Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          AmxQWro17eD/X9MGFmoC+gBjD/CtZsr5W1VBfI7BMWI=
Subject key identifier:   47:4F:31:0E:7A:CC:43:A0:61:DD:E6:66:6F:01:67:5F:40:9D:8D:30
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       0197703EEC490D59D2F48CFDFB381146FE81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          0766
Signing time:             Sat 14 Jun 2025 21:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:01 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: /LYhj07l5Ggo8PfK4yozgi0WGtzSh4bR2SoioHbngN8=)
                          2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:ec:49:0d:59:d2:f4:8c:fd:fb:38:11:46:fe:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Jun 14 21:01:01 2025 GMT
            Not After : Jun 15 21:01:01 2025 GMT
        Subject: CN=474f310e7acc43a061dde6666f01675f409d8d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fe:f2:90:69:9d:9a:86:1d:74:7d:7c:29:df:
                    c5:fe:b8:5f:30:b3:5e:13:59:3b:39:a6:b1:2c:35:
                    e5:a6:9f:b4:8a:ee:af:a6:1d:ca:2d:0c:f5:97:d0:
                    ae:f1:5c:64:64:23:f6:33:77:4c:13:34:02:a1:a1:
                    b4:31:b3:f5:7a:58:3b:d4:6f:ac:58:16:e0:e4:41:
                    eb:75:2d:eb:dd:74:de:f0:67:d9:1b:db:c9:05:06:
                    57:08:90:be:bf:1a:e1:d1:03:55:8a:90:6a:10:f2:
                    d9:8f:dc:0a:09:61:3d:e4:2e:d0:a6:5b:a4:ca:21:
                    3c:0d:cb:6c:2c:1a:33:72:bd:9b:d7:42:9b:40:03:
                    62:59:d7:73:ed:ca:80:e0:b0:d3:5a:48:dc:e5:35:
                    91:03:1d:e1:c6:da:7f:40:3c:e2:29:f9:5d:84:c2:
                    7a:b2:3a:e0:09:1f:f9:8d:1e:29:cb:c5:65:f4:88:
                    a7:5d:c5:ef:f1:8f:89:6c:ee:b6:d2:3e:94:c1:de:
                    bb:d3:30:14:fd:1d:91:dc:4f:64:91:ac:95:11:52:
                    fd:36:0c:82:aa:ea:01:d0:f5:61:8d:90:7f:16:79:
                    a6:27:aa:bd:ce:8e:43:3d:15:bd:6e:b1:a0:41:ed:
                    9c:d8:96:15:18:93:68:eb:7c:64:7a:e7:ac:b5:2d:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4F:31:0E:7A:CC:43:A0:61:DD:E6:66:6F:01:67:5F:40:9D:8D:30
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:46:8d:0c:69:a1:fd:58:f2:ca:2e:62:a7:3f:33:4b:1c:
         c2:b7:45:10:ae:18:2f:89:a5:f3:17:55:48:a2:d6:da:8b:f6:
         8a:4d:ba:c5:a1:07:eb:d7:d5:e6:b8:75:35:30:75:7e:25:35:
         4e:81:a4:b7:a7:0f:ae:0d:f6:3c:0c:79:12:cc:0a:27:a1:5e:
         09:89:5b:0d:a7:e9:0b:4d:05:99:1e:1d:cb:28:25:bd:4e:cf:
         90:8f:2d:4a:cb:04:12:b9:f7:2e:12:5d:83:42:7e:0f:32:40:
         8c:a7:92:e0:57:87:66:e6:f9:6a:f2:24:d3:7d:b5:b0:02:01:
         d7:53:9f:37:bf:80:3c:c8:63:ec:1d:e8:12:73:c2:9b:76:e9:
         74:4b:ab:d1:92:6b:2d:dd:37:53:cf:8f:b9:24:06:c1:2a:d4:
         5d:bc:ca:db:38:8f:40:44:94:2e:64:d9:55:16:3c:9c:a6:6a:
         a2:90:79:31:a1:b9:5b:58:0c:33:aa:77:25:eb:15:eb:fe:f8:
         37:86:19:5a:63:a1:72:f7:4d:53:e9:c4:0d:a7:b3:96:23:8a:
         60:83:45:f7:e6:a2:b3:e9:e4:7b:21:14:57:c1:66:c0:f0:5e:
         91:24:3b:bd:b6:bb:f4:b4:e8:c7:fe:9e:64:df:23:fe:2a:c8:
         2a:65:8a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPuxJDVnS9Iz9+zgRRv6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWEzYWEwY2Y4ZGZhOTE2N2QyNGQ5MmVkOGExNmViNGU3
ODA0NGMwHhcNMjUwNjE0MjEwMTAxWhcNMjUwNjE1MjEwMTAxWjAzMTEwLwYDVQQD
Eyg0NzRmMzEwZTdhY2M0M2EwNjFkZGU2NjY2ZjAxNjc1ZjQwOWQ4ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7P7ykGmdmoYddH18Kd/F/rhfMLNe
E1k7OaaxLDXlpp+0iu6vph3KLQz1l9Cu8VxkZCP2M3dMEzQCoaG0MbP1elg71G+s
WBbg5EHrdS3r3XTe8GfZG9vJBQZXCJC+vxrh0QNVipBqEPLZj9wKCWE95C7Qpluk
yiE8DctsLBozcr2b10KbQANiWddz7cqA4LDTWkjc5TWRAx3hxtp/QDziKfldhMJ6
sjrgCR/5jR4py8Vl9IinXcXv8Y+JbO620j6Uwd670zAU/R2R3E9kkayVEVL9NgyC
quoB0PVhjZB/FnmmJ6q9zo5DPRW9brGgQe2c2JYVGJNo63xkeuestS2/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdPMQ56zEOgYd3mZm8BZ19AnY0wMB8GA1UdIwQY
MBaAFNwaOqDPjfqRZ9JNku2KFutOeARMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUt
MmRkNjUwZWE0YWMzLzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUtMmRkNjUwZWE0YWMz
LzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXENGjQxp
of1Y8souYqc/M0scwrdFEK4YL4ml8xdVSKLW2ov2ik26xaEH69fV5rh1NTB1fiU1
ToGkt6cPrg32PAx5EswKJ6FeCYlbDafpC00FmR4dyyglvU7PkI8tSssEErn3LhJd
g0J+DzJAjKeS4FeHZub5avIk0321sAIB11OfN7+APMhj7B3oEnPCm3bpdEur0ZJr
Ld03U8+PuSQGwSrUXbzK2ziPQESULmTZVRY8nKZqopB5MaG5W1gMM6p3JesV6/74
N4YZWmOhcvdNU+nEDaezliOKYINF9+ais+nkeyEUV8FmwPBekSQ7vba79LTox/6e
ZN8j/irIKmWKFA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:29:35 2025 by rpki-client