Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File:                     5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier:          88icULpUl1lbyaFpf+bF/TtfQDvVJJqPfPeZGkHUWWQ=
Subject key identifier:   13:56:A7:0C:E4:18:DA:66:A6:7B:BE:2B:0C:BF:02:74:F2:C8:4D:9D
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer:       /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial:       01974A0C96D2E8985AF46D93983BBA66318E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number:          0AF1
Signing time:             Sat 07 Jun 2025 11:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:28 +0000
Files and hashes:         1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: LNFj5iG/ZIvwALFN/TTMzN9hsxnW4d+NgWcs4HDvHuk=)
                          2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:96:d2:e8:98:5a:f4:6d:93:98:3b:ba:66:31:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
        Validity
            Not Before: Jun  7 11:00:28 2025 GMT
            Not After : Jun  8 11:00:28 2025 GMT
        Subject: CN=1356a70ce418da66a67bbe2b0cbf0274f2c84d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:7d:77:48:7c:4a:f3:60:df:fa:b7:e3:7a:
                    88:28:fb:30:9b:db:1e:ec:20:ca:ad:07:69:c3:29:
                    29:de:50:a8:fa:64:e8:7c:55:f4:41:88:2a:2d:e4:
                    56:9f:a8:89:d5:f9:16:aa:5f:39:bb:8e:73:83:c6:
                    50:13:4a:00:11:5b:78:38:f2:63:2c:cb:65:8f:89:
                    f1:73:18:67:07:f7:68:53:db:1d:e8:8e:89:81:a0:
                    6c:1a:fb:f5:0b:4a:49:67:e0:af:fe:42:6e:44:a7:
                    97:55:25:ac:8a:d1:37:f4:41:8a:9b:d9:59:34:5f:
                    c4:7c:d4:01:ae:f5:17:d5:46:c7:20:70:91:e1:ea:
                    9e:d8:ff:5f:65:2f:2f:8c:55:1b:e0:8b:6b:90:f2:
                    d3:15:67:bf:3c:99:f5:f9:b5:71:d5:99:c9:52:70:
                    f0:66:df:4a:97:7a:91:11:83:8f:5d:24:d6:04:98:
                    79:c1:e1:97:44:25:01:9e:b9:8c:9d:fa:35:94:8f:
                    d6:d2:97:d5:55:d8:a6:aa:29:fd:fa:82:3c:79:2c:
                    68:0e:31:b3:c0:f1:9f:20:14:40:49:29:94:c6:21:
                    32:47:ee:c1:dc:1f:f9:22:5c:f9:ab:a4:52:7b:df:
                    f3:45:07:6e:64:97:30:cb:9c:88:f6:99:14:d7:7a:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:A7:0C:E4:18:DA:66:A6:7B:BE:2B:0C:BF:02:74:F2:C8:4D:9D
            X509v3 Authority Key Identifier:
                keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:e7:00:5c:a2:5c:02:76:39:8b:06:a9:c3:ea:32:a5:52:
         2c:36:bc:f5:c2:7b:a2:4b:3c:53:77:8f:e4:71:71:84:1c:37:
         4a:ba:73:5a:7d:b1:cc:2b:c6:df:41:3c:ef:8e:b8:99:6a:4b:
         f0:a1:3a:d0:04:83:5c:ea:8b:9b:11:8a:5e:3a:d8:98:7c:64:
         57:34:b4:99:6d:2e:8a:ea:0b:f9:ec:d7:63:3c:3d:13:67:1d:
         d9:42:94:2a:54:2c:53:d9:26:f3:32:f8:80:ca:ae:c8:3a:4a:
         c1:81:96:93:6d:81:b3:b0:67:15:28:27:75:af:f4:45:4a:0d:
         7b:f4:9a:9f:97:f1:f3:c1:ae:c0:6c:3d:8a:ea:f2:36:03:17:
         68:59:ec:8c:95:fe:31:14:81:11:d9:ae:6a:3f:01:0a:24:23:
         dc:c0:01:0a:1a:e9:d4:f6:41:bf:9b:c3:c2:e4:a3:a2:7f:7e:
         6b:1c:26:ce:0b:58:e7:16:95:61:c1:81:53:4f:84:5e:50:ef:
         cc:cb:23:b7:bb:52:df:11:69:be:ec:93:e9:28:b0:27:1e:21:
         c2:f7:d8:6b:10:9c:86:4e:56:a1:87:92:99:1d:67:88:45:88:
         a3:e3:74:43:16:fd:10:6b:30:8d:7f:4b:63:16:e6:3f:e3:2d:
         6b:55:4e:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDJbS6Jha9G2TmDu6ZjGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjgyNGU0YmM1Y2Q4MTg4NmVjMjRiNWUxNTI2NmU5NWY4
ZGRmOTMwHhcNMjUwNjA3MTEwMDI4WhcNMjUwNjA4MTEwMDI4WjAzMTEwLwYDVQQD
EygxMzU2YTcwY2U0MThkYTY2YTY3YmJlMmIwY2JmMDI3NGYyYzg0ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKh9d0h8SvNg3/q343qIKPswm9se
7CDKrQdpwykp3lCo+mTofFX0QYgqLeRWn6iJ1fkWql85u45zg8ZQE0oAEVt4OPJj
LMtlj4nxcxhnB/doU9sd6I6JgaBsGvv1C0pJZ+Cv/kJuRKeXVSWsitE39EGKm9lZ
NF/EfNQBrvUX1UbHIHCR4eqe2P9fZS8vjFUb4ItrkPLTFWe/PJn1+bVx1ZnJUnDw
Zt9Kl3qREYOPXSTWBJh5weGXRCUBnrmMnfo1lI/W0pfVVdimqin9+oI8eSxoDjGz
wPGfIBRASSmUxiEyR+7B3B/5Ilz5q6RSe9/zRQduZJcwy5yI9pkU13pXDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNWpwzkGNpmpnu+Kwy/AnTyyE2dMB8GA1UdIwQY
MBaAFOb4JOS8XNgYhuwkteFSZulfjd+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQt
YTg5Zjk1OWJlMjA0LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQtYTg5Zjk1OWJlMjA0
LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQvnAFyi
XAJ2OYsGqcPqMqVSLDa89cJ7oks8U3eP5HFxhBw3SrpzWn2xzCvG30E87464mWpL
8KE60ASDXOqLmxGKXjrYmHxkVzS0mW0uiuoL+ezXYzw9E2cd2UKUKlQsU9km8zL4
gMquyDpKwYGWk22Bs7BnFSgnda/0RUoNe/San5fx88GuwGw9iuryNgMXaFnsjJX+
MRSBEdmuaj8BCiQj3MABChrp1PZBv5vDwuSjon9+axwmzgtY5xaVYcGBU0+EXlDv
zMsjt7tS3xFpvuyT6SiwJx4hwvfYaxCchk5WoYeSmR1niEWIo+N0Qxb9EGswjX9L
YxbmP+Mta1VOTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:57 2025 by rpki-client