Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File:                     17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier:          LtwKca1dN7x4wD45Kk03PM/fQDr32HdZIvrI8YSv9fc=
Subject key identifier:   36:AE:66:78:04:71:18:C0:76:FA:0E:F3:33:F1:C8:44:BA:68:55:47
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       01974967E13BEC4D2496A434A930F889C0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number:          0C66
Signing time:             Sat 07 Jun 2025 08:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:33 +0000
Files and hashes:         1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: KJVgMgm2xuOeTA3GLq9vMaWQbrc45J9tOEfDG9Jz7vc=)
                          2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:e1:3b:ec:4d:24:96:a4:34:a9:30:f8:89:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Jun  7 08:00:33 2025 GMT
            Not After : Jun  8 08:00:33 2025 GMT
        Subject: CN=36ae6678047118c076fa0ef333f1c844ba685547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:d4:a4:dd:10:9b:b1:d0:10:43:58:21:38:
                    4d:d5:71:c4:f7:b6:33:bb:40:6b:35:d8:8f:d2:71:
                    6a:f3:09:4e:06:4c:b3:be:81:f4:51:94:a7:6b:69:
                    05:f4:54:56:5a:da:94:3c:c3:db:ed:50:76:0f:48:
                    47:63:1d:e2:75:1e:43:a0:44:94:94:fa:67:b4:8a:
                    de:98:d2:69:33:64:68:ac:6a:4f:79:b3:36:f3:e7:
                    df:27:06:05:68:80:e0:d9:bb:09:b6:dd:87:9c:df:
                    73:76:c5:67:a5:b4:29:5d:02:c6:c8:ef:66:e2:54:
                    36:37:ee:44:ef:71:68:e9:ab:75:5d:13:60:7a:9d:
                    9c:51:bc:df:ea:c3:67:91:f0:3b:fe:4c:04:3d:14:
                    b4:0f:37:5c:05:f2:f7:28:2e:f6:4c:d5:b7:d3:ef:
                    c3:01:0d:ed:e5:0c:73:40:25:e2:c0:fa:0a:7d:31:
                    df:93:30:30:27:3a:bb:a0:d6:19:fa:df:19:62:91:
                    cf:57:1a:f9:7e:db:09:a6:81:3e:7b:93:b7:87:2e:
                    4b:83:e3:bb:f7:26:2a:ef:a3:88:13:a5:2d:b6:f7:
                    43:14:a5:25:4e:38:50:6d:e7:69:20:b3:0e:09:73:
                    00:18:06:c2:8f:b7:68:b6:e6:d1:7d:9e:c9:1d:a6:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AE:66:78:04:71:18:C0:76:FA:0E:F3:33:F1:C8:44:BA:68:55:47
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:74:7e:41:eb:82:be:3a:11:34:a5:00:62:47:80:af:ef:fb:
         83:d4:f5:39:b8:f1:f6:11:78:f8:d6:d2:43:d7:17:4b:ea:af:
         f6:17:7b:26:6c:0e:90:e6:d3:03:26:ea:65:21:0a:72:33:f1:
         e6:0d:c3:f8:f7:b9:83:28:0c:77:71:e3:d2:f0:09:3a:78:2d:
         d5:cc:ff:de:e3:c9:a5:9f:38:f5:36:49:3d:6b:a2:ed:bd:98:
         0b:11:27:bb:ed:e7:71:64:22:91:18:c0:1b:b7:fa:af:b6:2c:
         a4:fb:8c:f4:16:10:c5:dd:0e:7a:dd:32:34:41:96:09:c1:d2:
         59:0f:bc:5d:26:ac:51:f9:15:dc:31:e9:e7:ed:cd:0f:94:26:
         1e:2d:47:e6:fb:0e:40:e8:a6:f8:7f:cd:75:82:af:6d:ea:1f:
         b3:31:55:8a:85:0f:51:06:83:80:24:1e:b6:62:88:b3:73:11:
         b4:c8:56:85:3b:0b:7e:73:7c:81:a6:42:09:a0:52:fd:6b:a7:
         12:4a:28:f3:b9:42:88:20:d6:fe:8c:0e:a2:45:86:5f:23:0d:
         f8:2b:53:1a:d2:28:11:f6:53:95:02:78:3f:d2:2a:41:09:27:
         9c:01:a9:a0:84:67:45:ed:cc:f5:25:44:40:b9:08:aa:0b:98:
         9b:bf:ba:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ+E77E0klqQ0qTD4icD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw
ZWJlZTEwHhcNMjUwNjA3MDgwMDMzWhcNMjUwNjA4MDgwMDMzWjAzMTEwLwYDVQQD
EygzNmFlNjY3ODA0NzExOGMwNzZmYTBlZjMzM2YxYzg0NGJhNjg1NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6LUpN0Qm7HQEENYIThN1XHE97Yz
u0BrNdiP0nFq8wlOBkyzvoH0UZSna2kF9FRWWtqUPMPb7VB2D0hHYx3idR5DoESU
lPpntIremNJpM2RorGpPebM28+ffJwYFaIDg2bsJtt2HnN9zdsVnpbQpXQLGyO9m
4lQ2N+5E73Fo6at1XRNgep2cUbzf6sNnkfA7/kwEPRS0DzdcBfL3KC72TNW30+/D
AQ3t5QxzQCXiwPoKfTHfkzAwJzq7oNYZ+t8ZYpHPVxr5ftsJpoE+e5O3hy5Lg+O7
9yYq76OIE6UttvdDFKUlTjhQbedpILMOCXMAGAbCj7dotubRfZ7JHabWnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDauZngEcRjAdvoO8zPxyES6aFVHMB8GA1UdIwQY
MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt
M2ViZDQ1NWFjMmFlLzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl
LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXR+QeuC
vjoRNKUAYkeAr+/7g9T1Objx9hF4+NbSQ9cXS+qv9hd7JmwOkObTAybqZSEKcjPx
5g3D+Pe5gygMd3Hj0vAJOngt1cz/3uPJpZ849TZJPWui7b2YCxEnu+3ncWQikRjA
G7f6r7YspPuM9BYQxd0Oet0yNEGWCcHSWQ+8XSasUfkV3DHp5+3ND5QmHi1H5vsO
QOim+H/NdYKvbeofszFVioUPUQaDgCQetmKIs3MRtMhWhTsLfnN8gaZCCaBS/Wun
Ekoo87lCiCDW/owOokWGXyMN+CtTGtIoEfZTlQJ4P9IqQQknnAGpoIRnRe3M9SVE
QLkIqguYm7+6JQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:09 2025 by rpki-client