Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          tA+5LkP8zjVoBv3xIBFF4uNO+F9tCI+MLEMqSzgagDQ=
Subject key identifier:   95:E3:EC:E3:CF:FF:B0:6D:28:32:BB:58:B8:57:40:11:C4:5E:FB:41
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       01976471B33EBC7CA12A849E8BFBA8F31110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          0F7F
Signing time:             Thu 12 Jun 2025 14:01:02 +0000
Manifest this update:     Thu 12 Jun 2025 14:01:02 +0000
Manifest next update:     Fri 13 Jun 2025 14:01:02 +0000
Files and hashes:         1: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: USPLNJPEn1l9b2JmSzRi7LaURteNIbO4T79GAprsy7o=)
                          2: pxcP6DvgyVPemwybQi7QB_h73DA.roa (hash: C6qKwLSYt8jrRgjY5tXASltzBp92o/+FwPuvktbe4VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:b3:3e:bc:7c:a1:2a:84:9e:8b:fb:a8:f3:11:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Jun 12 14:01:02 2025 GMT
            Not After : Jun 13 14:01:02 2025 GMT
        Subject: CN=95e3ece3cfffb06d2832bb58b8574011c45efb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:6a:73:dc:e1:57:d9:97:a4:ed:db:ab:85:
                    e1:4c:f3:43:9f:3d:ee:a9:b2:e2:61:93:47:6e:04:
                    6e:47:2c:bc:5c:41:84:ed:5f:98:2c:68:f3:a3:eb:
                    b1:d0:e6:98:6c:14:3d:63:8c:68:c4:7c:af:83:6b:
                    78:fc:fe:0e:ea:e9:63:14:d3:62:e1:3e:15:0a:a4:
                    78:f9:60:08:cf:ec:39:d7:5f:ef:41:a8:8f:4c:28:
                    c7:18:71:f9:47:0f:05:25:33:1e:c5:04:ef:80:09:
                    46:b6:c2:75:fe:f8:0d:2d:d5:56:9f:f6:12:73:ab:
                    2a:47:3c:34:5b:88:01:99:08:0a:ea:b2:a8:ad:f0:
                    b3:4a:35:82:0a:75:b5:22:21:39:ed:2c:bb:ae:af:
                    77:c6:89:52:72:ec:3c:47:1d:89:ca:d7:5f:76:97:
                    44:aa:98:4d:8c:1e:aa:69:b6:34:dd:97:d5:37:89:
                    c4:b9:94:72:9a:7b:b0:b2:61:ff:65:f6:c0:14:2b:
                    95:26:a9:0b:d6:c0:81:25:a0:31:96:13:6b:51:48:
                    2b:1d:93:fd:e6:8e:86:46:b0:00:1c:d9:7d:de:86:
                    32:63:77:b3:ce:22:39:3b:96:63:ed:c2:be:b5:25:
                    d7:9a:18:eb:a7:20:95:4f:76:9b:15:e0:76:4f:21:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E3:EC:E3:CF:FF:B0:6D:28:32:BB:58:B8:57:40:11:C4:5E:FB:41
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:22:78:e5:9d:2f:e3:3f:54:d1:7e:12:68:88:77:1a:de:
         9b:e2:4b:89:27:3c:2e:12:d1:a7:da:3e:92:7e:f7:1f:d3:da:
         70:7e:60:9b:44:50:51:fa:2a:e8:31:28:fd:60:dd:d2:71:b1:
         23:6e:81:04:f0:f9:a8:7e:84:ca:61:f8:4e:06:5e:a8:e2:39:
         6a:c8:2d:f9:f8:6f:22:ca:24:f5:2f:f1:c5:46:1e:51:95:2f:
         3a:fc:88:d7:ad:25:da:ce:fc:61:c2:82:38:06:d7:45:dc:d6:
         0f:5c:c8:e8:99:aa:d1:6f:e6:26:1f:b0:41:42:43:39:bf:82:
         f6:0b:59:2a:e2:5a:64:7c:6d:86:0b:48:6c:74:92:69:45:c3:
         9b:56:fa:cd:51:8a:2f:d8:d7:94:1d:b1:0a:cf:00:9f:50:a7:
         81:72:64:64:19:27:2f:0e:21:67:b7:0a:85:9f:06:9f:77:a7:
         1c:fe:70:a7:ac:67:72:b5:3c:8b:18:fd:9d:89:e8:b5:a8:e8:
         09:73:f7:f1:52:b5:c6:78:3b:23:30:6a:54:7a:e7:31:5c:a3:
         14:68:f7:08:32:1a:29:d0:b2:2c:60:4b:da:02:6c:12:4d:6d:
         e0:d7:d6:1f:01:74:cc:19:3f:de:de:1e:8d:1f:9b:06:c0:80:
         e5:0e:2a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkcbM+vHyhKoSei/uo8xEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmVlMDJhYzYwNWYwYmI5OGJiY2Q2MzdhOWFkZmFlNDgz
YTZlODQwHhcNMjUwNjEyMTQwMTAyWhcNMjUwNjEzMTQwMTAyWjAzMTEwLwYDVQQD
Eyg5NWUzZWNlM2NmZmZiMDZkMjgzMmJiNThiODU3NDAxMWM0NWVmYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM5qc9zhV9mXpO3bq4XhTPNDnz3u
qbLiYZNHbgRuRyy8XEGE7V+YLGjzo+ux0OaYbBQ9Y4xoxHyvg2t4/P4O6uljFNNi
4T4VCqR4+WAIz+w511/vQaiPTCjHGHH5Rw8FJTMexQTvgAlGtsJ1/vgNLdVWn/YS
c6sqRzw0W4gBmQgK6rKorfCzSjWCCnW1IiE57Sy7rq93xolScuw8Rx2JytdfdpdE
qphNjB6qabY03ZfVN4nEuZRymnuwsmH/ZfbAFCuVJqkL1sCBJaAxlhNrUUgrHZP9
5o6GRrAAHNl93oYyY3ezziI5O5Zj7cK+tSXXmhjrpyCVT3abFeB2TyFTWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXj7OPP/7BtKDK7WLhXQBHEXvtBMB8GA1UdIwQY
MBaAFFdu4CrGBfC7mLvNY3qa365IOm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEt
YjA4OWQxOGZjMDliLzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEtYjA4OWQxOGZjMDli
LzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHgieOWd
L+M/VNF+EmiIdxrem+JLiSc8LhLRp9o+kn73H9PacH5gm0RQUfoq6DEo/WDd0nGx
I26BBPD5qH6EymH4TgZeqOI5asgt+fhvIsok9S/xxUYeUZUvOvyI160l2s78YcKC
OAbXRdzWD1zI6Jmq0W/mJh+wQUJDOb+C9gtZKuJaZHxthgtIbHSSaUXDm1b6zVGK
L9jXlB2xCs8An1CngXJkZBknLw4hZ7cKhZ8Gn3enHP5wp6xncrU8ixj9nYnotajo
CXP38VK1xng7IzBqVHrnMVyjFGj3CDIaKdCyLGBL2gJsEk1t4NfWHwF0zBk/3t4e
jR+bBsCA5Q4qQQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 01:21:00 2025 by rpki-client