Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File:                     i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier:          qeK6qefBSJ3v+0+dCpuDuACf4jzyYtYxVacOBdGI6H8=
Subject key identifier:   97:26:34:26:D6:00:42:0F:C6:C7:21:8E:A4:5A:73:15:D1:AB:CC:73
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer:       /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial:       01974BFB8260E129A8E68FF7CDC715F6A787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number:          0441
Signing time:             Sat 07 Jun 2025 20:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 20:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 20:01:03 +0000
Files and hashes:         1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
                          2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: KffLDpU06/YW93LTxOr8SNmBxhEm9pbrnx8o0S/7Cag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:82:60:e1:29:a8:e6:8f:f7:cd:c7:15:f6:a7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
        Validity
            Not Before: Jun  7 20:01:03 2025 GMT
            Not After : Jun  8 20:01:03 2025 GMT
        Subject: CN=97263426d600420fc6c7218ea45a7315d1abcc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:b6:b0:55:80:5c:54:24:e6:1e:bd:53:6d:
                    77:c7:cf:13:1c:28:43:5a:dd:5f:8a:8d:e6:09:9a:
                    43:98:bc:a1:3a:50:f2:3a:b9:92:ba:b7:25:97:3c:
                    72:4d:0d:a3:1a:c2:9d:14:28:fb:69:55:3b:b3:85:
                    23:58:67:68:77:26:fa:32:73:b2:b6:29:33:65:c7:
                    da:d9:07:a2:43:e7:a8:ec:b1:14:d5:fc:a1:93:e5:
                    f5:8b:95:f1:70:98:90:a0:b8:ba:fa:4d:a0:95:8b:
                    fa:78:31:09:0c:63:4b:95:43:57:47:e3:58:1f:52:
                    98:56:88:f7:db:da:38:a4:87:25:c5:9a:fa:38:18:
                    31:d8:58:ed:79:94:8c:e8:50:61:4b:fb:f3:ad:d1:
                    51:4a:c4:09:e6:c9:88:87:a8:c2:84:be:3d:c9:83:
                    4e:4a:56:73:15:30:f5:87:e6:da:2c:ed:bd:93:bd:
                    d5:12:74:16:99:74:d1:e3:a4:75:f9:fe:f9:01:19:
                    2b:b7:83:0b:02:f1:e4:5b:45:71:99:19:5c:7b:96:
                    23:e2:e8:ff:13:0e:26:ec:41:09:8d:3f:a4:df:10:
                    19:ab:96:b4:90:9a:81:06:2b:af:96:21:65:c0:6b:
                    2e:4f:1c:00:33:7c:1a:dc:e0:88:f3:eb:22:69:18:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:26:34:26:D6:00:42:0F:C6:C7:21:8E:A4:5A:73:15:D1:AB:CC:73
            X509v3 Authority Key Identifier:
                keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:27:96:8f:d8:e0:02:df:04:37:6b:af:2b:8c:72:0a:15:fa:
         38:ce:97:b1:5b:28:b4:63:f3:f6:4e:a6:3d:ae:d2:91:95:59:
         3e:7c:c2:a6:a1:51:19:c0:d4:be:d2:1e:a4:c2:13:c9:30:30:
         20:17:a7:c7:94:2d:c4:f3:83:7f:fe:c6:0e:d5:c1:95:71:ad:
         11:e8:a5:e8:a5:b8:4a:95:51:09:c3:bd:0c:c5:11:f7:81:ac:
         f6:bf:da:9c:79:14:ca:8e:2c:55:2f:10:e8:01:c8:21:b1:67:
         0b:61:a0:f5:c4:cd:b2:88:dc:9e:dd:33:bb:65:27:7d:7f:cd:
         21:73:31:b5:38:e9:29:5e:19:dd:b7:a1:ac:64:5c:c9:4e:21:
         eb:aa:c6:61:21:0b:1c:4a:61:23:dc:a6:f7:af:2f:1b:3c:39:
         b9:a6:91:ef:9d:be:b1:a2:57:db:a3:88:85:e5:98:4b:51:67:
         a1:2f:aa:a1:60:08:6b:90:4f:90:dd:7a:10:7c:94:64:02:cf:
         2e:a2:e1:1f:91:72:40:c3:95:5c:9b:a7:ef:72:fe:2a:6b:fd:
         18:17:ec:18:5c:cd:1f:bf:67:6d:be:70:5d:93:74:9f:35:00:
         ff:62:3b:44:03:3e:04:6b:ea:8a:69:e2:91:f9:bb:a3:8e:b1:
         f6:b3:03:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+4Jg4Smo5o/3zccV9qeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4
NDZlNzkwHhcNMjUwNjA3MjAwMTAzWhcNMjUwNjA4MjAwMTAzWjAzMTEwLwYDVQQD
Eyg5NzI2MzQyNmQ2MDA0MjBmYzZjNzIxOGVhNDVhNzMxNWQxYWJjYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaG2sFWAXFQk5h69U213x88THChD
Wt1fio3mCZpDmLyhOlDyOrmSurcllzxyTQ2jGsKdFCj7aVU7s4UjWGdodyb6MnOy
tikzZcfa2QeiQ+eo7LEU1fyhk+X1i5XxcJiQoLi6+k2glYv6eDEJDGNLlUNXR+NY
H1KYVoj329o4pIclxZr6OBgx2FjteZSM6FBhS/vzrdFRSsQJ5smIh6jChL49yYNO
SlZzFTD1h+baLO29k73VEnQWmXTR46R1+f75ARkrt4MLAvHkW0VxmRlce5Yj4uj/
Ew4m7EEJjT+k3xAZq5a0kJqBBiuvliFlwGsuTxwAM3wa3OCI8+siaRiG6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcmNCbWAEIPxschjqRacxXRq8xzMB8GA1UdIwQY
MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt
NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj
LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFieWj9jg
At8EN2uvK4xyChX6OM6XsVsotGPz9k6mPa7SkZVZPnzCpqFRGcDUvtIepMITyTAw
IBenx5QtxPODf/7GDtXBlXGtEeil6KW4SpVRCcO9DMUR94Gs9r/anHkUyo4sVS8Q
6AHIIbFnC2Gg9cTNsojcnt0zu2UnfX/NIXMxtTjpKV4Z3behrGRcyU4h66rGYSEL
HEphI9ym968vGzw5uaaR752+saJX26OIheWYS1FnoS+qoWAIa5BPkN16EHyUZALP
LqLhH5FyQMOVXJun73L+Kmv9GBfsGFzNH79nbb5wXZN0nzUA/2I7RAM+BGvqimni
kfm7o46x9rMDKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:36 2025 by rpki-client