Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          8TkLOEQO/8oDr+0HMHhkw1giG8EhuQezQneDe5jVipc=
Subject key identifier:   62:05:4F:AD:A2:89:40:3E:60:A3:6B:24:96:C8:E3:C2:C4:13:D2:28
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       019754FE258D14D219B46611D51F9E08FA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          0F77
Signing time:             Mon 09 Jun 2025 14:00:31 +0000
Manifest this update:     Mon 09 Jun 2025 14:00:31 +0000
Manifest next update:     Tue 10 Jun 2025 14:00:31 +0000
Files and hashes:         1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: vh4aZXuOmMi7cP/oGGk1dcNVf0iay8h3Tf7Vev0d+uU=)
                          2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:fe:25:8d:14:d2:19:b4:66:11:d5:1f:9e:08:fa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Jun  9 14:00:31 2025 GMT
            Not After : Jun 10 14:00:31 2025 GMT
        Subject: CN=62054fada289403e60a36b2496c8e3c2c413d228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:a1:87:35:3e:75:37:a0:6c:9b:21:f6:a7:
                    70:81:ee:26:01:4f:97:ae:b1:cd:97:4b:81:19:cb:
                    f0:98:95:c7:5e:c9:cf:c5:70:74:bd:de:22:60:63:
                    f8:cd:5f:ef:65:1a:06:a6:3a:b8:ac:04:ad:e1:81:
                    c4:c4:4c:2d:13:ba:95:b3:9a:25:30:6b:9f:74:b1:
                    1d:8b:ec:fc:f3:50:b2:e2:d5:e9:17:07:4d:a3:3c:
                    16:7e:54:cf:1c:8a:02:1c:0a:4c:3c:89:b1:54:61:
                    88:8a:64:20:a3:e6:f8:17:e9:97:79:c1:5b:81:d9:
                    11:d5:b3:53:2c:13:5f:80:2d:f1:0c:e9:39:15:48:
                    76:1d:97:5d:20:d2:03:09:fa:44:b7:52:32:03:e5:
                    16:90:9f:a9:9c:a4:25:df:62:13:6f:dc:ea:30:00:
                    0a:ce:af:f0:de:22:86:1e:bf:fb:21:25:c1:df:a6:
                    26:b1:4f:20:12:e0:dd:17:f5:8d:d1:e7:66:3d:fb:
                    48:4b:b0:be:1f:2f:f1:5b:56:07:3e:87:72:e9:a5:
                    de:b7:91:54:18:22:89:2a:0c:9a:a6:af:82:48:da:
                    a8:0d:e8:4a:3a:db:ce:c1:55:a3:42:79:d6:b4:b9:
                    ec:bb:50:f8:b2:8c:f9:a8:3c:af:7b:52:6b:4b:88:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:4F:AD:A2:89:40:3E:60:A3:6B:24:96:C8:E3:C2:C4:13:D2:28
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:c2:f9:0e:d3:a2:20:ed:a5:79:42:42:49:22:32:3c:a1:
         48:1d:d1:9f:9c:48:2a:1b:ed:67:ac:70:d9:62:5e:17:44:92:
         f5:ce:77:62:04:53:84:b7:d0:77:6b:23:83:27:d5:e4:90:81:
         9b:83:75:60:b8:fb:5f:1b:e1:24:2f:7d:69:d5:7c:2b:05:24:
         8b:ba:c8:24:d0:20:d3:c7:77:92:c9:48:ae:e9:f4:03:4f:2c:
         d5:84:b8:2c:9b:a1:4a:44:c6:99:e5:99:f8:d7:c0:7d:04:72:
         33:12:d8:b6:79:97:ec:52:2e:1b:83:ea:4d:b8:96:ea:11:75:
         de:88:93:e1:2c:e2:f0:88:42:61:7f:3c:f7:b3:90:4b:68:ef:
         9f:24:15:3a:65:69:86:49:b0:fe:fc:41:85:0b:9f:cf:b5:7a:
         00:b4:bc:62:70:38:c3:82:6e:7e:26:1c:33:d8:31:12:30:5d:
         75:f9:d8:cb:1a:83:c3:dc:04:69:0f:74:bd:cd:17:28:7d:07:
         97:48:3b:52:a7:c4:56:66:36:2f:fc:0c:aa:a9:e6:af:15:6c:
         a0:96:3b:c7:80:6d:76:96:6c:ed:ad:5a:dd:95:3a:42:fe:e5:
         07:5f:f7:52:88:4e:f3:8e:9a:03:b0:c0:29:c9:4a:76:6c:1a:
         72:91:85:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdU/iWNFNIZtGYR1R+eCPpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmVlMDJhYzYwNWYwYmI5OGJiY2Q2MzdhOWFkZmFlNDgz
YTZlODQwHhcNMjUwNjA5MTQwMDMxWhcNMjUwNjEwMTQwMDMxWjAzMTEwLwYDVQQD
Eyg2MjA1NGZhZGEyODk0MDNlNjBhMzZiMjQ5NmM4ZTNjMmM0MTNkMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjOhhzU+dTegbJsh9qdwge4mAU+X
rrHNl0uBGcvwmJXHXsnPxXB0vd4iYGP4zV/vZRoGpjq4rASt4YHExEwtE7qVs5ol
MGufdLEdi+z881Cy4tXpFwdNozwWflTPHIoCHApMPImxVGGIimQgo+b4F+mXecFb
gdkR1bNTLBNfgC3xDOk5FUh2HZddINIDCfpEt1IyA+UWkJ+pnKQl32ITb9zqMAAK
zq/w3iKGHr/7ISXB36YmsU8gEuDdF/WN0edmPftIS7C+Hy/xW1YHPody6aXet5FU
GCKJKgyapq+CSNqoDehKOtvOwVWjQnnWtLnsu1D4soz5qDyve1JrS4ix6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIFT62iiUA+YKNrJJbI48LEE9IoMB8GA1UdIwQY
MBaAFFdu4CrGBfC7mLvNY3qa365IOm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEt
YjA4OWQxOGZjMDliLzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEtYjA4OWQxOGZjMDli
LzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegfC+Q7T
oiDtpXlCQkkiMjyhSB3Rn5xIKhvtZ6xw2WJeF0SS9c53YgRThLfQd2sjgyfV5JCB
m4N1YLj7XxvhJC99adV8KwUki7rIJNAg08d3kslIrun0A08s1YS4LJuhSkTGmeWZ
+NfAfQRyMxLYtnmX7FIuG4PqTbiW6hF13oiT4Szi8IhCYX8897OQS2jvnyQVOmVp
hkmw/vxBhQufz7V6ALS8YnA4w4JufiYcM9gxEjBddfnYyxqDw9wEaQ90vc0XKH0H
l0g7UqfEVmY2L/wMqqnmrxVsoJY7x4BtdpZs7a1a3ZU6Qv7lB1/3UohO846aA7DA
KclKdmwacpGFRg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:50 2025 by rpki-client