Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File:                     RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier:          DTgsQSqd88qIM/M6luQIL8Nk569DEaaE/Aty9+PY11k=
Subject key identifier:   9B:BD:4B:FF:EE:F7:DA:F9:9D:F8:B6:09:DA:05:EF:DC:C1:66:3D:7E
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer:       /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial:       0197665F98BE7711EC5C9B42C630FA790E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number:          1358
Signing time:             Thu 12 Jun 2025 23:00:30 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:30 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:30 +0000
Files and hashes:         1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: vFWJEdItbxm51DXwdP/Rf0KMR7vWZxzJwR9bQaazlso=)
                          2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:98:be:77:11:ec:5c:9b:42:c6:30:fa:79:0e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
        Validity
            Not Before: Jun 12 23:00:30 2025 GMT
            Not After : Jun 13 23:00:30 2025 GMT
        Subject: CN=9bbd4bffeef7daf99df8b609da05efdcc1663d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:cc:40:9d:b9:4c:86:88:33:02:ee:ea:76:
                    93:f8:64:86:e4:2d:9a:1b:70:d2:8a:7a:f2:37:1e:
                    ed:8b:cb:0f:bc:ab:0f:1c:06:8c:5b:89:75:16:73:
                    7f:63:89:77:12:75:1a:89:b2:36:98:cd:4c:58:d5:
                    ea:8d:6e:ab:72:29:a3:a0:a2:4d:fe:b9:bb:3e:1e:
                    fc:da:2e:c8:77:7c:14:34:61:fa:bb:0b:96:44:bb:
                    9d:79:d3:54:e5:34:bc:3f:85:22:84:1a:0a:5d:11:
                    57:3a:6c:4c:7d:5a:7e:0d:b8:ea:78:b2:69:77:df:
                    8c:43:74:53:ac:66:b2:c1:94:c4:a6:60:e0:5c:06:
                    cf:09:78:b6:9b:da:81:e9:00:24:75:dd:44:2e:ab:
                    93:a5:b7:ac:a9:e3:a2:aa:67:d5:8a:a7:10:5b:88:
                    08:e1:5e:18:5d:38:34:cd:d5:8d:85:ed:e7:0d:17:
                    05:ef:64:c8:b4:6b:94:76:91:71:97:cc:92:09:c5:
                    df:29:bb:cf:03:dd:dd:e2:4a:0b:ed:04:3d:e8:fa:
                    74:e3:8c:41:7a:24:02:2f:79:c1:e8:00:9c:e5:b2:
                    cc:34:f8:24:f3:6f:44:06:99:9b:18:01:39:e6:d7:
                    9a:56:23:98:73:ee:6a:60:75:09:6d:5e:c0:8a:1c:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BD:4B:FF:EE:F7:DA:F9:9D:F8:B6:09:DA:05:EF:DC:C1:66:3D:7E
            X509v3 Authority Key Identifier:
                keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:74:7f:1a:87:e2:0d:6b:5b:1c:db:ff:27:e5:d0:8c:a8:
         c8:dd:a3:96:cc:5c:1b:30:e8:d5:84:7f:d7:59:5e:87:1e:bc:
         da:98:3a:b5:f5:5e:96:9a:7e:80:54:05:9e:13:11:35:43:cc:
         63:0f:84:a0:8e:51:e8:93:af:21:64:72:95:87:70:39:82:35:
         f9:68:22:6d:9d:94:24:0e:13:98:28:b5:3b:53:d0:49:2e:9e:
         92:6a:d3:0b:21:2a:2f:ff:ae:aa:11:91:f7:f3:98:bd:47:e4:
         ca:01:aa:91:04:d4:7c:b7:e6:01:0b:df:ce:38:6f:f4:2e:6f:
         ac:b7:75:f5:0d:6c:77:43:6a:57:79:20:88:4b:7e:23:99:11:
         b3:03:b7:ab:dc:d4:55:34:31:4c:78:c3:d4:7e:97:f9:b6:ad:
         dc:58:b0:d2:62:15:77:13:22:af:39:b3:23:c2:2e:79:c5:fe:
         33:40:bf:61:ff:18:9e:4c:f9:5c:6d:7c:91:2b:d3:26:e7:64:
         09:d7:4f:65:10:20:e9:0f:61:ed:1f:44:c4:c2:b7:02:ae:8a:
         b5:77:8a:85:be:60:c9:5f:cb:46:41:7b:65:df:10:03:d4:59:
         22:88:1e:cb:4a:d9:38:15:1e:21:fd:8a:4f:8f:50:fd:a6:39:
         50:5b:d7:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmX5i+dxHsXJtCxjD6eQ5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NjE1OGM3NWIxZTMyMDNiMjJiNTgzY2MxODRjM2Y1NDg4
YjI1ZDYwHhcNMjUwNjEyMjMwMDMwWhcNMjUwNjEzMjMwMDMwWjAzMTEwLwYDVQQD
Eyg5YmJkNGJmZmVlZjdkYWY5OWRmOGI2MDlkYTA1ZWZkY2MxNjYzZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8TMQJ25TIaIMwLu6naT+GSG5C2a
G3DSinryNx7ti8sPvKsPHAaMW4l1FnN/Y4l3EnUaibI2mM1MWNXqjW6rcimjoKJN
/rm7Ph782i7Id3wUNGH6uwuWRLudedNU5TS8P4UihBoKXRFXOmxMfVp+DbjqeLJp
d9+MQ3RTrGaywZTEpmDgXAbPCXi2m9qB6QAkdd1ELquTpbesqeOiqmfViqcQW4gI
4V4YXTg0zdWNhe3nDRcF72TItGuUdpFxl8ySCcXfKbvPA93d4koL7QQ96Pp044xB
eiQCL3nB6ACc5bLMNPgk829EBpmbGAE55teaViOYc+5qYHUJbV7AihwzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu9S//u99r5nfi2CdoF79zBZj1+MB8GA1UdIwQY
MBaAFERhWMdbHjIDsitYPMGEw/VIiyXWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jZDcwM2EtMDZmOS00MTA2LThjOGQt
YjcyODliMzcwYjZkLzEvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jZDcwM2EtMDZmOS00MTA2LThjOGQtYjcyODliMzcwYjZk
LzEvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuZ0fxqH
4g1rWxzb/yfl0IyoyN2jlsxcGzDo1YR/11lehx682pg6tfVelpp+gFQFnhMRNUPM
Yw+EoI5R6JOvIWRylYdwOYI1+WgibZ2UJA4TmCi1O1PQSS6ekmrTCyEqL/+uqhGR
9/OYvUfkygGqkQTUfLfmAQvfzjhv9C5vrLd19Q1sd0NqV3kgiEt+I5kRswO3q9zU
VTQxTHjD1H6X+bat3Fiw0mIVdxMirzmzI8IuecX+M0C/Yf8Ynkz5XG18kSvTJudk
CddPZRAg6Q9h7R9ExMK3Aq6KtXeKhb5gyV/LRkF7Zd8QA9RZIogey0rZOBUeIf2K
T49Q/aY5UFvXKw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:02:04 2025 by rpki-client