Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File:                     0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier:          d+3HZhMIC3kvQwsCpZJVb9foZinpvnU5jJCrxwjTaUc=
Subject key identifier:   94:7B:6A:2B:E4:54:B4:78:EF:A9:1A:97:CB:7A:DC:F1:5F:F2:59:55
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer:       /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial:       0197493197D70E51ADA2B3AE6628433C5B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number:          1511
Signing time:             Sat 07 Jun 2025 07:01:16 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:16 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:16 +0000
Files and hashes:         1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: aLvaQqZMYdNmQ3BZOOCX+KMw6hoYDvXDtHrkH8xqSQk=)
                          2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:97:d7:0e:51:ad:a2:b3:ae:66:28:43:3c:5b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
        Validity
            Not Before: Jun  7 07:01:16 2025 GMT
            Not After : Jun  8 07:01:16 2025 GMT
        Subject: CN=947b6a2be454b478efa91a97cb7adcf15ff25955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:fa:a9:81:f3:cd:77:79:35:78:00:02:d9:
                    b8:7a:9c:ab:4a:7b:d6:b4:d2:24:e0:9c:75:9a:82:
                    52:ee:3c:1f:be:f1:c2:bf:8d:aa:77:7a:f4:01:96:
                    0c:58:7a:d2:1a:14:67:9e:1d:c1:c2:f2:ee:e3:ba:
                    f1:d3:e7:39:68:6a:8f:ce:c1:01:ac:f8:2f:c1:fe:
                    c7:fa:cf:10:54:b0:60:3b:f6:97:02:2a:43:89:67:
                    2a:a2:60:43:72:83:7a:7f:f5:c0:e9:63:1e:a2:6b:
                    e7:95:64:24:b9:c6:e7:fa:4e:30:b7:20:a0:af:7d:
                    05:87:d5:3b:0a:e1:62:4c:0d:d6:f8:58:0f:d8:a1:
                    85:78:d1:39:33:05:fe:77:4c:2a:0d:38:a7:e9:9f:
                    29:9b:99:67:c9:4f:12:58:77:62:9a:da:b2:fc:f8:
                    6c:83:0c:0b:9d:bb:b7:bd:d3:c4:f1:8e:fd:c3:9b:
                    78:0a:b8:e7:f5:16:33:92:54:8b:b0:85:f4:c3:c3:
                    cd:ed:54:8e:68:c2:d6:02:49:cc:65:57:75:26:22:
                    1b:cf:26:a4:8f:20:ec:b1:85:c6:f7:f4:d9:bb:57:
                    04:ee:1c:5f:0e:b4:f2:0e:ab:68:43:78:12:06:5c:
                    65:a1:42:7d:0a:d2:b8:20:24:61:30:8e:46:f0:a5:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7B:6A:2B:E4:54:B4:78:EF:A9:1A:97:CB:7A:DC:F1:5F:F2:59:55
            X509v3 Authority Key Identifier:
                keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:68:9f:26:fa:65:ea:b5:27:dd:08:9e:36:00:11:51:ee:13:
         72:ee:cf:f3:2d:91:8d:5e:04:4a:27:eb:81:b7:6b:2e:84:4c:
         37:20:c0:26:a4:c2:de:7a:1f:8a:8a:a3:e4:b1:c1:5a:78:e0:
         ad:7a:09:42:86:53:66:e9:52:6b:c9:3d:14:8a:73:d8:82:fa:
         85:52:32:50:e9:62:8c:57:78:6c:51:5a:56:cc:1a:25:c4:d7:
         d3:15:dc:fb:d7:8a:95:b1:ee:0e:73:4e:e3:6a:c6:3c:24:45:
         fe:e0:a7:a8:a1:3d:30:ae:05:9e:ba:26:a9:9d:66:ad:35:77:
         90:8a:50:29:ff:5e:4a:02:11:0b:49:7a:86:9b:68:37:12:c2:
         cf:c2:c3:cd:29:60:dc:24:32:29:04:78:4f:0c:ee:eb:e7:87:
         63:21:26:6f:9f:32:8a:af:8d:b1:02:a2:b4:d6:7e:0d:3b:ef:
         e3:31:58:2c:aa:ba:ad:e8:34:59:69:28:9d:42:b0:fa:cd:46:
         0b:09:8f:d1:0a:9b:2c:8e:01:a1:bc:6b:81:e2:83:8e:d9:f0:
         ff:0e:63:bd:08:df:c1:9e:c1:b6:d9:51:e5:87:8a:6e:0c:b3:
         6e:bf:b4:6e:c4:06:a8:46:5e:5e:33:78:48:c4:f2:8b:49:98:
         ab:b9:9f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMZfXDlGtorOuZihDPFtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1
NjhjYjUwHhcNMjUwNjA3MDcwMTE2WhcNMjUwNjA4MDcwMTE2WjAzMTEwLwYDVQQD
Eyg5NDdiNmEyYmU0NTRiNDc4ZWZhOTFhOTdjYjdhZGNmMTVmZjI1OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlf6qYHzzXd5NXgAAtm4epyrSnvW
tNIk4Jx1moJS7jwfvvHCv42qd3r0AZYMWHrSGhRnnh3BwvLu47rx0+c5aGqPzsEB
rPgvwf7H+s8QVLBgO/aXAipDiWcqomBDcoN6f/XA6WMeomvnlWQkucbn+k4wtyCg
r30Fh9U7CuFiTA3W+FgP2KGFeNE5MwX+d0wqDTin6Z8pm5lnyU8SWHdimtqy/Phs
gwwLnbu3vdPE8Y79w5t4Crjn9RYzklSLsIX0w8PN7VSOaMLWAknMZVd1JiIbzyak
jyDssYXG9/TZu1cE7hxfDrTyDqtoQ3gSBlxloUJ9CtK4ICRhMI5G8KWvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR7aivkVLR476kal8t63PFf8llVMB8GA1UdIwQY
MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt
Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy
LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmifJvpl
6rUn3QieNgARUe4Tcu7P8y2RjV4ESifrgbdrLoRMNyDAJqTC3nofioqj5LHBWnjg
rXoJQoZTZulSa8k9FIpz2IL6hVIyUOlijFd4bFFaVswaJcTX0xXc+9eKlbHuDnNO
42rGPCRF/uCnqKE9MK4FnromqZ1mrTV3kIpQKf9eSgIRC0l6hptoNxLCz8LDzSlg
3CQyKQR4Twzu6+eHYyEmb58yiq+NsQKitNZ+DTvv4zFYLKq6reg0WWkonUKw+s1G
CwmP0QqbLI4BobxrgeKDjtnw/w5jvQjfwZ7BttlR5YeKbgyzbr+0bsQGqEZeXjN4
SMTyi0mYq7mfgg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:39 2025 by rpki-client