Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File:                     DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier:          JaiDRlOBBbZGmu4HGjhnUKjirFoHMgp40/NcG/SPLcY=
Subject key identifier:   CB:CE:07:12:87:57:0C:82:FD:98:B9:43:15:68:63:20:F3:1E:8A:2B
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer:       /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial:       01974D0DD9C56073552DA1C62594362BE3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number:          0B09
Signing time:             Sun 08 Jun 2025 01:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:42 +0000
Files and hashes:         1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: WuVzAjIazj+Ct1CVu02+/Y+w4wqioSDCsseyQjXC2/4=)
                          2: IMYt28KGsc1J7qdCJ8FZoivbBms.roa (hash: Lt2Qrrojs7l5TEl9OlYCV0+zE4iekqC1xALJxPDqCnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:d9:c5:60:73:55:2d:a1:c6:25:94:36:2b:e3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
        Validity
            Not Before: Jun  8 01:00:42 2025 GMT
            Not After : Jun  9 01:00:42 2025 GMT
        Subject: CN=cbce071287570c82fd98b94315686320f31e8a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:44:63:71:e9:0c:63:f1:ad:fd:dc:c8:f1:
                    fe:cd:ea:c2:bc:5f:dc:fb:9e:94:bb:89:2b:d0:e7:
                    66:d8:37:03:9e:75:93:22:17:d2:ee:e4:e4:8a:69:
                    8e:74:40:60:49:0b:96:97:95:48:10:14:27:0c:6b:
                    6b:56:66:42:79:46:61:8b:0d:76:08:16:67:40:c5:
                    95:68:b4:aa:20:07:37:0b:41:96:84:bf:31:32:e9:
                    d2:3e:cb:9e:71:af:cf:82:d3:5d:6c:66:3c:22:55:
                    c8:11:29:4e:e1:fd:6a:ea:61:a5:87:d9:68:9c:c3:
                    ca:b2:d4:cd:e9:47:f7:71:9b:a4:52:d7:f0:ca:b3:
                    20:ca:78:28:7c:0e:dd:fe:cb:10:79:bf:6a:e7:10:
                    c3:28:60:6f:dc:ed:48:fd:d4:4f:d9:29:9e:b5:59:
                    70:27:01:bd:7b:eb:49:3d:40:87:6c:0e:d9:03:06:
                    38:e8:8b:13:79:92:f6:de:07:07:87:f3:a6:be:81:
                    1e:79:eb:47:9b:ac:bd:04:25:b2:d4:22:b5:7d:4b:
                    0e:cb:5c:34:02:a7:e3:61:f4:cf:5a:6a:fd:54:ab:
                    32:54:98:72:73:0b:b9:97:d9:d6:4e:a7:56:1e:3b:
                    3d:f3:d4:17:7e:52:b8:b9:ae:90:ab:61:81:70:c3:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:07:12:87:57:0C:82:FD:98:B9:43:15:68:63:20:F3:1E:8A:2B
            X509v3 Authority Key Identifier:
                keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:98:f8:18:9b:11:66:05:fb:e8:5d:3b:9c:40:3a:fd:79:be:
         e0:4d:a0:91:78:e4:09:45:9f:d4:67:c9:ca:f2:14:30:d1:31:
         31:ef:56:24:63:16:0e:78:cf:9f:fd:b2:a9:78:8f:5e:a1:36:
         02:2f:94:55:e6:bf:e6:9f:d9:73:fc:09:f0:da:38:09:6d:4f:
         71:7a:d4:4f:ed:e8:1e:d8:83:13:87:2d:e6:ee:50:22:6b:cc:
         b4:e0:b8:32:0f:12:87:e8:58:58:5c:79:48:e3:9c:15:b4:8b:
         29:7c:48:d0:ab:84:f5:91:8a:0e:21:87:e8:9f:72:cf:74:c8:
         7e:50:ed:6b:51:fe:0c:83:a3:f6:61:13:51:29:92:1a:d6:8f:
         b7:24:44:4c:b4:c5:1d:45:3d:81:27:15:23:8e:34:db:3f:c6:
         4a:27:e4:2d:0e:b0:8e:36:a5:d3:69:5f:31:60:25:4d:1c:f5:
         0f:4f:d6:49:4c:cc:54:6c:e0:25:81:26:aa:9f:fb:52:99:ab:
         8b:76:c1:53:9a:92:9f:a2:61:0b:48:3c:c8:7c:31:c3:3e:ee:
         42:1c:85:ed:74:8e:c3:1a:ab:45:66:2b:0f:12:37:9f:79:c7:
         b1:a1:ee:ec:5b:27:57:2e:fa:2a:2e:7e:be:b8:89:9b:14:cf:
         5e:48:52:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDdnFYHNVLaHGJZQ2K+O1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0
YzU2Y2IwHhcNMjUwNjA4MDEwMDQyWhcNMjUwNjA5MDEwMDQyWjAzMTEwLwYDVQQD
EyhjYmNlMDcxMjg3NTcwYzgyZmQ5OGI5NDMxNTY4NjMyMGYzMWU4YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTBEY3HpDGPxrf3cyPH+zerCvF/c
+56Uu4kr0Odm2DcDnnWTIhfS7uTkimmOdEBgSQuWl5VIEBQnDGtrVmZCeUZhiw12
CBZnQMWVaLSqIAc3C0GWhL8xMunSPsueca/PgtNdbGY8IlXIESlO4f1q6mGlh9lo
nMPKstTN6Uf3cZukUtfwyrMgyngofA7d/ssQeb9q5xDDKGBv3O1I/dRP2SmetVlw
JwG9e+tJPUCHbA7ZAwY46IsTeZL23gcHh/OmvoEeeetHm6y9BCWy1CK1fUsOy1w0
AqfjYfTPWmr9VKsyVJhycwu5l9nWTqdWHjs989QXflK4ua6Qq2GBcMO7UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvOBxKHVwyC/Zi5QxVoYyDzHoorMB8GA1UdIwQY
MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt
YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy
LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZj4GJsR
ZgX76F07nEA6/Xm+4E2gkXjkCUWf1GfJyvIUMNExMe9WJGMWDnjPn/2yqXiPXqE2
Ai+UVea/5p/Zc/wJ8No4CW1PcXrUT+3oHtiDE4ct5u5QImvMtOC4Mg8Sh+hYWFx5
SOOcFbSLKXxI0KuE9ZGKDiGH6J9yz3TIflDta1H+DIOj9mETUSmSGtaPtyRETLTF
HUU9gScVI4402z/GSifkLQ6wjjal02lfMWAlTRz1D0/WSUzMVGzgJYEmqp/7Upmr
i3bBU5qSn6JhC0g8yHwxwz7uQhyF7XSOwxqrRWYrDxI3n3nHsaHu7FsnVy76Ki5+
vriJmxTPXkhSPw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:04:36 2025 by rpki-client