Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File:                     dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier:          JPZI5UweX0Ujr3/ibSklXqBEGatV64XZvuGqPNfL7hU=
Subject key identifier:   83:48:6D:3D:B4:5B:2C:9C:AB:A9:43:B9:43:E4:99:FC:79:0E:52:F7
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer:       /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial:       01974CD75F9E7F883B832350A947B1263B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number:          0392
Signing time:             Sun 08 Jun 2025 00:01:12 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:12 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:12 +0000
Files and hashes:         1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: nIcwS5au/jNPtXVXvEkkEzN24H8nJavubfYQIXQlEvQ=)
                          2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:5f:9e:7f:88:3b:83:23:50:a9:47:b1:26:3b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
        Validity
            Not Before: Jun  8 00:01:12 2025 GMT
            Not After : Jun  9 00:01:12 2025 GMT
        Subject: CN=83486d3db45b2c9caba943b943e499fc790e52f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:ca:96:7d:d0:09:14:d9:d6:02:79:d0:e4:
                    46:82:8d:04:81:cc:7e:36:e6:4c:74:19:fe:d3:ff:
                    2c:aa:2e:3e:1d:84:13:7b:76:9f:e3:4a:00:28:65:
                    29:cb:dd:15:f9:f2:41:82:89:1f:56:85:4b:54:0f:
                    e9:4c:7b:4c:ec:bb:9b:b5:49:32:df:41:d4:0a:89:
                    0b:22:1e:7b:c4:48:74:a6:8a:32:f5:b6:e5:f0:53:
                    ff:0e:b1:e2:f5:16:df:bd:ae:44:88:98:c8:61:de:
                    64:4b:1d:f9:28:02:f6:33:ca:92:61:8e:f1:81:2a:
                    97:92:30:bb:02:cf:85:9f:03:4a:1e:2e:ee:e4:87:
                    b6:0e:6e:ef:bb:66:76:5d:2d:5e:9c:74:63:04:4e:
                    d9:d7:45:0f:c5:19:d2:b8:a3:f8:47:23:fd:cf:2e:
                    85:44:6f:03:0a:d2:7b:f2:9c:de:48:50:1a:13:30:
                    5f:31:00:b5:91:0d:f1:b5:19:d5:84:2a:69:5a:0c:
                    8f:59:33:cc:63:d3:b3:16:be:14:c2:72:93:6b:03:
                    66:45:26:50:8b:b3:25:80:6f:71:2d:36:91:5d:55:
                    48:39:2d:53:ec:9b:0c:97:6e:be:00:15:50:0b:29:
                    fe:1d:bc:33:15:e3:bf:e1:3b:ac:c1:2c:44:82:7f:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:6D:3D:B4:5B:2C:9C:AB:A9:43:B9:43:E4:99:FC:79:0E:52:F7
            X509v3 Authority Key Identifier:
                keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:45:10:8c:4a:e8:59:06:63:13:a3:db:9c:b3:d9:70:01:89:
         9d:7c:4a:6e:2a:f2:e5:39:ad:31:8f:f6:0e:5c:ab:45:79:5b:
         48:c4:11:9b:18:cd:97:1a:4a:3d:3e:99:91:a6:01:1a:8d:df:
         ee:91:28:f0:3f:0a:72:ba:5a:94:f3:e0:02:5e:84:e8:14:fb:
         4b:b7:86:c9:63:f5:a7:44:55:46:b9:ba:e1:2f:40:91:aa:06:
         69:84:ba:aa:2b:e4:5d:06:9d:7b:b8:ea:05:6e:fe:c7:3c:44:
         f3:df:79:cd:69:8a:7e:4f:7d:de:c2:a2:07:0a:cb:00:27:88:
         5d:cf:06:d9:70:0c:a3:4b:f2:fb:8f:57:dc:c0:09:b0:62:6c:
         8a:0d:50:93:de:58:ad:14:2b:b2:96:c1:32:45:51:0f:ec:2b:
         cc:6f:95:de:47:79:51:ee:ec:b0:c1:86:20:70:51:5a:4f:0f:
         76:57:92:d1:a3:63:01:fc:3c:2d:45:64:ee:d0:32:35:5d:ef:
         fb:dd:9c:b1:19:c8:36:02:61:2f:51:65:28:e8:10:00:88:22:
         9d:ca:f5:e9:fb:9f:ba:b4:33:59:3e:3d:26:bb:88:dd:ae:b7:
         82:df:2e:53:2f:a7:5f:58:bd:76:5c:90:9e:ad:f8:ef:18:20:
         eb:88:b0:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM11+ef4g7gyNQqUexJjsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjUwNjA4MDAwMTEyWhcNMjUwNjA5MDAwMTEyWjAzMTEwLwYDVQQD
Eyg4MzQ4NmQzZGI0NWIyYzljYWJhOTQzYjk0M2U0OTlmYzc5MGU1MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxrKln3QCRTZ1gJ50ORGgo0Egcx+
NuZMdBn+0/8sqi4+HYQTe3af40oAKGUpy90V+fJBgokfVoVLVA/pTHtM7LubtUky
30HUCokLIh57xEh0pooy9bbl8FP/DrHi9Rbfva5EiJjIYd5kSx35KAL2M8qSYY7x
gSqXkjC7As+FnwNKHi7u5Ie2Dm7vu2Z2XS1enHRjBE7Z10UPxRnSuKP4RyP9zy6F
RG8DCtJ78pzeSFAaEzBfMQC1kQ3xtRnVhCppWgyPWTPMY9OzFr4UwnKTawNmRSZQ
i7MlgG9xLTaRXVVIOS1T7JsMl26+ABVQCyn+HbwzFeO/4TuswSxEgn8pqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINIbT20Wyycq6lDuUPkmfx5DlL3MB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUUQjEro
WQZjE6PbnLPZcAGJnXxKbiry5TmtMY/2DlyrRXlbSMQRmxjNlxpKPT6ZkaYBGo3f
7pEo8D8KcrpalPPgAl6E6BT7S7eGyWP1p0RVRrm64S9AkaoGaYS6qivkXQade7jq
BW7+xzxE8995zWmKfk993sKiBwrLACeIXc8G2XAMo0vy+49X3MAJsGJsig1Qk95Y
rRQrspbBMkVRD+wrzG+V3kd5Ue7ssMGGIHBRWk8PdleS0aNjAfw8LUVk7tAyNV3v
+92csRnINgJhL1FlKOgQAIgincr16fufurQzWT49JruI3a63gt8uUy+nX1i9dlyQ
nq347xgg64iwHw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:19 2025 by rpki-client