Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          9+VUZJAl5ZpKc3ZgIxodsr4LAJkmRrm3B+qapUfhBfA=
Subject key identifier:   D4:DA:1A:CD:52:E3:6C:31:6F:47:93:BF:13:C1:91:5C:13:E9:DB:CF
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       019748C362B3EA11C4DEE73FBCE5021CAE92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          085E
Signing time:             Sat 07 Jun 2025 05:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:53 +0000
Files and hashes:         1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
                          2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: mYZcSKc9mYCq0dFFW4GinOptyZ3OlAHvEUzEI0Sax/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:62:b3:ea:11:c4:de:e7:3f:bc:e5:02:1c:ae:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: Jun  7 05:00:53 2025 GMT
            Not After : Jun  8 05:00:53 2025 GMT
        Subject: CN=d4da1acd52e36c316f4793bf13c1915c13e9dbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:cb:d1:98:d3:dc:ff:5b:3e:14:51:59:15:
                    7a:9b:2c:9a:7b:2e:81:5a:a3:a3:fc:00:39:65:d1:
                    96:11:1e:43:eb:09:68:47:37:76:f8:e8:1a:7a:6c:
                    3c:d5:75:49:2e:07:29:d1:c2:32:98:ff:e4:fd:97:
                    72:1b:41:98:db:4c:33:95:19:1a:90:4d:f6:08:92:
                    9c:66:ac:1c:3c:63:2d:7f:6b:38:1e:e9:83:5a:6d:
                    8a:1d:28:e8:a1:b9:53:9b:00:49:18:fe:9d:57:0c:
                    2f:af:27:eb:a0:db:c4:a1:3f:bf:c5:2b:3d:72:d5:
                    35:fd:bb:2b:21:28:b4:06:64:4b:f5:a1:23:fe:70:
                    3b:7d:10:bc:bb:4f:d0:f4:10:2e:89:76:e2:8a:4a:
                    a9:53:f1:9c:ec:0d:a7:92:1d:e4:d4:04:15:35:56:
                    93:12:4e:26:ab:c8:70:53:91:06:3c:5d:3a:2a:ea:
                    ec:2d:18:9b:52:80:39:1c:de:03:8d:88:25:43:f4:
                    94:08:47:de:11:10:8e:05:23:c1:87:fd:a4:0d:12:
                    c5:28:bb:19:43:1e:b7:e5:ff:04:c1:80:c8:9a:4c:
                    65:35:d1:09:52:7e:f9:4d:1d:ed:29:27:c9:56:1c:
                    26:7c:1f:37:94:75:a0:cb:c7:10:5f:28:17:2d:0f:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:1A:CD:52:E3:6C:31:6F:47:93:BF:13:C1:91:5C:13:E9:DB:CF
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:74:e4:e3:8e:7b:ea:a8:28:7f:d1:a5:f3:49:e3:d7:84:b2:
         5c:71:61:78:6c:f2:eb:de:7d:c7:e3:e9:dc:29:04:1c:4d:f0:
         f7:eb:4e:ac:6e:1f:27:94:8c:7d:f7:19:2d:0e:d6:fb:3a:47:
         d3:2c:cc:a3:3f:29:71:92:88:74:2c:4f:9f:23:30:00:db:eb:
         83:61:56:ab:04:9a:08:54:aa:bc:8f:8f:2e:f3:5f:d2:1b:76:
         5b:20:87:1b:0a:e9:bf:05:93:0d:a9:a5:b4:9c:8c:5c:e4:f7:
         19:77:c0:07:64:cc:72:00:41:2b:95:60:c2:a3:20:2f:51:18:
         ed:44:76:57:87:a0:f8:4b:1d:50:cf:0c:eb:39:8c:9a:93:3d:
         08:00:6e:84:38:62:e9:64:92:5c:99:1d:21:c9:f8:01:f0:13:
         0b:3d:ff:e8:cf:e8:7e:1a:bd:01:1e:1f:a9:fc:a5:50:72:85:
         a7:01:de:2c:6e:2d:ed:5e:73:bc:9f:52:51:85:1c:2e:35:ca:
         93:1c:1e:88:c1:b2:69:b6:c9:dd:2b:ba:5b:f6:0a:5a:07:b4:
         c7:26:f6:c4:e8:8b:6c:09:eb:05:8b:52:12:de:97:45:92:84:
         5d:c8:88:b6:83:1a:f6:1a:81:e0:8d:a2:3d:43:57:9d:ff:60:
         d3:ab:72:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw2Kz6hHE3uc/vOUCHK6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjUwNjA3MDUwMDUzWhcNMjUwNjA4MDUwMDUzWjAzMTEwLwYDVQQD
EyhkNGRhMWFjZDUyZTM2YzMxNmY0NzkzYmYxM2MxOTE1YzEzZTlkYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscvL0ZjT3P9bPhRRWRV6myyaey6B
WqOj/AA5ZdGWER5D6wloRzd2+Ogaemw81XVJLgcp0cIymP/k/ZdyG0GY20wzlRka
kE32CJKcZqwcPGMtf2s4HumDWm2KHSjooblTmwBJGP6dVwwvryfroNvEoT+/xSs9
ctU1/bsrISi0BmRL9aEj/nA7fRC8u0/Q9BAuiXbiikqpU/Gc7A2nkh3k1AQVNVaT
Ek4mq8hwU5EGPF06KursLRibUoA5HN4DjYglQ/SUCEfeERCOBSPBh/2kDRLFKLsZ
Qx635f8EwYDImkxlNdEJUn75TR3tKSfJVhwmfB83lHWgy8cQXygXLQ9VpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTaGs1S42wxb0eTvxPBkVwT6dvPMB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnTk4457
6qgof9Gl80nj14SyXHFheGzy6959x+Pp3CkEHE3w9+tOrG4fJ5SMffcZLQ7W+zpH
0yzMoz8pcZKIdCxPnyMwANvrg2FWqwSaCFSqvI+PLvNf0ht2WyCHGwrpvwWTDaml
tJyMXOT3GXfAB2TMcgBBK5VgwqMgL1EY7UR2V4eg+EsdUM8M6zmMmpM9CABuhDhi
6WSSXJkdIcn4AfATCz3/6M/ofhq9AR4fqfylUHKFpwHeLG4t7V5zvJ9SUYUcLjXK
kxweiMGyabbJ3Su6W/YKWge0xyb2xOiLbAnrBYtSEt6XRZKEXciItoMa9hqB4I2i
PUNXnf9g06tySA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:35 2025 by rpki-client