Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File:                     41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier:          2xsE7r9cR+2PFmIleMxDRQv6MGHNizCGb+Wm2eLxJeU=
Subject key identifier:   D2:4F:13:87:1E:A5:6D:0A:12:34:0A:67:D7:64:28:54:16:1C:5E:4B
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer:       /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial:       019749D5D041C8F103CC83F6F5281B4C31FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number:          098B
Signing time:             Sat 07 Jun 2025 10:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:38 +0000
Files and hashes:         1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
                          2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: nYpqWa+XQroyUY8hTdP6qVarWhxLB7t+JBXw2VxIpLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:d0:41:c8:f1:03:cc:83:f6:f5:28:1b:4c:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
        Validity
            Not Before: Jun  7 10:00:38 2025 GMT
            Not After : Jun  8 10:00:38 2025 GMT
        Subject: CN=d24f13871ea56d0a12340a67d7642854161c5e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:6e:21:bc:ce:1a:dc:90:b9:c3:fa:78:e7:
                    ab:c9:aa:d0:9f:cd:a1:f4:09:78:e3:51:e3:27:9d:
                    e1:2f:b6:89:e7:c7:a1:e1:50:be:f6:d9:7c:25:c7:
                    a9:4d:85:e0:8d:7e:3a:e8:1d:47:d8:76:cd:66:b5:
                    cf:df:66:60:43:fc:6b:20:f7:74:fa:18:3e:5e:38:
                    e6:db:47:0c:4a:3b:20:03:7f:4a:b6:64:6b:e2:06:
                    7f:03:1b:af:3b:f3:be:12:26:80:2e:2f:70:e4:8b:
                    91:fc:2b:7c:5c:61:f8:b3:08:74:cb:0b:29:37:56:
                    2e:cf:6f:fb:36:e9:19:78:d1:f7:bb:bc:d8:ee:9f:
                    2c:72:21:fd:3d:e0:23:d7:59:c9:6c:f7:34:b5:17:
                    1d:58:02:dd:31:91:1e:f4:9d:47:6d:da:3c:df:2a:
                    e2:b7:50:55:b4:a1:8a:fd:9d:3f:88:f0:d0:4d:70:
                    4b:ca:a7:0f:03:9a:b2:88:d3:32:d4:5a:b5:c2:14:
                    05:71:51:47:1f:09:d6:fa:b0:52:bc:83:1e:92:3a:
                    2f:67:e7:32:c0:53:9a:89:7e:af:03:0f:f4:ee:d1:
                    e2:fd:6f:23:14:7b:05:a6:6f:36:d0:73:71:5a:8e:
                    a1:a0:6f:82:b2:ea:6d:66:9e:d7:df:0e:72:dc:19:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4F:13:87:1E:A5:6D:0A:12:34:0A:67:D7:64:28:54:16:1C:5E:4B
            X509v3 Authority Key Identifier:
                keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:84:21:4f:96:1c:b8:73:d1:cd:60:2d:4e:83:a7:97:06:5f:
         c7:13:d5:f9:50:f3:b4:bb:83:5f:eb:db:b5:cb:32:92:41:40:
         fb:d3:e3:a1:20:ce:ab:a6:5f:ba:d8:b7:a3:ca:20:e7:e1:15:
         c7:29:64:34:e1:f8:2f:64:29:6b:12:50:c6:8c:f6:19:1e:0d:
         e5:2f:91:10:f6:94:b8:1c:a2:32:eb:12:3a:97:bb:25:45:17:
         63:58:cc:7d:0c:d9:42:cf:46:69:62:88:9a:8d:55:39:db:cd:
         59:52:d9:69:90:71:a8:e6:f6:cc:f7:d2:2e:6d:11:04:af:60:
         b2:8f:22:f3:06:58:4e:5a:ef:79:c6:63:a9:c6:f6:9f:36:fb:
         cb:82:1f:bd:38:4d:f5:40:40:90:18:66:93:7a:95:54:e0:52:
         56:cd:f2:4f:4c:4c:3e:a3:cc:b3:26:35:7f:d5:b5:42:c3:34:
         aa:9e:4d:92:f7:c7:64:8f:12:ca:67:7c:4f:24:47:b5:fd:f6:
         a9:3f:36:68:25:c2:9b:4f:9c:3c:09:f3:71:50:76:4e:ec:39:
         94:38:d8:2e:5d:fc:04:95:01:bd:b4:58:7d:28:10:96:b2:ea:
         61:2e:dd:5c:94:03:dd:9b:83:a6:56:9b:50:e9:79:b2:c7:61:
         02:9f:d9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1dBByPEDzIP29SgbTDH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNTZmNWMyM2NjZWM2NDY0MDY4NWU0NGQ1OWJjNGI2ZDQ0
ZGFhYjkwHhcNMjUwNjA3MTAwMDM4WhcNMjUwNjA4MTAwMDM4WjAzMTEwLwYDVQQD
EyhkMjRmMTM4NzFlYTU2ZDBhMTIzNDBhNjdkNzY0Mjg1NDE2MWM1ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUhuIbzOGtyQucP6eOeryarQn82h
9Al441HjJ53hL7aJ58eh4VC+9tl8JcepTYXgjX466B1H2HbNZrXP32ZgQ/xrIPd0
+hg+Xjjm20cMSjsgA39KtmRr4gZ/AxuvO/O+EiaALi9w5IuR/Ct8XGH4swh0ywsp
N1Yuz2/7NukZeNH3u7zY7p8sciH9PeAj11nJbPc0tRcdWALdMZEe9J1Hbdo83yri
t1BVtKGK/Z0/iPDQTXBLyqcPA5qyiNMy1Fq1whQFcVFHHwnW+rBSvIMekjovZ+cy
wFOaiX6vAw/07tHi/W8jFHsFpm820HNxWo6hoG+CsuptZp7X3w5y3BmcwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJPE4cepW0KEjQKZ9dkKFQWHF5LMB8GA1UdIwQY
MBaAFONW9cI8zsZGQGheRNWbxLbUTaq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMt
M2NhZGVjNDZlNWMzLzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMtM2NhZGVjNDZlNWMz
LzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIQhT5Yc
uHPRzWAtToOnlwZfxxPV+VDztLuDX+vbtcsykkFA+9PjoSDOq6Zfuti3o8og5+EV
xylkNOH4L2QpaxJQxoz2GR4N5S+REPaUuByiMusSOpe7JUUXY1jMfQzZQs9GaWKI
mo1VOdvNWVLZaZBxqOb2zPfSLm0RBK9gso8i8wZYTlrvecZjqcb2nzb7y4IfvThN
9UBAkBhmk3qVVOBSVs3yT0xMPqPMsyY1f9W1QsM0qp5NkvfHZI8Symd8TyRHtf32
qT82aCXCm0+cPAnzcVB2Tuw5lDjYLl38BJUBvbRYfSgQlrLqYS7dXJQD3ZuDplab
UOl5ssdhAp/ZZg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:12 2025 by rpki-client