Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File:                     d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier:          lWNhlOchkhUSYQq8NW8u7UEt9fW2KtWPs3kCl358ABc=
Subject key identifier:   EC:A3:6F:4E:90:47:A6:C5:C4:42:4D:0E:59:D3:E4:90:2D:38:35:4B
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer:       /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial:       019771F5CCACECA203FCEA938FD886C7406A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number:          0E63
Signing time:             Sun 15 Jun 2025 05:00:23 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:23 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:23 +0000
Files and hashes:         1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
                          2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: UlnLSPcHpPESqwFOmSHEE55LN2XWnfhqv7BeaSDNBTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f5:cc:ac:ec:a2:03:fc:ea:93:8f:d8:86:c7:40:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
        Validity
            Not Before: Jun 15 05:00:23 2025 GMT
            Not After : Jun 16 05:00:23 2025 GMT
        Subject: CN=eca36f4e9047a6c5c4424d0e59d3e4902d38354b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:b6:f6:82:cb:21:de:74:7a:c3:c0:13:1d:
                    2e:e8:b9:49:01:f5:11:5a:ef:50:dc:76:76:b0:30:
                    36:01:51:bb:d1:3d:bb:5f:fe:75:83:ce:82:71:bd:
                    8e:19:67:46:9e:50:d7:6d:49:1e:92:e6:13:da:5c:
                    4c:38:63:5b:37:c0:21:24:3b:7f:1b:c0:62:b6:7e:
                    f3:6b:b3:a4:32:99:89:52:e2:86:7b:6f:87:2c:df:
                    0b:49:e8:76:01:ce:79:33:7b:bc:db:a6:0d:63:3a:
                    b0:f8:c5:d7:d6:b9:b9:b1:34:ae:c0:23:c5:2d:66:
                    6d:1b:bb:34:e6:27:9c:df:52:d6:74:9c:ea:b5:5b:
                    03:e6:f8:5e:71:f0:7d:ac:78:df:19:91:59:e5:31:
                    f3:b5:70:c0:5f:e5:97:fc:ae:10:05:69:d2:1b:c3:
                    c5:6b:ed:7e:a0:19:85:94:f2:7f:d8:4b:fc:6d:7b:
                    a3:77:99:6a:0c:05:62:b8:53:95:48:73:da:50:e2:
                    e7:0f:b0:1a:1f:07:e3:e5:7b:2a:78:6e:6f:28:95:
                    3f:73:c4:06:1a:fe:70:c2:c0:eb:7e:5e:93:68:d9:
                    15:9e:be:df:65:1c:61:51:ac:43:19:10:65:f9:d9:
                    bb:42:7e:de:f5:64:e0:11:4b:79:4e:fa:86:37:d1:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:6F:4E:90:47:A6:C5:C4:42:4D:0E:59:D3:E4:90:2D:38:35:4B
            X509v3 Authority Key Identifier:
                keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5e:10:00:44:3a:63:f5:27:aa:e6:c5:7a:25:e3:c6:1f:3f:
         42:6f:62:ac:29:7e:db:3a:9a:dc:b3:cc:e1:6d:4a:59:d9:16:
         49:e0:1e:1e:db:5e:bb:f7:a5:a8:08:4e:09:3d:56:c5:48:fa:
         bb:be:92:cc:90:08:68:77:02:2f:af:97:89:7b:68:d0:93:ac:
         83:3b:0c:05:01:1a:64:c3:7e:40:f0:90:50:8c:ea:32:c2:53:
         d5:88:18:7e:42:87:ac:a1:d4:de:0c:47:0a:2a:ed:34:fe:4d:
         91:8e:8f:ff:92:11:21:13:9e:fd:f0:4a:79:2b:00:7d:23:1a:
         ee:b7:91:60:5f:13:f1:7c:59:01:cb:38:4b:14:67:d4:a9:fa:
         a5:20:a9:e3:e7:57:2f:84:1d:cd:91:2c:8b:fc:4a:2f:41:93:
         8c:5e:c0:e3:2b:07:a2:88:c8:b0:96:ec:b9:2e:d3:42:f1:23:
         d8:a1:a9:52:1b:6a:25:06:f0:3a:e8:15:de:9a:32:42:28:6c:
         24:4a:3b:f2:cc:be:f6:8c:22:0f:53:ff:ae:23:8c:ef:8f:b9:
         7b:c3:89:ee:6f:e3:80:05:b2:49:0a:38:9e:8c:b7:61:a3:16:
         0f:a5:1a:ee:41:35:70:a7:e5:22:97:f6:30:94:55:53:33:36:
         bf:ac:55:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9cys7KID/OqTj9iGx0BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDE4YjBmNjUzNWZjYmJiNDkyZjYwNmNiODgwYmU3YTI2
ZWZjYzIwHhcNMjUwNjE1MDUwMDIzWhcNMjUwNjE2MDUwMDIzWjAzMTEwLwYDVQQD
EyhlY2EzNmY0ZTkwNDdhNmM1YzQ0MjRkMGU1OWQzZTQ5MDJkMzgzNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ma29oLLId50esPAEx0u6LlJAfUR
Wu9Q3HZ2sDA2AVG70T27X/51g86Ccb2OGWdGnlDXbUkekuYT2lxMOGNbN8AhJDt/
G8Bitn7za7OkMpmJUuKGe2+HLN8LSeh2Ac55M3u826YNYzqw+MXX1rm5sTSuwCPF
LWZtG7s05iec31LWdJzqtVsD5vhecfB9rHjfGZFZ5THztXDAX+WX/K4QBWnSG8PF
a+1+oBmFlPJ/2Ev8bXujd5lqDAViuFOVSHPaUOLnD7AaHwfj5XsqeG5vKJU/c8QG
Gv5wwsDrfl6TaNkVnr7fZRxhUaxDGRBl+dm7Qn7e9WTgEUt5TvqGN9Hd8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyjb06QR6bFxEJNDlnT5JAtODVLMB8GA1UdIwQY
MBaAFHfRiw9lNfy7tJL2BsuIC+eibvzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzkt
MThlY2QwNGE3YjVlLzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzktMThlY2QwNGE3YjVl
LzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtV4QAEQ6
Y/UnqubFeiXjxh8/Qm9irCl+2zqa3LPM4W1KWdkWSeAeHtteu/elqAhOCT1WxUj6
u76SzJAIaHcCL6+XiXto0JOsgzsMBQEaZMN+QPCQUIzqMsJT1YgYfkKHrKHU3gxH
CirtNP5NkY6P/5IRIROe/fBKeSsAfSMa7reRYF8T8XxZAcs4SxRn1Kn6pSCp4+dX
L4QdzZEsi/xKL0GTjF7A4ysHoojIsJbsuS7TQvEj2KGpUhtqJQbwOugV3poyQihs
JEo78sy+9owiD1P/riOM74+5e8OJ7m/jgAWySQo4noy3YaMWD6Ua7kE1cKflIpf2
MJRVUzM2v6xV3A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:09 2025 by rpki-client