Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File:                     Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier:          M3C4beywNEzZPZFhVyPKVHaV/GB3Tl6/2Gywqk8ylOw=
Subject key identifier:   DD:EA:BC:C5:6E:84:47:E3:BB:FF:B5:FF:D6:6A:5D:5B:4D:0C:EF:EE
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer:       /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial:       019765F24BBE9DA19109F47893F515FE4160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number:          1139
Signing time:             Thu 12 Jun 2025 21:01:07 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:07 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:07 +0000
Files and hashes:         1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: 9NMJByXAqMKX1E4iDIXKw/LoJ/FWUz/kS1YCBiAAtVQ=)
                          2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:4b:be:9d:a1:91:09:f4:78:93:f5:15:fe:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
        Validity
            Not Before: Jun 12 21:01:07 2025 GMT
            Not After : Jun 13 21:01:07 2025 GMT
        Subject: CN=ddeabcc56e8447e3bbffb5ffd66a5d5b4d0cefee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:f0:a2:df:b2:f5:42:b7:23:4d:56:a3:80:
                    81:01:71:30:b2:76:54:18:af:9e:ae:f6:3b:36:29:
                    56:a6:4d:bc:4e:17:e7:7f:86:61:41:2e:f0:5f:2c:
                    18:a3:57:c9:a1:3a:8c:37:38:50:66:f0:2f:53:53:
                    48:2c:46:4f:6a:d2:6c:e1:b8:3c:82:62:32:2a:0d:
                    1b:69:1a:f8:7d:ba:2c:92:04:6c:e9:4d:90:b9:81:
                    2c:4b:d9:79:ed:f6:e4:c7:50:da:51:99:5b:86:3b:
                    a0:72:8d:1d:2b:b2:54:bb:4a:1b:b5:8b:17:bb:4e:
                    81:d5:90:06:13:cb:c9:99:b3:07:1f:fd:ed:a2:98:
                    24:f2:ee:0d:c8:6c:83:97:48:8e:79:e5:73:1f:39:
                    8c:e1:10:5b:9b:ed:ab:95:0c:f9:c6:85:c6:16:7d:
                    b3:67:9a:bf:cb:23:33:9f:3f:7a:64:0a:d5:af:d6:
                    6c:80:6b:53:53:ae:72:2a:2d:d8:5d:ab:da:f2:56:
                    09:ea:1c:0d:16:4c:4e:a9:6d:0d:b7:28:76:69:5c:
                    a8:3e:8e:0b:fe:eb:5a:51:28:a6:07:9d:4d:81:71:
                    fc:b3:9e:1e:44:1e:eb:dc:d2:7e:68:4e:29:86:3e:
                    8e:ec:5b:28:e0:d2:4b:4d:79:91:74:6e:a3:7d:61:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EA:BC:C5:6E:84:47:E3:BB:FF:B5:FF:D6:6A:5D:5B:4D:0C:EF:EE
            X509v3 Authority Key Identifier:
                keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:38:56:50:31:28:58:07:e7:eb:26:ab:d1:19:bd:f9:e3:88:
         cc:ff:f7:1a:6c:7d:d6:42:3e:37:22:2f:c8:3e:6e:13:ad:52:
         45:b2:9f:be:9d:52:5f:78:c4:b2:07:04:7f:db:f3:9f:dd:61:
         0d:0e:fe:1f:d3:1e:57:b8:8b:d9:a2:58:5f:cd:24:4e:b0:79:
         74:c9:b4:03:9d:34:e0:51:0d:1c:13:fe:91:72:aa:43:0b:7a:
         78:4e:08:53:8c:89:1a:90:0d:41:26:d6:71:ec:d2:98:11:d2:
         c7:8f:02:55:6a:a3:98:29:38:09:82:b2:6f:42:4e:18:79:2a:
         6b:c9:bb:ca:ee:48:33:08:50:13:c0:b5:17:ff:d7:25:4e:ce:
         7c:c8:fc:c9:d5:ff:9f:0f:85:d3:f3:d7:11:70:a5:b1:10:8b:
         38:d8:df:85:e2:df:f4:67:37:a3:fd:83:89:bc:15:db:66:0f:
         b6:19:2b:f0:52:99:e1:41:7a:62:e1:9d:bd:e7:5a:20:ce:1a:
         40:60:bc:b3:c4:4f:15:e5:c3:a6:4a:0e:69:77:15:10:f5:43:
         86:02:2a:6a:62:8e:af:c5:68:64:db:2a:d2:89:65:a0:47:d2:
         f2:37:be:6a:a5:e1:13:4a:88:84:60:77:60:bc:30:14:4f:4a:
         b9:7c:36:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8ku+naGRCfR4k/UV/kFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl
ZDNlYzcwHhcNMjUwNjEyMjEwMTA3WhcNMjUwNjEzMjEwMTA3WjAzMTEwLwYDVQQD
EyhkZGVhYmNjNTZlODQ0N2UzYmJmZmI1ZmZkNjZhNWQ1YjRkMGNlZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ebwot+y9UK3I01Wo4CBAXEwsnZU
GK+ervY7NilWpk28Thfnf4ZhQS7wXywYo1fJoTqMNzhQZvAvU1NILEZPatJs4bg8
gmIyKg0baRr4fboskgRs6U2QuYEsS9l57fbkx1DaUZlbhjugco0dK7JUu0obtYsX
u06B1ZAGE8vJmbMHH/3topgk8u4NyGyDl0iOeeVzHzmM4RBbm+2rlQz5xoXGFn2z
Z5q/yyMznz96ZArVr9ZsgGtTU65yKi3YXava8lYJ6hwNFkxOqW0Ntyh2aVyoPo4L
/utaUSimB51NgXH8s54eRB7r3NJ+aE4phj6O7Fso4NJLTXmRdG6jfWGcXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3qvMVuhEfju/+1/9ZqXVtNDO/uMB8GA1UdIwQY
MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt
NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5
LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjhWUDEo
WAfn6yar0Rm9+eOIzP/3Gmx91kI+NyIvyD5uE61SRbKfvp1SX3jEsgcEf9vzn91h
DQ7+H9MeV7iL2aJYX80kTrB5dMm0A5004FENHBP+kXKqQwt6eE4IU4yJGpANQSbW
cezSmBHSx48CVWqjmCk4CYKyb0JOGHkqa8m7yu5IMwhQE8C1F//XJU7OfMj8ydX/
nw+F0/PXEXClsRCLONjfheLf9Gc3o/2DibwV22YPthkr8FKZ4UF6YuGdvedaIM4a
QGC8s8RPFeXDpkoOaXcVEPVDhgIqamKOr8VoZNsq0olloEfS8je+aqXhE0qIhGB3
YLwwFE9KuXw2pg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 00:40:08 2025 by rpki-client