Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File:                     _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier:          Dk0MsouIOPxhDKAQ2fIqxw8IfsmkD7V3V2ooATgxUvk=
Subject key identifier:   0B:FC:0A:AD:82:12:30:ED:7A:3A:D6:CF:A1:B8:3B:FB:9F:A5:D0:88
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer:       /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial:       01976C992C46E2BBBFDC0CE4357A36077DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number:          0A30
Signing time:             Sat 14 Jun 2025 04:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 04:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 04:01:06 +0000
Files and hashes:         1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
                          2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: G63nnjT1PcIyVlE7nRNrT+UdzdLc42imd0E+sP+HoLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:2c:46:e2:bb:bf:dc:0c:e4:35:7a:36:07:7d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
        Validity
            Not Before: Jun 14 04:01:06 2025 GMT
            Not After : Jun 15 04:01:06 2025 GMT
        Subject: CN=0bfc0aad821230ed7a3ad6cfa1b83bfb9fa5d088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:9b:75:ab:84:2e:4a:ed:86:51:97:4c:dc:
                    52:8a:c6:c7:0b:b6:08:36:e5:f4:31:a9:f9:bd:33:
                    30:56:26:3a:cd:ca:85:e4:5c:c5:47:a7:33:ce:da:
                    c6:91:d0:a3:ec:2f:50:8f:c5:77:13:19:13:3a:70:
                    69:fa:36:b1:b1:5a:43:03:8d:f9:6a:e1:25:9b:da:
                    de:fc:8c:ac:6d:f8:9a:26:83:24:fa:1b:88:b0:55:
                    be:d9:e8:70:98:71:da:a9:57:cb:24:0c:87:62:6c:
                    57:cb:51:84:82:28:3a:1e:73:75:c6:12:c2:87:03:
                    21:ba:0f:e6:25:82:47:8c:34:e1:31:f0:04:f9:a9:
                    04:ef:a8:d4:36:2e:70:e6:9a:0b:70:72:16:bb:2b:
                    d7:a8:f6:50:8a:8d:92:d7:2f:3f:22:52:9e:a8:c3:
                    c5:cd:cd:18:d9:30:b4:25:74:ec:97:e2:08:6d:2c:
                    ac:fa:f3:6e:aa:cc:70:08:e9:e8:1e:e5:71:68:29:
                    5a:6a:41:af:12:6f:6a:74:e9:2a:e9:61:15:17:74:
                    ca:c3:99:44:99:5c:49:7f:ee:2a:e4:88:1c:e6:8a:
                    2b:fb:42:37:4f:44:56:d9:bb:b1:4a:e2:c1:6a:e7:
                    b4:64:92:7d:36:c9:e7:e4:6c:cc:7b:58:b4:33:28:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:0A:AD:82:12:30:ED:7A:3A:D6:CF:A1:B8:3B:FB:9F:A5:D0:88
            X509v3 Authority Key Identifier:
                keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:5a:27:f4:98:a9:27:26:35:e4:13:f2:48:cb:0d:5c:76:
         bc:7f:d8:8d:f9:63:8b:35:6e:22:4c:a0:e5:f8:cf:14:e6:2b:
         72:2a:07:77:9a:23:ea:75:f4:e4:b9:e5:02:ce:6d:38:c4:90:
         bc:5c:3d:9f:eb:18:c9:3f:2b:91:63:bb:f1:52:b3:82:2f:d4:
         85:20:0d:91:05:c6:6f:f4:68:50:b5:9b:23:2f:9c:ae:3e:51:
         4f:bc:aa:24:c0:8c:79:68:21:0f:bb:86:7a:6a:9f:8a:27:94:
         8a:99:82:ac:fc:92:2d:5d:4d:c8:5b:c4:35:f9:da:a5:c3:b2:
         5f:90:27:89:b1:ad:af:64:bc:a1:7f:55:52:93:3b:c4:2e:b8:
         8d:2e:48:3b:90:3a:4c:63:a4:b4:c3:dd:d5:dd:18:fa:17:da:
         ba:67:88:71:1c:37:71:7d:8b:d0:a8:01:0c:59:95:c3:bf:47:
         99:b4:78:d6:3f:1e:b0:9b:d3:50:16:36:16:00:ca:03:e5:aa:
         46:6d:a3:70:8e:81:a6:f0:ab:d7:c9:20:e9:c4:55:bc:60:27:
         eb:5d:d4:fc:28:b9:12:1c:42:64:2f:bb:e6:62:4b:02:1a:da:
         dd:30:de:15:2b:fc:48:05:d4:89:3c:94:92:93:7a:37:47:b4:
         96:8d:8f:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmSxG4ru/3AzkNXo2B33iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjUwNjE0MDQwMTA2WhcNMjUwNjE1MDQwMTA2WjAzMTEwLwYDVQQD
EygwYmZjMGFhZDgyMTIzMGVkN2EzYWQ2Y2ZhMWI4M2JmYjlmYTVkMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UabdauELkrthlGXTNxSisbHC7YI
NuX0Man5vTMwViY6zcqF5FzFR6czztrGkdCj7C9Qj8V3ExkTOnBp+jaxsVpDA435
auElm9re/IysbfiaJoMk+huIsFW+2ehwmHHaqVfLJAyHYmxXy1GEgig6HnN1xhLC
hwMhug/mJYJHjDThMfAE+akE76jUNi5w5poLcHIWuyvXqPZQio2S1y8/IlKeqMPF
zc0Y2TC0JXTsl+IIbSys+vNuqsxwCOnoHuVxaClaakGvEm9qdOkq6WEVF3TKw5lE
mVxJf+4q5Igc5oor+0I3T0RW2buxSuLBaue0ZJJ9Nsnn5GzMe1i0MyitXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv8Cq2CEjDtejrWz6G4O/ufpdCIMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7daJ/SY
qScmNeQT8kjLDVx2vH/YjfljizVuIkyg5fjPFOYrcioHd5oj6nX05LnlAs5tOMSQ
vFw9n+sYyT8rkWO78VKzgi/UhSANkQXGb/RoULWbIy+crj5RT7yqJMCMeWghD7uG
emqfiieUipmCrPySLV1NyFvENfnapcOyX5AnibGtr2S8oX9VUpM7xC64jS5IO5A6
TGOktMPd1d0Y+hfaumeIcRw3cX2L0KgBDFmVw79HmbR41j8esJvTUBY2FgDKA+Wq
Rm2jcI6BpvCr18kg6cRVvGAn613U/Ci5EhxCZC+75mJLAhra3TDeFSv8SAXUiTyU
kpN6N0e0lo2Pdw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:54 2025 by rpki-client