Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File:                     fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier:          NXChaQKSgDhAH7jDfh1b9R8Yhr3l5ORXHzqoDDN0LsA=
Subject key identifier:   38:E7:66:78:C8:D6:69:FA:1B:49:DD:C0:AC:2B:24:49:29:78:16:0A
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer:       /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial:       0197542371F0C18194AA3A87207A40DFA6D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number:          074F
Signing time:             Mon 09 Jun 2025 10:01:38 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:38 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:38 +0000
Files and hashes:         1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: dU6iKTSlDyapYl+uw0mFaEIerqv5pIHZV0yKI9AUrOU=)
                          2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:23:71:f0:c1:81:94:aa:3a:87:20:7a:40:df:a6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
        Validity
            Not Before: Jun  9 10:01:38 2025 GMT
            Not After : Jun 10 10:01:38 2025 GMT
        Subject: CN=38e76678c8d669fa1b49ddc0ac2b24492978160a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:95:6a:ef:ea:f5:a1:bc:60:71:e9:3d:e6:
                    bc:d9:34:88:7f:8f:63:21:85:17:00:33:c0:f7:c3:
                    8c:5d:a7:90:f2:59:27:f9:c6:4c:8e:16:e2:d7:2c:
                    e9:d7:33:a0:93:1d:ca:a7:a5:c8:44:7f:ff:91:fc:
                    97:d7:36:98:c5:5b:91:c4:37:68:49:e8:49:8a:7e:
                    63:8d:35:0a:2c:42:fa:51:88:e0:51:82:18:8f:4a:
                    d9:f7:a8:ec:b4:f1:37:45:e4:4c:b5:9a:e6:7d:35:
                    9f:41:5e:81:dd:8f:da:56:3e:90:8e:83:56:ba:ec:
                    9b:0c:21:dd:76:ab:6d:4d:9e:b1:f4:71:57:28:49:
                    63:2f:9e:b8:b6:5c:9b:32:eb:e8:f8:26:7d:b7:1e:
                    5c:ca:a0:d6:ae:6b:3e:5b:4d:f6:bc:18:df:c0:0e:
                    dd:c3:46:20:eb:c7:6d:21:fe:b7:1a:14:59:ef:1a:
                    68:65:0a:fb:f1:86:be:df:25:29:4e:24:a6:0b:02:
                    67:f8:28:c8:ce:e7:d1:ae:ee:05:11:b2:43:f1:ba:
                    d5:9f:c1:ec:b7:34:ea:e2:ad:fe:12:e2:a7:da:e3:
                    0a:32:d2:26:33:96:a7:bf:96:a1:99:d0:73:ee:58:
                    65:24:de:e9:a3:4f:7a:2e:48:c6:36:f2:30:13:5f:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:66:78:C8:D6:69:FA:1B:49:DD:C0:AC:2B:24:49:29:78:16:0A
            X509v3 Authority Key Identifier:
                keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:da:75:ae:97:dc:2d:e0:3a:de:39:b2:0b:59:82:4e:81:
         1b:4c:60:0b:89:a5:a1:3d:72:fd:e3:57:14:63:14:9c:5c:b9:
         95:fb:f8:c0:2e:6a:34:fe:1d:a9:5d:96:89:f4:d1:4b:d1:2c:
         65:87:34:27:67:29:63:ed:52:8c:22:b7:f4:93:72:29:a2:6a:
         ec:14:dd:8d:dc:bc:7e:cc:10:f2:10:6e:7c:db:c8:d1:a8:82:
         59:36:78:42:cc:d7:fa:06:29:f1:c6:e3:4a:ef:a7:d8:37:3b:
         6c:c2:7e:f8:17:6f:0f:95:81:0d:77:81:0f:93:38:75:19:d7:
         2d:ce:98:52:dd:44:b6:92:2f:b5:9f:4f:e0:29:d1:45:6d:28:
         24:c1:63:b7:45:0c:f5:e9:a5:e9:85:e7:09:c0:1c:ef:85:60:
         05:7f:31:aa:f0:36:d1:92:cf:8d:bf:f1:85:0c:dd:b9:59:be:
         11:94:14:c4:cc:14:98:ca:07:bd:12:4f:0b:24:df:05:da:14:
         60:95:24:ac:ad:5a:0c:ec:53:42:ae:df:75:da:4a:e1:29:01:
         b0:78:b9:87:ee:ae:22:95:f1:ca:b4:87:20:32:0f:46:b2:5e:
         3d:ff:87:53:27:22:7e:53:8b:d3:cc:d4:aa:6b:17:c3:fd:cd:
         3b:4c:4c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUI3HwwYGUqjqHIHpA36bQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGZiZTU1OTQ3MDdmZGNmOTQwMjVlYTE1NTcxYTY4YzI0
ZGE5YWIwHhcNMjUwNjA5MTAwMTM4WhcNMjUwNjEwMTAwMTM4WjAzMTEwLwYDVQQD
EygzOGU3NjY3OGM4ZDY2OWZhMWI0OWRkYzBhYzJiMjQ0OTI5NzgxNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W+Vau/q9aG8YHHpPea82TSIf49j
IYUXADPA98OMXaeQ8lkn+cZMjhbi1yzp1zOgkx3Kp6XIRH//kfyX1zaYxVuRxDdo
SehJin5jjTUKLEL6UYjgUYIYj0rZ96jstPE3ReRMtZrmfTWfQV6B3Y/aVj6QjoNW
uuybDCHddqttTZ6x9HFXKEljL564tlybMuvo+CZ9tx5cyqDWrms+W032vBjfwA7d
w0Yg68dtIf63GhRZ7xpoZQr78Ya+3yUpTiSmCwJn+CjIzufRru4FEbJD8brVn8Hs
tzTq4q3+EuKn2uMKMtImM5anv5ahmdBz7lhlJN7po096LkjGNvIwE19IowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjnZnjI1mn6G0ndwKwrJEkpeBYKMB8GA1UdIwQY
MBaAFH1PvlWUcH/c+UAl6hVXGmjCTamrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMt
N2M3MzA1OTI3OGVmLzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMtN2M3MzA1OTI3OGVm
LzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUvada6X
3C3gOt45sgtZgk6BG0xgC4mloT1y/eNXFGMUnFy5lfv4wC5qNP4dqV2WifTRS9Es
ZYc0J2cpY+1SjCK39JNyKaJq7BTdjdy8fswQ8hBufNvI0aiCWTZ4QszX+gYp8cbj
Su+n2Dc7bMJ++BdvD5WBDXeBD5M4dRnXLc6YUt1EtpIvtZ9P4CnRRW0oJMFjt0UM
9eml6YXnCcAc74VgBX8xqvA20ZLPjb/xhQzduVm+EZQUxMwUmMoHvRJPCyTfBdoU
YJUkrK1aDOxTQq7fddpK4SkBsHi5h+6uIpXxyrSHIDIPRrJePf+HUyciflOL08zU
qmsXw/3NO0xMkQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:45:40 2025 by rpki-client