Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          5M/NA7xCOOfVc0nQ+/YXNqEy8m45wTHXh5XYg87yg3U=
Subject key identifier:   87:92:46:CB:6E:B7:73:E0:70:F2:C9:B3:46:30:F1:37:80:EA:F1:0F
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       01976D74819788F2BA4A411BAFCFB300F8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0F6B
Signing time:             Sat 14 Jun 2025 08:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:41 +0000
Files and hashes:         1: 2E5B6hTQ8FYt2qCEddzv6E09HfU.roa (hash: YU3JzyaYxmpBfxew9K/2XcID/FBkgDQAWKRh4zEO3iM=)
                          2: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
                          3: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
                          4: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
                          5: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: xFHqkVlOFZakfBpIc1ufkKcn0hydaAn/VVgfXcCQITM=)
                          6: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:81:97:88:f2:ba:4a:41:1b:af:cf:b3:00:f8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Jun 14 08:00:41 2025 GMT
            Not After : Jun 15 08:00:41 2025 GMT
        Subject: CN=879246cb6eb773e070f2c9b34630f13780eaf10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:26:ef:a4:5a:52:f5:97:e5:d7:78:16:1e:
                    f2:6b:c8:44:ce:e1:1f:23:e9:66:91:0a:0b:af:d0:
                    4a:c9:5d:d2:17:df:a4:53:c9:44:f2:7e:bb:a6:e1:
                    da:ba:24:86:49:23:5a:44:f0:c6:64:b2:84:fd:90:
                    87:5b:37:a3:ee:e8:f1:6d:50:16:bb:9f:e3:22:71:
                    77:67:84:d0:58:e3:98:89:f5:aa:dd:97:a6:49:38:
                    13:31:8c:6f:49:fd:2a:be:5d:3e:a3:0b:4a:fb:07:
                    29:91:45:c0:0f:25:f3:ae:1a:89:f2:c5:f3:b5:df:
                    8e:02:37:15:97:8a:1d:8a:39:c9:54:9e:4b:69:e2:
                    6b:47:a0:5a:00:9e:62:4a:3c:75:4e:dd:e9:92:8d:
                    5e:84:99:66:d2:13:1a:da:9f:3b:1e:80:61:74:f5:
                    5e:5d:80:ce:f3:31:e4:c8:bd:83:12:58:90:60:b8:
                    58:b7:0f:e4:d9:d2:32:a5:30:ce:95:37:3e:e3:7e:
                    35:96:2a:ca:02:92:45:a4:7d:4c:ee:e3:d8:b3:39:
                    ae:70:fb:1a:20:6a:db:2c:be:d5:77:cf:cb:33:ab:
                    d9:e7:eb:25:d6:56:84:b9:3f:a3:7c:34:87:ce:be:
                    72:99:0f:fa:24:a9:35:69:67:ae:d1:ce:e3:9a:de:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:46:CB:6E:B7:73:E0:70:F2:C9:B3:46:30:F1:37:80:EA:F1:0F
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:20:cb:d6:24:1f:a9:2a:c2:df:6d:c3:9f:10:ca:62:d8:
         18:5f:d7:74:52:de:b3:29:da:d9:60:c1:a7:92:d9:62:9e:3c:
         fc:83:24:e3:74:40:a2:17:86:87:eb:c3:e4:6c:e5:d8:ac:7f:
         01:bd:18:c5:91:ae:a7:dc:63:32:59:b1:68:5f:c7:d2:19:a7:
         d9:dc:f7:9c:07:81:0b:5d:66:b7:5c:e7:a0:44:94:08:d8:40:
         75:53:d0:7c:09:95:0c:a0:23:17:76:01:e9:b5:0e:fc:da:99:
         73:2a:6b:76:30:d9:fb:4c:46:10:98:eb:61:db:71:ec:fa:7a:
         22:ee:71:c4:71:15:4b:32:f9:9a:c4:40:9d:c8:63:f6:33:07:
         84:5d:0e:67:43:8a:3b:fc:7a:af:82:7a:f1:d4:9a:32:53:c9:
         ec:30:71:80:71:2b:f0:cf:35:35:21:27:e6:7c:13:c9:ac:c6:
         59:53:79:43:7e:48:e8:74:ed:89:de:e6:a4:c3:53:bb:8a:37:
         4d:0d:b1:d0:ee:1c:1e:31:1b:11:bd:47:19:dc:58:5c:f5:69:
         a7:52:51:d0:34:cd:6e:9c:fe:6e:f4:5e:f8:43:0f:86:73:ef:
         26:56:6f:6b:c8:53:b5:df:55:e7:3e:85:8c:11:39:8f:ee:3e:
         82:00:c3:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdIGXiPK6SkEbr8+zAPj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjUwNjE0MDgwMDQxWhcNMjUwNjE1MDgwMDQxWjAzMTEwLwYDVQQD
Eyg4NzkyNDZjYjZlYjc3M2UwNzBmMmM5YjM0NjMwZjEzNzgwZWFmMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwUm76RaUvWX5dd4Fh7ya8hEzuEf
I+lmkQoLr9BKyV3SF9+kU8lE8n67puHauiSGSSNaRPDGZLKE/ZCHWzej7ujxbVAW
u5/jInF3Z4TQWOOYifWq3ZemSTgTMYxvSf0qvl0+owtK+wcpkUXADyXzrhqJ8sXz
td+OAjcVl4odijnJVJ5LaeJrR6BaAJ5iSjx1Tt3pko1ehJlm0hMa2p87HoBhdPVe
XYDO8zHkyL2DEliQYLhYtw/k2dIypTDOlTc+4341lirKApJFpH1M7uPYszmucPsa
IGrbLL7Vd8/LM6vZ5+sl1laEuT+jfDSHzr5ymQ/6JKk1aWeu0c7jmt50vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeSRstut3PgcPLJs0Yw8TeA6vEPMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmwgy9Yk
H6kqwt9tw58QymLYGF/XdFLesyna2WDBp5LZYp48/IMk43RAoheGh+vD5Gzl2Kx/
Ab0YxZGup9xjMlmxaF/H0hmn2dz3nAeBC11mt1znoESUCNhAdVPQfAmVDKAjF3YB
6bUO/NqZcyprdjDZ+0xGEJjrYdtx7Pp6Iu5xxHEVSzL5msRAnchj9jMHhF0OZ0OK
O/x6r4J68dSaMlPJ7DBxgHEr8M81NSEn5nwTyazGWVN5Q35I6HTtid7mpMNTu4o3
TQ2x0O4cHjEbEb1HGdxYXPVpp1JR0DTNbpz+bvRe+EMPhnPvJlZva8hTtd9V5z6F
jBE5j+4+ggDDWg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:29:05 2025 by rpki-client