Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File:                     ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier:          20zAuFER0JNbf/lP1NexC46vQd8tBDSIJGuQSjLIZyg=
Subject key identifier:   9B:53:B5:34:8F:D3:31:6E:E8:95:F6:1D:67:7D:AC:D7:77:D3:B3:AD
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer:       /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial:       01976EF4E9F9580010811C8C38B96BD28190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number:          0663
Signing time:             Sat 14 Jun 2025 15:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:33 +0000
Files and hashes:         1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
                          2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: IQO6z+4T081N7a/JwsDVdPHfUiiWA259XaJySRzz9JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:e9:f9:58:00:10:81:1c:8c:38:b9:6b:d2:81:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
        Validity
            Not Before: Jun 14 15:00:33 2025 GMT
            Not After : Jun 15 15:00:33 2025 GMT
        Subject: CN=9b53b5348fd3316ee895f61d677dacd777d3b3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:ca:2c:aa:11:d9:e3:5b:82:fa:f2:72:0d:
                    02:f6:0f:a5:d8:ec:bf:d4:a2:88:56:98:ee:46:29:
                    8e:5b:53:d6:9f:19:e6:0c:c7:8d:95:12:c2:1d:8b:
                    76:17:18:c0:b0:ec:04:31:4f:5a:29:0e:1c:72:ad:
                    30:b1:21:49:76:08:bd:cb:85:a7:f7:30:a8:ab:b7:
                    0f:c5:91:7f:da:86:f1:d0:e2:4e:c4:b0:25:2b:24:
                    9b:d9:bb:df:a7:33:7a:05:68:bc:8f:e7:54:45:1d:
                    e6:50:06:4d:64:b3:33:1f:29:95:b6:50:fe:4f:94:
                    8f:e1:a9:0b:a3:ed:68:76:6b:26:74:9d:3d:ca:76:
                    80:16:41:39:e7:d9:10:9e:f8:31:31:e4:84:a4:ea:
                    68:62:cb:bb:bc:ee:30:15:4b:88:f3:ef:9a:84:8c:
                    9c:4d:57:9d:d7:d3:ba:4d:04:83:e0:ea:97:bc:69:
                    a9:59:2a:64:fb:b2:f2:e3:fc:ad:7c:33:2e:65:f9:
                    5f:e8:74:68:0b:24:14:76:54:f3:05:9b:c5:d3:bb:
                    68:ce:9e:bb:48:0e:fd:22:a0:9e:ea:60:98:3d:1f:
                    d9:23:6e:94:e2:ff:f9:37:d6:60:6c:d4:56:94:1d:
                    74:60:05:ed:f5:69:73:0c:3a:6a:11:09:18:f7:99:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:53:B5:34:8F:D3:31:6E:E8:95:F6:1D:67:7D:AC:D7:77:D3:B3:AD
            X509v3 Authority Key Identifier:
                keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:ce:4c:2d:33:b1:53:d9:6a:c5:1b:1b:20:85:b4:22:62:
         fd:84:d1:51:4a:0d:0b:70:4f:eb:7f:13:2b:25:72:51:32:a4:
         63:59:ba:3d:2f:94:26:19:32:73:00:18:39:32:7d:2f:ae:2b:
         15:7e:d8:d1:ea:8e:a9:fe:cc:b7:93:2b:70:8b:48:29:cb:70:
         a4:7a:7c:00:72:fe:b6:69:37:c0:74:b3:97:48:2f:97:4c:48:
         c8:b7:2a:d0:7a:d8:ee:fe:95:87:c9:b6:31:b4:e6:59:7c:f3:
         5f:25:d9:db:b5:c5:ef:07:c9:ad:d3:b7:8e:6b:2c:49:ea:33:
         17:cb:c1:db:d0:1b:5b:f9:5e:0f:ea:36:b3:50:74:15:bf:a9:
         c1:3c:eb:66:f4:3c:fb:ca:35:88:f3:20:b0:82:5d:d8:33:ed:
         b8:21:9c:da:f8:5b:04:2f:50:49:a8:b4:62:d0:c8:7b:a7:96:
         78:fe:8f:3c:9e:cd:42:5a:42:06:f5:49:33:4b:21:94:26:ba:
         03:d9:50:44:4a:ba:fd:97:77:42:1e:3d:88:53:a7:5a:33:04:
         e7:5c:52:1f:d3:d1:13:cf:66:c2:d1:b1:57:5c:f4:f9:78:a7:
         ce:32:56:b7:51:7c:6a:67:2d:48:c5:7b:ad:8a:12:6a:48:74:
         ec:9c:a9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9On5WAAQgRyMOLlr0oGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl
NmRhNDEwHhcNMjUwNjE0MTUwMDMzWhcNMjUwNjE1MTUwMDMzWjAzMTEwLwYDVQQD
Eyg5YjUzYjUzNDhmZDMzMTZlZTg5NWY2MWQ2NzdkYWNkNzc3ZDNiM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuHKLKoR2eNbgvrycg0C9g+l2Oy/
1KKIVpjuRimOW1PWnxnmDMeNlRLCHYt2FxjAsOwEMU9aKQ4ccq0wsSFJdgi9y4Wn
9zCoq7cPxZF/2obx0OJOxLAlKySb2bvfpzN6BWi8j+dURR3mUAZNZLMzHymVtlD+
T5SP4akLo+1odmsmdJ09ynaAFkE559kQnvgxMeSEpOpoYsu7vO4wFUuI8++ahIyc
TVed19O6TQSD4OqXvGmpWSpk+7Ly4/ytfDMuZflf6HRoCyQUdlTzBZvF07tozp67
SA79IqCe6mCYPR/ZI26U4v/5N9ZgbNRWlB10YAXt9WlzDDpqEQkY95n3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtTtTSP0zFu6JX2HWd9rNd307OtMB8GA1UdIwQY
MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt
ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl
LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLnOTC0z
sVPZasUbGyCFtCJi/YTRUUoNC3BP638TKyVyUTKkY1m6PS+UJhkycwAYOTJ9L64r
FX7Y0eqOqf7Mt5MrcItIKctwpHp8AHL+tmk3wHSzl0gvl0xIyLcq0HrY7v6Vh8m2
MbTmWXzzXyXZ27XF7wfJrdO3jmssSeozF8vB29AbW/leD+o2s1B0Fb+pwTzrZvQ8
+8o1iPMgsIJd2DPtuCGc2vhbBC9QSai0YtDIe6eWeP6PPJ7NQlpCBvVJM0shlCa6
A9lQREq6/Zd3Qh49iFOnWjME51xSH9PRE89mwtGxV1z0+XinzjJWt1F8amctSMV7
rYoSakh07JyppA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:36 2025 by rpki-client