Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          q0iPI7YzHihveReVnFCabnZCXlsPkmfR4QNnx6UXxKE=
Subject key identifier:   64:C9:23:B1:ED:FF:73:C3:67:8F:75:83:80:BA:C0:47:5F:91:50:D0
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       01974FD795B99DB73800ED60632DBAEF2555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          0F56
Signing time:             Sun 08 Jun 2025 14:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:18 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: E0xqKgLZAj9pHQMRlF78trDuw6XaFx1BNVG/QpN4SMQ=)
                          2: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (hash: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=)
                          3: NibkP4WwhFNgZ640yvtXLfFiJrg.roa (hash: a/esbL59f+nmLVH7R2fnAmETOkLcHJ2GIe7zJ0dWkJ0=)
                          4: rUM43ISndw5pYAQLWf2KHIAwsfw.roa (hash: KeqCps5BUoZfWz/djUGV6w2EVQtKO+PPXxPc78g2vTo=)
                          5: xi9oGHAZGsjdKybpmWD7Ku8W0ZM.roa (hash: 5sRqk+0ypVIu7UFoyuyrbtTdv9EciH6vt3GDL2ydd68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:95:b9:9d:b7:38:00:ed:60:63:2d:ba:ef:25:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Jun  8 14:00:18 2025 GMT
            Not After : Jun  9 14:00:18 2025 GMT
        Subject: CN=64c923b1edff73c3678f758380bac0475f9150d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:17:5e:d4:63:c2:36:db:ec:1d:54:d0:12:cb:
                    f2:a9:ee:fe:32:f3:3a:c4:3b:98:e8:8e:cb:a1:4d:
                    43:d9:a2:a4:4d:81:b3:4a:8f:b3:fd:46:00:c8:0e:
                    a8:88:d3:97:d3:29:1a:6c:fc:7a:d6:77:19:60:09:
                    de:d7:94:3a:a4:c6:44:69:71:2e:21:1f:f5:02:5b:
                    54:42:49:3d:56:20:dd:50:12:c4:0f:4f:f2:2e:ad:
                    70:0e:78:57:c6:fa:3f:b8:65:08:e0:ba:38:5d:7e:
                    99:cb:69:d9:a5:13:a5:c0:3f:85:44:30:52:c2:fe:
                    5f:fe:dc:67:56:fd:8b:b3:26:c7:8a:09:3d:5c:91:
                    6e:18:96:ae:ae:e8:ec:d9:c5:05:fd:49:4d:8d:85:
                    f3:37:26:f8:ee:ec:a3:ff:f8:4a:c7:21:2a:f0:af:
                    32:da:da:e9:9a:55:01:96:4c:47:e2:55:07:7f:b3:
                    25:ed:d5:62:e2:03:3a:e2:09:ee:5a:22:e5:89:4d:
                    22:c9:9c:89:51:74:cd:31:b7:0d:63:e4:42:b8:5c:
                    21:d1:b2:f8:6e:cf:f4:d7:95:cc:ec:61:04:67:26:
                    1f:87:31:69:10:e1:ca:e2:dd:aa:c6:d8:e6:dc:0b:
                    31:d6:44:9e:c6:a7:d7:6a:8d:4f:1e:54:d9:71:88:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C9:23:B1:ED:FF:73:C3:67:8F:75:83:80:BA:C0:47:5F:91:50:D0
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:fc:55:a5:aa:5e:0d:05:e7:0c:37:90:ac:e3:2a:67:3a:
         68:8a:7a:cc:cc:b7:7f:7e:61:00:c5:b1:eb:1b:76:89:6c:ff:
         d4:0b:3d:19:44:de:db:f4:63:2a:3c:1b:3c:8b:91:14:f1:06:
         fb:8f:4c:72:50:59:33:13:dd:27:a7:35:da:11:de:05:26:a6:
         49:23:04:f2:25:43:5c:d4:8e:e6:97:73:70:27:f9:fe:1c:41:
         b1:c7:fb:12:60:ec:6f:6b:46:b5:71:32:c9:ad:ae:0f:56:95:
         91:84:a5:8e:42:fa:e6:6f:6e:90:b9:9c:1b:73:22:72:f2:94:
         95:6c:db:75:50:02:37:62:fa:35:ad:fc:38:9d:a8:6e:88:90:
         2d:e2:0e:a4:30:55:69:88:73:fb:48:02:42:47:25:51:16:9a:
         4e:98:52:48:1c:55:1a:6e:19:56:ac:88:19:c3:b3:ef:df:8b:
         ed:ec:17:cd:2a:9d:21:27:94:d7:d4:ea:5d:68:20:b9:69:49:
         35:e1:be:89:7b:09:ba:5f:b2:09:81:7b:e5:bb:f6:05:8b:cb:
         24:68:02:7e:2b:6d:f7:0d:07:25:66:65:5a:29:3e:9c:68:f8:
         fa:1e:28:1f:02:72:a9:94:ad:8a:7a:fd:e9:c4:ef:5d:0d:2a:
         46:53:0c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP15W5nbc4AO1gYy267yVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw
MWFiODEwHhcNMjUwNjA4MTQwMDE4WhcNMjUwNjA5MTQwMDE4WjAzMTEwLwYDVQQD
Eyg2NGM5MjNiMWVkZmY3M2MzNjc4Zjc1ODM4MGJhYzA0NzVmOTE1MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rde1GPCNtvsHVTQEsvyqe7+MvM6
xDuY6I7LoU1D2aKkTYGzSo+z/UYAyA6oiNOX0ykabPx61ncZYAne15Q6pMZEaXEu
IR/1AltUQkk9ViDdUBLED0/yLq1wDnhXxvo/uGUI4Lo4XX6Zy2nZpROlwD+FRDBS
wv5f/txnVv2LsybHigk9XJFuGJaurujs2cUF/UlNjYXzNyb47uyj//hKxyEq8K8y
2trpmlUBlkxH4lUHf7Ml7dVi4gM64gnuWiLliU0iyZyJUXTNMbcNY+RCuFwh0bL4
bs/015XM7GEEZyYfhzFpEOHK4t2qxtjm3Asx1kSexqfXao1PHlTZcYj4OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTJI7Ht/3PDZ491g4C6wEdfkVDQMB8GA1UdIwQY
MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt
MmMyMDFkMzBhZTA1LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1
LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOb8VaWq
Xg0F5ww3kKzjKmc6aIp6zMy3f35hAMWx6xt2iWz/1As9GUTe2/RjKjwbPIuRFPEG
+49MclBZMxPdJ6c12hHeBSamSSME8iVDXNSO5pdzcCf5/hxBscf7EmDsb2tGtXEy
ya2uD1aVkYSljkL65m9ukLmcG3MicvKUlWzbdVACN2L6Na38OJ2oboiQLeIOpDBV
aYhz+0gCQkclURaaTphSSBxVGm4ZVqyIGcOz79+L7ewXzSqdISeU19TqXWgguWlJ
NeG+iXsJul+yCYF75bv2BYvLJGgCfitt9w0HJWZlWik+nGj4+h4oHwJyqZStinr9
6cTvXQ0qRlMMcw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:27 2025 by rpki-client