Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File:                     DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier:          ZPyfC9Wa7KxRseeNmVluvthxSBp8DEbhvKTeMhqo0ac=
Subject key identifier:   93:03:53:89:90:7E:06:92:CF:BE:61:81:2B:4D:A2:74:4E:3C:A0:5B
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer:       /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial:       019768BC5B5BA10BA0C3DBD418401B1B0F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number:          0313
Signing time:             Fri 13 Jun 2025 10:01:04 +0000
Manifest this update:     Fri 13 Jun 2025 10:01:04 +0000
Manifest next update:     Sat 14 Jun 2025 10:01:04 +0000
Files and hashes:         1: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: TPgXRBy6VF96yiLVcIo0aUoaaRtGCVaXWa7JnwKcIRA=)
                          2: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (hash: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:5b:5b:a1:0b:a0:c3:db:d4:18:40:1b:1b:0f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
        Validity
            Not Before: Jun 13 10:01:04 2025 GMT
            Not After : Jun 14 10:01:04 2025 GMT
        Subject: CN=93035389907e0692cfbe61812b4da2744e3ca05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:a0:1a:b5:f2:38:cd:c1:e4:1d:39:04:26:
                    9f:20:d7:78:cd:c5:f5:b2:bc:53:49:4b:cb:ca:c2:
                    a2:72:39:9f:96:58:2c:94:2a:ac:a8:92:80:72:df:
                    c3:fa:44:b9:5b:48:d2:90:a6:e9:43:b9:0c:78:b0:
                    88:9a:fe:a7:60:08:74:0a:d7:e6:09:29:c0:c6:05:
                    19:e3:4d:7a:bb:0c:51:ca:dd:d3:38:d4:20:37:b1:
                    99:50:63:50:c9:45:37:07:98:dc:11:b6:52:de:ad:
                    7b:e7:ce:e6:16:65:c5:a6:90:aa:f8:b0:d5:64:89:
                    47:39:a9:ca:b0:8d:21:70:77:30:e9:26:b8:29:b5:
                    30:28:c6:21:1c:15:a9:6f:56:c4:b0:0d:27:7a:3f:
                    97:e9:7a:b9:b8:28:cb:ae:0a:8a:e7:22:bc:46:79:
                    52:3b:b7:d8:13:bf:91:bc:e9:cc:ef:5d:03:62:8f:
                    32:1a:25:28:c5:e8:39:0d:ce:20:f7:61:f2:ec:f0:
                    fb:d0:d8:72:05:97:f9:15:1e:38:89:a7:e0:dc:ca:
                    27:3c:bd:8c:19:ab:2e:d5:5d:5b:80:37:ad:32:59:
                    1d:20:c4:31:cb:be:12:14:8d:ef:53:08:88:bb:2f:
                    f1:c8:7f:41:45:62:e3:13:6d:f3:00:08:23:96:32:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:53:89:90:7E:06:92:CF:BE:61:81:2B:4D:A2:74:4E:3C:A0:5B
            X509v3 Authority Key Identifier:
                keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:13:ae:04:7b:c1:fa:43:96:c2:0e:03:ae:e6:0d:4d:1d:09:
         df:93:30:19:c5:f6:0e:f8:52:2e:d7:70:da:ef:09:bf:df:b2:
         2b:0b:91:28:b3:38:d1:58:04:8b:97:84:78:8b:d6:08:2c:40:
         80:53:f0:87:81:d8:70:53:ab:9e:73:fd:bc:89:80:87:37:5b:
         c2:02:29:c1:74:0b:74:6c:a1:e4:7e:7e:83:4d:00:bc:e0:e1:
         56:65:c8:31:a6:03:67:10:21:ad:d1:a6:e1:d1:45:ff:84:91:
         cd:4b:0a:51:47:45:7c:bd:05:fe:30:04:57:2d:fe:74:ea:1d:
         db:35:10:34:dd:2a:94:ea:77:06:cb:d4:7c:ad:fe:9e:92:12:
         bd:f1:f1:6d:1f:3a:14:c9:fc:7b:af:42:48:8a:a9:88:79:00:
         a7:1b:cd:45:cf:c6:67:0e:95:d3:f9:d9:3a:b0:78:ea:a6:e6:
         ed:95:69:4d:7f:3f:88:b3:6e:77:d8:f4:10:4c:f3:2a:40:b5:
         68:f3:43:53:7d:a8:d1:ab:ee:1c:63:a0:81:7b:86:8c:0e:e2:
         04:6a:a8:59:51:79:f4:b0:b7:a4:42:37:30:41:f0:2a:f9:50:
         7d:21:36:db:e1:2a:08:79:4b:83:fb:e6:d6:4e:0e:c7:88:72:
         37:67:d0:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovFtboQugw9vUGEAbGw86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTE2YzJjYTM2YjUwMDk2ZWUyZmU0NGI5NDUyOWMyZGEz
YzNlYzIwHhcNMjUwNjEzMTAwMTA0WhcNMjUwNjE0MTAwMTA0WjAzMTEwLwYDVQQD
Eyg5MzAzNTM4OTkwN2UwNjkyY2ZiZTYxODEyYjRkYTI3NDRlM2NhMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfGgGrXyOM3B5B05BCafINd4zcX1
srxTSUvLysKicjmfllgslCqsqJKAct/D+kS5W0jSkKbpQ7kMeLCImv6nYAh0Ctfm
CSnAxgUZ4016uwxRyt3TONQgN7GZUGNQyUU3B5jcEbZS3q17587mFmXFppCq+LDV
ZIlHOanKsI0hcHcw6Sa4KbUwKMYhHBWpb1bEsA0nej+X6Xq5uCjLrgqK5yK8RnlS
O7fYE7+RvOnM710DYo8yGiUoxeg5Dc4g92Hy7PD70NhyBZf5FR44iafg3MonPL2M
Gasu1V1bgDetMlkdIMQxy74SFI3vUwiIuy/xyH9BRWLjE23zAAgjljJSowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMDU4mQfgaSz75hgStNonROPKBbMB8GA1UdIwQY
MBaAFA6RbCyja1AJbuL+RLlFKcLaPD7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAt
NWZjNDRmZDZiYWZjLzEvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAtNWZjNDRmZDZiYWZj
LzEvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxOuBHvB
+kOWwg4DruYNTR0J35MwGcX2DvhSLtdw2u8Jv9+yKwuRKLM40VgEi5eEeIvWCCxA
gFPwh4HYcFOrnnP9vImAhzdbwgIpwXQLdGyh5H5+g00AvODhVmXIMaYDZxAhrdGm
4dFF/4SRzUsKUUdFfL0F/jAEVy3+dOod2zUQNN0qlOp3BsvUfK3+npISvfHxbR86
FMn8e69CSIqpiHkApxvNRc/GZw6V0/nZOrB46qbm7ZVpTX8/iLNud9j0EEzzKkC1
aPNDU32o0avuHGOggXuGjA7iBGqoWVF59LC3pEI3MEHwKvlQfSE22+EqCHlLg/vm
1k4Ox4hyN2fQYg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:13 2025 by rpki-client