Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File:                     F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier:          2XSKhQuD1yTTmYKlrC9Tji8pGSn1QSPHcsBWtJgYfDU=
Subject key identifier:   6D:59:69:20:D4:28:DD:CB:12:5F:C1:47:96:28:DD:C3:54:52:5E:7E
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer:       /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial:       01976C61BF5621ABE827A29A780F9CCB9C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number:          044A
Signing time:             Sat 14 Jun 2025 03:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:34 +0000
Files and hashes:         1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=)
                          2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: JaChY2+53tuvyXI9wKcQImkrH2YVi078VcvBSy7yxqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:bf:56:21:ab:e8:27:a2:9a:78:0f:9c:cb:9c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
        Validity
            Not Before: Jun 14 03:00:34 2025 GMT
            Not After : Jun 15 03:00:34 2025 GMT
        Subject: CN=6d596920d428ddcb125fc1479628ddc354525e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:2a:8e:96:74:98:43:6f:62:ef:8b:cf:ae:
                    cc:07:06:e4:c1:0e:fd:a3:4f:d8:71:79:3b:c4:a2:
                    02:85:fa:09:45:d8:b6:e8:da:17:ff:f9:5d:f3:2c:
                    92:20:68:a7:f1:d2:cd:ed:0e:69:64:f8:4a:f4:9e:
                    92:4c:13:14:90:47:25:ff:64:e3:ea:92:f3:af:53:
                    a3:db:c2:c6:98:78:d9:f8:a6:56:01:99:48:c1:db:
                    42:b4:9f:86:da:1d:33:dd:04:9e:1b:0a:53:41:64:
                    8a:24:da:89:05:09:0b:c0:78:7b:32:b8:ee:48:4a:
                    ed:30:54:67:e2:38:14:6c:02:96:54:84:c9:82:a9:
                    13:22:ba:c6:1f:18:dd:cd:9d:93:33:3c:5c:98:77:
                    0c:a5:35:8e:de:69:75:a8:bc:4c:f2:8f:46:6a:f2:
                    ef:3c:49:4b:02:87:a0:41:16:9b:bb:4d:58:26:65:
                    71:0d:15:9b:4f:7d:51:8b:ab:ac:81:99:37:f4:76:
                    34:1a:cc:09:e5:cc:9a:ca:84:d8:a4:fb:89:98:04:
                    a2:e6:db:c8:69:98:79:88:fd:e0:4b:ec:4a:37:28:
                    a1:c6:aa:02:ae:46:e0:d5:94:3f:2e:41:b6:c7:3c:
                    8c:ad:70:32:c4:8e:dd:4d:3f:62:f6:51:d9:3b:19:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:59:69:20:D4:28:DD:CB:12:5F:C1:47:96:28:DD:C3:54:52:5E:7E
            X509v3 Authority Key Identifier:
                keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:88:7f:14:2a:5b:01:39:74:23:79:58:42:5f:09:ca:e6:97:
         a0:6c:7e:51:9c:a9:49:92:56:bf:d6:be:aa:9c:4d:4c:d5:6c:
         59:72:01:b1:07:8a:79:3c:36:f0:3b:e2:44:50:0b:21:84:15:
         c2:76:05:ed:e5:4f:29:55:db:14:6e:b1:8d:aa:9c:57:70:f5:
         4c:75:04:63:d5:5b:e3:f1:a1:39:f1:c6:78:4c:4a:54:e8:10:
         60:8b:0b:ab:c5:28:1b:da:d1:ab:f4:69:89:13:64:0d:4f:97:
         c6:6b:51:3e:6c:49:24:90:04:f4:4e:da:3f:6f:79:ee:a9:05:
         ff:3a:06:22:1c:9b:80:f1:2f:32:4f:68:79:fe:b6:71:f4:b2:
         0b:df:88:a6:4a:90:84:8e:f6:5c:7e:13:50:34:3e:3a:27:cf:
         bb:33:bf:ad:64:de:13:6d:2f:79:8f:e9:20:dd:a4:71:05:38:
         ab:9f:4e:0c:3d:7a:7b:92:53:09:d1:c6:e3:35:e1:9d:e5:22:
         b0:97:a8:3a:0f:15:5b:43:48:31:3d:08:60:60:90:3b:57:fc:
         42:ab:cb:54:8c:76:64:7c:5b:ab:fc:a1:5d:08:2f:15:bf:bb:
         da:a3:3c:13:c7:03:cf:3a:1b:4b:b4:de:6c:53:b7:da:bf:82:
         7b:b0:da:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYb9WIavoJ6KaeA+cy5yTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWEyMDYwOGFjZTExZTc1MTFjODY2OTU2MDYzNjczMGE5
ZTJhYmYwHhcNMjUwNjE0MDMwMDM0WhcNMjUwNjE1MDMwMDM0WjAzMTEwLwYDVQQD
Eyg2ZDU5NjkyMGQ0MjhkZGNiMTI1ZmMxNDc5NjI4ZGRjMzU0NTI1ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PAqjpZ0mENvYu+Lz67MBwbkwQ79
o0/YcXk7xKIChfoJRdi26NoX//ld8yySIGin8dLN7Q5pZPhK9J6STBMUkEcl/2Tj
6pLzr1Oj28LGmHjZ+KZWAZlIwdtCtJ+G2h0z3QSeGwpTQWSKJNqJBQkLwHh7Mrju
SErtMFRn4jgUbAKWVITJgqkTIrrGHxjdzZ2TMzxcmHcMpTWO3ml1qLxM8o9GavLv
PElLAoegQRabu01YJmVxDRWbT31Ri6usgZk39HY0GswJ5cyayoTYpPuJmASi5tvI
aZh5iP3gS+xKNyihxqoCrkbg1ZQ/LkG2xzyMrXAyxI7dTT9i9lHZOxmiLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1ZaSDUKN3LEl/BR5Yo3cNUUl5+MB8GA1UdIwQY
MBaAFBdaIGCKzhHnURyGaVYGNnMKniq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEt
YTYwNWNhZDU1MDg2LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEtYTYwNWNhZDU1MDg2
LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoh/FCpb
ATl0I3lYQl8JyuaXoGx+UZypSZJWv9a+qpxNTNVsWXIBsQeKeTw28DviRFALIYQV
wnYF7eVPKVXbFG6xjaqcV3D1THUEY9Vb4/GhOfHGeExKVOgQYIsLq8UoG9rRq/Rp
iRNkDU+XxmtRPmxJJJAE9E7aP2957qkF/zoGIhybgPEvMk9oef62cfSyC9+IpkqQ
hI72XH4TUDQ+OifPuzO/rWTeE20veY/pIN2kcQU4q59ODD16e5JTCdHG4zXhneUi
sJeoOg8VW0NIMT0IYGCQO1f8QqvLVIx2ZHxbq/yhXQgvFb+72qM8E8cDzzobS7Te
bFO32r+Ce7Dayw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:47:28 2025 by rpki-client