Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
File:                     a3-gXmtNilEpRAdQTZZBrT4CBD8.mft (raw, json)
Hash identifier:          fEnShN+MCD1X9sFqu9bOGmijBMfvOZSYMiXYQTfOcMk=
Subject key identifier:   D0:44:EF:12:1C:33:60:F7:78:E4:4C:A0:52:AA:C3:6B:12:E0:08:8F
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Certificate issuer:       /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial:       01976A05C15C4C8D5AC4D5C92E96D0DDCE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
Manifest number:          0F05
Signing time:             Fri 13 Jun 2025 16:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:51 +0000
Files and hashes:         1: B2d2juf7uKwnCru3ZiDDoYOXciY.roa (hash: 82W2phd9aqBUTlWrD81GDTCzzKIr5I7VokuYsIuKW0U=)
                          2: a3-gXmtNilEpRAdQTZZBrT4CBD8.crl (hash: E44cuzOMaFZjag6kl5x6FX59y0c/K0SD0SgOsvKSAHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:c1:5c:4c:8d:5a:c4:d5:c9:2e:96:d0:dd:ce:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
        Validity
            Not Before: Jun 13 16:00:51 2025 GMT
            Not After : Jun 14 16:00:51 2025 GMT
        Subject: CN=d044ef121c3360f778e44ca052aac36b12e0088f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7d:b0:bb:13:02:0f:75:3d:25:ac:c3:6d:40:
                    5a:bf:dd:ea:ef:af:6a:b2:cb:88:be:4a:4a:0f:1f:
                    f5:82:bf:20:4f:24:51:28:93:df:2b:11:bc:b5:1e:
                    2f:68:29:19:74:05:a2:4a:e6:f3:91:fb:b3:b9:88:
                    57:77:76:f3:81:c3:15:8f:5c:6b:39:fa:d8:49:19:
                    ea:8a:7b:13:94:76:98:d0:0c:63:20:fb:ef:04:e9:
                    b9:07:b6:6b:b1:f4:b2:95:72:40:9b:8d:62:3a:03:
                    ab:93:4e:db:09:37:7b:16:99:18:80:38:9a:59:b9:
                    bd:b4:0c:b2:e4:2a:4a:f1:f1:a7:53:7e:2f:49:c1:
                    f1:6c:a5:55:71:94:0a:75:3f:bd:0d:ae:83:50:e3:
                    47:de:af:75:68:32:9b:09:e5:8b:22:f7:6b:c1:37:
                    96:37:bb:f1:cd:24:a4:25:8e:56:63:75:4b:11:57:
                    68:2e:e4:23:78:a5:ed:16:4f:b8:de:35:be:0d:c6:
                    a2:46:0e:69:40:20:f8:37:8f:97:bc:ee:c1:28:ea:
                    f2:a4:08:28:9d:d4:17:0c:3c:cf:f2:46:45:22:6e:
                    a0:13:0d:ac:76:07:a2:f9:5c:be:82:0b:7b:a7:fd:
                    fc:3e:eb:1b:bf:74:5a:71:c4:7d:7e:77:7b:96:6f:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:44:EF:12:1C:33:60:F7:78:E4:4C:A0:52:AA:C3:6B:12:E0:08:8F
            X509v3 Authority Key Identifier:
                keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:e5:9c:40:ff:a1:35:11:84:6e:bf:f7:af:41:fb:d0:ea:
         ee:1c:e9:a3:4c:30:a6:8a:78:23:9c:33:99:4a:c4:08:36:79:
         26:28:c5:9f:6d:09:63:20:ec:f7:4c:cb:a5:8a:a0:47:c6:5c:
         7b:eb:68:71:10:68:6a:bd:dc:8b:69:88:a4:62:ef:7a:a7:96:
         d1:57:46:aa:65:72:69:01:bd:48:a1:94:3a:6c:88:6a:84:c9:
         60:b7:69:c9:2b:6f:45:9f:f3:2a:7d:72:24:ce:6c:89:2d:f0:
         b6:d3:be:ab:f8:c3:1b:a0:ff:c4:e3:07:8b:33:32:46:ef:1f:
         62:e6:a8:47:2a:68:ae:92:a6:b5:fd:e4:d5:47:07:cf:80:e3:
         07:1b:29:e7:81:7b:9f:69:b2:69:38:38:69:4a:53:21:34:c0:
         4d:26:81:d3:98:ff:d7:3e:19:3d:89:80:d1:7f:b7:91:79:58:
         fa:2b:33:cd:75:96:ec:4d:d7:7f:22:83:9f:ee:16:7b:2e:03:
         df:7a:4e:b6:54:55:90:7f:1b:af:84:e4:78:c4:f6:f4:52:e8:
         f2:15:de:b8:a1:83:84:5a:01:c3:59:a6:d5:8e:87:e3:a2:1b:
         68:30:82:43:5d:af:2f:ec:ff:f1:77:d2:bc:dd:f7:32:b1:9c:
         48:8c:41:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBcFcTI1axNXJLpbQ3c4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2ZhMDVlNmI0ZDhhNTEyOTQ0MDc1MDRkOTY0MWFkM2Uw
MjA0M2YwHhcNMjUwNjEzMTYwMDUxWhcNMjUwNjE0MTYwMDUxWjAzMTEwLwYDVQQD
EyhkMDQ0ZWYxMjFjMzM2MGY3NzhlNDRjYTA1MmFhYzM2YjEyZTAwODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA632wuxMCD3U9JazDbUBav93q769q
ssuIvkpKDx/1gr8gTyRRKJPfKxG8tR4vaCkZdAWiSubzkfuzuYhXd3bzgcMVj1xr
OfrYSRnqinsTlHaY0AxjIPvvBOm5B7ZrsfSylXJAm41iOgOrk07bCTd7FpkYgDia
Wbm9tAyy5CpK8fGnU34vScHxbKVVcZQKdT+9Da6DUONH3q91aDKbCeWLIvdrwTeW
N7vxzSSkJY5WY3VLEVdoLuQjeKXtFk+43jW+DcaiRg5pQCD4N4+XvO7BKOrypAgo
ndQXDDzP8kZFIm6gEw2sdgei+Vy+ggt7p/38Pusbv3RaccR9fnd7lm9aUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBE7xIcM2D3eORMoFKqw2sS4AiPMB8GA1UdIwQY
MBaAFGt/oF5rTYpRKUQHUE2WQa0+AgQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgt
OGIxY2ZiNjgzNjZlLzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ODNhYmQtMzQ4OC00YzZlLWFkODgtOGIxY2ZiNjgzNjZl
LzEvYTMtZ1htdE5pbEVwUkFkUVRaWkJyVDRDQkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuLlnED/
oTURhG6/969B+9Dq7hzpo0wwpop4I5wzmUrECDZ5JijFn20JYyDs90zLpYqgR8Zc
e+tocRBoar3ci2mIpGLveqeW0VdGqmVyaQG9SKGUOmyIaoTJYLdpyStvRZ/zKn1y
JM5siS3wttO+q/jDG6D/xOMHizMyRu8fYuaoRyporpKmtf3k1UcHz4DjBxsp54F7
n2myaTg4aUpTITTATSaB05j/1z4ZPYmA0X+3kXlY+iszzXWW7E3XfyKDn+4Wey4D
33pOtlRVkH8br4TkeMT29FLo8hXeuKGDhFoBw1mm1Y6H46IbaDCCQ12vL+z/8XfS
vN33MrGcSIxB9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:23:38 2025 by rpki-client