Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File:                     DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier:          MMcPiHfRn1iJO94jjTCCdi7PVB3o8x/RmiLl1TmSKa8=
Subject key identifier:   CA:9D:FC:91:3F:8C:62:04:9E:79:1D:A9:51:75:69:8B:1B:6F:DD:F5
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer:       /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial:       01974855235B1F2DF24BC3EC6C4C621CFCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number:          0CAB
Signing time:             Sat 07 Jun 2025 03:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:28 +0000
Files and hashes:         1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: xmViFgvo90qIEwXoqdgEvZblDWtIaKpRSeWMi8N+cmE=)
                          2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:23:5b:1f:2d:f2:4b:c3:ec:6c:4c:62:1c:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
        Validity
            Not Before: Jun  7 03:00:28 2025 GMT
            Not After : Jun  8 03:00:28 2025 GMT
        Subject: CN=ca9dfc913f8c62049e791da95175698b1b6fddf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dc:62:ec:fd:7d:d4:ec:cb:33:b6:2f:4b:9c:
                    da:53:76:f6:0f:95:f9:53:39:41:3d:da:ea:c1:48:
                    43:c2:a6:6e:b5:65:63:0d:90:4c:7e:d5:af:d9:a5:
                    8f:1f:91:f2:75:cd:81:4c:8c:58:d9:62:f1:b5:ab:
                    2c:9e:47:d0:e2:7c:45:50:49:4e:c2:cf:a7:bf:61:
                    69:8c:df:b3:d2:c0:e8:52:07:3a:13:80:5d:9c:ea:
                    0d:db:ce:32:37:29:68:56:70:d7:35:dc:a2:14:9f:
                    fc:3c:97:96:3f:d3:6f:4e:ad:91:14:75:9c:ed:f7:
                    b1:a1:23:23:ec:10:6d:21:83:f6:01:35:a4:d3:2f:
                    13:b4:1a:ab:a9:5e:d6:ba:70:d2:e5:c5:2f:3b:b4:
                    15:1a:ec:36:a0:f7:db:a4:21:f3:a9:e4:bd:9d:dc:
                    37:d9:41:28:d9:89:12:c9:e9:4a:29:bc:fd:79:4a:
                    46:79:f2:9d:56:ad:19:f8:0a:23:53:ab:68:85:5b:
                    7a:7c:c9:3d:8c:6e:4d:42:a7:d0:24:4c:79:94:e5:
                    2e:fb:64:5b:21:70:fe:2c:e6:61:ee:03:fc:da:d8:
                    4f:e5:b1:49:26:2c:26:31:8b:63:24:d2:40:ae:79:
                    da:50:28:24:ee:1f:57:98:ce:fa:5f:9f:93:fa:c7:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:FC:91:3F:8C:62:04:9E:79:1D:A9:51:75:69:8B:1B:6F:DD:F5
            X509v3 Authority Key Identifier:
                keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:03:2e:72:ea:12:53:b7:ec:b0:b6:ca:1b:a1:be:40:bd:cc:
         4a:42:6b:5e:f0:0d:75:a2:a7:7d:99:10:15:72:36:29:a8:22:
         89:57:8f:33:78:2a:fa:43:65:1f:e2:2e:05:36:ba:56:36:16:
         3c:65:b9:66:72:52:76:ae:6a:05:e7:a2:eb:69:ea:78:d3:91:
         0e:9b:d7:5c:dc:68:10:85:10:07:37:70:d3:a1:b0:0e:5b:eb:
         54:a8:38:e2:3c:f8:f2:17:07:ae:bf:df:a1:8c:e4:80:0d:e1:
         5d:48:42:eb:6a:93:36:a0:ff:1d:48:cd:b2:87:4d:f4:15:96:
         b8:fb:b5:4e:14:18:fe:e4:80:50:be:3e:62:dd:91:aa:dd:52:
         a4:87:f1:f5:a9:70:d8:9b:af:ec:4e:32:40:18:ab:07:55:47:
         32:32:85:6e:93:b0:11:f3:90:84:6c:95:e2:d3:97:4a:b1:57:
         71:23:1d:73:b9:37:cb:ff:6f:0a:45:a3:bb:b1:cc:89:db:56:
         16:8f:4f:c4:0a:c8:64:e2:4f:a9:80:a6:f4:00:01:38:46:ef:
         29:75:79:91:67:76:9f:fd:81:35:cb:89:7f:47:68:f6:e4:cd:
         a7:ab:2c:68:81:ab:8b:e6:a5:26:d1:90:0e:59:67:2f:e1:f0:
         05:6f:33:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVSNbHy3yS8PsbExiHPygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1
MWU1N2UwHhcNMjUwNjA3MDMwMDI4WhcNMjUwNjA4MDMwMDI4WjAzMTEwLwYDVQQD
EyhjYTlkZmM5MTNmOGM2MjA0OWU3OTFkYTk1MTc1Njk4YjFiNmZkZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99xi7P191OzLM7YvS5zaU3b2D5X5
UzlBPdrqwUhDwqZutWVjDZBMftWv2aWPH5Hydc2BTIxY2WLxtassnkfQ4nxFUElO
ws+nv2FpjN+z0sDoUgc6E4BdnOoN284yNyloVnDXNdyiFJ/8PJeWP9NvTq2RFHWc
7fexoSMj7BBtIYP2ATWk0y8TtBqrqV7WunDS5cUvO7QVGuw2oPfbpCHzqeS9ndw3
2UEo2YkSyelKKbz9eUpGefKdVq0Z+AojU6tohVt6fMk9jG5NQqfQJEx5lOUu+2Rb
IXD+LOZh7gP82thP5bFJJiwmMYtjJNJArnnaUCgk7h9XmM76X5+T+sdITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqd/JE/jGIEnnkdqVF1aYsbb931MB8GA1UdIwQY
MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It
M2M1MDE4MDc4MGIwLzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw
LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAMucuoS
U7fssLbKG6G+QL3MSkJrXvANdaKnfZkQFXI2KagiiVePM3gq+kNlH+IuBTa6VjYW
PGW5ZnJSdq5qBeei62nqeNORDpvXXNxoEIUQBzdw06GwDlvrVKg44jz48hcHrr/f
oYzkgA3hXUhC62qTNqD/HUjNsodN9BWWuPu1ThQY/uSAUL4+Yt2Rqt1SpIfx9alw
2Juv7E4yQBirB1VHMjKFbpOwEfOQhGyV4tOXSrFXcSMdc7k3y/9vCkWju7HMidtW
Fo9PxArIZOJPqYCm9AABOEbvKXV5kWd2n/2BNcuJf0do9uTNp6ssaIGri+alJtGQ
DllnL+HwBW8zFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:26 2025 by rpki-client