Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File:                     De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier:          uES7LLMG8f8a7fss2/itdGzSkyn1GrKcaQyfwTs762s=
Subject key identifier:   80:DF:AF:D0:23:A3:69:14:26:A3:A2:95:AB:49:66:68:F1:7D:4B:2C
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer:       /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial:       0197711AA39775F1BA7908050EE3F751D092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number:          097E
Signing time:             Sun 15 Jun 2025 01:01:00 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:00 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:00 +0000
Files and hashes:         1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=)
                          2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: o8ARxji4PP4b//xtZiyZ/Ui+XStv2vLAii9PkInqC6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:a3:97:75:f1:ba:79:08:05:0e:e3:f7:51:d0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
        Validity
            Not Before: Jun 15 01:01:00 2025 GMT
            Not After : Jun 16 01:01:00 2025 GMT
        Subject: CN=80dfafd023a3691426a3a295ab496668f17d4b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:c5:53:8e:3e:68:61:e4:6d:33:cd:d7:7b:
                    09:80:b5:e6:14:43:7b:9e:df:42:94:26:b3:c9:b4:
                    bb:6f:88:f2:ca:47:75:64:44:c0:28:af:c1:46:9e:
                    e7:21:39:5d:7d:2e:ac:ca:75:32:1e:e0:aa:df:8b:
                    94:b2:1f:fd:e4:66:71:8f:b2:de:d4:e6:d3:94:e8:
                    22:7d:a0:36:31:9e:ad:7f:2a:0b:82:d5:31:e5:13:
                    62:0e:a4:e0:01:92:a4:6f:60:fa:6c:ad:f6:2f:64:
                    91:7d:24:80:9a:ad:bb:69:25:60:13:39:fa:9e:7e:
                    2e:a6:85:9f:8e:47:3b:7e:d4:39:31:dc:c1:c5:b6:
                    ef:0d:75:9c:98:e7:2e:91:8e:97:10:b7:2f:c3:83:
                    e0:1e:39:5f:d1:4f:88:28:27:15:b8:78:fe:65:5f:
                    ff:0f:a1:79:0c:dc:73:2d:eb:db:40:06:75:22:23:
                    01:5f:2a:3c:ad:92:9e:ce:21:f5:e7:79:e8:c4:17:
                    91:57:fc:49:2e:af:03:7e:6a:01:d7:fd:63:5f:96:
                    3c:14:7d:17:32:60:a7:cd:ba:00:e0:d4:47:eb:d3:
                    37:67:61:4f:2c:56:7f:c2:a8:51:7d:33:96:9c:f7:
                    2b:19:99:67:72:ca:fb:cb:c4:74:5a:2f:70:8f:c8:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:AF:D0:23:A3:69:14:26:A3:A2:95:AB:49:66:68:F1:7D:4B:2C
            X509v3 Authority Key Identifier:
                keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:3d:f9:e9:c8:ec:1d:54:22:4b:c7:dd:3a:33:bb:f0:7f:7e:
         b6:80:75:83:f8:33:c4:eb:e1:5f:42:34:f5:26:c7:da:a2:df:
         26:f0:95:48:41:32:ee:05:3e:5e:e4:33:d6:29:41:45:08:49:
         06:37:49:69:d8:7a:4a:bf:03:49:54:aa:60:cc:f9:0e:68:ff:
         57:6b:0c:dc:ed:07:4d:8b:55:49:0d:33:99:11:77:a3:32:f5:
         df:a2:4b:86:5c:19:67:49:3f:db:69:b9:e0:c7:04:93:31:c8:
         e0:95:be:e4:3a:21:21:83:0b:d1:14:9c:7d:65:46:b5:3d:a1:
         70:48:ed:4d:16:bd:e8:8c:6d:fe:20:ad:f4:b1:9f:11:21:3b:
         50:5d:d2:47:f1:c3:3c:b1:d9:0d:dc:28:e0:b0:fa:f9:35:1a:
         4f:b4:bf:17:9c:ad:82:3f:e4:99:fd:00:dd:63:c5:cd:71:5b:
         2a:7d:9c:a3:3d:41:ab:e8:49:dd:84:26:d8:cc:d0:ff:7f:5b:
         97:79:28:df:2e:69:ee:58:39:1a:97:13:39:56:65:fb:e4:92:
         a0:ba:2f:ab:81:f8:30:6e:f0:b3:2b:31:68:94:b5:ce:d5:a4:
         d2:c7:fe:c3:4c:af:64:5d:8a:55:9d:1e:6d:08:76:d3:6c:ff:
         75:7d:85:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGqOXdfG6eQgFDuP3UdCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZWQ2NmQyYzVhNDkzYTA5NTM0MzU3ZTVjYTI2ZjAzZDFh
NGRkZDQwHhcNMjUwNjE1MDEwMTAwWhcNMjUwNjE2MDEwMTAwWjAzMTEwLwYDVQQD
Eyg4MGRmYWZkMDIzYTM2OTE0MjZhM2EyOTVhYjQ5NjY2OGYxN2Q0YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUrFU44+aGHkbTPN13sJgLXmFEN7
nt9ClCazybS7b4jyykd1ZETAKK/BRp7nITldfS6synUyHuCq34uUsh/95GZxj7Le
1ObTlOgifaA2MZ6tfyoLgtUx5RNiDqTgAZKkb2D6bK32L2SRfSSAmq27aSVgEzn6
nn4upoWfjkc7ftQ5MdzBxbbvDXWcmOcukY6XELcvw4PgHjlf0U+IKCcVuHj+ZV//
D6F5DNxzLevbQAZ1IiMBXyo8rZKeziH153noxBeRV/xJLq8DfmoB1/1jX5Y8FH0X
MmCnzboA4NRH69M3Z2FPLFZ/wqhRfTOWnPcrGZlncsr7y8R0Wi9wj8g78wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDfr9Ajo2kUJqOilatJZmjxfUssMB8GA1UdIwQY
MBaAFA3tZtLFpJOglTQ1flyibwPRpN3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMt
MzdiOTZmZmJhNzZhLzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMtMzdiOTZmZmJhNzZh
LzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyz356cjs
HVQiS8fdOjO78H9+toB1g/gzxOvhX0I09SbH2qLfJvCVSEEy7gU+XuQz1ilBRQhJ
BjdJadh6Sr8DSVSqYMz5Dmj/V2sM3O0HTYtVSQ0zmRF3ozL136JLhlwZZ0k/22m5
4McEkzHI4JW+5DohIYML0RScfWVGtT2hcEjtTRa96Ixt/iCt9LGfESE7UF3SR/HD
PLHZDdwo4LD6+TUaT7S/F5ytgj/kmf0A3WPFzXFbKn2coz1Bq+hJ3YQm2MzQ/39b
l3ko3y5p7lg5GpcTOVZl++SSoLovq4H4MG7wsysxaJS1ztWk0sf+w0yvZF2KVZ0e
bQh202z/dX2F9A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:22 2025 by rpki-client