Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File:                     RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier:          Vaguq0sMyHbKXsH2CWPpfR0t2nXlYm8Kww3FCWeEIvY=
Subject key identifier:   01:E5:24:E1:E6:2A:F4:45:9E:EE:1A:CE:24:A5:F0:66:06:1F:E1:70
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer:       /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial:       01976BF3F557C2A7322F9C823AAE68FBD7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number:          0F89
Signing time:             Sat 14 Jun 2025 01:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:39 +0000
Files and hashes:         1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: n+V1xvIisTBnkUH0IIp8udSVlWxEpHZTmGMp2ydqSnU=)
                          2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f3:f5:57:c2:a7:32:2f:9c:82:3a:ae:68:fb:d7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
        Validity
            Not Before: Jun 14 01:00:39 2025 GMT
            Not After : Jun 15 01:00:39 2025 GMT
        Subject: CN=01e524e1e62af4459eee1ace24a5f066061fe170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:27:e3:49:78:59:e0:19:65:50:29:e0:65:
                    d1:f7:f9:42:4e:ec:77:de:a6:22:90:9b:ca:38:fa:
                    94:de:d4:2a:45:26:77:11:be:88:e5:54:27:33:ec:
                    b2:47:5d:9e:c7:b9:ef:79:d7:61:93:17:d7:2c:7d:
                    60:4a:81:b4:5b:c8:73:8c:a9:9c:66:89:62:6b:61:
                    14:f3:d1:80:f4:81:d5:f9:0c:d3:be:f2:01:b5:48:
                    82:1d:00:29:23:e0:04:e2:98:24:86:96:df:f8:7b:
                    3f:d3:65:97:68:14:a7:f9:0e:ba:a0:de:31:35:58:
                    33:cb:28:72:76:dd:9a:cb:3a:13:b3:00:24:4f:fa:
                    e3:62:20:7b:fa:db:28:9d:e9:22:9e:20:75:33:da:
                    8d:2a:b4:d5:67:46:3c:b4:80:c5:41:3c:6f:5f:dd:
                    a0:74:73:eb:b0:da:f9:7a:a8:f0:f9:fb:f8:6d:97:
                    d3:01:b0:8a:b6:8d:b6:c2:e2:88:e7:8f:d4:ee:c8:
                    4b:c4:8c:77:ad:d1:3e:ea:98:e5:7a:e7:71:bf:25:
                    9f:9b:0f:96:04:85:56:f8:ba:42:e4:8f:9c:e3:86:
                    56:e9:70:a9:46:91:82:c1:51:6d:5c:78:c5:e7:68:
                    1a:78:34:6b:b7:7a:92:c5:63:67:3a:b8:90:63:c9:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E5:24:E1:E6:2A:F4:45:9E:EE:1A:CE:24:A5:F0:66:06:1F:E1:70
            X509v3 Authority Key Identifier:
                keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:66:94:f0:fe:11:48:5f:ae:1d:30:33:99:44:5b:57:ad:f5:
         20:33:b1:3f:99:d6:30:97:ce:a7:e0:e3:fb:8d:a0:40:de:5e:
         a3:c8:3e:d5:d2:e2:bf:17:dc:96:9b:5f:69:f5:0d:f4:e5:c2:
         f1:f1:85:79:4e:88:91:03:91:c0:9d:76:ec:8c:74:19:79:89:
         ec:1b:e2:14:4a:c2:b4:e5:0b:90:80:4d:b0:08:2c:8c:12:c0:
         61:01:86:c4:43:2e:6c:2e:a8:77:7e:ed:c9:4b:98:79:b5:31:
         1e:26:fd:fc:cf:08:3b:97:30:f4:e1:3a:78:98:47:57:2c:c0:
         ac:e7:b4:42:8d:08:2f:cb:50:48:51:0e:4b:92:39:45:eb:ad:
         60:76:9e:2a:80:1a:3e:5f:b3:a2:db:a5:b1:ec:43:e9:a5:52:
         55:2f:44:e2:a0:17:2c:2c:43:86:46:61:d5:fc:62:d4:24:c4:
         70:bd:85:99:c1:cd:1a:96:86:28:5a:f8:02:7c:76:6a:a6:ee:
         db:38:3d:90:e1:df:2f:29:d1:57:90:12:ca:b4:64:46:70:62:
         99:ba:b2:92:3f:20:2b:53:aa:49:4b:88:95:59:c3:bc:63:d1:
         41:00:f0:82:b5:ee:a9:59:63:15:e4:a8:03:22:f1:49:6a:a8:
         35:3a:c3:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr8/VXwqcyL5yCOq5o+9f7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjNmOWI0MWY0NWEwZjk3YjJhNmE4MTFjYTY3YTA0MDJh
MDQ3N2YwHhcNMjUwNjE0MDEwMDM5WhcNMjUwNjE1MDEwMDM5WjAzMTEwLwYDVQQD
EygwMWU1MjRlMWU2MmFmNDQ1OWVlZTFhY2UyNGE1ZjA2NjA2MWZlMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyon40l4WeAZZVAp4GXR9/lCTux3
3qYikJvKOPqU3tQqRSZ3Eb6I5VQnM+yyR12ex7nveddhkxfXLH1gSoG0W8hzjKmc
Zolia2EU89GA9IHV+QzTvvIBtUiCHQApI+AE4pgkhpbf+Hs/02WXaBSn+Q66oN4x
NVgzyyhydt2ayzoTswAkT/rjYiB7+tsonekiniB1M9qNKrTVZ0Y8tIDFQTxvX92g
dHPrsNr5eqjw+fv4bZfTAbCKto22wuKI54/U7shLxIx3rdE+6pjleudxvyWfmw+W
BIVW+LpC5I+c44ZW6XCpRpGCwVFtXHjF52gaeDRrt3qSxWNnOriQY8kckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHlJOHmKvRFnu4aziSl8GYGH+FwMB8GA1UdIwQY
MBaAFEbz+bQfRaD5eypqgRymegQCoEd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAt
OTk2MzI2Y2E3ZGQ2LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAtOTk2MzI2Y2E3ZGQ2
LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGaU8P4R
SF+uHTAzmURbV631IDOxP5nWMJfOp+Dj+42gQN5eo8g+1dLivxfclptfafUN9OXC
8fGFeU6IkQORwJ127Ix0GXmJ7BviFErCtOULkIBNsAgsjBLAYQGGxEMubC6od37t
yUuYebUxHib9/M8IO5cw9OE6eJhHVyzArOe0Qo0IL8tQSFEOS5I5ReutYHaeKoAa
Pl+zotulsexD6aVSVS9E4qAXLCxDhkZh1fxi1CTEcL2FmcHNGpaGKFr4Anx2aqbu
2zg9kOHfLynRV5ASyrRkRnBimbqykj8gK1OqSUuIlVnDvGPRQQDwgrXuqVljFeSo
AyLxSWqoNTrDug==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:27 2025 by rpki-client