Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File:                     IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier:          W1vXCvfMIy0osjh0iPWLCVNNy9Ti4KPTpvI7EwE66Oo=
Subject key identifier:   82:9D:17:2F:1C:42:12:C1:07:E0:A4:0B:4D:76:DA:F4:FE:D5:F3:47
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer:       /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial:       01974D4479E1887B7906B5DC4CD235D380EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number:          054E
Signing time:             Sun 08 Jun 2025 02:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:22 +0000
Files and hashes:         1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: sNKHHb3EjnpH0fzhJ45sZgEG4EEB4JjEI/Ny6AiwrjY=)
                          2: M9VdnF4uhv3S8ynJo1kTEBW1AUE.roa (hash: wgWraMBXBDnGqGgz/A6JsNtS6LmlDAkjX4m8FBkaGn8=)
                          3: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:79:e1:88:7b:79:06:b5:dc:4c:d2:35:d3:80:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
        Validity
            Not Before: Jun  8 02:00:22 2025 GMT
            Not After : Jun  9 02:00:22 2025 GMT
        Subject: CN=829d172f1c4212c107e0a40b4d76daf4fed5f347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:fb:a5:1a:0d:58:05:0e:a2:5b:44:2c:25:
                    1b:ad:a1:f6:8d:41:f7:5e:4f:c4:c9:70:42:07:44:
                    80:3c:34:9d:a6:6e:cb:be:68:67:31:cf:89:cd:47:
                    e8:f2:0e:03:6b:b6:3f:fb:a3:46:c9:47:ee:44:42:
                    ce:ab:3f:c2:5c:73:04:cc:77:53:f7:f6:84:56:d3:
                    36:24:79:43:fc:68:10:83:f0:f7:84:c1:6f:72:a9:
                    f1:97:56:f9:75:5c:d3:79:0c:31:29:ab:d6:17:87:
                    99:99:14:86:ea:83:05:68:22:b4:c1:5f:d2:6b:ab:
                    0b:36:cd:20:3e:1c:c7:ea:ae:78:b6:c1:84:4e:bd:
                    60:99:74:40:6c:6f:60:52:b6:2b:6c:8c:34:e6:98:
                    39:c0:9f:12:f2:d3:72:c3:fc:c7:66:fe:b6:8b:0d:
                    80:53:b1:2c:ab:8a:97:2a:d8:9c:60:00:e7:01:24:
                    38:e6:34:2d:48:25:30:f2:b6:d4:bf:c5:3a:e8:83:
                    46:b8:64:e7:25:f2:d1:0b:d4:82:a1:ed:02:b9:a1:
                    c6:b0:0c:11:a5:ba:b3:38:84:c9:54:d7:e2:c6:7a:
                    49:b0:49:00:d7:99:a9:ba:24:5a:bf:a8:86:d2:7f:
                    30:00:ef:0c:34:40:37:55:f2:29:a4:93:96:a7:a8:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:17:2F:1C:42:12:C1:07:E0:A4:0B:4D:76:DA:F4:FE:D5:F3:47
            X509v3 Authority Key Identifier:
                keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:30:6a:fa:69:59:8e:b3:7f:15:a2:11:f2:b0:00:0d:e5:
         8a:ab:a3:4a:9d:3d:93:c5:ff:99:33:98:1e:f2:66:49:73:ac:
         bb:cf:62:50:c6:bc:49:5f:fa:9b:7e:d4:54:16:af:d3:a5:8c:
         04:c7:7b:cf:27:8d:c6:bc:63:d0:bd:0b:ea:ad:2b:4e:21:0f:
         b4:91:ac:38:87:2d:08:95:46:99:ca:d3:e1:ae:75:38:b0:20:
         35:d2:70:39:42:f3:94:02:ee:4d:4d:4b:1d:3d:fb:66:05:3b:
         f7:60:0d:a4:77:4c:e6:b9:d3:d6:91:fb:36:6e:99:7e:71:37:
         ed:da:a7:82:5f:a8:5b:9a:4f:f9:91:41:8b:b0:11:69:47:05:
         66:27:43:a6:bf:b4:ef:6c:f4:35:b5:bb:8c:ca:d1:99:f4:25:
         13:c3:04:35:63:08:f0:ce:f5:cb:2c:b2:23:ba:af:d3:25:c8:
         f8:1e:9f:1b:e8:f0:86:8b:7c:f0:4f:45:1a:fc:f3:3c:8b:7b:
         74:56:13:72:32:56:ec:e7:e8:58:69:f8:e0:87:05:4b:21:9d:
         03:8b:52:4e:54:e0:7c:a0:a6:b6:4e:bc:2c:c9:e0:54:29:10:
         4b:52:da:34:6e:d1:ac:f1:28:38:bc:dc:2e:d5:16:5b:33:e2:
         7e:b8:07:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRHnhiHt5BrXcTNI104DqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj
MjgzMjkwHhcNMjUwNjA4MDIwMDIyWhcNMjUwNjA5MDIwMDIyWjAzMTEwLwYDVQQD
Eyg4MjlkMTcyZjFjNDIxMmMxMDdlMGE0MGI0ZDc2ZGFmNGZlZDVmMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbP7pRoNWAUOoltELCUbraH2jUH3
Xk/EyXBCB0SAPDSdpm7LvmhnMc+JzUfo8g4Da7Y/+6NGyUfuRELOqz/CXHMEzHdT
9/aEVtM2JHlD/GgQg/D3hMFvcqnxl1b5dVzTeQwxKavWF4eZmRSG6oMFaCK0wV/S
a6sLNs0gPhzH6q54tsGETr1gmXRAbG9gUrYrbIw05pg5wJ8S8tNyw/zHZv62iw2A
U7Esq4qXKticYADnASQ45jQtSCUw8rbUv8U66INGuGTnJfLRC9SCoe0CuaHGsAwR
pbqzOITJVNfixnpJsEkA15mpuiRav6iG0n8wAO8MNEA3VfIppJOWp6gnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKdFy8cQhLBB+CkC0122vT+1fNHMB8GA1UdIwQY
MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt
NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi
LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV8wavpp
WY6zfxWiEfKwAA3liqujSp09k8X/mTOYHvJmSXOsu89iUMa8SV/6m37UVBav06WM
BMd7zyeNxrxj0L0L6q0rTiEPtJGsOIctCJVGmcrT4a51OLAgNdJwOULzlALuTU1L
HT37ZgU792ANpHdM5rnT1pH7Nm6ZfnE37dqngl+oW5pP+ZFBi7ARaUcFZidDpr+0
72z0NbW7jMrRmfQlE8MENWMI8M71yyyyI7qv0yXI+B6fG+jwhot88E9FGvzzPIt7
dFYTcjJW7OfoWGn44IcFSyGdA4tSTlTgfKCmtk68LMngVCkQS1LaNG7RrPEoOLzc
LtUWWzPifrgHMQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:20:53 2025 by rpki-client