Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File:                     rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier:          a50hCHWh2YbK5+pVmrjJre9ci5VZ+K9VJgOa0o2/B2o=
Subject key identifier:   31:4E:FE:2F:FD:43:DF:41:A1:39:E9:71:C1:C7:6A:E6:70:21:02:99
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer:       /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial:       01976997F3FC6A41A24597B2CF50F332BCF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number:          0C47
Signing time:             Fri 13 Jun 2025 14:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:55 +0000
Files and hashes:         1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
                          2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: cSKNCWOtqC8VTKpe9ppDZHVWtUYwzG1MvhvA641VTTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:f3:fc:6a:41:a2:45:97:b2:cf:50:f3:32:bc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
        Validity
            Not Before: Jun 13 14:00:55 2025 GMT
            Not After : Jun 14 14:00:55 2025 GMT
        Subject: CN=314efe2ffd43df41a139e971c1c76ae670210299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:2c:a0:45:8c:5d:6f:34:eb:c5:c4:8f:5b:
                    59:72:e8:9b:fd:35:39:4d:18:34:84:5d:6f:e1:a4:
                    ef:a3:db:b4:23:8c:3d:1d:0f:4e:cb:01:ad:f4:90:
                    33:89:7b:90:70:32:d3:7d:09:e7:85:3d:6b:6b:18:
                    90:ef:fd:eb:26:7f:74:1b:6b:04:75:a4:ca:62:3e:
                    eb:a4:09:4a:c7:3a:50:92:17:be:f9:c2:58:b7:27:
                    06:d7:be:8d:b0:87:74:df:68:80:76:6b:f8:71:e6:
                    c4:f4:ef:42:98:13:01:80:aa:5a:f4:45:43:2c:7d:
                    31:4d:eb:f1:2d:66:0a:d0:1b:79:dd:ca:1c:d3:b0:
                    79:8a:88:ac:85:64:8f:89:83:fb:b9:b5:9d:65:69:
                    8a:25:30:ca:74:f9:ec:37:b9:12:ca:44:66:60:95:
                    4e:bb:58:95:17:50:90:cf:53:d7:bb:41:08:db:63:
                    51:c9:60:bc:d9:61:cb:46:e8:28:ce:1b:ca:ea:47:
                    3b:8b:7d:74:50:8f:f8:8b:52:ed:76:95:ab:1f:57:
                    1f:cc:b9:a6:90:8f:8f:63:41:83:55:7a:ce:88:53:
                    24:6d:e1:9f:e9:47:df:c1:ad:f7:cb:6e:1c:76:4a:
                    ee:92:66:c5:47:74:4a:81:9d:76:d4:ba:ee:36:2d:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:FE:2F:FD:43:DF:41:A1:39:E9:71:C1:C7:6A:E6:70:21:02:99
            X509v3 Authority Key Identifier:
                keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:35:32:45:f5:ae:4e:55:2d:d6:9e:89:45:be:19:65:fa:
         85:a3:d6:94:75:8a:fc:1a:d7:3e:09:9a:1d:aa:7d:a8:79:45:
         bf:63:3f:8a:ba:38:fe:cc:e4:57:2d:47:ce:01:b0:da:b1:cd:
         73:cf:f4:34:fc:0e:6c:26:1d:fb:2e:78:62:83:d1:b9:47:29:
         f0:81:58:74:a9:cc:d4:0d:b7:20:16:88:13:6d:67:37:d2:ad:
         7f:9c:f0:a4:9f:b0:52:9d:6d:98:4f:3c:7f:ee:e6:d8:38:25:
         fa:de:3c:01:ef:70:a1:78:de:bd:8d:da:68:fe:ad:ff:5d:b3:
         8f:dc:02:66:b9:8e:83:2a:31:9c:c5:cd:98:4f:4f:f9:98:27:
         10:07:32:fb:89:85:83:2b:65:26:24:97:08:ba:ac:9b:d9:0f:
         93:a1:88:42:48:76:ad:70:82:ed:b8:2a:99:c3:0b:d4:93:c9:
         af:96:0f:14:c2:2d:72:7e:4a:5b:72:a2:81:3a:a2:ab:b6:cb:
         e4:15:32:c2:43:c9:1f:7b:51:b0:c9:ac:5d:9a:e8:19:7c:e8:
         77:d7:3b:4c:e9:58:60:54:b9:1d:fd:4c:9b:0d:4d:f8:35:9a:
         df:36:6e:f9:08:c0:83:12:09:70:5d:43:81:1e:4f:45:b0:c4:
         ea:9d:5d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl/P8akGiRZeyz1DzMrz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzlmYTdjZDE1MzNkYTk3NWNmMzk5YjlhY2ZmZWJmZWQy
NmE5ZWIwHhcNMjUwNjEzMTQwMDU1WhcNMjUwNjE0MTQwMDU1WjAzMTEwLwYDVQQD
EygzMTRlZmUyZmZkNDNkZjQxYTEzOWU5NzFjMWM3NmFlNjcwMjEwMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvQsoEWMXW8068XEj1tZcuib/TU5
TRg0hF1v4aTvo9u0I4w9HQ9OywGt9JAziXuQcDLTfQnnhT1raxiQ7/3rJn90G2sE
daTKYj7rpAlKxzpQkhe++cJYtycG176NsId032iAdmv4cebE9O9CmBMBgKpa9EVD
LH0xTevxLWYK0Bt53coc07B5ioishWSPiYP7ubWdZWmKJTDKdPnsN7kSykRmYJVO
u1iVF1CQz1PXu0EI22NRyWC82WHLRugozhvK6kc7i310UI/4i1LtdpWrH1cfzLmm
kI+PY0GDVXrOiFMkbeGf6Uffwa33y24cdkrukmbFR3RKgZ121LruNi1tRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFO/i/9Q99BoTnpccHHauZwIQKZMB8GA1UdIwQY
MBaAFK05+nzRUz2pdc85m5rP/r/tJqnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODct
ZTMxYzBmZGVjZDI3LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODctZTMxYzBmZGVjZDI3
LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLk1MkX1
rk5VLdaeiUW+GWX6haPWlHWK/BrXPgmaHap9qHlFv2M/iro4/szkVy1HzgGw2rHN
c8/0NPwObCYd+y54YoPRuUcp8IFYdKnM1A23IBaIE21nN9Ktf5zwpJ+wUp1tmE88
f+7m2Dgl+t48Ae9woXjevY3aaP6t/12zj9wCZrmOgyoxnMXNmE9P+ZgnEAcy+4mF
gytlJiSXCLqsm9kPk6GIQkh2rXCC7bgqmcML1JPJr5YPFMItcn5KW3KigTqiq7bL
5BUywkPJH3tRsMmsXZroGXzod9c7TOlYYFS5Hf1Mmw1N+DWa3zZu+QjAgxIJcF1D
gR5PRbDE6p1dpg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:17 2025 by rpki-client