Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
File:                     RdGncWAlFxEzoyAslGKg6r1mBoI.mft (raw, json)
Hash identifier:          qh1SgTr7gmfw1yKazHA8uaS6vZ5QEclDhNVT5EP64YU=
Subject key identifier:   30:8C:D1:0D:D9:CC:E7:F5:08:5F:5A:0A:C0:0A:7E:CD:D7:2F:69:56
Authority key identifier: 45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82
Certificate issuer:       /CN=45d1a7716025171133a3202c9462a0eabd660682
Certificate serial:       01974967F096D75037ADC2AA2826D72D3860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
Manifest number:          0511
Signing time:             Sat 07 Jun 2025 08:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:37 +0000
Files and hashes:         1: RdGncWAlFxEzoyAslGKg6r1mBoI.crl (hash: HdVfaac5XjcD/S//+C2D8JT0AvcQtUTmjnIHykk4W0c=)
                          2: p6pII2yeX9CFzHUBZ-7ECA5XoLc.roa (hash: a0i/QIPJclzVoZAHggGCZw2DH9on4V8xPPUo2d8z17I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f0:96:d7:50:37:ad:c2:aa:28:26:d7:2d:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d1a7716025171133a3202c9462a0eabd660682
        Validity
            Not Before: Jun  7 08:00:37 2025 GMT
            Not After : Jun  8 08:00:37 2025 GMT
        Subject: CN=308cd10dd9cce7f5085f5a0ac00a7ecdd72f6956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:02:82:fd:26:ec:fa:5b:1a:ff:29:22:46:
                    11:7b:72:0f:09:15:27:f5:6b:70:2f:33:f0:95:4f:
                    d6:8b:0d:d8:38:14:cd:0a:72:b7:7f:6f:07:54:7f:
                    6f:98:66:3f:f3:05:5d:17:12:2d:f0:8a:9b:25:6f:
                    8a:6f:cb:98:d1:9a:ee:cd:d6:e5:24:ba:18:10:03:
                    35:c3:5d:88:c1:cc:23:d8:8d:75:e3:62:5a:ee:b0:
                    71:f2:dd:ee:e7:16:3b:ae:f6:d4:45:b0:43:20:6a:
                    a8:f1:9a:69:1f:88:38:50:7f:55:d6:12:6a:6f:ab:
                    8f:c2:ed:9b:36:e4:13:10:c0:9d:07:4c:8a:dc:23:
                    7f:af:23:bf:12:5f:b9:7d:01:1f:35:7c:07:a6:9c:
                    3c:90:eb:67:74:b6:31:bb:d5:cc:6e:9a:89:c8:1b:
                    e4:17:57:bf:d2:99:f1:0b:f9:ab:8e:ad:3d:f4:b2:
                    be:8d:82:25:be:37:cb:0b:af:e6:aa:2c:af:d9:e8:
                    e3:fd:8c:91:9b:da:99:10:68:bb:ff:87:9e:e0:71:
                    14:72:91:7e:15:06:5e:4f:67:32:98:91:40:dc:e9:
                    86:f0:a6:46:cc:1d:2a:34:11:d7:98:c5:56:0d:01:
                    47:84:67:23:2e:df:e7:37:8d:26:11:e7:a4:94:d6:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:D1:0D:D9:CC:E7:F5:08:5F:5A:0A:C0:0A:7E:CD:D7:2F:69:56
            X509v3 Authority Key Identifier:
                keyid:45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:93:3d:f2:fb:e6:b7:97:72:44:3d:47:a4:bb:4b:19:60:
         d7:2b:da:a1:68:4a:f2:17:c2:d8:db:88:7a:af:f9:62:eb:dc:
         c9:9d:fa:42:4a:00:62:dd:ba:32:b0:9e:0d:b1:a9:18:02:f8:
         0c:3f:ae:3c:c9:95:7f:44:b0:dd:9f:b8:21:85:55:8c:c1:cf:
         a2:b8:fd:57:a3:71:da:27:09:99:e3:82:4a:da:ef:28:02:0c:
         e8:ba:ae:18:59:47:40:06:fd:41:79:19:d6:45:8f:6c:f0:00:
         26:3d:25:89:99:5e:31:d4:cd:1f:2f:34:23:8c:21:14:4b:44:
         97:62:74:fc:27:a0:0b:d7:9c:df:34:5d:a9:48:74:98:f0:be:
         35:32:32:35:c6:cc:d4:d5:46:17:67:ac:82:58:af:65:ac:58:
         13:ec:07:71:9f:a0:92:cf:a0:07:3e:81:6c:e4:9a:11:81:04:
         b5:7f:59:77:ff:dd:19:91:68:18:2a:8e:f3:3e:a8:3e:29:1a:
         01:9d:40:62:e3:62:9e:5d:36:5c:00:1f:a4:e4:1b:54:2f:83:
         a4:77:45:b8:73:8c:fc:8c:ec:f3:03:5b:47:9b:39:00:62:3f:
         34:11:3d:90:ad:d9:30:85:24:ce:15:27:a1:a8:13:32:40:fd:
         a5:66:02:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ/CW11A3rcKqKCbXLThgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDFhNzcxNjAyNTE3MTEzM2EzMjAyYzk0NjJhMGVhYmQ2
NjA2ODIwHhcNMjUwNjA3MDgwMDM3WhcNMjUwNjA4MDgwMDM3WjAzMTEwLwYDVQQD
EygzMDhjZDEwZGQ5Y2NlN2Y1MDg1ZjVhMGFjMDBhN2VjZGQ3MmY2OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdcCgv0m7PpbGv8pIkYRe3IPCRUn
9WtwLzPwlU/Wiw3YOBTNCnK3f28HVH9vmGY/8wVdFxIt8IqbJW+Kb8uY0Zruzdbl
JLoYEAM1w12Iwcwj2I1142Ja7rBx8t3u5xY7rvbURbBDIGqo8ZppH4g4UH9V1hJq
b6uPwu2bNuQTEMCdB0yK3CN/ryO/El+5fQEfNXwHppw8kOtndLYxu9XMbpqJyBvk
F1e/0pnxC/mrjq099LK+jYIlvjfLC6/mqiyv2ejj/YyRm9qZEGi7/4ee4HEUcpF+
FQZeT2cymJFA3OmG8KZGzB0qNBHXmMVWDQFHhGcjLt/nN40mEeeklNa1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCM0Q3ZzOf1CF9aCsAKfs3XL2lWMB8GA1UdIwQY
MBaAFEXRp3FgJRcRM6MgLJRioOq9ZgaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRHbmNXQWxGeEV6b3lBc2xHS2c2cjFtQm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xNWM0N2MtMmM3Yy00ODFjLWJmODkt
ODA3MjQ2Y2E3YTI0LzEvUmRHbmNXQWxGeEV6b3lBc2xHS2c2cjFtQm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xNWM0N2MtMmM3Yy00ODFjLWJmODktODA3MjQ2Y2E3YTI0
LzEvUmRHbmNXQWxGeEV6b3lBc2xHS2c2cjFtQm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiamTPfL7
5reXckQ9R6S7Sxlg1yvaoWhK8hfC2NuIeq/5YuvcyZ36QkoAYt26MrCeDbGpGAL4
DD+uPMmVf0Sw3Z+4IYVVjMHPorj9V6Nx2icJmeOCStrvKAIM6LquGFlHQAb9QXkZ
1kWPbPAAJj0liZleMdTNHy80I4whFEtEl2J0/CegC9ec3zRdqUh0mPC+NTIyNcbM
1NVGF2esglivZaxYE+wHcZ+gks+gBz6BbOSaEYEEtX9Zd//dGZFoGCqO8z6oPika
AZ1AYuNinl02XAAfpOQbVC+DpHdFuHOM/Izs8wNbR5s5AGI/NBE9kK3ZMIUkzhUn
oagTMkD9pWYC0w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:00 2025 by rpki-client