Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          ZNpMY289N/5YdVl4KEpapTCc5SU/mNQ5MTT6NyUI+Mk=
Subject key identifier:   B3:38:07:95:D9:2D:CF:ED:28:4C:34:5E:D6:14:4F:78:0D:01:74:81
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       01975D25B0DCBDB9157686CB558F0F6E5D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 04:00:40 +0000
Manifest this update:     Wed 11 Jun 2025 04:00:40 +0000
Manifest next update:     Thu 12 Jun 2025 04:00:40 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: +ccWZcAAduEdRe+rE9l0892lECqbhdIHhG/KKEEerIA=)
                          2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:25:b0:dc:bd:b9:15:76:86:cb:55:8f:0f:6e:5d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: Jun 11 04:00:40 2025 GMT
            Not After : Jun 12 04:00:40 2025 GMT
        Subject: CN=b3380795d92dcfed284c345ed6144f780d017481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:af:4b:6b:6f:d3:0a:4d:57:b7:b4:50:f2:
                    a9:2d:94:da:b2:4a:68:2c:74:07:01:5b:17:74:07:
                    5e:0b:a5:a2:36:7a:49:71:e5:78:20:47:e2:37:08:
                    62:ac:69:74:90:ae:aa:90:a5:55:67:4a:34:03:64:
                    dd:66:be:ce:da:55:24:d3:c1:68:7c:30:a3:db:af:
                    96:42:73:37:0b:f1:7c:8f:92:1b:38:67:f2:67:8f:
                    3d:24:96:7c:c0:86:eb:77:87:37:e0:0b:22:c3:f6:
                    8a:fe:00:fd:46:cd:d0:3e:39:4e:89:9c:30:6a:2d:
                    92:3d:50:3d:38:66:d5:03:1b:24:69:24:37:66:00:
                    e4:be:01:22:c8:c5:c0:f4:9d:90:92:0a:a4:d6:00:
                    c7:37:2e:2b:77:54:e4:8f:97:35:d0:ea:7a:f6:c4:
                    cc:c1:0d:ff:ba:2d:83:67:6d:00:65:d7:7e:b7:39:
                    e5:0c:cf:a9:22:be:c0:f3:98:33:25:d7:d3:c1:36:
                    b5:60:c4:55:de:dc:3d:e6:65:d8:74:05:36:c5:ed:
                    06:31:98:46:bd:ca:8c:c2:3a:01:f2:9d:5a:5e:f8:
                    d5:9e:8a:89:3d:ff:23:d7:d4:11:88:3e:f7:9e:e5:
                    6f:2c:be:ed:c0:a7:7f:3d:dc:38:70:c2:68:f7:78:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:38:07:95:D9:2D:CF:ED:28:4C:34:5E:D6:14:4F:78:0D:01:74:81
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:01:ba:58:be:91:ca:9e:b7:40:76:49:ff:e5:3b:74:db:0a:
         18:e6:90:4d:24:16:d5:cc:26:ad:d1:25:7b:e1:3e:3c:a7:4b:
         bb:13:d8:d8:80:ec:8d:66:a8:67:f1:84:53:61:75:28:ae:90:
         de:4b:d0:7a:16:49:6d:af:49:6e:1b:18:f1:e9:78:ca:bc:0c:
         93:a8:a1:de:61:93:10:b0:c5:19:ed:15:04:7a:e4:cc:c2:0b:
         9c:0d:9d:e3:5d:ae:93:dd:6e:9c:c8:f3:e8:d4:df:85:9f:7c:
         b7:39:15:fb:df:9c:5a:6d:c2:24:94:47:7c:4e:39:82:35:ba:
         a4:1d:b4:d5:df:4d:2b:25:7a:1e:8b:46:00:b3:59:cf:ac:64:
         c5:5d:96:62:f4:c6:a1:f0:22:4b:87:b2:00:da:d1:a5:0e:b5:
         c3:12:42:d0:10:69:fa:a9:9d:24:2a:29:7c:38:5f:c6:45:bb:
         74:24:f6:3b:69:c4:d1:45:09:8c:1a:f0:18:0d:de:ee:01:b4:
         71:18:b2:1f:66:e6:a9:8c:d9:27:2a:33:2e:14:8f:c7:73:9c:
         35:bd:a1:b8:79:55:c5:73:13:ea:62:46:40:6a:2f:d5:a3:a0:
         a4:f2:af:c8:96:67:b0:10:b3:14:06:6b:9e:cf:bc:c4:a7:0d:
         c6:aa:99:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddJbDcvbkVdobLVY8Pbl0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1
NGIwNTUwHhcNMjUwNjExMDQwMDQwWhcNMjUwNjEyMDQwMDQwWjAzMTEwLwYDVQQD
EyhiMzM4MDc5NWQ5MmRjZmVkMjg0YzM0NWVkNjE0NGY3ODBkMDE3NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhivS2tv0wpNV7e0UPKpLZTaskpo
LHQHAVsXdAdeC6WiNnpJceV4IEfiNwhirGl0kK6qkKVVZ0o0A2TdZr7O2lUk08Fo
fDCj26+WQnM3C/F8j5IbOGfyZ489JJZ8wIbrd4c34Asiw/aK/gD9Rs3QPjlOiZww
ai2SPVA9OGbVAxskaSQ3ZgDkvgEiyMXA9J2Qkgqk1gDHNy4rd1Tkj5c10Op69sTM
wQ3/ui2DZ20AZdd+tznlDM+pIr7A85gzJdfTwTa1YMRV3tw95mXYdAU2xe0GMZhG
vcqMwjoB8p1aXvjVnoqJPf8j19QRiD73nuVvLL7twKd/Pdw4cMJo93hMAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM4B5XZLc/tKEw0XtYUT3gNAXSBMB8GA1UdIwQY
MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt
MmY3NTE5NTIxNmI5LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5
LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQG6WL6R
yp63QHZJ/+U7dNsKGOaQTSQW1cwmrdEle+E+PKdLuxPY2IDsjWaoZ/GEU2F1KK6Q
3kvQehZJba9JbhsY8el4yrwMk6ih3mGTELDFGe0VBHrkzMILnA2d412uk91unMjz
6NTfhZ98tzkV+9+cWm3CJJRHfE45gjW6pB201d9NKyV6HotGALNZz6xkxV2WYvTG
ofAiS4eyANrRpQ61wxJC0BBp+qmdJCopfDhfxkW7dCT2O2nE0UUJjBrwGA3e7gG0
cRiyH2bmqYzZJyozLhSPx3OcNb2huHlVxXMT6mJGQGov1aOgpPKvyJZnsBCzFAZr
ns+8xKcNxqqZ6Q==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:58 2025 by rpki-client