Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          0FPEvsJSAW9QUOvyiqinRlRfWt7e/isTU2Cx0juCReI=
Subject key identifier:   3A:3A:6D:3F:27:F1:59:14:18:06:4D:F0:AE:58:2A:D3:7F:19:C6:86
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       0197801F97B07F744970BFEDD7A19978DE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          1100
Signing time:             Tue 17 Jun 2025 23:00:43 +0000
Manifest this update:     Tue 17 Jun 2025 23:00:43 +0000
Manifest next update:     Wed 18 Jun 2025 23:00:43 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: /abZ1HccUF5HPjQhVNbmpvB9QCy4EVbHBFHvQOnuKH0=)
                          2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:1f:97:b0:7f:74:49:70:bf:ed:d7:a1:99:78:de:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Jun 17 23:00:43 2025 GMT
            Not After : Jun 18 23:00:43 2025 GMT
        Subject: CN=3a3a6d3f27f1591418064df0ae582ad37f19c686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:63:15:d6:de:fe:b3:ca:ef:7f:58:b8:09:
                    b1:51:46:1d:1f:c2:73:ca:ab:fa:7a:b4:b8:32:45:
                    ca:c9:37:c3:ce:e2:66:d0:c1:91:f2:14:c8:89:41:
                    40:a0:b2:1c:0d:7c:16:ce:f6:47:3e:41:58:6f:2a:
                    c6:a3:71:d4:0d:34:51:e2:83:55:19:32:b0:45:f2:
                    26:fc:42:ac:1b:3a:db:60:f2:37:29:35:b8:0e:34:
                    a4:a8:21:60:83:c1:30:38:0f:be:4d:25:db:8d:c0:
                    72:64:cc:ee:fa:57:f3:cb:5a:30:5d:8d:79:7e:12:
                    a1:8b:4c:b6:55:9f:fc:8c:25:4f:3b:2d:0b:1e:d6:
                    b6:48:e0:9d:93:30:a6:3c:b0:0d:95:09:81:b2:4c:
                    88:b8:f9:b9:ac:d0:57:7b:0e:11:07:e3:4c:50:6b:
                    ad:90:40:9c:7a:31:8b:af:15:f2:34:30:3a:0b:ec:
                    6d:d4:91:48:03:f1:d7:cb:40:6a:b3:52:76:44:58:
                    64:2e:02:46:1b:3c:f7:f8:b6:6b:78:ce:12:fe:e2:
                    0a:4e:78:08:03:3a:05:f6:35:b5:af:46:fc:0b:48:
                    00:11:11:fc:3f:8a:5a:32:40:a3:56:02:cb:da:4f:
                    b1:30:c8:e0:75:80:e7:27:1d:91:cf:90:c1:d3:b7:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:6D:3F:27:F1:59:14:18:06:4D:F0:AE:58:2A:D3:7F:19:C6:86
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:79:fd:85:c3:ec:58:3c:81:58:66:22:d5:c3:15:0a:7c:
         7e:e1:42:68:00:10:3c:b3:83:e8:ee:66:81:bb:a4:6d:e3:1b:
         77:9b:16:dd:89:e4:33:50:57:b7:7b:19:a6:f2:2a:89:d5:5c:
         b8:1c:ed:cb:95:69:45:9a:d2:d4:40:3d:35:7c:65:ca:d1:5e:
         7b:f0:ea:70:0b:0f:d4:12:21:e6:fa:72:cf:ae:57:21:d8:f3:
         f5:34:77:a0:4e:74:6e:27:6b:c0:7c:fe:d4:9f:d1:b0:6a:63:
         83:72:76:89:3e:8d:43:7b:cc:ca:4b:7c:34:a8:bb:f2:ff:6e:
         05:51:06:61:10:e8:8c:7a:30:f6:ea:21:9a:af:ff:ff:07:44:
         80:7f:41:36:67:04:ea:b5:0a:27:e7:20:29:f8:80:b9:09:6b:
         5f:ff:a2:eb:5d:56:cb:3d:aa:02:d7:8d:49:5f:08:dd:3d:d0:
         dd:1a:0b:dc:27:40:e4:6a:4e:9a:c7:1e:4d:b5:d3:2d:79:3a:
         23:52:65:b7:11:03:aa:4c:bd:27:5d:4b:7a:e5:99:e4:13:d1:
         dc:f4:a1:49:04:7e:cb:56:fd:08:7e:ef:81:55:5b:ed:00:68:
         8d:c8:6f:b6:ee:00:cc:db:b2:63:75:6b:59:91:0e:1c:81:d9:
         38:d8:7c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAH5ewf3RJcL/t16GZeN5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz
ZWY4MmEwHhcNMjUwNjE3MjMwMDQzWhcNMjUwNjE4MjMwMDQzWjAzMTEwLwYDVQQD
EygzYTNhNmQzZjI3ZjE1OTE0MTgwNjRkZjBhZTU4MmFkMzdmMTljNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34JjFdbe/rPK739YuAmxUUYdH8Jz
yqv6erS4MkXKyTfDzuJm0MGR8hTIiUFAoLIcDXwWzvZHPkFYbyrGo3HUDTRR4oNV
GTKwRfIm/EKsGzrbYPI3KTW4DjSkqCFgg8EwOA++TSXbjcByZMzu+lfzy1owXY15
fhKhi0y2VZ/8jCVPOy0LHta2SOCdkzCmPLANlQmBskyIuPm5rNBXew4RB+NMUGut
kECcejGLrxXyNDA6C+xt1JFIA/HXy0Bqs1J2RFhkLgJGGzz3+LZreM4S/uIKTngI
AzoF9jW1r0b8C0gAERH8P4paMkCjVgLL2k+xMMjgdYDnJx2Rz5DB07eKFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo6bT8n8VkUGAZN8K5YKtN/GcaGMB8GA1UdIwQY
MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt
N2U3MTkwZmZjNGM5LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5
LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhB5/YXD
7Fg8gVhmItXDFQp8fuFCaAAQPLOD6O5mgbukbeMbd5sW3YnkM1BXt3sZpvIqidVc
uBzty5VpRZrS1EA9NXxlytFee/DqcAsP1BIh5vpyz65XIdjz9TR3oE50bidrwHz+
1J/RsGpjg3J2iT6NQ3vMykt8NKi78v9uBVEGYRDojHow9uohmq///wdEgH9BNmcE
6rUKJ+cgKfiAuQlrX/+i611Wyz2qAteNSV8I3T3Q3RoL3CdA5GpOmsceTbXTLXk6
I1JltxEDqky9J11LeuWZ5BPR3PShSQR+y1b9CH7vgVVb7QBojchvtu4AzNuyY3Vr
WZEOHIHZONh8Kg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:38 2025 by rpki-client