Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
File:                     dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft (raw, json)
Hash identifier:          LAyDAMoRlcArlUN6FMMd4B3J1wfMQUJDeLehVPtNMUc=
Subject key identifier:   4F:5F:42:2B:02:07:9D:BD:8A:11:F4:71:4E:1B:76:DF:A1:5D:62:94
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Certificate issuer:       /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial:       01976EF4FEFCD82355F845E7B17099463536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
Manifest number:          044B
Signing time:             Sat 14 Jun 2025 15:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:39 +0000
Files and hashes:         1: dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl (hash: V8aNwjmkVG+3UMFPJUAag3aQqYiPWCT3UKWQBLmRN/c=)
                          2: yLtjzto1Tw0b7DlDBQrKX87uiq0.roa (hash: qEZ4slqleS/pMqHZqm26TIAeJ329Oueymvehs7DZe3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:fe:fc:d8:23:55:f8:45:e7:b1:70:99:46:35:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
        Validity
            Not Before: Jun 14 15:00:39 2025 GMT
            Not After : Jun 15 15:00:39 2025 GMT
        Subject: CN=4f5f422b02079dbd8a11f4714e1b76dfa15d6294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:05:50:58:6e:98:e5:16:c4:ec:06:c2:1c:
                    ff:41:b3:70:c3:e3:f8:8f:95:db:aa:c9:f3:5a:f0:
                    7b:5a:17:7c:a6:a5:de:9e:8c:cb:d9:34:71:71:d8:
                    d5:4f:c4:6d:db:4a:32:cd:e8:8f:ef:24:bc:4c:42:
                    84:e5:39:99:43:11:c9:b7:06:27:80:31:e0:fe:7b:
                    d7:5f:f0:2e:fb:3b:a1:fc:b9:eb:29:92:bb:3e:b3:
                    6d:ea:c1:cc:96:ca:00:94:52:a0:98:dd:af:91:2c:
                    69:72:81:6b:f4:ae:c5:4b:98:f3:04:30:ea:a5:0f:
                    4f:b2:eb:a3:1b:45:46:67:5c:6d:85:2b:0d:e6:45:
                    5b:f8:07:6d:35:17:51:76:54:b5:68:dd:17:58:0d:
                    20:c6:ee:b3:79:a4:2c:c3:d3:85:7e:ce:04:5e:a3:
                    db:45:f3:b0:9b:26:3c:78:f0:9b:eb:90:ed:1a:0d:
                    59:e5:70:8a:bb:ca:cf:d8:dc:7e:6b:92:bb:ae:39:
                    31:be:43:33:fa:85:2f:6a:45:21:14:95:8b:8c:b8:
                    db:f4:23:64:1f:59:62:f5:27:19:f4:f4:d2:cf:a2:
                    7c:dd:51:b5:53:ac:63:46:ca:76:91:1d:eb:1b:2d:
                    c1:62:85:c6:cc:38:4f:14:3e:40:bb:5f:05:33:a0:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:42:2B:02:07:9D:BD:8A:11:F4:71:4E:1B:76:DF:A1:5D:62:94
            X509v3 Authority Key Identifier:
                keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:cd:3b:b9:ff:5b:dc:64:7c:fb:5f:5a:3c:d8:06:97:f7:
         9d:64:5e:61:34:a0:17:fc:bd:d6:33:92:ff:a4:d7:b5:c4:d0:
         29:12:df:9d:c2:58:c6:85:85:cd:cb:f5:41:84:e7:b8:ad:61:
         3a:46:fd:ef:c8:bb:7c:f7:a1:7c:be:be:be:2d:63:e9:52:58:
         c7:84:f3:10:4e:62:d3:1e:f3:fd:9e:e5:82:55:56:f5:e7:d9:
         10:5d:4e:8b:a4:09:8a:03:22:44:7d:b7:1d:60:44:3c:5c:dd:
         51:5a:66:4c:9a:95:7f:f9:33:bc:28:92:17:b7:ca:80:d2:73:
         d2:c6:ef:df:b1:d2:b8:cf:87:b0:e8:ce:eb:d6:f1:b0:2f:db:
         75:46:01:87:8b:8d:36:28:b5:77:4d:81:9b:2a:aa:26:65:7f:
         77:13:51:d3:ca:35:e0:f4:d8:d1:fb:bf:0e:a3:4b:d1:bd:c3:
         57:35:19:fb:12:2e:f5:23:f6:20:34:dc:6a:40:f5:3c:86:35:
         a2:79:ca:15:72:24:41:53:1c:b2:23:46:8c:4f:8e:e4:fa:7f:
         dc:30:c0:c3:bd:55:e2:ed:80:fa:0f:1e:9c:08:40:f8:f0:83:
         13:53:7b:06:29:65:82:04:11:2f:74:c6:77:3e:f6:4e:20:be:
         49:c7:dd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9P782CNV+EXnsXCZRjU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTcyMTFmOGE2NjU2MWI1NzcwZmYxOWI0NzFhZWY1MTFl
ODM3NzgwHhcNMjUwNjE0MTUwMDM5WhcNMjUwNjE1MTUwMDM5WjAzMTEwLwYDVQQD
Eyg0ZjVmNDIyYjAyMDc5ZGJkOGExMWY0NzE0ZTFiNzZkZmExNWQ2Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvEFUFhumOUWxOwGwhz/QbNww+P4
j5XbqsnzWvB7Whd8pqXenozL2TRxcdjVT8Rt20oyzeiP7yS8TEKE5TmZQxHJtwYn
gDHg/nvXX/Au+zuh/LnrKZK7PrNt6sHMlsoAlFKgmN2vkSxpcoFr9K7FS5jzBDDq
pQ9PsuujG0VGZ1xthSsN5kVb+AdtNRdRdlS1aN0XWA0gxu6zeaQsw9OFfs4EXqPb
RfOwmyY8ePCb65DtGg1Z5XCKu8rP2Nx+a5K7rjkxvkMz+oUvakUhFJWLjLjb9CNk
H1li9ScZ9PTSz6J83VG1U6xjRsp2kR3rGy3BYoXGzDhPFD5Au18FM6DnMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9fQisCB529ihH0cU4bdt+hXWKUMB8GA1UdIwQY
MBaAFHZXIR+KZlYbV3D/GbRxrvUR6Dd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDkt
NzQzMWQ2ODlhOGU4LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDktNzQzMWQ2ODlhOGU4
LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvvNO7n/
W9xkfPtfWjzYBpf3nWReYTSgF/y91jOS/6TXtcTQKRLfncJYxoWFzcv1QYTnuK1h
Okb978i7fPehfL6+vi1j6VJYx4TzEE5i0x7z/Z7lglVW9efZEF1Oi6QJigMiRH23
HWBEPFzdUVpmTJqVf/kzvCiSF7fKgNJz0sbv37HSuM+HsOjO69bxsC/bdUYBh4uN
Nii1d02BmyqqJmV/dxNR08o14PTY0fu/DqNL0b3DVzUZ+xIu9SP2IDTcakD1PIY1
onnKFXIkQVMcsiNGjE+O5Pp/3DDAw71V4u2A+g8enAhA+PCDE1N7BillggQRL3TG
dz72TiC+ScfdWQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:37:01 2025 by rpki-client