Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File:                     1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier:          k6AojJdiXb6DCdf7vqyZ+9XTW5OprfiQobgwiYqB1uU=
Subject key identifier:   A3:4B:1F:A0:F4:D6:A7:59:0F:44:D3:AF:36:F5:A9:B0:33:04:07:E4
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer:       /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial:       01976C2B361BD537DE812C19EACF3229FD62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number:          05EF
Signing time:             Sat 14 Jun 2025 02:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:00 +0000
Files and hashes:         1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: SnJDQbjn9L3vGhDVMxq23wze9+rHqyMaH0Qwrgx2hzo=)
                          2: kidKlu5oDBem3t0h8aiG0Vv8dvw.roa (hash: Xo2YDFkznVnl+RRSUSAYifFOhE1syeVNtNcN0kJvN2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:36:1b:d5:37:de:81:2c:19:ea:cf:32:29:fd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
        Validity
            Not Before: Jun 14 02:01:00 2025 GMT
            Not After : Jun 15 02:01:00 2025 GMT
        Subject: CN=a34b1fa0f4d6a7590f44d3af36f5a9b0330407e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:7b:ea:19:07:ca:e8:23:84:d7:6f:3f:1a:
                    16:4c:01:64:23:1e:19:f0:ea:ea:81:d7:eb:1e:90:
                    da:b0:f8:15:16:79:7c:34:02:f0:24:e8:d0:8e:69:
                    0c:ff:b3:d8:76:f4:cc:a8:de:1d:a3:9a:88:85:53:
                    b9:bd:d6:56:62:03:84:96:97:d1:8e:1a:b1:c5:db:
                    60:4b:09:52:f0:cc:39:ec:81:b1:74:75:76:1f:08:
                    e0:1c:9c:4f:2c:21:92:cf:0b:f9:8b:d6:d7:39:b4:
                    14:d7:8f:a3:00:8c:71:5d:cc:c6:af:50:ff:8f:a9:
                    e0:e6:82:12:7c:e5:9b:95:90:1e:72:3c:90:68:2c:
                    46:a1:ed:72:a2:fe:74:c1:5c:23:17:2f:82:03:7a:
                    22:a1:4a:4a:fc:da:33:b9:ff:e8:fc:1a:b0:af:cb:
                    3c:ca:7b:31:90:73:2f:06:c2:b6:aa:2c:f7:dc:cb:
                    d1:1b:e5:d0:d0:55:e5:fb:69:25:2a:b9:7c:5d:58:
                    2f:77:b2:d1:f6:7d:bd:fd:5b:c1:f8:cc:ab:c6:39:
                    01:aa:d3:11:3a:7c:d6:6c:c9:1e:3b:09:5f:83:be:
                    df:34:b8:49:a9:6a:ec:00:b9:1a:9c:60:cb:87:74:
                    cf:3c:69:aa:d2:c8:02:52:97:2f:21:39:79:02:df:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:1F:A0:F4:D6:A7:59:0F:44:D3:AF:36:F5:A9:B0:33:04:07:E4
            X509v3 Authority Key Identifier:
                keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:a7:d7:70:59:1b:a1:b9:42:57:96:ce:63:07:cd:39:02:
         77:a4:c8:22:9f:a3:ad:90:3a:1b:de:ef:27:c0:0e:41:b0:df:
         c9:67:b4:a5:b4:42:5c:05:b4:0c:d0:05:a2:57:bd:96:70:f3:
         60:ed:1b:ef:51:c2:b9:31:92:83:68:cf:56:aa:8c:9f:fa:a9:
         d9:dc:e6:c5:de:64:13:16:b5:4c:aa:f0:cb:51:2e:e5:cb:ca:
         4b:76:69:1d:cb:70:87:4b:84:6f:88:bf:f4:28:57:5c:4b:29:
         78:82:8f:8f:89:ad:16:b6:37:c4:a6:c4:a8:e7:41:65:b1:e5:
         19:e9:bf:64:0f:ea:f1:08:2a:f2:55:84:94:d5:2d:b9:85:f8:
         b3:f5:53:66:ea:e2:13:6e:75:dd:f0:31:ac:12:64:c5:18:6e:
         2b:cb:05:63:e1:3d:de:2f:a1:58:51:04:a6:65:c8:4d:88:aa:
         73:cb:a3:c7:72:0b:f3:6c:e5:3d:37:0f:8c:d2:af:cd:5b:0b:
         a4:f6:3a:b5:ca:50:f6:60:b6:65:fb:01:3b:7a:29:44:54:a3:
         af:7b:0a:21:63:c6:cb:b7:fe:10:4f:e3:71:04:9f:73:02:99:
         0e:2a:5a:c6:e9:06:46:6d:01:b4:9f:60:c0:c6:40:30:b7:17:
         eb:32:25:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdsKzYb1TfegSwZ6s8yKf1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjUwNjE0MDIwMTAwWhcNMjUwNjE1MDIwMTAwWjAzMTEwLwYDVQQD
EyhhMzRiMWZhMGY0ZDZhNzU5MGY0NGQzYWYzNmY1YTliMDMzMDQwN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrt76hkHyugjhNdvPxoWTAFkIx4Z
8OrqgdfrHpDasPgVFnl8NALwJOjQjmkM/7PYdvTMqN4do5qIhVO5vdZWYgOElpfR
jhqxxdtgSwlS8Mw57IGxdHV2HwjgHJxPLCGSzwv5i9bXObQU14+jAIxxXczGr1D/
j6ng5oISfOWblZAecjyQaCxGoe1yov50wVwjFy+CA3oioUpK/Nozuf/o/Bqwr8s8
ynsxkHMvBsK2qiz33MvRG+XQ0FXl+2klKrl8XVgvd7LR9n29/VvB+MyrxjkBqtMR
OnzWbMkeOwlfg77fNLhJqWrsALkanGDLh3TPPGmq0sgCUpcvITl5At+lrwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKNLH6D01qdZD0TTrzb1qbAzBAfkMB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm
YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgOn
13BZG6G5QleWzmMHzTkCd6TIIp+jrZA6G97vJ8AOQbDfyWe0pbRCXAW0DNAFole9
lnDzYO0b71HCuTGSg2jPVqqMn/qp2dzmxd5kExa1TKrwy1Eu5cvKS3ZpHctwh0uE
b4i/9ChXXEspeIKPj4mtFrY3xKbEqOdBZbHlGem/ZA/q8Qgq8lWElNUtuYX4s/VT
ZuriE2513fAxrBJkxRhuK8sFY+E93i+hWFEEpmXITYiqc8ujx3IL82zlPTcPjNKv
zVsLpPY6tcpQ9mC2ZfsBO3opRFSjr3sKIWPGy7f+EE/jcQSfcwKZDipaxukGRm0B
tJ9gwMZAMLcX6zIlFw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:55 2025 by rpki-client