Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File:                     8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier:          qn2b4WZHS+IsH0ypvsalSAFYVadxsrRtV/lzndeaRos=
Subject key identifier:   CA:6E:E9:85:34:08:41:F8:73:42:5E:81:A5:52:FB:66:F2:81:68:48
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       01974CD6E60D255070B919626F9F67E15CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number:          0C74
Signing time:             Sun 08 Jun 2025 00:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:41 +0000
Files and hashes:         1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: qjadvqsVTAJ5TV/pGZLlW7Heq3pmwQIL1I3g4nYyOBU=)
                          2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:e6:0d:25:50:70:b9:19:62:6f:9f:67:e1:5c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: Jun  8 00:00:41 2025 GMT
            Not After : Jun  9 00:00:41 2025 GMT
        Subject: CN=ca6ee985340841f873425e81a552fb66f2816848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:cd:d7:4d:c2:54:d4:d2:7b:e6:7a:99:19:
                    4a:a1:b8:3f:77:b4:26:34:e1:94:b3:13:d4:fa:3b:
                    f1:76:9c:66:78:a5:33:2d:c6:5d:aa:e6:05:78:ba:
                    b5:38:bd:cc:1c:01:b2:f3:77:bb:25:f4:08:82:cf:
                    67:09:fc:d5:e7:17:b1:b7:27:bc:0e:66:4d:82:1a:
                    32:12:ba:f2:72:3d:39:e9:42:85:65:f4:e8:80:15:
                    c9:5b:48:c7:a9:7c:fe:f0:61:b0:26:fc:90:51:7c:
                    a1:cb:9a:d8:58:32:1c:99:e7:18:0b:3c:4d:bf:77:
                    df:01:60:68:d0:36:a5:f7:eb:75:f9:9b:90:a6:63:
                    02:58:7f:fb:f5:8b:79:63:2a:ec:00:b7:02:e0:34:
                    8c:92:fd:7b:28:41:3a:3c:e4:0a:fa:6c:e2:e6:fb:
                    ac:f6:b6:75:f2:6c:0a:1b:4a:cd:23:1d:3a:67:30:
                    34:fa:59:fd:f5:fb:36:49:b9:ed:d2:3a:1d:5e:74:
                    c5:01:7e:98:06:90:07:cc:fb:7d:23:02:d6:f6:fb:
                    4d:48:5a:fe:fb:10:6c:6a:b5:4e:e9:40:e8:28:aa:
                    d4:25:d2:2a:b1:ef:ae:41:47:39:81:25:56:5b:fc:
                    23:0a:e5:6d:43:2f:ff:7a:e4:02:0f:05:1b:8c:6b:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:E9:85:34:08:41:F8:73:42:5E:81:A5:52:FB:66:F2:81:68:48
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:32:e0:a6:ed:f3:aa:24:d4:d0:8d:5e:19:e4:f3:5a:d8:43:
         8c:c9:3f:b8:e6:90:2c:a6:6f:18:47:fe:68:0a:08:20:c0:d5:
         9c:cc:e0:74:90:ca:a2:c4:9e:5b:60:53:3e:46:79:8d:90:9c:
         6e:0e:f9:56:dd:55:1b:5b:7e:36:41:7c:f8:d8:4b:64:92:b4:
         47:33:90:b9:05:ee:98:ba:27:06:b0:65:84:83:fa:74:6d:95:
         b7:23:19:d1:78:1c:1f:fe:e5:5c:4b:54:b7:7d:83:f7:8d:33:
         1e:78:ca:14:92:66:65:be:ea:f6:05:ff:cf:01:bc:27:7d:97:
         0a:74:05:7a:20:db:9a:37:7b:d6:ee:a1:cd:eb:c0:bc:b1:d8:
         ad:43:46:d0:d4:46:b4:e4:78:16:3b:64:4f:f3:eb:f5:cf:00:
         75:bd:a8:7b:9e:f2:d8:cc:29:e8:c9:c4:31:0f:f9:d8:92:d3:
         49:97:32:56:05:3d:6f:39:d5:ef:7f:97:d0:a8:56:85:3e:d6:
         07:b7:a5:7f:46:50:ee:cd:e6:df:97:07:9f:65:d8:1b:85:5a:
         00:20:02:6c:ea:32:7b:5e:e1:45:14:7b:ef:57:9c:4a:20:e8:
         9b:62:57:ea:0b:29:61:30:13:50:78:bf:3b:9d:a0:5b:24:2a:
         9a:25:cb:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1uYNJVBwuRlib59n4Vy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjUwNjA4MDAwMDQxWhcNMjUwNjA5MDAwMDQxWjAzMTEwLwYDVQQD
EyhjYTZlZTk4NTM0MDg0MWY4NzM0MjVlODFhNTUyZmI2NmYyODE2ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7zN103CVNTSe+Z6mRlKobg/d7Qm
NOGUsxPU+jvxdpxmeKUzLcZdquYFeLq1OL3MHAGy83e7JfQIgs9nCfzV5xextye8
DmZNghoyErrycj056UKFZfTogBXJW0jHqXz+8GGwJvyQUXyhy5rYWDIcmecYCzxN
v3ffAWBo0Dal9+t1+ZuQpmMCWH/79Yt5YyrsALcC4DSMkv17KEE6POQK+mzi5vus
9rZ18mwKG0rNIx06ZzA0+ln99fs2Sbnt0jodXnTFAX6YBpAHzPt9IwLW9vtNSFr+
+xBsarVO6UDoKKrUJdIqse+uQUc5gSVWW/wjCuVtQy//euQCDwUbjGvc+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpu6YU0CEH4c0JegaVS+2bygWhIMB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTLgpu3z
qiTU0I1eGeTzWthDjMk/uOaQLKZvGEf+aAoIIMDVnMzgdJDKosSeW2BTPkZ5jZCc
bg75Vt1VG1t+NkF8+NhLZJK0RzOQuQXumLonBrBlhIP6dG2VtyMZ0XgcH/7lXEtU
t32D940zHnjKFJJmZb7q9gX/zwG8J32XCnQFeiDbmjd71u6hzevAvLHYrUNG0NRG
tOR4FjtkT/Pr9c8Adb2oe57y2Mwp6MnEMQ/52JLTSZcyVgU9bznV73+X0KhWhT7W
B7elf0ZQ7s3m35cHn2XYG4VaACACbOoye17hRRR771ecSiDom2JX6gspYTATUHi/
O52gWyQqmiXLSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:14:16 2025 by rpki-client