Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          mwid4c6+yxAVc1f7F8eGYv2cJnfY8w88PgVlU1+TMfU=
Subject key identifier:   42:B8:AC:4E:10:7C:5E:3E:3D:55:DE:94:A9:B4:6B:24:2A:1C:06:5E
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       0197488C8F2D1B3A759CD0755544C3E7743A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          106D
Signing time:             Sat 07 Jun 2025 04:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:00 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: H9CBLfloP0uk9o+BZLZWrObF12y928y+OgY2kCfCe7U=)
                          2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:8f:2d:1b:3a:75:9c:d0:75:55:44:c3:e7:74:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: Jun  7 04:01:00 2025 GMT
            Not After : Jun  8 04:01:00 2025 GMT
        Subject: CN=42b8ac4e107c5e3e3d55de94a9b46b242a1c065e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:04:2f:48:fc:5f:1b:d5:08:67:f2:52:17:
                    47:29:d7:e6:a9:50:de:f4:32:8e:81:4e:12:fa:cd:
                    ec:91:75:7a:8a:0d:30:04:39:00:e4:76:b8:9a:82:
                    05:6b:4c:87:d5:b4:04:3f:42:41:84:0b:fe:12:42:
                    13:40:77:d5:b9:e8:f8:ee:c6:b1:68:d3:4b:ba:d7:
                    ee:8d:36:7b:47:9b:81:ae:e7:e6:cf:46:38:3f:95:
                    55:d1:6f:5e:1b:6d:ef:0d:ea:87:4d:4d:ca:55:2f:
                    30:3f:1c:c6:81:79:c2:37:f3:3d:4f:62:c6:55:14:
                    d6:c1:49:bc:89:e9:4d:c7:96:2f:8c:17:a1:e8:5a:
                    47:c5:a2:44:06:64:6f:a4:cb:07:f9:86:b5:18:89:
                    10:87:3d:f9:98:20:6e:be:3d:d3:c2:17:7a:4b:8c:
                    cc:02:ae:e0:41:67:17:43:d9:9d:91:37:cb:da:44:
                    5b:7c:38:b3:dc:45:b6:17:ff:76:8e:c8:de:f1:81:
                    69:3a:48:3c:cf:dc:67:06:a9:52:38:70:3d:36:21:
                    68:00:f0:e2:3c:3c:ef:09:f5:ba:a3:c4:16:3b:08:
                    fe:76:a1:10:3a:b9:3c:62:e5:de:b4:f2:7e:f8:8e:
                    98:f0:69:cc:fe:db:d4:73:43:97:06:be:58:84:9d:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B8:AC:4E:10:7C:5E:3E:3D:55:DE:94:A9:B4:6B:24:2A:1C:06:5E
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d3:66:02:16:f9:75:58:60:4c:89:4a:c2:d8:dd:7c:c4:ae:
         28:a1:65:1f:95:8c:4c:c8:c1:35:34:5b:f5:73:04:78:2b:7d:
         b1:7f:60:44:e3:1f:a4:1a:e2:69:ac:64:eb:b3:6f:2b:87:dd:
         4d:b5:62:15:0f:8f:50:ee:2f:01:1b:77:08:4b:f1:7f:f3:2a:
         de:4d:96:ba:04:9c:4a:73:6a:5e:93:e4:08:bf:31:d6:7e:d6:
         ea:8f:fd:aa:fe:39:c0:67:77:3d:a0:20:99:90:47:a4:3a:04:
         37:18:6e:b2:11:c6:d2:16:31:44:bf:60:82:df:9a:01:85:52:
         c3:6d:6c:dc:45:6c:df:3e:af:89:8f:bc:d3:4a:07:42:b2:de:
         a7:ab:8f:38:87:2c:a3:06:0d:00:c5:ca:d1:6b:63:1a:0b:9c:
         1d:7d:0f:55:b7:83:53:d1:99:ed:0d:40:0a:94:07:57:c9:c7:
         90:b1:c0:36:f6:1f:71:34:c2:f5:c4:55:18:60:d4:1d:73:f6:
         28:8b:24:92:a9:11:fd:3b:93:1e:c4:cf:80:66:0f:6e:49:e5:
         92:c1:aa:53:85:28:4b:d8:64:6f:dd:e1:c5:6a:95:64:5f:24:
         b5:6d:8e:6c:7b:13:09:6c:90:a4:0c:a7:c9:ac:36:e3:02:01:
         f1:7f:a9:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjI8tGzp1nNB1VUTD53Q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy
Zjg4OGIwHhcNMjUwNjA3MDQwMTAwWhcNMjUwNjA4MDQwMTAwWjAzMTEwLwYDVQQD
Eyg0MmI4YWM0ZTEwN2M1ZTNlM2Q1NWRlOTRhOWI0NmIyNDJhMWMwNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupAEL0j8XxvVCGfyUhdHKdfmqVDe
9DKOgU4S+s3skXV6ig0wBDkA5Ha4moIFa0yH1bQEP0JBhAv+EkITQHfVuej47sax
aNNLutfujTZ7R5uBrufmz0Y4P5VV0W9eG23vDeqHTU3KVS8wPxzGgXnCN/M9T2LG
VRTWwUm8ielNx5YvjBeh6FpHxaJEBmRvpMsH+Ya1GIkQhz35mCBuvj3Twhd6S4zM
Aq7gQWcXQ9mdkTfL2kRbfDiz3EW2F/92jsje8YFpOkg8z9xnBqlSOHA9NiFoAPDi
PDzvCfW6o8QWOwj+dqEQOrk8YuXetPJ++I6Y8GnM/tvUc0OXBr5YhJ1vwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK4rE4QfF4+PVXelKm0ayQqHAZeMB8GA1UdIwQY
MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt
Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj
LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9NmAhb5
dVhgTIlKwtjdfMSuKKFlH5WMTMjBNTRb9XMEeCt9sX9gROMfpBriaaxk67NvK4fd
TbViFQ+PUO4vARt3CEvxf/Mq3k2WugScSnNqXpPkCL8x1n7W6o/9qv45wGd3PaAg
mZBHpDoENxhushHG0hYxRL9ggt+aAYVSw21s3EVs3z6viY+800oHQrLep6uPOIcs
owYNAMXK0WtjGgucHX0PVbeDU9GZ7Q1ACpQHV8nHkLHANvYfcTTC9cRVGGDUHXP2
KIskkqkR/TuTHsTPgGYPbknlksGqU4UoS9hkb93hxWqVZF8ktW2ObHsTCWyQpAyn
yaw24wIB8X+pIA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:39 2025 by rpki-client