Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File:                     386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier:          wLeIaIOdEzkAO97D84xD4PokjOQGWBwQAQhj8pOMV4U=
Subject key identifier:   22:48:98:B5:1B:88:59:ED:F8:FE:FC:4E:8A:BE:86:1A:60:BA:93:C0
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer:       /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial:       01974A7B16DF6DCDE4B756A4DBB429E3750C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number:          04B6
Signing time:             Sat 07 Jun 2025 13:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:10 +0000
Files and hashes:         1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: 2/+/zHjlNH7abszsGNbFnhp51WN8u+2ZgZd7zqfcLHQ=)
                          2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:16:df:6d:cd:e4:b7:56:a4:db:b4:29:e3:75:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
        Validity
            Not Before: Jun  7 13:01:10 2025 GMT
            Not After : Jun  8 13:01:10 2025 GMT
        Subject: CN=224898b51b8859edf8fefc4e8abe861a60ba93c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:16:95:68:90:e9:74:3c:1c:9d:fd:19:73:
                    8b:29:99:b7:37:c4:60:05:81:0f:53:86:a4:10:fb:
                    5c:6a:ef:70:4d:83:aa:0a:91:b2:01:f3:2d:37:cf:
                    8b:23:07:13:7e:78:17:6b:fa:64:2d:c4:d6:8e:46:
                    8b:b9:74:87:df:6c:97:28:91:d8:5e:56:75:28:e7:
                    0e:d5:be:d1:4d:0d:eb:65:8b:9c:9c:7f:05:c2:f9:
                    0d:2e:80:1c:ff:5d:89:2b:c4:41:fd:aa:21:e1:e4:
                    af:b5:f1:4a:27:90:24:e4:7e:6c:28:20:14:a2:09:
                    15:19:a4:68:a1:1d:c3:10:62:37:6d:f0:7b:c6:3d:
                    33:cb:66:62:0d:cb:5a:8a:2a:71:c7:25:da:a7:77:
                    d0:30:71:cf:15:b5:61:5c:0b:fa:4a:4e:2c:8d:ef:
                    f4:f8:94:9a:37:05:03:aa:a4:85:6e:58:9a:14:f8:
                    49:92:b1:67:9d:b4:ae:f9:71:90:4f:85:53:31:75:
                    ee:74:f0:64:bd:f2:37:2f:0e:a1:9e:8b:67:c7:41:
                    da:23:0b:cb:d6:d8:c5:53:94:0c:ba:e0:56:91:4e:
                    4c:0d:df:76:fa:9c:9d:3e:a1:4b:2c:89:3d:e6:a1:
                    55:da:ab:70:f8:99:4a:87:d5:63:8a:19:87:74:bd:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:48:98:B5:1B:88:59:ED:F8:FE:FC:4E:8A:BE:86:1A:60:BA:93:C0
            X509v3 Authority Key Identifier:
                keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ea:d7:3e:39:32:f7:33:4a:c3:be:1e:09:63:bc:3f:63:9d:
         90:db:a0:67:a0:6f:62:a9:fa:5e:07:14:5b:b9:d1:70:8f:7d:
         fd:b1:d7:a9:1f:49:68:bd:da:ab:e7:4a:80:24:5c:9b:24:18:
         27:3c:13:c8:3a:70:85:4b:9d:70:c8:75:58:e9:a8:6e:2e:75:
         26:40:63:b7:06:63:9b:86:3f:d8:14:16:fc:96:99:e3:d3:e2:
         30:f8:02:91:d6:7d:d7:f5:0a:29:88:2f:61:2e:5d:33:b0:43:
         2e:3b:3f:96:88:a3:09:3c:aa:90:50:c4:0e:0d:c2:3f:5c:80:
         0d:15:4e:30:d3:ed:69:c0:74:7e:5e:6c:61:40:47:b0:6d:4a:
         47:49:ce:df:37:92:9c:4d:ec:5e:43:c6:a2:c9:86:33:8d:5d:
         91:41:da:8d:3e:f6:1b:e9:30:13:b7:c7:85:c4:ce:93:66:8d:
         e5:ef:c5:55:65:98:7b:38:ef:5a:7c:85:ae:10:33:db:ee:18:
         ba:cd:bc:b3:b4:86:57:c5:af:11:43:6e:fd:ca:f1:42:d4:ac:
         14:06:15:1d:72:ab:1a:f5:09:3e:1b:93:64:df:5e:e6:0b:3b:
         63:92:ae:36:90:7a:76:b0:de:45:ed:e4:87:a0:a2:03:97:94:
         82:ef:e8:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexbfbc3kt1ak27Qp43UMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmY2U5NjFhZTBlMTYxOGU3NDk5Yzg4YTIyNTU5YmIyMDI1
MDIyYWQwHhcNMjUwNjA3MTMwMTEwWhcNMjUwNjA4MTMwMTEwWjAzMTEwLwYDVQQD
EygyMjQ4OThiNTFiODg1OWVkZjhmZWZjNGU4YWJlODYxYTYwYmE5M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFEWlWiQ6XQ8HJ39GXOLKZm3N8Rg
BYEPU4akEPtcau9wTYOqCpGyAfMtN8+LIwcTfngXa/pkLcTWjkaLuXSH32yXKJHY
XlZ1KOcO1b7RTQ3rZYucnH8FwvkNLoAc/12JK8RB/aoh4eSvtfFKJ5Ak5H5sKCAU
ogkVGaRooR3DEGI3bfB7xj0zy2ZiDctaiipxxyXap3fQMHHPFbVhXAv6Sk4sje/0
+JSaNwUDqqSFbliaFPhJkrFnnbSu+XGQT4VTMXXudPBkvfI3Lw6hnotnx0HaIwvL
1tjFU5QMuuBWkU5MDd92+pydPqFLLIk95qFV2qtw+JlKh9VjihmHdL0eOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJImLUbiFnt+P78Toq+hhpgupPAMB8GA1UdIwQY
MBaAFN/Olhrg4WGOdJnIiiJVm7ICUCKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEt
ZTMzZDYxNmYxOWU4LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEtZTMzZDYxNmYxOWU4
LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEerXPjky
9zNKw74eCWO8P2OdkNugZ6BvYqn6XgcUW7nRcI99/bHXqR9JaL3aq+dKgCRcmyQY
JzwTyDpwhUudcMh1WOmobi51JkBjtwZjm4Y/2BQW/JaZ49PiMPgCkdZ91/UKKYgv
YS5dM7BDLjs/loijCTyqkFDEDg3CP1yADRVOMNPtacB0fl5sYUBHsG1KR0nO3zeS
nE3sXkPGosmGM41dkUHajT72G+kwE7fHhcTOk2aN5e/FVWWYezjvWnyFrhAz2+4Y
us28s7SGV8WvEUNu/crxQtSsFAYVHXKrGvUJPhuTZN9e5gs7Y5KuNpB6drDeRe3k
h6CiA5eUgu/oCw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:27 2025 by rpki-client