Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          L4qUi2MNZ7Zwu+FiBHNo5FghEGMJygVapvJ76ece2OQ=
Subject key identifier:   F7:7F:30:C4:A7:B2:64:C5:DF:F1:95:83:AF:5C:A0:33:C4:D4:06:29
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       0197470C5811D5F0FAD0811754A3D8171227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          0775
Signing time:             Fri 06 Jun 2025 21:01:20 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:20 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:20 +0000
Files and hashes:         1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
                          2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
                          3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: SnyL8gND2oFgFY9ooJm8zsW/T0kPxO3ID+T20ML8ZUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:58:11:d5:f0:fa:d0:81:17:54:a3:d8:17:12:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Jun  6 21:01:20 2025 GMT
            Not After : Jun  7 21:01:20 2025 GMT
        Subject: CN=f77f30c4a7b264c5dff19583af5ca033c4d40629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:e7:fa:8b:ab:08:e1:6b:53:05:ce:70:38:
                    97:3b:ba:8a:0a:7c:dd:d5:c5:b4:18:22:e0:a6:bb:
                    57:13:40:6d:5e:60:58:ec:c5:f2:e5:f9:f0:21:51:
                    57:33:d5:99:d0:b3:f6:3a:ee:34:7b:a5:e8:17:82:
                    25:06:7c:c3:31:55:64:f6:d0:41:0d:b2:c2:fc:4d:
                    bf:67:fe:ee:5c:bb:e0:41:03:f5:06:75:40:20:4e:
                    74:1a:7b:3c:3b:11:62:1d:b1:e8:95:21:ef:80:c1:
                    c9:3a:ff:33:68:52:ac:da:a2:4c:20:00:2e:22:2a:
                    63:cf:6f:2a:b7:60:7a:4a:7c:ef:f4:fd:7c:1b:29:
                    8b:bc:a3:63:e8:b5:6b:72:1b:53:ee:0f:60:e6:7b:
                    a2:22:87:4f:c2:7f:f2:ad:8d:17:ab:5e:ce:d9:b6:
                    b1:8d:7b:44:96:a2:60:45:51:ae:36:18:3f:a5:37:
                    58:2c:c9:b0:5a:7f:8a:b8:3d:d5:55:4e:d2:f0:b7:
                    e8:91:65:0b:f4:eb:24:60:fa:e7:d0:68:63:e6:32:
                    8c:39:4c:ae:22:f8:a2:5d:88:39:d6:65:43:af:e0:
                    e4:1c:09:21:ce:89:c2:2e:43:18:90:70:fe:74:9d:
                    0e:43:cf:24:a9:30:88:cf:8b:ca:0b:15:bb:9a:a7:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7F:30:C4:A7:B2:64:C5:DF:F1:95:83:AF:5C:A0:33:C4:D4:06:29
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:61:29:0e:13:43:81:8c:8a:95:77:13:e0:7d:14:bb:d6:7e:
         a4:ee:5a:6d:62:69:aa:bf:57:95:fd:18:45:52:31:3d:60:f5:
         17:ba:2b:13:97:4f:27:f0:2d:32:a0:ac:1c:d7:3a:57:54:8b:
         bb:7d:20:21:81:ea:88:55:df:f7:46:49:5f:e0:56:77:44:ea:
         21:70:65:55:5e:c4:05:b9:d8:65:bb:d3:35:ee:ae:3e:ee:b7:
         19:a1:ed:e6:5b:6a:84:ed:1c:82:70:bf:b5:93:96:37:36:86:
         c0:b6:80:5d:2b:b4:69:a1:c5:cf:7a:ff:89:db:04:e5:ea:b2:
         9d:5e:ea:cc:1c:1d:00:27:8a:3e:4d:d2:66:df:46:f2:3d:1b:
         b8:0d:2d:5e:50:e8:cd:02:d5:05:3a:f6:0a:36:69:4b:ca:09:
         79:a4:69:6f:29:6a:7d:dd:13:2c:ab:a9:69:17:a4:0f:d7:e8:
         92:8b:00:49:22:ba:9a:bd:70:90:0f:53:ad:e0:66:47:bd:97:
         4c:be:12:21:d8:83:95:f9:8f:7f:fd:68:c7:ef:d0:2a:65:4e:
         99:a7:a1:78:7d:15:7d:65:56:c8:a4:d7:ed:cd:1d:27:07:05:
         b6:97:41:37:5d:2a:2e:c4:4f:63:bd:5a:c5:41:c2:7e:3a:e0:
         6f:74:c0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDFgR1fD60IEXVKPYFxInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3
NGYwZmQwHhcNMjUwNjA2MjEwMTIwWhcNMjUwNjA3MjEwMTIwWjAzMTEwLwYDVQQD
EyhmNzdmMzBjNGE3YjI2NGM1ZGZmMTk1ODNhZjVjYTAzM2M0ZDQwNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBrn+ourCOFrUwXOcDiXO7qKCnzd
1cW0GCLgprtXE0BtXmBY7MXy5fnwIVFXM9WZ0LP2Ou40e6XoF4IlBnzDMVVk9tBB
DbLC/E2/Z/7uXLvgQQP1BnVAIE50Gns8OxFiHbHolSHvgMHJOv8zaFKs2qJMIAAu
Iipjz28qt2B6Snzv9P18GymLvKNj6LVrchtT7g9g5nuiIodPwn/yrY0Xq17O2bax
jXtElqJgRVGuNhg/pTdYLMmwWn+KuD3VVU7S8LfokWUL9OskYPrn0Ghj5jKMOUyu
IviiXYg51mVDr+DkHAkhzonCLkMYkHD+dJ0OQ88kqTCIz4vKCxW7mqeTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd/MMSnsmTF3/GVg69coDPE1AYpMB8GA1UdIwQY
MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt
Nzc3OTRmYmZkMmU0LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0
LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmEpDhND
gYyKlXcT4H0Uu9Z+pO5abWJpqr9Xlf0YRVIxPWD1F7orE5dPJ/AtMqCsHNc6V1SL
u30gIYHqiFXf90ZJX+BWd0TqIXBlVV7EBbnYZbvTNe6uPu63GaHt5ltqhO0cgnC/
tZOWNzaGwLaAXSu0aaHFz3r/idsE5eqynV7qzBwdACeKPk3SZt9G8j0buA0tXlDo
zQLVBTr2CjZpS8oJeaRpbylqfd0TLKupaRekD9fokosASSK6mr1wkA9TreBmR72X
TL4SIdiDlfmPf/1ox+/QKmVOmaeheH0VfWVWyKTX7c0dJwcFtpdBN10qLsRPY71a
xUHCfjrgb3TAfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:48 2025 by rpki-client