Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File:                     D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier:          fFptfcIU7XwFSmKymWnqIQBB0VtyKox0KZ+/ChAHXjM=
Subject key identifier:   DC:5A:E8:9F:79:2A:8B:DC:0D:F6:28:CA:46:F0:A1:57:EC:54:24:B9
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer:       /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial:       0197488C4CB78C8B8686EB23CECF27C3AC26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number:          0845
Signing time:             Sat 07 Jun 2025 04:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:43 +0000
Files and hashes:         1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: sfcbOKGCFKZrhHW8BjQjNIDIsXYkrbgfonhASVQkYzc=)
                          2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:4c:b7:8c:8b:86:86:eb:23:ce:cf:27:c3:ac:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
        Validity
            Not Before: Jun  7 04:00:43 2025 GMT
            Not After : Jun  8 04:00:43 2025 GMT
        Subject: CN=dc5ae89f792a8bdc0df628ca46f0a157ec5424b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:48:1b:fc:a8:2c:30:22:e2:3e:7a:ac:81:
                    56:5c:94:eb:7e:26:ea:a5:26:a0:d8:eb:a2:7f:76:
                    3d:cc:ff:12:07:5e:e1:f7:74:8f:77:a6:8c:ad:ac:
                    e8:34:80:30:95:a8:18:d1:5d:d9:dd:f1:7f:b2:49:
                    9a:8a:f7:61:4e:c8:82:1d:a7:82:ab:dd:36:a6:4e:
                    c0:c2:87:19:f7:1a:78:86:b0:9a:80:51:ef:8d:ca:
                    61:88:5a:71:2b:a6:e1:aa:6a:4d:bb:ef:02:84:7d:
                    e9:28:71:7b:5f:c1:09:6d:32:2a:08:c4:c5:47:3f:
                    65:d7:29:9a:ed:5c:6e:e1:95:a2:13:47:f0:7a:e4:
                    e9:52:50:85:c1:c6:55:9e:90:b8:d7:58:1d:19:40:
                    7c:7d:31:0b:75:3b:3f:16:e3:94:b0:de:9d:5e:d9:
                    bb:56:08:8f:82:53:ef:c7:96:45:95:62:ae:2c:8f:
                    95:ad:a0:d5:65:e4:9f:59:c0:71:79:9e:5d:b0:8e:
                    4d:43:1b:b8:44:f3:32:c8:6e:9a:30:d9:77:55:b2:
                    e3:20:c6:9c:d1:24:54:6b:b6:e1:40:16:22:6b:12:
                    f3:82:5e:8f:83:1e:f3:4f:cc:f8:72:a3:d5:e7:4b:
                    dd:5c:06:1c:1f:6e:ea:c6:35:13:23:20:11:73:6a:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5A:E8:9F:79:2A:8B:DC:0D:F6:28:CA:46:F0:A1:57:EC:54:24:B9
            X509v3 Authority Key Identifier:
                keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:52:c1:23:b5:10:86:b6:5b:a1:0d:2b:c0:3c:72:2a:0a:
         cc:8b:6a:bd:4e:93:c3:a9:51:e1:6d:80:99:e9:75:71:8c:52:
         33:95:18:d8:52:ba:51:49:7c:6d:00:ff:0a:04:8a:51:3d:af:
         1b:f2:69:a2:4b:a0:6f:96:5f:40:9e:4d:41:4a:4f:36:7d:2b:
         30:cd:ab:0f:ab:9d:a5:3b:cf:c3:fb:04:09:b0:ad:23:f1:bb:
         d6:39:f9:ea:54:01:d3:d1:e1:23:dc:fb:cd:d1:f7:18:ea:aa:
         b6:be:30:0a:43:a1:d2:30:33:61:4a:ed:e8:b2:62:1a:8f:07:
         63:43:64:7b:72:a1:2f:b3:8b:89:3c:19:ff:95:3a:c9:9e:3c:
         69:e8:e6:59:63:fd:94:9f:cf:e3:60:db:a2:2a:b4:ad:c0:3d:
         4c:9b:3c:ce:59:d1:e2:12:f1:93:08:84:43:fd:a7:8b:e4:21:
         60:74:93:5c:44:a9:f0:89:f3:89:2b:61:7d:a0:54:64:bc:7c:
         f6:e9:6c:bc:ce:36:a7:53:93:8e:d5:91:4e:e4:50:28:61:26:
         d7:ec:7d:ae:3c:ff:52:a2:37:bb:cd:81:2d:d2:7a:5e:3f:b3:
         c7:01:6a:ee:e9:bd:42:a6:53:36:fc:3b:55:8a:15:65:9d:74:
         62:cb:2d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjEy3jIuGhusjzs8nw6wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZWE4YWUxOTA2MWFjYzU0ODlhYzI3MTkwODJhY2VhNWEy
ZmM1ZDMwHhcNMjUwNjA3MDQwMDQzWhcNMjUwNjA4MDQwMDQzWjAzMTEwLwYDVQQD
EyhkYzVhZTg5Zjc5MmE4YmRjMGRmNjI4Y2E0NmYwYTE1N2VjNTQyNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz99IG/yoLDAi4j56rIFWXJTrfibq
pSag2Ouif3Y9zP8SB17h93SPd6aMrazoNIAwlagY0V3Z3fF/skmaivdhTsiCHaeC
q902pk7AwocZ9xp4hrCagFHvjcphiFpxK6bhqmpNu+8ChH3pKHF7X8EJbTIqCMTF
Rz9l1yma7Vxu4ZWiE0fweuTpUlCFwcZVnpC411gdGUB8fTELdTs/FuOUsN6dXtm7
VgiPglPvx5ZFlWKuLI+VraDVZeSfWcBxeZ5dsI5NQxu4RPMyyG6aMNl3VbLjIMac
0SRUa7bhQBYiaxLzgl6Pgx7zT8z4cqPV50vdXAYcH27qxjUTIyARc2qHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxa6J95KovcDfYoykbwoVfsVCS5MB8GA1UdIwQY
MBaAFA/qiuGQYazFSJrCcZCCrOpaL8XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1xSzRaQmhyTVZJbXNKeGtJS3M2bG92eGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MTYwYzktZDJlNS00MzljLWEyNWEt
NWQ4NzAwZjY1YTM4LzEvRC1xSzRaQmhyTVZJbXNKeGtJS3M2bG92eGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82MTYwYzktZDJlNS00MzljLWEyNWEtNWQ4NzAwZjY1YTM4
LzEvRC1xSzRaQmhyTVZJbXNKeGtJS3M2bG92eGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW1SwSO1
EIa2W6ENK8A8cioKzItqvU6Tw6lR4W2Amel1cYxSM5UY2FK6UUl8bQD/CgSKUT2v
G/Jpokugb5ZfQJ5NQUpPNn0rMM2rD6udpTvPw/sECbCtI/G71jn56lQB09HhI9z7
zdH3GOqqtr4wCkOh0jAzYUrt6LJiGo8HY0Nke3KhL7OLiTwZ/5U6yZ48aejmWWP9
lJ/P42Dboiq0rcA9TJs8zlnR4hLxkwiEQ/2ni+QhYHSTXESp8InziSthfaBUZLx8
9ulsvM42p1OTjtWRTuRQKGEm1+x9rjz/UqI3u82BLdJ6Xj+zxwFq7um9QqZTNvw7
VYoVZZ10YsstIA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:26 2025 by rpki-client