Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          MKwDUKsGQcFQwTNWtAId+6P7eioBHk7q+QO1hqhtTmw=
Subject key identifier:   AB:85:F4:5B:E2:0F:5E:2D:83:29:3A:E1:2D:41:5B:81:E0:34:69:D6
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       01974D7C45059F39D2AE44E0A9CF928BF2E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          06D9
Signing time:             Sun 08 Jun 2025 03:01:19 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:19 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:19 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: ddqXCt/YXXCP2U4dJG8R2ZW/cG22yIEuKXyxLYJ+2cQ=)
                          2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:45:05:9f:39:d2:ae:44:e0:a9:cf:92:8b:f2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Jun  8 03:01:19 2025 GMT
            Not After : Jun  9 03:01:19 2025 GMT
        Subject: CN=ab85f45be20f5e2d83293ae12d415b81e03469d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:dd:67:ad:c4:36:b6:ae:0f:a3:48:88:cc:
                    01:16:29:3d:01:09:4f:29:78:85:9a:5d:2d:0e:ad:
                    cb:26:8a:e5:44:8c:2c:f9:d4:8a:b1:76:06:a5:89:
                    85:a4:12:74:94:b6:74:40:c6:fe:45:69:c9:33:1a:
                    cd:23:6a:56:d2:94:cc:dc:56:69:4e:80:24:c0:02:
                    4e:b9:5d:02:8a:53:33:14:23:d8:0a:0c:1a:57:67:
                    0d:35:09:99:ce:15:7c:23:c8:2d:c2:09:60:09:8d:
                    96:81:f1:96:c6:19:e2:88:ce:09:64:23:11:9d:48:
                    a3:0f:63:25:5b:b5:48:7e:a3:6a:ab:43:96:0d:e4:
                    02:20:a3:64:a4:6d:3a:9f:ba:dc:92:5a:59:91:d2:
                    b7:9a:80:ff:fe:67:e0:92:95:8d:31:e7:15:4c:b7:
                    16:0a:81:86:f8:f2:40:1c:d5:05:77:ed:2c:5d:71:
                    c1:fc:cf:0c:12:7c:60:eb:f6:c5:b5:92:3c:a5:bd:
                    9e:2a:d2:5e:c6:95:e7:87:09:45:bb:15:d3:ef:19:
                    84:3b:cd:80:ad:b6:62:38:67:09:e2:bc:4c:ab:1f:
                    b3:1c:e7:e5:4e:e6:ca:35:b2:f9:dc:da:41:7d:b1:
                    9e:ff:0c:28:93:94:ef:9f:4a:19:19:b4:a9:69:bb:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:F4:5B:E2:0F:5E:2D:83:29:3A:E1:2D:41:5B:81:E0:34:69:D6
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:11:cf:80:1b:d7:bd:02:c1:27:59:07:f5:ac:1b:18:fe:
         41:7f:48:85:63:a7:17:71:70:09:c3:5a:a8:b7:bc:38:94:08:
         11:d1:72:42:37:cb:97:f4:53:d4:25:ea:55:6d:cf:87:1d:0f:
         dd:8b:6d:be:d8:ae:9f:e1:43:c5:1c:8a:d1:c0:79:a0:b0:dc:
         c6:a2:b9:37:e8:20:d2:ba:d3:27:de:cd:e2:f8:3e:ad:6c:81:
         a1:f0:30:22:d0:df:95:46:b2:1b:dc:15:93:03:fb:d4:08:82:
         7e:24:f2:18:59:e0:12:92:f1:f8:b8:b5:c5:14:ea:49:fc:10:
         3d:8a:3d:3c:1c:3c:34:26:ee:36:a7:28:fb:e1:00:fd:45:f7:
         ce:e8:7c:70:56:bc:ec:0b:56:65:a0:45:ce:ad:03:61:8c:47:
         fa:ee:66:87:36:60:5c:aa:74:e2:ad:c4:74:a9:01:70:2d:bc:
         71:b8:72:cf:45:20:b0:5d:c1:8d:aa:b8:87:5b:ca:fe:89:d3:
         22:dd:7a:83:47:b9:6b:5b:78:f7:e6:53:d8:89:55:f2:aa:4f:
         51:31:04:83:95:3b:ed:94:0b:8e:07:47:a8:27:15:87:9d:ec:
         f5:06:0a:2e:e6:4e:94:93:a1:67:a7:cd:9d:8d:f6:dd:ac:43:
         e9:d8:5f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfEUFnznSrkTgqc+Si/LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl
NTc0NDUwHhcNMjUwNjA4MDMwMTE5WhcNMjUwNjA5MDMwMTE5WjAzMTEwLwYDVQQD
EyhhYjg1ZjQ1YmUyMGY1ZTJkODMyOTNhZTEyZDQxNWI4MWUwMzQ2OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCjdZ63ENrauD6NIiMwBFik9AQlP
KXiFml0tDq3LJorlRIws+dSKsXYGpYmFpBJ0lLZ0QMb+RWnJMxrNI2pW0pTM3FZp
ToAkwAJOuV0CilMzFCPYCgwaV2cNNQmZzhV8I8gtwglgCY2WgfGWxhniiM4JZCMR
nUijD2MlW7VIfqNqq0OWDeQCIKNkpG06n7rcklpZkdK3moD//mfgkpWNMecVTLcW
CoGG+PJAHNUFd+0sXXHB/M8MEnxg6/bFtZI8pb2eKtJexpXnhwlFuxXT7xmEO82A
rbZiOGcJ4rxMqx+zHOflTubKNbL53NpBfbGe/wwok5Tvn0oZGbSpabtuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuF9FviD14tgyk64S1BW4HgNGnWMB8GA1UdIwQY
MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt
ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw
LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5sRz4Ab
170CwSdZB/WsGxj+QX9IhWOnF3FwCcNaqLe8OJQIEdFyQjfLl/RT1CXqVW3Phx0P
3Yttvtiun+FDxRyK0cB5oLDcxqK5N+gg0rrTJ97N4vg+rWyBofAwItDflUayG9wV
kwP71AiCfiTyGFngEpLx+Li1xRTqSfwQPYo9PBw8NCbuNqco++EA/UX3zuh8cFa8
7AtWZaBFzq0DYYxH+u5mhzZgXKp04q3EdKkBcC28cbhyz0UgsF3Bjaq4h1vK/onT
It16g0e5a1t49+ZT2IlV8qpPUTEEg5U77ZQLjgdHqCcVh53s9QYKLuZOlJOhZ6fN
nY323axD6dhflw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:23 2025 by rpki-client