Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File:                     9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier:          BRBBCWdXe7mkwQru7oqmSRKchERdLvHy8beMlIud7wM=
Subject key identifier:   C1:C3:C5:1A:78:EF:F9:B8:03:36:47:BA:8B:92:18:9C:15:87:14:3A
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer:       /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial:       01976F2BD00F8523D1A502B4BC62FE4067A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number:          05F4
Signing time:             Sat 14 Jun 2025 16:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:31 +0000
Files and hashes:         1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: zcDnmz8GJsAqiP84YW0r1T25xY32sYHXJUBM75+jGnI=)
                          2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:d0:0f:85:23:d1:a5:02:b4:bc:62:fe:40:67:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
        Validity
            Not Before: Jun 14 16:00:31 2025 GMT
            Not After : Jun 15 16:00:31 2025 GMT
        Subject: CN=c1c3c51a78eff9b8033647ba8b92189c1587143a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:3c:ef:27:41:37:96:c9:32:47:78:cd:21:
                    53:05:a3:ae:0e:63:b6:4a:8c:a7:b7:fe:3c:51:00:
                    fd:fa:8c:e3:d8:bd:d1:ef:3a:60:00:dc:7e:88:fe:
                    26:5e:9d:87:9d:f2:0c:b6:b2:47:a3:2e:2c:f2:e1:
                    b6:78:93:f8:a9:ce:85:86:80:4a:72:f7:ea:ee:3f:
                    d3:32:b8:07:52:90:57:37:cb:6e:f0:a3:a9:6a:61:
                    5b:04:4a:7a:f6:22:0b:ed:bf:16:4f:ba:af:6b:f6:
                    03:27:82:86:93:fe:75:d9:03:9e:c8:50:6e:70:cb:
                    15:81:5c:43:4d:4f:02:16:dd:ec:c8:bb:1a:73:45:
                    fb:f8:a7:87:79:cd:b2:ff:39:ec:b0:54:a4:ad:d9:
                    a2:ac:01:e1:96:b6:3a:c5:bd:d5:63:47:3e:a8:40:
                    87:0f:a4:60:b8:3c:e2:9d:6f:e8:a7:2d:91:d8:82:
                    7d:b6:ef:3a:74:af:1b:1d:0e:92:06:2a:e0:29:df:
                    ee:7a:4a:a7:0d:5c:aa:6f:a5:2c:77:25:cc:85:d8:
                    3d:0a:c1:e1:0c:61:4c:44:b5:ec:4e:ff:6c:0f:b6:
                    09:b3:02:0f:a9:d8:92:21:fe:d2:8d:6d:00:1d:d0:
                    66:74:1d:78:ee:30:f4:19:de:58:3e:08:b7:41:a1:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:C5:1A:78:EF:F9:B8:03:36:47:BA:8B:92:18:9C:15:87:14:3A
            X509v3 Authority Key Identifier:
                keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:dd:92:50:96:ae:d3:2c:14:32:81:65:70:df:12:d1:50:
         5b:22:5b:2e:02:e9:66:bf:c6:8a:6a:8d:73:68:37:69:0e:cd:
         d3:7b:53:f2:84:03:78:e1:de:77:6c:28:c2:10:4a:b3:25:cb:
         fe:17:b6:50:19:ae:ca:b9:ef:c4:74:36:f1:1f:b9:ad:ad:17:
         85:d0:46:49:9a:30:e1:6b:6d:b8:7c:65:e6:c0:67:ba:82:17:
         46:cd:56:c8:2e:84:da:3c:8b:ec:4f:12:55:8c:0e:39:01:84:
         b1:0f:50:2e:19:bc:2a:e5:a3:63:c6:43:e9:32:a8:a4:82:f6:
         04:69:87:9b:bf:0a:0f:51:7b:fd:b4:15:8a:c5:ad:f5:34:0c:
         b2:79:e9:74:74:97:a8:41:5f:78:47:28:dc:17:4a:25:bf:35:
         e5:ce:63:30:99:b2:65:92:d6:3d:7b:74:ab:61:9a:92:79:ac:
         d4:0d:30:d8:f8:19:33:77:7f:41:05:58:05:97:b1:f0:4a:89:
         04:92:5b:27:ac:83:95:08:f9:2b:19:47:28:8d:43:e3:f5:48:
         de:c1:03:aa:22:1f:a1:74:11:7b:14:02:c3:62:88:e8:da:b2:
         98:cf:9a:04:69:8d:37:9e:ad:81:a0:27:20:cf:cb:52:26:a3:
         5e:52:61:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK9APhSPRpQK0vGL+QGeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjUwNjE0MTYwMDMxWhcNMjUwNjE1MTYwMDMxWjAzMTEwLwYDVQQD
EyhjMWMzYzUxYTc4ZWZmOWI4MDMzNjQ3YmE4YjkyMTg5YzE1ODcxNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW487ydBN5bJMkd4zSFTBaOuDmO2
Soynt/48UQD9+ozj2L3R7zpgANx+iP4mXp2HnfIMtrJHoy4s8uG2eJP4qc6FhoBK
cvfq7j/TMrgHUpBXN8tu8KOpamFbBEp69iIL7b8WT7qva/YDJ4KGk/512QOeyFBu
cMsVgVxDTU8CFt3syLsac0X7+KeHec2y/znssFSkrdmirAHhlrY6xb3VY0c+qECH
D6RguDzinW/opy2R2IJ9tu86dK8bHQ6SBirgKd/uekqnDVyqb6UsdyXMhdg9CsHh
DGFMRLXsTv9sD7YJswIPqdiSIf7SjW0AHdBmdB147jD0Gd5YPgi3QaHRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHDxRp47/m4AzZHuouSGJwVhxQ6MB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfbdklCW
rtMsFDKBZXDfEtFQWyJbLgLpZr/GimqNc2g3aQ7N03tT8oQDeOHed2wowhBKsyXL
/he2UBmuyrnvxHQ28R+5ra0XhdBGSZow4WttuHxl5sBnuoIXRs1WyC6E2jyL7E8S
VYwOOQGEsQ9QLhm8KuWjY8ZD6TKopIL2BGmHm78KD1F7/bQVisWt9TQMsnnpdHSX
qEFfeEco3BdKJb815c5jMJmyZZLWPXt0q2Gaknms1A0w2PgZM3d/QQVYBZex8EqJ
BJJbJ6yDlQj5KxlHKI1D4/VI3sEDqiIfoXQRexQCw2KI6NqymM+aBGmNN56tgaAn
IM/LUiajXlJhrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:38 2025 by rpki-client