Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          t8I5IFTxvY0jG40Xfy0Mf7F6zbDgbg8kqGFA+BJvqUM=
Subject key identifier:   F0:DE:E4:1F:9D:B8:63:2B:3D:57:3D:3E:3C:7A:96:DE:FA:8D:C0:DF
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       01976DE2B0713CF80FFA082081534B7C63F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          062E
Signing time:             Sat 14 Jun 2025 10:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 10:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 10:01:02 +0000
Files and hashes:         1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: Yi8xCxgQ/MsDEvL9WqRiQYhBEKilsrblLiW+8PLTMyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:b0:71:3c:f8:0f:fa:08:20:81:53:4b:7c:63:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Jun 14 10:01:02 2025 GMT
            Not After : Jun 15 10:01:02 2025 GMT
        Subject: CN=f0dee41f9db8632b3d573d3e3c7a96defa8dc0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:12:6c:d0:65:c2:ba:03:1c:cd:38:53:21:
                    00:87:31:e3:86:da:dc:20:ad:c8:b2:f8:ea:c9:c0:
                    92:d1:67:37:b6:f5:3f:39:df:83:e2:2d:85:3f:66:
                    e3:73:40:83:07:93:e3:30:3a:32:f5:44:a1:b3:46:
                    76:20:c8:23:42:5b:12:3d:c8:58:f4:e5:06:8c:98:
                    31:8d:1e:d7:cb:e6:14:e9:4c:87:90:ad:ac:b3:41:
                    8d:ec:bf:72:37:b6:ef:61:ea:b1:c1:75:2a:d8:9b:
                    d5:39:b0:4f:de:09:87:1b:fb:79:6f:8c:96:f0:f9:
                    7e:8f:44:16:10:0e:1d:7b:bd:ca:0a:4a:7b:58:43:
                    06:f8:80:a5:b0:a3:1e:5f:d8:53:2a:ef:bc:98:ee:
                    f9:af:ed:ce:ef:de:a1:0f:c0:ae:36:4f:3d:21:03:
                    f8:ef:30:7d:0d:cf:85:de:f9:de:3d:c9:45:a7:39:
                    85:a7:06:9c:b6:57:3a:c8:c6:e3:85:3d:c5:80:43:
                    a0:cb:fb:11:91:48:2c:e6:9f:b4:79:6c:34:88:f0:
                    13:18:19:82:be:35:79:aa:3a:e9:0e:88:97:63:57:
                    d9:12:3c:45:19:aa:67:39:9b:95:87:8b:16:15:9e:
                    ab:c0:ae:cc:48:1f:d0:16:18:c2:02:2f:2a:d9:28:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DE:E4:1F:9D:B8:63:2B:3D:57:3D:3E:3C:7A:96:DE:FA:8D:C0:DF
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5a:17:ab:fe:a6:38:ce:f5:a9:7b:d6:81:a6:b0:6f:c2:22:
         9c:9e:f9:6d:42:c9:cc:b0:a5:70:16:34:4e:6a:8c:5c:20:a0:
         b6:76:71:f5:80:c7:2e:ea:96:a1:0a:be:2d:2f:bd:cb:b4:0a:
         f0:31:72:e5:07:52:42:2d:40:83:85:43:11:18:44:0a:dd:6a:
         16:7d:5d:bc:ba:40:26:b9:b5:ca:d7:0d:b0:d1:2f:f7:15:ae:
         7e:a4:ef:0d:f6:06:01:25:f2:b2:f8:bb:2d:a3:a0:a7:5d:28:
         25:d7:50:b4:85:38:d3:12:e7:66:67:6c:96:e1:23:45:7f:09:
         4a:43:b6:fa:20:f7:7c:d6:ee:b2:8f:c9:f9:d7:76:d6:c3:61:
         25:36:76:69:ae:93:7b:28:b1:6d:ef:36:9d:6e:fe:46:3b:20:
         38:e6:4d:8f:90:a2:ef:14:b3:3b:23:b1:70:9d:ce:be:03:20:
         f8:14:31:d7:0e:1d:40:09:4b:b7:63:5a:23:6c:cb:0d:53:0c:
         c0:af:10:54:63:86:5c:07:d4:b3:68:80:0d:8d:bc:28:5e:25:
         5a:a2:de:8d:48:6f:7c:13:64:2a:c1:15:7c:5e:e1:b3:62:d3:
         43:bc:c2:08:2d:f1:07:20:90:31:5e:bf:20:90:2a:1e:ae:7b:
         b7:6b:b6:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4rBxPPgP+ggggVNLfGPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl
NGRmYWYwHhcNMjUwNjE0MTAwMTAyWhcNMjUwNjE1MTAwMTAyWjAzMTEwLwYDVQQD
EyhmMGRlZTQxZjlkYjg2MzJiM2Q1NzNkM2UzYzdhOTZkZWZhOGRjMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r4SbNBlwroDHM04UyEAhzHjhtrc
IK3IsvjqycCS0Wc3tvU/Od+D4i2FP2bjc0CDB5PjMDoy9UShs0Z2IMgjQlsSPchY
9OUGjJgxjR7Xy+YU6UyHkK2ss0GN7L9yN7bvYeqxwXUq2JvVObBP3gmHG/t5b4yW
8Pl+j0QWEA4de73KCkp7WEMG+IClsKMeX9hTKu+8mO75r+3O796hD8CuNk89IQP4
7zB9Dc+F3vnePclFpzmFpwactlc6yMbjhT3FgEOgy/sRkUgs5p+0eWw0iPATGBmC
vjV5qjrpDoiXY1fZEjxFGapnOZuVh4sWFZ6rwK7MSB/QFhjCAi8q2SiDdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDe5B+duGMrPVc9Pjx6lt76jcDfMB8GA1UdIwQY
MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt
Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1
LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVoXq/6m
OM71qXvWgaawb8IinJ75bULJzLClcBY0TmqMXCCgtnZx9YDHLuqWoQq+LS+9y7QK
8DFy5QdSQi1Ag4VDERhECt1qFn1dvLpAJrm1ytcNsNEv9xWufqTvDfYGASXysvi7
LaOgp10oJddQtIU40xLnZmdsluEjRX8JSkO2+iD3fNbuso/J+dd21sNhJTZ2aa6T
eyixbe82nW7+RjsgOOZNj5Ci7xSzOyOxcJ3OvgMg+BQx1w4dQAlLt2NaI2zLDVMM
wK8QVGOGXAfUs2iADY28KF4lWqLejUhvfBNkKsEVfF7hs2LTQ7zCCC3xByCQMV6/
IJAqHq57t2u2dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:35 2025 by rpki-client