Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File:                     1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier:          JX5IMbI+cClFsQiTBRr4SBXfrH8LiXvIcQyktYCPJis=
Subject key identifier:   A4:28:7E:89:E7:E9:2D:7E:93:DD:FE:08:22:2E:C4:D7:8A:28:3E:85
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer:       /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial:       01976C98CBDF77D550FE5D49DE6A564AF793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number:          10B6
Signing time:             Sat 14 Jun 2025 04:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:42 +0000
Files and hashes:         1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: IsdyW7kV9wk428LSadKsNe9fwH7beALEs4mBOeAJXcE=)
                          2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:cb:df:77:d5:50:fe:5d:49:de:6a:56:4a:f7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
        Validity
            Not Before: Jun 14 04:00:42 2025 GMT
            Not After : Jun 15 04:00:42 2025 GMT
        Subject: CN=a4287e89e7e92d7e93ddfe08222ec4d78a283e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:c2:de:e0:66:ee:33:85:87:90:09:43:4d:
                    db:2a:95:69:91:d8:32:4f:89:10:13:09:83:18:10:
                    7c:fc:e7:b5:f0:5e:11:73:24:79:ac:b7:e0:91:fa:
                    23:05:48:3c:63:2a:f7:21:62:bd:c8:2b:b3:0d:2e:
                    be:13:cc:08:4d:0e:26:8a:30:87:fb:0e:de:98:47:
                    18:23:d3:25:f2:b2:c3:d4:35:33:67:48:76:57:11:
                    b2:54:2b:09:1d:51:2e:c0:63:92:6a:0e:9d:0c:d7:
                    cc:15:fa:91:a9:35:75:23:24:42:83:7f:7e:f1:2d:
                    47:b7:0b:a6:fb:99:9b:d2:d8:a9:01:aa:57:7b:db:
                    32:a8:5f:07:8c:5e:82:38:ef:70:6d:a4:39:95:8b:
                    85:48:8e:b9:b4:67:4d:76:8e:2a:5f:1b:c5:b5:97:
                    c5:df:03:84:29:a5:e7:68:ce:19:61:88:78:8b:45:
                    81:21:91:ef:c4:b4:11:fa:9c:f4:bf:40:98:54:7e:
                    c5:f8:1e:6f:44:ef:25:b2:d2:1a:aa:95:d5:10:0d:
                    70:9b:eb:48:77:a8:72:56:2c:e3:c2:d9:f6:39:96:
                    1e:06:43:39:ee:93:c9:df:21:34:55:b7:46:11:41:
                    c8:b0:b7:8c:d0:cc:a4:0d:55:a0:5d:ed:24:ac:de:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:7E:89:E7:E9:2D:7E:93:DD:FE:08:22:2E:C4:D7:8A:28:3E:85
            X509v3 Authority Key Identifier:
                keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:86:cc:43:cb:92:a9:bc:6b:71:3b:5b:b1:f9:bb:d5:ad:cb:
         d0:a5:42:88:24:8b:d5:84:ea:44:3f:fb:c9:6d:a8:55:af:ba:
         1f:32:54:61:9e:67:e6:ab:1e:75:da:66:25:7b:27:1f:ee:d1:
         a2:3c:3c:86:ac:e8:39:e1:10:55:f5:6f:4f:c4:f0:15:eb:44:
         8e:dc:99:00:bc:6b:43:a3:98:97:96:85:0b:67:66:e1:6f:a0:
         33:5b:da:06:26:dc:87:17:05:63:ca:0f:3d:9e:fb:04:20:e8:
         6b:03:05:b2:69:a6:7d:db:c9:22:90:4e:0c:ce:8c:fe:4e:ed:
         81:2e:14:d8:c4:37:83:3b:f4:1e:b2:1f:7b:d8:05:e0:d0:16:
         c0:bb:e3:65:cb:0e:51:49:92:68:45:27:85:77:cd:30:0d:21:
         df:ac:18:9b:b0:bb:9c:a1:ff:1c:be:3e:31:6b:24:37:c0:70:
         95:e0:1f:3f:86:53:52:2e:19:57:4a:7b:45:30:d3:50:e7:ae:
         84:2b:c9:f6:4b:3e:2b:f1:61:5d:85:e5:23:f4:71:df:41:4e:
         37:e1:a1:3e:9c:f8:08:a6:4d:a0:9a:b3:61:e6:99:ee:89:85:
         b7:ef:d1:38:a7:c9:ac:7f:6a:ce:a4:0f:9c:e5:00:24:64:8d:
         5a:64:78:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdsmMvfd9VQ/l1J3mpWSveTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5
YzY5MzQwHhcNMjUwNjE0MDQwMDQyWhcNMjUwNjE1MDQwMDQyWjAzMTEwLwYDVQQD
EyhhNDI4N2U4OWU3ZTkyZDdlOTNkZGZlMDgyMjJlYzRkNzhhMjgzZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxnC3uBm7jOFh5AJQ03bKpVpkdgy
T4kQEwmDGBB8/Oe18F4RcyR5rLfgkfojBUg8Yyr3IWK9yCuzDS6+E8wITQ4mijCH
+w7emEcYI9Ml8rLD1DUzZ0h2VxGyVCsJHVEuwGOSag6dDNfMFfqRqTV1IyRCg39+
8S1Htwum+5mb0tipAapXe9syqF8HjF6COO9wbaQ5lYuFSI65tGdNdo4qXxvFtZfF
3wOEKaXnaM4ZYYh4i0WBIZHvxLQR+pz0v0CYVH7F+B5vRO8lstIaqpXVEA1wm+tI
d6hyVizjwtn2OZYeBkM57pPJ3yE0VbdGEUHIsLeM0MykDVWgXe0krN5tDwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKQofonn6S1+k93+CCIuxNeKKD6FMB8GA1UdIwQY
MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh
LWYxZTY1Zjk3Yzg5YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NlLzkxMGY2Ny0xZmZjLTQxYzQtYTJlYS1mMWU2NWY5N2M4
OWEvMS8xLWpCNElTTU9lNmdhVFVjYVdSNTQ2bldjYVRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4bM
Q8uSqbxrcTtbsfm71a3L0KVCiCSL1YTqRD/7yW2oVa+6HzJUYZ5n5qseddpmJXsn
H+7Rojw8hqzoOeEQVfVvT8TwFetEjtyZALxrQ6OYl5aFC2dm4W+gM1vaBibchxcF
Y8oPPZ77BCDoawMFsmmmfdvJIpBODM6M/k7tgS4U2MQ3gzv0HrIfe9gF4NAWwLvj
ZcsOUUmSaEUnhXfNMA0h36wYm7C7nKH/HL4+MWskN8BwleAfP4ZTUi4ZV0p7RTDT
UOeuhCvJ9ks+K/FhXYXlI/Rx30FON+GhPpz4CKZNoJqzYeaZ7omFt+/ROKfJrH9q
zqQPnOUAJGSNWmR4nw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:56 2025 by rpki-client