Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File:                     bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier:          qGyAZNMQceuM9Ab+U6k7hlVk0ZPHO0CuxJ3CQfkvbms=
Subject key identifier:   58:24:AC:4E:99:01:DA:FE:2A:9A:52:87:71:8B:E7:67:06:63:06:92
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer:       /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial:       019748C2D8C28832DA837D8F9464BCB21F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number:          0122
Signing time:             Sat 07 Jun 2025 05:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:18 +0000
Files and hashes:         1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=)
                          2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: qai92IlP6I4BYyiLn4RU6NvZ+TAtVj1xe0YwF4U89f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:d8:c2:88:32:da:83:7d:8f:94:64:bc:b2:1f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
        Validity
            Not Before: Jun  7 05:00:18 2025 GMT
            Not After : Jun  8 05:00:18 2025 GMT
        Subject: CN=5824ac4e9901dafe2a9a5287718be76706630692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:e3:0a:b5:6e:01:d9:8b:8b:e8:3a:ce:ca:
                    a1:8d:2f:c3:36:ee:89:97:07:2d:7b:ab:c2:15:8b:
                    b2:52:b1:39:95:d9:d0:fc:2f:de:a8:53:fb:c8:e0:
                    f4:ad:3d:9e:2b:cf:29:a5:0d:0e:bf:0a:43:81:aa:
                    8e:24:8a:a6:79:93:c8:ed:d4:af:7c:23:39:50:8b:
                    56:33:af:1f:6c:d2:f6:df:d9:62:bf:55:88:fa:63:
                    bb:be:98:4f:f6:6e:55:c2:f8:c7:04:e0:75:ad:59:
                    84:a8:61:81:24:cc:ca:5b:e0:d5:52:ad:57:22:4b:
                    6d:a5:f2:7d:0d:98:6b:d2:e2:17:5a:36:f3:8c:54:
                    d7:5a:0a:e4:3b:e3:a6:14:a8:79:1f:b3:dc:17:da:
                    3e:33:10:6a:7d:4c:c6:12:f2:cf:9a:67:19:de:bd:
                    a0:52:25:c1:8e:31:84:d9:4c:a9:dc:37:65:4d:0c:
                    fb:38:b9:ea:2c:d1:12:2c:4a:8a:1b:e2:7b:fc:2a:
                    40:66:69:be:33:88:84:b7:28:52:13:57:9f:77:e8:
                    20:c6:1d:e1:2b:a0:c2:31:e0:01:46:c5:22:90:bc:
                    c2:a4:bf:aa:a0:a3:f2:0d:d0:f3:06:43:79:b5:97:
                    0b:dc:80:42:e1:11:e3:48:64:0d:54:45:8b:87:78:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:AC:4E:99:01:DA:FE:2A:9A:52:87:71:8B:E7:67:06:63:06:92
            X509v3 Authority Key Identifier:
                keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:c0:3b:9c:31:fb:9b:94:dc:21:b5:72:30:44:7c:08:71:
         dc:87:04:5e:8c:d9:ba:a9:99:5f:b6:cb:e7:a0:20:ed:4e:3e:
         81:82:e8:09:a4:de:cf:e9:c7:07:b6:ad:a7:e9:05:2c:3c:e2:
         98:8e:93:c0:8c:83:37:5f:a5:da:e8:55:d8:3b:ca:7e:a0:8a:
         dc:01:83:25:b1:7e:7f:df:b1:d5:e4:ac:9f:d4:3c:cb:04:dc:
         9b:7f:42:bb:74:f5:f3:62:55:39:02:4b:79:60:09:91:eb:b8:
         3b:8a:61:09:d8:04:b3:1b:2f:45:44:5a:73:99:57:26:ab:2f:
         c2:ab:6d:d3:cc:3b:61:fc:d4:b8:de:fa:66:2f:be:d1:4b:54:
         ea:21:36:5d:1a:52:71:8b:35:83:dc:fb:c5:a9:d0:e6:f5:bc:
         0e:16:b0:9d:4d:9e:9e:e0:62:22:1e:6a:86:79:29:4d:99:b1:
         1c:7a:d6:62:36:27:19:38:ea:f5:48:86:b9:6f:9a:61:2a:69:
         98:4e:72:68:3e:bd:77:83:e6:db:af:81:b8:18:0b:16:cb:d7:
         f0:bb:63:fb:89:95:99:8c:fa:0e:5d:37:59:08:02:ae:fc:17:
         00:75:13:da:53:61:e5:22:4e:78:98:ec:1d:68:80:e9:a7:10:
         4d:c2:6f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwtjCiDLag32PlGS8sh8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz
MDM5YTQwHhcNMjUwNjA3MDUwMDE4WhcNMjUwNjA4MDUwMDE4WjAzMTEwLwYDVQQD
Eyg1ODI0YWM0ZTk5MDFkYWZlMmE5YTUyODc3MThiZTc2NzA2NjMwNjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMTjCrVuAdmLi+g6zsqhjS/DNu6J
lwcte6vCFYuyUrE5ldnQ/C/eqFP7yOD0rT2eK88ppQ0OvwpDgaqOJIqmeZPI7dSv
fCM5UItWM68fbNL239liv1WI+mO7vphP9m5VwvjHBOB1rVmEqGGBJMzKW+DVUq1X
IkttpfJ9DZhr0uIXWjbzjFTXWgrkO+OmFKh5H7PcF9o+MxBqfUzGEvLPmmcZ3r2g
UiXBjjGE2Uyp3DdlTQz7OLnqLNESLEqKG+J7/CpAZmm+M4iEtyhSE1efd+ggxh3h
K6DCMeABRsUikLzCpL+qoKPyDdDzBkN5tZcL3IBC4RHjSGQNVEWLh3iaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgkrE6ZAdr+KppSh3GL52cGYwaSMB8GA1UdIwQY
MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt
ZWQ4NWNlMDk0YTg3LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3
LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASajAO5wx
+5uU3CG1cjBEfAhx3IcEXozZuqmZX7bL56Ag7U4+gYLoCaTez+nHB7atp+kFLDzi
mI6TwIyDN1+l2uhV2DvKfqCK3AGDJbF+f9+x1eSsn9Q8ywTcm39Cu3T182JVOQJL
eWAJkeu4O4phCdgEsxsvRURac5lXJqsvwqtt08w7YfzUuN76Zi++0UtU6iE2XRpS
cYs1g9z7xanQ5vW8DhawnU2enuBiIh5qhnkpTZmxHHrWYjYnGTjq9UiGuW+aYSpp
mE5yaD69d4Pm26+BuBgLFsvX8Ltj+4mVmYz6Dl03WQgCrvwXAHUT2lNh5SJOeJjs
HWiA6acQTcJvhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:09 2025 by rpki-client