Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
File:                     t4FQ8EwyNNv58R4RB5kygC0mj7E.mft (raw, json)
Hash identifier:          dEmr1HyJnjuwqFMzIm081zVJD6hjtgdomAPfVVSZZqI=
Subject key identifier:   24:24:D1:6F:E9:02:53:89:F5:1E:FB:D8:2D:38:C8:DD:B0:5A:1D:93
Authority key identifier: B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
Certificate issuer:       /CN=b78150f04c3234dbf9f11e11079932802d268fb1
Certificate serial:       01977A544CF29FDB2F4A82113198924F7C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
Manifest number:          06F9
Signing time:             Mon 16 Jun 2025 20:00:34 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:34 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:34 +0000
Files and hashes:         1: MDCWnt2rzIXWYWaxPmc0KCazQYc.roa (hash: 9x3sa/eMNtozgLkEhCL0NnGHAKtQHds50tsgQhEMBDs=)
                          2: t4FQ8EwyNNv58R4RB5kygC0mj7E.crl (hash: d7S+bFBEx/2VYql1DltCpLnxjoYRJ5WfSsqaqwU8v+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:4c:f2:9f:db:2f:4a:82:11:31:98:92:4f:7c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78150f04c3234dbf9f11e11079932802d268fb1
        Validity
            Not Before: Jun 16 20:00:34 2025 GMT
            Not After : Jun 17 20:00:34 2025 GMT
        Subject: CN=2424d16fe9025389f51efbd82d38c8ddb05a1d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:40:8a:5f:8d:9e:50:60:75:2a:9d:7b:42:
                    cf:8a:7e:9f:49:30:05:2e:17:9a:47:2d:ab:40:aa:
                    65:15:89:c4:a5:96:fb:6f:2c:d3:8f:4d:54:2e:55:
                    06:d8:46:cb:31:6d:65:97:d0:48:2a:33:c2:43:f1:
                    d6:f3:29:c5:d8:29:db:39:00:a8:e3:a0:cf:90:d4:
                    d1:5b:de:b3:d8:18:6a:06:62:c9:a3:55:75:0f:87:
                    bc:2a:67:c2:89:b9:fe:da:36:04:5d:3a:e8:f4:6a:
                    ae:f7:dc:21:ef:18:20:d4:cc:70:d0:a1:00:44:eb:
                    9d:47:e4:0a:69:8d:8b:86:89:a5:07:8c:a8:89:b1:
                    c1:71:3a:46:1e:58:1f:a0:cf:eb:5b:99:3a:37:7e:
                    02:e8:c3:fd:12:1b:3a:2f:4a:a7:75:f3:0e:5a:64:
                    eb:a1:44:a7:33:29:1e:5d:28:15:f6:d8:15:44:fc:
                    e2:b7:08:d7:e9:eb:b2:3c:3d:85:c9:41:aa:96:df:
                    23:93:29:15:ea:0c:8d:dc:89:42:6d:82:c0:2d:67:
                    1f:83:52:4d:8e:c2:62:f5:05:ea:35:bd:fb:84:7d:
                    f9:11:de:41:5f:b8:e0:7f:ea:cd:17:9a:27:9f:22:
                    d0:5d:8b:b5:8c:95:b5:06:83:c0:ed:57:b3:d2:11:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:24:D1:6F:E9:02:53:89:F5:1E:FB:D8:2D:38:C8:DD:B0:5A:1D:93
            X509v3 Authority Key Identifier:
                keyid:B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2e:9b:43:fc:21:98:ef:0f:48:a8:dd:60:87:d4:62:9a:bb:
         44:da:fa:95:22:0d:8d:2e:8d:3f:5e:a7:20:9f:64:4c:df:07:
         23:ed:ee:06:62:cc:4e:f9:e4:5e:aa:2e:e7:cf:45:6b:53:5b:
         13:d4:1c:15:28:e9:cd:f0:6c:b9:17:9f:f3:a0:63:56:a1:5b:
         72:b5:af:c5:7a:b9:2a:70:0b:06:ea:dd:ad:3a:8b:4d:30:7c:
         03:98:84:6c:e9:e2:5a:b7:fd:4e:b3:8a:3c:8f:22:61:59:a1:
         c3:76:12:38:13:02:e5:9e:de:3a:36:b8:4c:c0:1e:86:cc:5f:
         ad:15:f5:30:65:78:60:38:21:7c:de:ba:f1:4b:1b:eb:d7:71:
         b3:4c:b2:76:08:16:05:8f:85:94:e4:34:bc:b4:00:4d:c1:3c:
         62:75:2c:44:37:7c:3a:f4:1d:e6:b2:df:bd:60:a8:93:97:ca:
         d9:d0:ac:4f:3a:0e:ce:d8:dd:a1:4f:d6:b7:3e:6b:49:80:1d:
         43:a7:4a:b8:80:89:a6:23:ce:a7:5a:c5:90:d9:2e:e6:d3:6e:
         46:77:9b:e6:26:c1:87:93:7e:54:34:3b:99:ce:5d:59:2d:33:
         fc:fb:17:a9:59:a8:2a:00:74:06:3a:c4:71:fe:9f:3f:9f:80:
         87:f5:05:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6VEzyn9svSoIRMZiST3xhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODE1MGYwNGMzMjM0ZGJmOWYxMWUxMTA3OTkzMjgwMmQy
NjhmYjEwHhcNMjUwNjE2MjAwMDM0WhcNMjUwNjE3MjAwMDM0WjAzMTEwLwYDVQQD
EygyNDI0ZDE2ZmU5MDI1Mzg5ZjUxZWZiZDgyZDM4YzhkZGIwNWExZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv9Ail+NnlBgdSqde0LPin6fSTAF
LheaRy2rQKplFYnEpZb7byzTj01ULlUG2EbLMW1ll9BIKjPCQ/HW8ynF2CnbOQCo
46DPkNTRW96z2BhqBmLJo1V1D4e8KmfCibn+2jYEXTro9Gqu99wh7xgg1Mxw0KEA
ROudR+QKaY2LhomlB4yoibHBcTpGHlgfoM/rW5k6N34C6MP9Ehs6L0qndfMOWmTr
oUSnMykeXSgV9tgVRPzitwjX6euyPD2FyUGqlt8jkykV6gyN3IlCbYLALWcfg1JN
jsJi9QXqNb37hH35Ed5BX7jgf+rNF5onnyLQXYu1jJW1BoPA7Vez0hHYdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQk0W/pAlOJ9R772C04yN2wWh2TMB8GA1UdIwQY
MBaAFLeBUPBMMjTb+fEeEQeZMoAtJo+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iNTlhOGItODc1My00MDk0LWJiYTct
ZWNjYzJjMWIxYzIzLzEvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iNTlhOGItODc1My00MDk0LWJiYTctZWNjYzJjMWIxYzIz
LzEvdDRGUThFd3lOTnY1OFI0UkI1a3lnQzBtajdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC6bQ/wh
mO8PSKjdYIfUYpq7RNr6lSINjS6NP16nIJ9kTN8HI+3uBmLMTvnkXqou589Fa1Nb
E9QcFSjpzfBsuRef86BjVqFbcrWvxXq5KnALBurdrTqLTTB8A5iEbOniWrf9TrOK
PI8iYVmhw3YSOBMC5Z7eOja4TMAehsxfrRX1MGV4YDghfN668Usb69dxs0yydggW
BY+FlOQ0vLQATcE8YnUsRDd8OvQd5rLfvWCok5fK2dCsTzoOztjdoU/Wtz5rSYAd
Q6dKuICJpiPOp1rFkNku5tNuRneb5ibBh5N+VDQ7mc5dWS0z/PsXqVmoKgB0BjrE
cf6fP5+Ah/UFnQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:23:48 2025 by rpki-client