Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File:                     PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier:          Wz6IHL3c6HUi79cwV0NyHPswLd6L1ApmvgFCJluAyLI=
Subject key identifier:   94:DD:D7:92:BD:C5:FA:BB:58:C5:E9:5E:E4:24:56:B4:33:CD:B3:E7
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer:       /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial:       01976EBE0500B09CC09065D2B50647631362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number:          06A7
Signing time:             Sat 14 Jun 2025 14:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:36 +0000
Files and hashes:         1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=)
                          2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: nRsS/5KbAQ5AcIm4fnkZ6KEx3G2p6KxXLlFH3z/CN94=)
                          3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:05:00:b0:9c:c0:90:65:d2:b5:06:47:63:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
        Validity
            Not Before: Jun 14 14:00:36 2025 GMT
            Not After : Jun 15 14:00:36 2025 GMT
        Subject: CN=94ddd792bdc5fabb58c5e95ee42456b433cdb3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:28:7e:d0:d6:a3:5a:db:77:72:1c:44:09:
                    e0:c2:60:08:79:ec:2f:1e:00:64:d5:9e:9d:67:5d:
                    e2:f0:74:dd:99:b1:d8:72:54:11:bf:30:f4:27:22:
                    5c:3a:a5:63:5a:d6:74:37:48:a4:fc:0c:28:f0:c2:
                    7e:1b:93:48:43:8c:53:4b:75:ee:b9:74:ed:77:56:
                    39:ac:ba:e7:d4:e3:b3:49:8a:eb:99:25:99:31:db:
                    82:21:20:60:b8:df:fd:8c:fb:73:c0:2e:a4:45:17:
                    c5:d8:17:c0:00:2e:df:7c:7b:25:49:ef:18:49:98:
                    cf:92:fe:fb:cb:65:38:06:87:fc:9c:9b:fd:ee:8d:
                    00:e0:3a:69:c7:a8:18:9b:e9:a3:0a:c6:d1:8c:c4:
                    a9:f7:e2:32:cd:c1:e6:13:92:7c:10:33:aa:c0:79:
                    72:43:1f:18:7e:8d:3b:bb:c2:14:5f:c6:c6:3e:b5:
                    cc:e4:f9:40:12:3e:28:14:c7:4c:6c:e4:a6:92:a3:
                    00:0d:ee:13:7d:a6:fb:37:b3:d5:bb:21:43:d2:cf:
                    4d:a9:50:ed:70:16:e2:44:8b:d6:0d:cb:8c:97:2e:
                    c3:13:49:47:04:a6:43:65:99:5f:06:53:25:94:e6:
                    0f:4c:e4:54:e5:44:fe:74:47:16:73:4e:c1:81:15:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DD:D7:92:BD:C5:FA:BB:58:C5:E9:5E:E4:24:56:B4:33:CD:B3:E7
            X509v3 Authority Key Identifier:
                keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:76:e3:0f:20:60:3f:c9:e7:7e:34:cd:da:f6:ba:cd:b1:69:
         75:4c:28:85:c3:b4:71:db:85:54:6f:fd:f8:e2:5c:69:da:b1:
         b2:b4:31:51:d0:bf:f4:61:dd:d5:39:6c:95:1f:00:93:5b:96:
         76:85:76:9d:6e:ed:fa:b3:bc:76:87:2e:8f:fc:72:06:b9:16:
         2a:2f:cb:e7:5c:dc:1e:6c:6c:13:a0:6e:41:8a:b3:2d:32:27:
         c6:76:66:bc:b4:7c:2a:16:69:da:9f:af:02:00:80:ad:b3:55:
         07:19:e1:e0:9d:39:63:12:f8:7e:a7:04:8b:ee:00:08:1e:73:
         de:52:65:f5:e7:b8:ad:1b:aa:d9:1c:d6:a8:29:bd:a0:a0:f8:
         7b:e4:07:ba:bd:97:52:a0:51:29:8b:d4:2c:79:2b:c9:00:db:
         64:42:a3:10:ec:4e:31:eb:e2:f3:fd:ef:66:4d:26:f0:1d:a1:
         d5:ce:d3:7e:59:f5:c6:05:4f:4b:30:08:b5:3a:c5:1a:ff:f3:
         3b:0c:67:bc:6e:c7:37:33:31:8a:70:32:e6:e7:63:11:d1:c0:
         13:1f:06:d7:81:64:4f:cd:97:0f:93:bc:53:86:bb:7e:32:e4:
         ab:0c:d8:c4:fe:21:17:e3:e0:4f:71:51:39:bf:7a:b2:54:fc:
         54:17:9d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvgUAsJzAkGXStQZHYxNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky
MmNkMmEwHhcNMjUwNjE0MTQwMDM2WhcNMjUwNjE1MTQwMDM2WjAzMTEwLwYDVQQD
Eyg5NGRkZDc5MmJkYzVmYWJiNThjNWU5NWVlNDI0NTZiNDMzY2RiM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBwoftDWo1rbd3IcRAngwmAIeewv
HgBk1Z6dZ13i8HTdmbHYclQRvzD0JyJcOqVjWtZ0N0ik/Awo8MJ+G5NIQ4xTS3Xu
uXTtd1Y5rLrn1OOzSYrrmSWZMduCISBguN/9jPtzwC6kRRfF2BfAAC7ffHslSe8Y
SZjPkv77y2U4Bof8nJv97o0A4Dppx6gYm+mjCsbRjMSp9+IyzcHmE5J8EDOqwHly
Qx8Yfo07u8IUX8bGPrXM5PlAEj4oFMdMbOSmkqMADe4Tfab7N7PVuyFD0s9NqVDt
cBbiRIvWDcuMly7DE0lHBKZDZZlfBlMllOYPTORU5UT+dEcWc07BgRUpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTd15K9xfq7WMXpXuQkVrQzzbPnMB8GA1UdIwQY
MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt
ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi
LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3bjDyBg
P8nnfjTN2va6zbFpdUwohcO0cduFVG/9+OJcadqxsrQxUdC/9GHd1TlslR8Ak1uW
doV2nW7t+rO8docuj/xyBrkWKi/L51zcHmxsE6BuQYqzLTInxnZmvLR8KhZp2p+v
AgCArbNVBxnh4J05YxL4fqcEi+4ACB5z3lJl9ee4rRuq2RzWqCm9oKD4e+QHur2X
UqBRKYvULHkryQDbZEKjEOxOMevi8/3vZk0m8B2h1c7Tfln1xgVPSzAItTrFGv/z
OwxnvG7HNzMxinAy5udjEdHAEx8G14FkT82XD5O8U4a7fjLkqwzYxP4hF+PgT3FR
Ob96slT8VBedhA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:44:57 2025 by rpki-client