Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          uMd6IvVkiXnYvPejZeWn8wblZ7uNUJyWLy6XQiqgdF0=
Subject key identifier:   BF:5D:1B:B2:FF:7B:C8:E5:99:B1:6B:FE:38:8F:F3:44:41:3D:3D:03
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       01976D3D5A42DC51606A3C9E4CE92114F1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          15A5
Signing time:             Sat 14 Jun 2025 07:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:26 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: OD1IPoX+4xXJ+LyhOWbqi9ECZMqZnXxnnVFMlgJOMWE=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:5a:42:dc:51:60:6a:3c:9e:4c:e9:21:14:f1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jun 14 07:00:26 2025 GMT
            Not After : Jun 15 07:00:26 2025 GMT
        Subject: CN=bf5d1bb2ff7bc8e599b16bfe388ff344413d3d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:06:d5:25:47:ea:4e:a5:27:7a:f2:fd:45:
                    08:92:03:c4:9c:d3:5e:20:0c:a6:c7:c6:4a:aa:08:
                    29:03:50:b7:df:41:ed:d2:b3:dc:9c:da:f9:75:b5:
                    c8:0a:7b:be:59:87:a1:13:4a:1d:fa:48:27:9e:bb:
                    e6:07:e0:ff:23:23:fe:e5:a9:77:75:71:cf:06:05:
                    8f:18:85:ac:16:be:47:15:bb:39:65:fa:f1:d3:90:
                    01:e9:d4:2b:8d:c9:53:3e:17:75:06:c9:a9:89:6a:
                    4a:3c:2a:cb:a8:7a:4d:2b:33:43:2c:d8:f7:cc:f4:
                    cc:e3:1b:51:01:19:af:0a:64:92:54:04:8d:10:95:
                    44:f0:f2:8c:4b:e3:5e:5d:f2:cd:f6:d6:5f:47:56:
                    c0:e6:42:83:a3:63:d0:38:3b:49:ad:33:97:01:5b:
                    6c:21:f1:13:7e:97:53:76:90:68:3f:b7:74:ea:97:
                    84:a4:07:2c:91:e8:fe:c2:45:dc:5c:c7:b9:bd:06:
                    18:e2:9a:04:de:d3:ad:8a:9a:cb:9e:14:4a:96:57:
                    3d:0c:5d:60:63:ad:aa:e3:dd:aa:dc:a9:7a:8e:1a:
                    7b:fb:ed:65:a2:c0:81:cc:78:b9:fa:43:14:97:90:
                    ee:2a:b2:cc:56:ed:e7:0f:da:ed:7a:24:26:7e:d8:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5D:1B:B2:FF:7B:C8:E5:99:B1:6B:FE:38:8F:F3:44:41:3D:3D:03
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:37:3a:b4:2a:29:54:e8:bf:fc:11:44:4f:d0:a9:f6:5f:c0:
         9e:78:99:7a:cf:70:84:8a:c9:74:d3:52:d2:1f:6d:98:cb:b9:
         31:ac:c8:88:ee:22:b1:d3:0b:ef:4e:f1:c9:d9:e7:04:2a:83:
         b9:1d:cd:7e:b1:77:1f:cf:37:fc:93:7f:1d:72:d3:e8:2c:78:
         d3:a6:17:ee:d1:58:c9:b9:65:23:5b:7c:4a:80:cc:05:0e:83:
         c4:81:be:f0:6a:d0:70:17:51:3e:8b:88:dc:d1:a9:5e:ef:fe:
         a9:e6:59:1d:30:01:48:aa:eb:ac:cd:99:ac:ac:e8:79:2b:8c:
         55:cb:00:53:09:f9:07:83:f8:fe:c2:16:53:7d:b0:c9:0e:b3:
         ab:fc:03:72:79:02:a6:86:d2:d4:c7:a6:28:c3:32:71:33:c8:
         a4:93:e2:ad:4e:f4:c8:35:8a:93:bf:f4:ba:ac:f2:03:89:bc:
         69:ef:98:10:0f:cd:2f:99:b9:78:6e:b0:57:64:02:4e:0e:e8:
         f9:a6:2d:59:4f:41:99:73:d2:ba:59:95:e9:b7:a4:e5:19:53:
         32:b1:c8:45:8e:f6:93:82:e1:ed:a4:48:55:d5:91:c8:91:d4:
         93:bf:81:c9:c5:26:1b:7f:07:aa:a5:8f:20:35:d0:d4:ff:ba:
         92:fa:73:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPVpC3FFgajyeTOkhFPHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjUwNjE0MDcwMDI2WhcNMjUwNjE1MDcwMDI2WjAzMTEwLwYDVQQD
EyhiZjVkMWJiMmZmN2JjOGU1OTliMTZiZmUzODhmZjM0NDQxM2QzZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK8G1SVH6k6lJ3ry/UUIkgPEnNNe
IAymx8ZKqggpA1C330Ht0rPcnNr5dbXICnu+WYehE0od+kgnnrvmB+D/IyP+5al3
dXHPBgWPGIWsFr5HFbs5Zfrx05AB6dQrjclTPhd1BsmpiWpKPCrLqHpNKzNDLNj3
zPTM4xtRARmvCmSSVASNEJVE8PKMS+NeXfLN9tZfR1bA5kKDo2PQODtJrTOXAVts
IfETfpdTdpBoP7d06peEpAcskej+wkXcXMe5vQYY4poE3tOtiprLnhRKllc9DF1g
Y62q492q3Kl6jhp7++1losCBzHi5+kMUl5DuKrLMVu3nD9rteiQmfthsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9dG7L/e8jlmbFr/jiP80RBPT0DMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTc6tCop
VOi//BFET9Cp9l/AnniZes9whIrJdNNS0h9tmMu5MazIiO4isdML707xydnnBCqD
uR3NfrF3H883/JN/HXLT6Cx406YX7tFYybllI1t8SoDMBQ6DxIG+8GrQcBdRPouI
3NGpXu/+qeZZHTABSKrrrM2ZrKzoeSuMVcsAUwn5B4P4/sIWU32wyQ6zq/wDcnkC
pobS1MemKMMycTPIpJPirU70yDWKk7/0uqzyA4m8ae+YEA/NL5m5eG6wV2QCTg7o
+aYtWU9BmXPSulmV6bek5RlTMrHIRY72k4Lh7aRIVdWRyJHUk7+BycUmG38HqqWP
IDXQ1P+6kvpzcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:24 2025 by rpki-client