Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          ctiBmvsqtpeg+3QSPImPsIShugl/DSJey1LpfOlG81c=
Subject key identifier:   D8:DE:5E:83:94:E4:7A:3E:CA:98:48:80:6E:16:FE:F5:05:4E:3F:3D
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01974E57614C8158742690C5FC69455AFE10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0414
Signing time:             Sun 08 Jun 2025 07:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:38 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          4: fQHPEJqUdVp5UqVFRZ1g0Y99-5Q.roa (hash: eirnjkyG4bJYmiDcYHGtnlfuQCFWvSfjnGiCY82vyyg=)
                          5: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
                          6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: lXNZQRwL/C/MSMy8fmVcFy5+FAKD9OMyLykH/9wjAiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:61:4c:81:58:74:26:90:c5:fc:69:45:5a:fe:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Jun  8 07:00:38 2025 GMT
            Not After : Jun  9 07:00:38 2025 GMT
        Subject: CN=d8de5e8394e47a3eca9848806e16fef5054e3f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:02:12:2f:89:7e:78:7a:bb:54:1f:2a:1b:
                    97:31:6c:96:d2:8e:c2:1c:bf:3f:d5:94:dd:a3:a0:
                    1a:85:50:ff:77:3b:36:81:d5:ae:27:80:71:24:4f:
                    ed:b2:c8:9b:c9:d3:a1:2a:4a:40:dc:d2:fe:dd:35:
                    aa:32:89:83:6d:02:0a:af:f8:06:52:d9:68:12:f9:
                    a0:e0:78:f9:9b:cc:e8:1a:db:51:eb:56:fc:04:f9:
                    75:e7:83:2e:80:7d:88:8d:cd:d9:45:cf:1a:2d:4b:
                    23:6f:69:76:be:92:cf:f4:c1:ae:8f:12:82:c5:52:
                    17:cd:f7:d5:05:b5:35:2f:9f:90:72:4e:08:bd:4e:
                    67:b0:56:1f:b0:f5:5a:f9:25:3f:7b:40:f8:ab:df:
                    08:7d:bf:5b:47:52:8b:0b:e9:ce:e3:12:dd:83:fb:
                    31:2a:8c:36:4a:3f:18:53:f4:c5:c7:a2:27:14:ca:
                    5b:80:ed:a4:94:01:e3:b5:79:61:ae:a0:fe:16:a3:
                    2a:a6:35:80:40:7b:fe:55:26:fc:20:f2:62:39:f1:
                    3f:10:72:49:83:05:91:71:9d:72:fc:20:f3:a1:35:
                    87:41:19:a0:25:16:5a:c3:53:16:7b:d3:35:5d:58:
                    36:6e:46:7f:86:66:f6:cb:99:82:eb:ee:7d:dd:65:
                    ce:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DE:5E:83:94:E4:7A:3E:CA:98:48:80:6E:16:FE:F5:05:4E:3F:3D
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:d7:b8:0b:60:45:b7:a3:49:21:a5:bb:7f:a7:16:e2:b6:
         49:f0:7a:20:64:8b:61:36:ac:a3:93:60:20:25:50:18:e7:ce:
         96:2c:87:fb:a6:3a:bd:13:36:b4:1e:1f:d7:fb:ce:58:35:87:
         c1:94:72:54:7b:a9:99:e9:a9:7b:19:85:ba:c6:99:fe:76:70:
         32:e5:39:03:f5:3e:e8:28:33:1b:a2:da:f3:aa:b9:0a:42:f1:
         d2:b9:d7:4d:29:4d:fb:15:bc:9c:76:88:2a:af:37:ae:07:84:
         1d:80:26:d4:fb:2f:41:62:3d:75:6a:f6:24:27:14:94:6e:42:
         26:fb:d4:6b:50:51:58:17:84:f1:25:fc:db:3c:26:a1:1f:7c:
         8d:fb:fb:2a:2b:c0:a4:6c:57:05:c8:91:14:2d:41:ed:cf:9f:
         03:93:be:02:a5:a8:21:e6:f6:73:98:96:af:a1:aa:dc:98:b6:
         cf:b6:7f:f2:b6:bd:b1:92:9c:30:39:0d:ec:fc:88:5b:65:d1:
         3c:e3:67:2f:9c:f3:b9:e2:17:1c:f8:01:97:01:32:37:58:f0:
         cc:ce:d9:bb:44:33:6a:63:aa:28:c7:78:b4:6a:59:98:8d:fe:
         7e:d5:db:e3:7a:e2:dd:e2:ac:a2:cc:9f:1d:91:af:0d:c2:d4:
         62:1f:ab:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV2FMgVh0JpDF/GlFWv4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjUwNjA4MDcwMDM4WhcNMjUwNjA5MDcwMDM4WjAzMTEwLwYDVQQD
EyhkOGRlNWU4Mzk0ZTQ3YTNlY2E5ODQ4ODA2ZTE2ZmVmNTA1NGUzZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HACEi+Jfnh6u1QfKhuXMWyW0o7C
HL8/1ZTdo6AahVD/dzs2gdWuJ4BxJE/tssibydOhKkpA3NL+3TWqMomDbQIKr/gG
UtloEvmg4Hj5m8zoGttR61b8BPl154MugH2Ijc3ZRc8aLUsjb2l2vpLP9MGujxKC
xVIXzffVBbU1L5+Qck4IvU5nsFYfsPVa+SU/e0D4q98Ifb9bR1KLC+nO4xLdg/sx
Kow2Sj8YU/TFx6InFMpbgO2klAHjtXlhrqD+FqMqpjWAQHv+VSb8IPJiOfE/EHJJ
gwWRcZ1y/CDzoTWHQRmgJRZaw1MWe9M1XVg2bkZ/hmb2y5mC6+593WXOXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjeXoOU5Ho+yphIgG4W/vUFTj89MB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoTXuAtg
RbejSSGlu3+nFuK2SfB6IGSLYTaso5NgICVQGOfOliyH+6Y6vRM2tB4f1/vOWDWH
wZRyVHupmempexmFusaZ/nZwMuU5A/U+6CgzG6La86q5CkLx0rnXTSlN+xW8nHaI
Kq83rgeEHYAm1PsvQWI9dWr2JCcUlG5CJvvUa1BRWBeE8SX82zwmoR98jfv7KivA
pGxXBciRFC1B7c+fA5O+AqWoIeb2c5iWr6Gq3Ji2z7Z/8ra9sZKcMDkN7PyIW2XR
PONnL5zzueIXHPgBlwEyN1jwzM7Zu0QzamOqKMd4tGpZmI3+ftXb43ri3eKsosyf
HZGvDcLUYh+r6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:32 2025 by rpki-client