Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          LmOwGa9eEt0vZJd/32QBjGOh5JlqWkSWVyfBMYs1MIc=
Subject key identifier:   79:7F:4D:1C:68:72:0F:1A:B1:83:40:1B:E3:7B:02:0F:6F:0C:27:78
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       01976F2C078606F5C9879A277148362974E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          06C0
Signing time:             Sat 14 Jun 2025 16:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:45 +0000
Files and hashes:         1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: CFHxZ/Zmzt54ZPM6r521DyGn8LQcmVSalov6Rn7jopM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:07:86:06:f5:c9:87:9a:27:71:48:36:29:74:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: Jun 14 16:00:45 2025 GMT
            Not After : Jun 15 16:00:45 2025 GMT
        Subject: CN=797f4d1c68720f1ab183401be37b020f6f0c2778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:0c:6f:02:d1:f1:46:2f:1c:ae:82:d2:3e:
                    a0:35:15:01:b0:8d:e3:d7:39:00:54:c9:b9:ad:66:
                    68:41:2e:15:65:8d:df:cf:fe:e6:75:38:ad:b8:65:
                    5a:0b:6a:d5:57:9a:df:90:80:ae:fc:18:91:12:6b:
                    ba:71:15:be:bc:45:16:d0:f6:ae:00:ea:e6:6a:db:
                    50:c5:83:51:7f:5c:e7:25:f2:4e:1e:3e:ce:88:40:
                    58:41:be:8b:eb:a0:a4:11:0a:ee:41:41:a4:94:f1:
                    25:17:9f:0f:03:86:a5:51:9d:9e:e3:41:16:77:54:
                    1d:6c:20:61:75:fd:07:7b:b8:bf:a2:55:7a:fb:e8:
                    26:a6:ac:0c:5d:74:31:19:87:c8:f2:7b:4d:a1:2f:
                    8f:5b:f0:74:88:38:d5:58:65:50:57:01:4e:15:a8:
                    1e:29:4e:eb:60:79:7f:1e:43:cc:dd:62:69:14:80:
                    5a:01:4d:29:21:ce:97:00:c6:0e:36:7d:77:a3:0e:
                    88:bb:f9:c6:b3:d0:47:46:64:0b:89:89:00:bf:f1:
                    c6:b4:4c:b0:85:86:9c:cb:a7:38:c6:34:5c:85:cd:
                    06:16:7f:e5:fc:60:88:07:9b:c5:ad:7f:a0:f7:b6:
                    cb:7e:ad:70:c7:85:85:26:ce:a4:ac:f4:31:99:98:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:4D:1C:68:72:0F:1A:B1:83:40:1B:E3:7B:02:0F:6F:0C:27:78
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:42:3f:24:99:88:99:bd:e1:d3:4c:0c:ea:a2:5b:0b:af:
         4c:92:2a:80:e3:a6:d5:8b:96:2c:22:91:6b:05:f6:bb:c9:b7:
         a1:8c:2e:20:7f:e5:fc:4f:5d:fe:fc:01:4c:2c:0b:aa:44:8a:
         2e:d4:b1:df:32:1f:aa:5b:02:9f:1f:72:70:36:e9:b7:58:74:
         ee:07:e4:fc:ef:4c:b9:eb:4c:fc:12:c2:7f:5d:72:8e:a4:5d:
         18:e6:1c:d9:04:d9:4b:4c:d4:7c:55:9c:58:ed:87:67:89:3b:
         83:c1:d0:e9:18:82:7a:29:40:0d:da:a2:ad:19:3b:dc:97:5d:
         9e:b0:81:98:05:d4:b4:43:28:d9:c9:d1:38:dc:03:3c:96:34:
         02:9a:69:76:88:3d:ee:8c:63:20:db:c8:af:9d:9f:0b:9b:3c:
         ba:50:b1:9f:7a:f4:09:ea:ec:ce:ab:62:d2:a7:aa:fd:35:55:
         03:29:fe:80:07:40:3b:91:df:2e:53:e6:ea:88:db:31:ee:57:
         6f:ba:3c:e7:4c:5b:a9:29:3f:4b:51:da:9c:18:9b:d7:f6:01:
         40:63:b8:57:a1:cb:03:59:ae:48:1d:35:be:30:3c:bb:f6:f1:
         c8:69:76:51:2e:5b:d6:f5:75:d4:6d:c0:2a:4c:46:f3:8d:64:
         27:8a:14:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLAeGBvXJh5oncUg2KXTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZjAyYjVjZmI0MTcyNTA4ZTA3MzdiZjI1Y2Q1ZDIyYTAx
ZGM0NWEwHhcNMjUwNjE0MTYwMDQ1WhcNMjUwNjE1MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg3OTdmNGQxYzY4NzIwZjFhYjE4MzQwMWJlMzdiMDIwZjZmMGMyNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujkMbwLR8UYvHK6C0j6gNRUBsI3j
1zkAVMm5rWZoQS4VZY3fz/7mdTituGVaC2rVV5rfkICu/BiREmu6cRW+vEUW0Pau
AOrmattQxYNRf1znJfJOHj7OiEBYQb6L66CkEQruQUGklPElF58PA4alUZ2e40EW
d1QdbCBhdf0He7i/olV6++gmpqwMXXQxGYfI8ntNoS+PW/B0iDjVWGVQVwFOFage
KU7rYHl/HkPM3WJpFIBaAU0pIc6XAMYONn13ow6Iu/nGs9BHRmQLiYkAv/HGtEyw
hYacy6c4xjRchc0GFn/l/GCIB5vFrX+g97bLfq1wx4WFJs6krPQxmZjYvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl/TRxocg8asYNAG+N7Ag9vDCd4MB8GA1UdIwQY
MBaAFJjwK1z7QXJQjgc3vyXNXSKgHcRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMt
Yzk3MWRjNzEzYjFmLzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMtYzk3MWRjNzEzYjFm
LzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1VCPySZ
iJm94dNMDOqiWwuvTJIqgOOm1YuWLCKRawX2u8m3oYwuIH/l/E9d/vwBTCwLqkSK
LtSx3zIfqlsCnx9ycDbpt1h07gfk/O9MuetM/BLCf11yjqRdGOYc2QTZS0zUfFWc
WO2HZ4k7g8HQ6RiCeilADdqirRk73JddnrCBmAXUtEMo2cnRONwDPJY0Apppdog9
7oxjINvIr52fC5s8ulCxn3r0Cerszqti0qeq/TVVAyn+gAdAO5HfLlPm6ojbMe5X
b7o850xbqSk/S1HanBib1/YBQGO4V6HLA1muSB01vjA8u/bxyGl2US5b1vV11G3A
KkxG841kJ4oUoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:54 2025 by rpki-client