Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File:                     tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier:          29CaaJOIDCoAUFNTdGSpQrNWr1PCKgR7HDi5FqzKZno=
Subject key identifier:   4D:7B:7C:E0:02:03:C6:14:58:B1:25:72:95:90:58:6C:A2:56:8A:A2
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer:       /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial:       01976FD0B4CD6B4A65F059E4144E1FED240C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number:          0CAE
Signing time:             Sat 14 Jun 2025 19:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:38 +0000
Files and hashes:         1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
                          2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: RDtV1KtrO4hYFHSNT/cM1TXmgjcRTeWJ/uTfyZmRFtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:b4:cd:6b:4a:65:f0:59:e4:14:4e:1f:ed:24:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
        Validity
            Not Before: Jun 14 19:00:38 2025 GMT
            Not After : Jun 15 19:00:38 2025 GMT
        Subject: CN=4d7b7ce00203c61458b125729590586ca2568aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:77:b1:70:65:91:82:3b:f4:22:9b:7c:bd:
                    76:5f:02:03:bf:6e:b0:e4:c4:c0:3b:6b:1e:5d:cf:
                    cf:17:10:2f:34:64:5d:e6:15:e4:b2:8e:9d:d4:ef:
                    24:9a:de:7c:b6:a7:30:49:a8:43:60:64:e6:db:ab:
                    e5:5e:fc:ee:4f:8b:a0:3a:4f:7c:84:2e:5e:34:22:
                    6b:25:72:88:40:2d:9b:8d:fe:5d:b4:9c:c1:96:a8:
                    75:88:b5:3c:fd:c8:98:12:1c:fd:0d:f8:81:a5:72:
                    13:40:2a:e0:e4:06:b0:70:a0:97:f5:d4:ea:ed:2b:
                    8c:cf:b7:6f:fc:ff:5e:e2:d6:8c:25:eb:ba:4a:6d:
                    4f:7b:5b:f6:b2:51:fe:5e:66:29:10:37:9d:b6:3d:
                    e6:e1:ba:44:95:b0:9e:70:2c:39:87:b8:57:42:e1:
                    4f:7b:3a:ba:c9:cf:ca:23:b9:44:ae:67:4e:28:60:
                    c8:f6:0e:31:e2:16:65:04:b8:64:4e:6d:70:e4:d0:
                    90:52:51:07:3a:e7:a5:48:76:d2:28:b4:d8:b6:1e:
                    7d:ec:0b:7d:bf:41:12:dd:15:fc:c2:2f:f9:1c:81:
                    66:9c:a8:2c:80:82:d0:9c:d7:fe:8d:68:73:ee:bd:
                    d9:23:86:f5:a0:61:b4:39:01:a9:97:a9:d2:75:44:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7B:7C:E0:02:03:C6:14:58:B1:25:72:95:90:58:6C:A2:56:8A:A2
            X509v3 Authority Key Identifier:
                keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3f:f0:93:48:cc:c3:77:aa:33:53:84:45:79:b5:94:a7:0b:
         fe:08:0e:f9:f6:d0:f7:63:e0:5c:f5:84:d3:2d:01:ee:58:f2:
         7e:b5:80:64:b7:10:39:84:f1:c4:40:4c:46:39:54:a0:c8:75:
         f0:b1:10:40:9c:38:a8:ab:3d:3c:ec:b0:67:03:f0:fe:22:e0:
         6b:d3:be:2a:91:ea:7b:49:42:47:b5:bf:c2:b7:ae:ce:74:ea:
         ed:24:10:d8:1e:fa:61:17:bf:48:7e:0b:f2:4d:b7:0e:ab:43:
         ab:67:a2:75:22:06:91:a0:ae:62:ef:9e:21:70:cc:1b:a5:8d:
         48:d3:97:d7:63:6c:f6:50:97:61:35:43:17:5e:b9:9d:7b:47:
         b2:9b:b2:81:21:36:e0:9c:e6:fe:6a:87:ff:e1:03:a9:df:ee:
         cd:7a:df:bd:77:b2:5b:f6:a4:5e:f5:b1:5b:4c:a9:3e:45:ac:
         dc:59:ae:cc:a7:87:45:f3:50:da:12:93:5c:99:38:ab:3b:9e:
         87:ac:84:7a:c5:4a:d2:c9:a0:60:95:eb:65:44:37:e7:cf:92:
         31:85:7f:9a:ab:0a:df:96:3b:ea:7b:49:0e:7f:fc:96:02:d8:
         05:79:81:22:fd:1f:d4:1a:e8:8e:0d:d6:32:ac:ab:1f:59:b5:
         f4:93:fb:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0LTNa0pl8FnkFE4f7SQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2MwZmFmYTY1MGRkOTRhM2I1NTgxNzM5ZjYzZDg4ZWZh
NDE0ZjMwHhcNMjUwNjE0MTkwMDM4WhcNMjUwNjE1MTkwMDM4WjAzMTEwLwYDVQQD
Eyg0ZDdiN2NlMDAyMDNjNjE0NThiMTI1NzI5NTkwNTg2Y2EyNTY4YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJx3sXBlkYI79CKbfL12XwIDv26w
5MTAO2seXc/PFxAvNGRd5hXkso6d1O8kmt58tqcwSahDYGTm26vlXvzuT4ugOk98
hC5eNCJrJXKIQC2bjf5dtJzBlqh1iLU8/ciYEhz9DfiBpXITQCrg5AawcKCX9dTq
7SuMz7dv/P9e4taMJeu6Sm1Pe1v2slH+XmYpEDedtj3m4bpElbCecCw5h7hXQuFP
ezq6yc/KI7lErmdOKGDI9g4x4hZlBLhkTm1w5NCQUlEHOuelSHbSKLTYth597At9
v0ES3RX8wi/5HIFmnKgsgILQnNf+jWhz7r3ZI4b1oGG0OQGpl6nSdUTSJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE17fOACA8YUWLElcpWQWGyiVoqiMB8GA1UdIwQY
MBaAFLV8D6+mUN2Uo7VYFzn2PYjvpBTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGIt
MThiOWE4NTEwNTM5LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGItMThiOWE4NTEwNTM5
LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUT/wk0jM
w3eqM1OERXm1lKcL/ggO+fbQ92PgXPWE0y0B7ljyfrWAZLcQOYTxxEBMRjlUoMh1
8LEQQJw4qKs9POywZwPw/iLga9O+KpHqe0lCR7W/wreuznTq7SQQ2B76YRe/SH4L
8k23DqtDq2eidSIGkaCuYu+eIXDMG6WNSNOX12Ns9lCXYTVDF165nXtHspuygSE2
4Jzm/mqH/+EDqd/uzXrfvXeyW/akXvWxW0ypPkWs3FmuzKeHRfNQ2hKTXJk4qzue
h6yEesVK0smgYJXrZUQ358+SMYV/mqsK35Y76ntJDn/8lgLYBXmBIv0f1Brojg3W
MqyrH1m19JP7Fg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:30:47 2025 by rpki-client