:94:d5:05:16:d8:ef:be:71:23:a3:24:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
        Validity
            Not Before: Jun 16 13:00:29 2025 GMT
            Not After : Jun 17 13:00:29 2025 GMT
        Subject: CN=2293c7373a9dd89d32d8a78172d0839e1d18bdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:6c:4c:10:3a:6b:57:a1:a4:5f:3e:d4:15:
                    5a:00:a5:e1:a2:67:74:7f:c2:b6:14:18:24:46:4c:
                    4b:e8:c0:f9:62:72:15:c8:a9:77:d7:74:64:7c:13:
                    05:39:7e:3a:a0:4c:8d:83:01:5e:24:0e:9d:96:8f:
                    6e:d0:a9:0f:21:bc:6c:dc:3e:db:7c:61:d4:48:c1:
                    90:f6:a7:cb:2b:2c:b5:70:d8:74:ba:34:49:3c:07:
                    1f:dc:0c:10:65:a5:59:e3:e8:3e:d0:86:98:e9:89:
                    d8:23:6c:18:e8:60:51:fd:b1:c7:78:b3:6e:29:b6:
                    3f:64:1a:b3:bf:9a:0e:80:4b:49:17:1d:39:d9:ca:
                    fa:bc:79:01:44:8e:64:3a:cc:94:61:1e:ff:e2:4f:
                    bb:19:d7:32:d7:07:26:24:f8:62:ef:fb:ca:b3:7a:
                    04:5a:8a:85:27:2b:13:b1:a9:0e:ef:1a:57:3e:cc:
                    18:34:bd:b4:6a:8d:85:b0:18:29:b4:57:ca:f3:0b:
                    7b:5d:87:d6:bf:f5:fd:fd:b9:5b:6f:a9:90:70:9b:
                    b9:0c:69:8e:a1:d4:f9:30:c0:6c:aa:69:c4:de:65:
                    49:01:23:ab:3f:a6:ac:a5:52:a5:9c:03:fd:9f:86:
                    9c:4d:7c:e4:3e:26:f3:eb:06:9c:fc:fb:2f:cd:47:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:C7:37:3A:9D:D8:9D:32:D8:A7:81:72:D0:83:9E:1D:18:BD:F6
            X509v3 Authority Key Identifier:
                keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:2c:5c:86:e4:57:c3:2a:8a:37:b9:27:de:52:76:82:21:
         10:06:a2:1c:47:e5:48:2f:b7:5f:88:0b:75:f8:52:5d:35:6c:
         72:c6:58:7b:60:d5:7d:5a:b1:db:aa:90:aa:96:dd:bf:3c:d0:
         10:5b:bf:89:8b:4b:cb:1c:a6:8c:74:ce:90:f1:16:3e:3c:44:
         3b:ad:53:b9:f2:6a:28:16:f1:3a:ab:47:84:b1:6f:92:f7:e0:
         6e:0a:3a:bd:59:be:59:1a:73:29:7e:ad:c8:cb:3d:f6:14:47:
         9e:b1:db:c2:45:9b:fb:12:3d:50:e5:46:87:c8:46:10:ee:9f:
         49:57:52:c5:0d:39:88:b0:df:8c:a1:fd:63:5e:e2:d3:6b:fd:
         d8:92:c7:b0:9a:34:95:41:6c:14:5e:8a:7f:a2:bf:8a:11:96:
         ba:15:1b:56:0d:ab:b7:fd:d7:f2:4e:b3:3c:ae:43:d5:4c:f4:
         40:2b:1d:67:97:1a:5a:3b:e2:c6:8d:19:ee:d2:d9:b7:9f:8c:
         bc:31:75:73:bf:93:cd:12:3b:cd:9e:11:9b:60:d2:9d:c0:e4:
         ce:d8:6c:dc:e5:78:65:06:9c:f0:42:26:06:0a:e5:43:23:cb:
         e6:a5:36:38:81:db:7e:3d:e0:87:bb:52:20:df:05:7f:a4:d5:
         57:08:3a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd407VvlNUFFtjvvnEjoyRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YjRkM2U4OTcxMzIyYzY0ZDdhMDQ1OGJhYjc0NWE4OWFk
ZTRkZTUwHhcNMjUwNjE2MTMwMDI5WhcNMjUwNjE3MTMwMDI5WjAzMTEwLwYDVQQD
EygyMjkzYzczNzNhOWRkODlkMzJkOGE3ODE3MmQwODM5ZTFkMThiZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX5sTBA6a1ehpF8+1BVaAKXhomd0
f8K2FBgkRkxL6MD5YnIVyKl313RkfBMFOX46oEyNgwFeJA6dlo9u0KkPIbxs3D7b
fGHUSMGQ9qfLKyy1cNh0ujRJPAcf3AwQZaVZ4+g+0IaY6YnYI2wY6GBR/bHHeLNu
KbY/ZBqzv5oOgEtJFx052cr6vHkBRI5kOsyUYR7/4k+7Gdcy1wcmJPhi7/vKs3oE
WoqFJysTsakO7xpXPswYNL20ao2FsBgptFfK8wt7XYfWv/X9/blbb6mQcJu5DGmO
odT5MMBsqmnE3mVJASOrP6aspVKlnAP9n4acTXzkPibz6wac/PsvzUfbzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKTxzc6ndidMtingXLQg54dGL32MB8GA1UdIwQY
MBaAFHa00+iXEyLGTXoEWLq3Raia3k3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMt
YjYyNmYzMzE0OTJmLzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMtYjYyNmYzMzE0OTJm
LzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaQsXIbk
V8Mqije5J95SdoIhEAaiHEflSC+3X4gLdfhSXTVscsZYe2DVfVqx26qQqpbdvzzQ
EFu/iYtLyxymjHTOkPEWPjxEO61TufJqKBbxOqtHhLFvkvfgbgo6vVm+WRpzKX6t
yMs99hRHnrHbwkWb+xI9UOVGh8hGEO6fSVdSxQ05iLDfjKH9Y17i02v92JLHsJo0
lUFsFF6Kf6K/ihGWuhUbVg2rt/3X8k6zPK5D1Uz0QCsdZ5caWjvixo0Z7tLZt5+M
vDF1c7+TzRI7zZ4Rm2DSncDkzths3OV4ZQac8EImBgrlQyPL5qU2OIHbfj3gh7tS
IN8Ff6TVVwg6YQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:48 2025 by rpki-client