Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File:                     Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier:          BA55hFAw/1fEG9Nc3J0MJzqhsFhhS4tuDHSUxkkaAng=
Subject key identifier:   C1:38:C3:54:19:B2:68:0C:00:FC:BF:E8:7C:BF:D6:3B:61:0D:D4:20
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer:       /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial:       019769CF1DFE4B1D279592E716EDE5E44B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number:          113B
Signing time:             Fri 13 Jun 2025 15:01:10 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:10 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:10 +0000
Files and hashes:         1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: jXBnvFq0TYcGcGm6jasOKnZIJAOiopDKXflHAMSVE/I=)
                          2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:1d:fe:4b:1d:27:95:92:e7:16:ed:e5:e4:4b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
        Validity
            Not Before: Jun 13 15:01:10 2025 GMT
            Not After : Jun 14 15:01:10 2025 GMT
        Subject: CN=c138c35419b2680c00fcbfe87cbfd63b610dd420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7a:cc:7e:48:a9:2a:c8:27:97:c7:fd:52:60:
                    a8:83:dd:49:50:54:84:c9:0a:01:91:f2:46:be:b5:
                    93:0e:77:ca:89:ba:7d:be:e2:04:5f:92:55:b6:35:
                    05:55:43:dd:ca:bc:67:ec:d1:e4:37:e4:18:b4:3d:
                    fe:8e:15:b6:2f:b6:90:9c:40:51:41:b1:b6:31:39:
                    54:38:1c:0c:79:39:ab:c5:17:8a:b1:d5:dc:5b:bf:
                    79:e0:ad:90:2e:9b:bd:db:ac:9c:56:b5:54:63:8e:
                    29:50:1f:2d:e5:fb:16:0b:36:8e:2b:1b:fd:3a:cb:
                    01:fa:82:4c:e6:ac:80:0f:f3:85:b6:3e:6a:e1:fa:
                    c1:a2:9e:e2:6d:e2:d2:36:53:3f:e4:c5:1e:c4:6a:
                    0b:4a:45:7f:fc:3b:63:9f:9c:8c:52:b8:18:13:e8:
                    de:eb:b5:13:aa:25:68:77:66:1f:10:13:18:53:07:
                    3c:8a:69:a0:4b:8b:39:da:cb:88:8d:6a:06:fe:6c:
                    60:50:32:c2:c0:44:38:09:9e:b2:16:e4:a7:4e:6f:
                    ad:38:2e:44:c4:30:8c:eb:1f:b7:03:c8:6c:c4:ca:
                    ba:01:64:63:34:dc:f1:43:0f:5d:92:f7:e8:7a:89:
                    20:c2:d0:9e:ac:b5:13:2c:d0:62:ab:58:e2:1f:c6:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:C3:54:19:B2:68:0C:00:FC:BF:E8:7C:BF:D6:3B:61:0D:D4:20
            X509v3 Authority Key Identifier:
                keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ab:30:28:13:1d:cb:bd:e1:f7:78:45:76:b9:8d:9f:6a:5d:
         44:75:45:95:55:82:c1:e1:e3:14:40:ff:cd:05:3b:5e:81:ca:
         5c:cd:e6:7d:07:e4:c6:d1:3a:32:88:d9:1e:e8:ad:ff:f3:31:
         c3:86:9b:d4:9a:48:45:df:4c:17:5e:78:2b:33:d7:df:9a:18:
         50:a9:9c:5a:c3:18:65:0d:a0:f4:31:d4:24:25:1d:4f:81:e9:
         e3:a1:f6:f8:63:bc:85:0a:11:3c:88:c1:29:e4:51:69:7b:60:
         1f:57:66:32:ee:85:bb:ed:a9:63:2f:68:73:ef:8a:23:76:91:
         a6:6f:74:6b:af:fe:fa:ab:5a:e0:f0:0f:5b:e8:25:c8:21:e1:
         0c:28:04:79:68:df:7e:9f:df:cb:f7:cf:fb:97:ad:9b:6b:c9:
         85:42:06:10:39:3e:9b:61:1e:5c:45:ed:4c:ff:b7:ec:f2:b6:
         61:9f:0a:ff:6b:a0:7b:13:5e:0b:58:82:98:2a:eb:0d:1a:ef:
         d5:72:3a:dc:58:4a:c5:3c:62:2f:e2:26:f5:fb:b4:37:a6:87:
         29:b7:51:17:84:84:21:be:ab:1b:be:1f:0f:6f:68:1c:45:df:
         7f:1b:77:81:f1:06:45:6b:9d:71:62:17:5e:83:00:11:f5:34:
         16:48:61:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzx3+Sx0nlZLnFu3l5Es9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU3NTljMGVhNjdkOGZmNzIyYWFjODg3YzdlY2NlY2Rl
ZDNlYzcwHhcNMjUwNjEzMTUwMTEwWhcNMjUwNjE0MTUwMTEwWjAzMTEwLwYDVQQD
EyhjMTM4YzM1NDE5YjI2ODBjMDBmY2JmZTg3Y2JmZDYzYjYxMGRkNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HrMfkipKsgnl8f9UmCog91JUFSE
yQoBkfJGvrWTDnfKibp9vuIEX5JVtjUFVUPdyrxn7NHkN+QYtD3+jhW2L7aQnEBR
QbG2MTlUOBwMeTmrxReKsdXcW7954K2QLpu926ycVrVUY44pUB8t5fsWCzaOKxv9
OssB+oJM5qyAD/OFtj5q4frBop7ibeLSNlM/5MUexGoLSkV//Dtjn5yMUrgYE+je
67UTqiVod2YfEBMYUwc8immgS4s52suIjWoG/mxgUDLCwEQ4CZ6yFuSnTm+tOC5E
xDCM6x+3A8hsxMq6AWRjNNzxQw9dkvfoeokgwtCerLUTLNBiq1jiH8ZWjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME4w1QZsmgMAPy/6Hy/1jthDdQgMB8GA1UdIwQY
MBaAFCsOdZwOpn2P9yKqyIfH7M7N7T7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgt
NTVlMWZmN2YzMmY5LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kNGRiMDMtZThhZC00MDI3LTljZTgtNTVlMWZmN2YzMmY5
LzEvS3c1MW5BNm1mWV8zSXFySWg4ZnN6czN0UHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKswKBMd
y73h93hFdrmNn2pdRHVFlVWCweHjFED/zQU7XoHKXM3mfQfkxtE6MojZHuit//Mx
w4ab1JpIRd9MF154KzPX35oYUKmcWsMYZQ2g9DHUJCUdT4Hp46H2+GO8hQoRPIjB
KeRRaXtgH1dmMu6Fu+2pYy9oc++KI3aRpm90a6/++qta4PAPW+glyCHhDCgEeWjf
fp/fy/fP+5etm2vJhUIGEDk+m2EeXEXtTP+37PK2YZ8K/2ugexNeC1iCmCrrDRrv
1XI63FhKxTxiL+Im9fu0N6aHKbdRF4SEIb6rG74fD29oHEXffxt3gfEGRWudcWIX
XoMAEfU0FkhhUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:15:17 2025 by rpki-client