Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File:                     dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier:          nXZN2k0wIfYeMhtWiwnVb3kVebq2j5S+ipknWlBJJ38=
Subject key identifier:   4C:F1:F9:B3:DD:B4:0C:72:FD:CB:25:90:AD:C5:12:18:A8:22:BD:DF
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer:       /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial:       01977DC3840CC74A00C5037622397F2C1E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number:          0A02
Signing time:             Tue 17 Jun 2025 12:00:54 +0000
Manifest this update:     Tue 17 Jun 2025 12:00:54 +0000
Manifest next update:     Wed 18 Jun 2025 12:00:54 +0000
Files and hashes:         1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
                          2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: 97Zw06urA4fytYtow8Ur1W+dNCnR05hbwLM6M/fAigg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:c3:84:0c:c7:4a:00:c5:03:76:22:39:7f:2c:1e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
        Validity
            Not Before: Jun 17 12:00:54 2025 GMT
            Not After : Jun 18 12:00:54 2025 GMT
        Subject: CN=4cf1f9b3ddb40c72fdcb2590adc51218a822bddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:29:02:b2:4e:42:ee:9a:a2:09:10:f9:87:
                    ac:80:0d:d1:fc:c6:02:8b:fe:71:df:f2:cc:e7:bd:
                    68:8d:32:d1:e8:cb:76:e1:dc:47:45:b6:1b:8a:61:
                    f2:ee:2c:6b:73:3a:54:5f:62:14:26:e2:75:6c:36:
                    67:ba:af:32:00:aa:74:a1:59:eb:02:85:2d:12:89:
                    b1:f8:8c:15:90:6c:bf:af:c4:cb:a3:85:8e:bd:30:
                    4a:dd:3c:3d:fe:7d:68:37:11:b1:b2:5e:48:c0:f8:
                    95:d0:9c:f9:c8:e7:fc:9e:78:74:23:89:c7:c9:98:
                    5e:bb:cb:cf:4f:bc:ba:75:7f:0a:06:1c:e2:b3:b9:
                    9c:2a:e5:aa:39:02:f5:56:bf:4f:aa:1f:db:79:ac:
                    87:3b:7e:60:b2:67:b7:cb:e5:c1:24:9b:2c:6f:84:
                    f6:d7:18:55:71:b9:00:68:cf:5d:b3:ad:4d:1a:33:
                    b3:fd:f3:05:22:13:ce:53:10:5a:38:2b:ed:9e:29:
                    de:cf:5f:a4:55:9e:87:ed:42:73:4d:b5:18:58:ce:
                    22:ed:a5:d2:8f:b1:f8:34:19:70:2d:6c:4d:ec:2b:
                    5c:54:c0:3c:3d:00:7c:47:fd:b9:60:d9:d3:a0:34:
                    05:ce:68:46:b1:4b:49:a1:4c:f3:e6:1c:58:37:85:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F1:F9:B3:DD:B4:0C:72:FD:CB:25:90:AD:C5:12:18:A8:22:BD:DF
            X509v3 Authority Key Identifier:
                keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:7a:9e:03:1c:d2:15:5c:48:00:f1:69:e5:b2:67:70:95:25:
         5e:b8:f3:ff:26:47:9b:29:7d:dc:fa:ee:db:d4:fe:44:82:5f:
         6d:f3:5a:93:a0:dc:e5:56:00:41:62:ec:92:67:82:02:e2:cf:
         17:bb:1a:4c:b2:4b:a9:30:f9:72:ad:5e:e0:6d:34:51:88:db:
         d7:40:2f:4c:a0:5f:45:f6:d6:67:5c:10:1a:4c:67:c0:cb:6b:
         f4:17:6f:3d:c7:d9:e2:85:79:77:d5:b7:63:e3:ad:30:36:81:
         4a:5b:39:76:4a:9c:98:06:d0:0a:61:70:86:74:78:fa:4d:db:
         f5:93:d0:52:9c:95:14:44:31:b4:5f:dd:84:d0:7b:1e:96:a6:
         f5:25:2d:79:67:01:58:98:9c:ad:13:6d:07:82:3e:a7:65:73:
         a7:3f:29:f5:a5:20:8f:df:9e:0c:a9:dd:06:07:e1:2f:81:f9:
         1a:58:40:1d:df:a0:ce:d1:19:20:24:1d:5b:15:9d:a4:d9:2d:
         9e:5a:92:65:5e:66:ac:d1:39:97:81:13:e7:b7:a4:5e:70:8d:
         e9:1e:03:d6:19:8d:b3:b0:1f:22:68:8a:39:22:eb:a9:45:cb:
         1c:56:96:e3:9b:3c:f4:ca:80:3a:aa:8c:88:b9:12:b8:c8:91:
         d8:86:d5:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9w4QMx0oAxQN2Ijl/LB4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2
MmRhYzcwHhcNMjUwNjE3MTIwMDU0WhcNMjUwNjE4MTIwMDU0WjAzMTEwLwYDVQQD
Eyg0Y2YxZjliM2RkYjQwYzcyZmRjYjI1OTBhZGM1MTIxOGE4MjJiZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3EpArJOQu6aogkQ+YesgA3R/MYC
i/5x3/LM571ojTLR6Mt24dxHRbYbimHy7ixrczpUX2IUJuJ1bDZnuq8yAKp0oVnr
AoUtEomx+IwVkGy/r8TLo4WOvTBK3Tw9/n1oNxGxsl5IwPiV0Jz5yOf8nnh0I4nH
yZheu8vPT7y6dX8KBhzis7mcKuWqOQL1Vr9Pqh/beayHO35gsme3y+XBJJssb4T2
1xhVcbkAaM9ds61NGjOz/fMFIhPOUxBaOCvtninez1+kVZ6H7UJzTbUYWM4i7aXS
j7H4NBlwLWxN7CtcVMA8PQB8R/25YNnToDQFzmhGsUtJoUzz5hxYN4WQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzx+bPdtAxy/cslkK3FEhioIr3fMB8GA1UdIwQY
MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct
ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx
LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynqeAxzS
FVxIAPFp5bJncJUlXrjz/yZHmyl93Pru29T+RIJfbfNak6Dc5VYAQWLskmeCAuLP
F7saTLJLqTD5cq1e4G00UYjb10AvTKBfRfbWZ1wQGkxnwMtr9BdvPcfZ4oV5d9W3
Y+OtMDaBSls5dkqcmAbQCmFwhnR4+k3b9ZPQUpyVFEQxtF/dhNB7Hpam9SUteWcB
WJicrRNtB4I+p2Vzpz8p9aUgj9+eDKndBgfhL4H5GlhAHd+gztEZICQdWxWdpNkt
nlqSZV5mrNE5l4ET57ekXnCN6R4D1hmNs7AfImiKOSLrqUXLHFaW45s89MqAOqqM
iLkSuMiR2IbVWw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:46:50 2025 by rpki-client