Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File:                     sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier:          StiodHxCZ7Q5d3nOfpBMeQ2MulBn8BLsfxjELoKh3QQ=
Subject key identifier:   6A:1F:58:09:66:DB:75:2D:42:C3:99:25:4C:C4:67:10:D8:A9:8C:05
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer:       /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial:       01977F0D563F4494EE3EAD3CD796CB36D7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number:          0813
Signing time:             Tue 17 Jun 2025 18:01:09 +0000
Manifest this update:     Tue 17 Jun 2025 18:01:09 +0000
Manifest next update:     Wed 18 Jun 2025 18:01:09 +0000
Files and hashes:         1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
                          2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: 1adsj6fhdlALKDnnhbLcn7kO3sPLbwWgQ3DT5jzAEEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:0d:56:3f:44:94:ee:3e:ad:3c:d7:96:cb:36:d7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
        Validity
            Not Before: Jun 17 18:01:09 2025 GMT
            Not After : Jun 18 18:01:09 2025 GMT
        Subject: CN=6a1f580966db752d42c399254cc46710d8a98c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:46:e5:0b:c7:f6:c1:28:3b:da:79:1c:40:
                    fd:15:1a:42:fd:78:21:b2:e9:c9:91:b8:9e:91:c3:
                    bc:81:d9:27:96:22:a4:5e:43:7d:13:64:7f:2b:0b:
                    9f:63:96:1b:61:a3:9a:cd:56:88:08:de:d7:e8:32:
                    37:dc:ae:16:3b:28:d2:d6:3d:d7:fb:5e:7e:fd:16:
                    da:12:db:7b:40:fd:86:49:5b:11:29:5d:9b:73:2c:
                    4d:08:37:cd:e4:0c:84:60:e2:5d:20:7c:74:f9:b9:
                    82:28:7b:a5:14:a9:6e:23:27:34:de:cf:d8:23:77:
                    e3:3c:6e:f0:53:aa:8f:43:7b:ba:af:74:49:58:c3:
                    ce:1f:a5:97:64:37:46:4d:ad:0e:4f:ea:c9:74:0c:
                    32:2c:0e:22:34:fe:0b:4d:b7:a6:78:39:d8:9a:cb:
                    25:38:eb:68:99:9c:a3:5c:21:6c:9b:b4:26:f0:69:
                    1f:fe:79:c8:d4:d6:d8:cb:dc:4a:50:03:4d:e3:1c:
                    56:68:d2:c4:c4:fc:c1:ee:78:13:d2:5c:65:bb:1f:
                    23:da:1b:19:ed:aa:e8:07:0f:5f:b3:5f:9d:2e:ce:
                    fa:c0:f6:31:d9:4c:d6:74:6b:ed:91:5a:ef:74:53:
                    ee:1e:6c:72:5a:05:9a:b0:bb:10:9a:25:f7:8b:93:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1F:58:09:66:DB:75:2D:42:C3:99:25:4C:C4:67:10:D8:A9:8C:05
            X509v3 Authority Key Identifier:
                keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:45:e5:c3:c6:6b:b2:1c:79:78:19:17:7f:43:d9:f3:98:
         6d:80:7d:4c:6f:e9:b2:59:27:24:80:4b:76:48:11:75:d4:1a:
         1f:1d:7f:a4:98:d0:87:0b:79:27:f6:a2:e6:b3:89:f7:76:f4:
         60:44:e3:eb:8c:a5:8a:b7:a5:9b:35:4f:e4:7c:04:c4:7b:4d:
         67:9a:01:70:a7:c7:1c:0b:9a:82:b7:37:f4:de:62:e4:4f:da:
         99:e8:d2:dc:31:09:90:ef:ad:d3:00:55:04:b8:4b:9b:30:74:
         2c:ab:a3:6a:18:0a:69:2b:bc:b4:13:17:43:d8:bc:73:aa:03:
         f1:e5:8b:d1:a9:f6:9c:2f:8f:c0:85:57:de:48:22:19:a5:f6:
         52:1b:66:1d:38:aa:6d:b0:4a:83:75:2f:7f:be:28:af:aa:4e:
         84:d6:0d:6e:ec:6f:92:e7:5e:68:31:8e:6c:a9:d2:f8:e5:2e:
         ed:d9:79:c9:22:72:2f:b3:f3:17:98:12:63:50:02:d4:01:b1:
         59:48:4f:59:c1:e4:5e:1e:6b:e9:55:3f:cf:40:f7:7e:fc:84:
         a5:a1:2b:bb:6c:8d:5c:ac:e8:ec:0d:39:01:fa:a7:49:d3:7a:
         70:38:d6:25:fa:52:93:7e:2b:9f:e3:d1:73:53:55:b0:ea:ee:
         f4:12:71:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/DVY/RJTuPq0815bLNtfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmIxZjc2ZThjMmJhNDkyOGFjMjgwYjI3YWE4NGQ1OTY3
YTM1MDQwHhcNMjUwNjE3MTgwMTA5WhcNMjUwNjE4MTgwMTA5WjAzMTEwLwYDVQQD
Eyg2YTFmNTgwOTY2ZGI3NTJkNDJjMzk5MjU0Y2M0NjcxMGQ4YTk4YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2hG5QvH9sEoO9p5HED9FRpC/Xgh
sunJkbiekcO8gdknliKkXkN9E2R/KwufY5YbYaOazVaICN7X6DI33K4WOyjS1j3X
+15+/RbaEtt7QP2GSVsRKV2bcyxNCDfN5AyEYOJdIHx0+bmCKHulFKluIyc03s/Y
I3fjPG7wU6qPQ3u6r3RJWMPOH6WXZDdGTa0OT+rJdAwyLA4iNP4LTbemeDnYmssl
OOtomZyjXCFsm7Qm8Gkf/nnI1NbYy9xKUANN4xxWaNLExPzB7ngT0lxlux8j2hsZ
7aroBw9fs1+dLs76wPYx2UzWdGvtkVrvdFPuHmxyWgWasLsQmiX3i5NN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGofWAlm23UtQsOZJUzEZxDYqYwFMB8GA1UdIwQY
MBaAFLArH3bowrpJKKwoCyeqhNWWejUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2It
Mjk3ZTAzMDY2ZjdkLzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2ItMjk3ZTAzMDY2Zjdk
LzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULBF5cPG
a7IceXgZF39D2fOYbYB9TG/pslknJIBLdkgRddQaHx1/pJjQhwt5J/ai5rOJ93b0
YETj64ylirelmzVP5HwExHtNZ5oBcKfHHAuagrc39N5i5E/amejS3DEJkO+t0wBV
BLhLmzB0LKujahgKaSu8tBMXQ9i8c6oD8eWL0an2nC+PwIVX3kgiGaX2UhtmHTiq
bbBKg3Uvf74or6pOhNYNbuxvkudeaDGObKnS+OUu7dl5ySJyL7PzF5gSY1AC1AGx
WUhPWcHkXh5r6VU/z0D3fvyEpaEru2yNXKzo7A05AfqnSdN6cDjWJfpSk34rn+PR
c1NVsOru9BJxGQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 02:27:41 2025 by rpki-client