Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File:                     iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier:          olxl+s8KartDGRpKK3SDuG3CCtYMsRZ5CgfZ69iHhOg=
Subject key identifier:   82:92:27:E5:01:BA:1A:B7:CC:4C:77:10:ED:79:AD:73:BD:96:97:DB
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       019747E7C814024FEFCEC15FB37400BDF062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number:          047C
Signing time:             Sat 07 Jun 2025 01:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:01 +0000
Files and hashes:         1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
                          2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: 0z8ifDy/7GQRiNXBdnIkPC9/4BqOJYMScLfH/3sLay4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:c8:14:02:4f:ef:ce:c1:5f:b3:74:00:bd:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Jun  7 01:01:01 2025 GMT
            Not After : Jun  8 01:01:01 2025 GMT
        Subject: CN=829227e501ba1ab7cc4c7710ed79ad73bd9697db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:3d:74:e6:78:e3:df:3a:66:91:5e:ed:71:
                    9c:64:6e:de:39:6b:bc:0d:d6:4b:52:62:f0:02:73:
                    a4:f1:d8:11:fa:8e:1f:d3:a7:ae:6b:68:64:92:2f:
                    66:65:80:d7:af:29:b5:35:bf:6c:5f:e7:26:3b:90:
                    ff:16:10:29:e1:66:b8:38:3e:1c:a9:ed:46:34:bb:
                    08:ce:95:32:6e:c3:b7:e4:5d:bf:b2:30:60:d9:97:
                    b9:f6:46:44:2f:f3:40:68:8f:1f:27:f5:85:6e:44:
                    c6:26:25:43:d3:cd:2c:5a:bd:41:30:d5:71:fe:7c:
                    96:a4:66:ac:79:5b:d3:e3:4b:bd:b6:85:fd:9f:c0:
                    d6:71:47:61:1b:1d:86:0e:bc:b0:1d:c1:51:84:6e:
                    bf:73:7d:c4:c4:44:7e:bd:31:2c:a6:67:92:48:58:
                    b8:c0:9f:a5:4f:7d:50:2d:06:44:00:de:84:b8:d3:
                    3b:71:0b:35:5a:04:e0:3a:98:c6:97:61:43:15:6b:
                    4c:04:60:78:df:43:f5:20:eb:77:62:5b:f0:d2:92:
                    b7:97:4a:e3:c0:a9:c4:b4:c8:44:75:61:0c:6d:12:
                    5b:eb:d4:4e:5a:d0:99:bd:ba:35:86:6b:7e:77:70:
                    f7:0c:ca:03:5b:9a:95:73:d5:76:23:a3:42:18:cd:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:27:E5:01:BA:1A:B7:CC:4C:77:10:ED:79:AD:73:BD:96:97:DB
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7c:e3:6d:03:f8:15:1b:51:fb:91:7f:de:b3:68:50:ed:96:
         31:5d:05:ea:2b:64:b9:4c:99:f5:a5:98:61:86:28:54:1b:93:
         a4:0e:a8:c9:5b:7b:cc:48:1d:f0:df:57:00:b2:2d:6c:27:80:
         d4:4f:61:03:30:cd:92:ba:0e:01:3d:dc:fc:43:33:6a:ba:ca:
         0d:d7:60:04:1a:69:e3:8a:5c:91:8f:54:7d:b4:e9:00:0f:0b:
         4b:b9:c9:5f:14:a3:4d:96:82:a6:67:3a:bb:59:4b:d7:d2:7e:
         0c:c7:76:2f:59:e1:40:a3:61:68:99:6d:c6:1e:47:45:35:6b:
         cb:ea:59:79:9d:60:db:ab:d2:50:30:8b:ec:53:b6:69:55:fb:
         fc:e5:b0:89:e5:b5:da:ae:91:fa:1c:d8:41:5e:e3:3b:66:1c:
         09:01:7c:bb:ee:d9:68:d0:f3:0c:16:17:ee:bf:f5:81:c9:8d:
         43:c6:fd:c3:1e:74:5b:f9:45:12:06:9a:c3:44:f7:02:49:ea:
         e0:74:15:d0:52:84:67:4a:0a:8f:eb:21:95:75:f1:28:e4:06:
         05:6c:f3:d3:b2:71:d3:23:4d:c3:0e:53:7b:55:4c:9f:f4:71:
         3c:71:df:5a:19:38:aa:60:99:63:7b:84:dd:52:7c:62:14:2f:
         2a:1d:3c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH58gUAk/vzsFfs3QAvfBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDA4Yjg2MTU3YzZiMjhlNmFjOTgyZTBjM2ZlYjFhM2Vj
MzI4MTAwHhcNMjUwNjA3MDEwMTAxWhcNMjUwNjA4MDEwMTAxWjAzMTEwLwYDVQQD
Eyg4MjkyMjdlNTAxYmExYWI3Y2M0Yzc3MTBlZDc5YWQ3M2JkOTY5N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr49dOZ44986ZpFe7XGcZG7eOWu8
DdZLUmLwAnOk8dgR+o4f06eua2hkki9mZYDXrym1Nb9sX+cmO5D/FhAp4Wa4OD4c
qe1GNLsIzpUybsO35F2/sjBg2Ze59kZEL/NAaI8fJ/WFbkTGJiVD080sWr1BMNVx
/nyWpGaseVvT40u9toX9n8DWcUdhGx2GDrywHcFRhG6/c33ExER+vTEspmeSSFi4
wJ+lT31QLQZEAN6EuNM7cQs1WgTgOpjGl2FDFWtMBGB430P1IOt3Ylvw0pK3l0rj
wKnEtMhEdWEMbRJb69ROWtCZvbo1hmt+d3D3DMoDW5qVc9V2I6NCGM12owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKSJ+UBuhq3zEx3EO15rXO9lpfbMB8GA1UdIwQY
MBaAFIjQi4YVfGso5qyYLgw/6xo+wygQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAt
MzhkMGNmOGZiOGI4LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83NjA0NTItZjYzYy00OGFhLWEzZTAtMzhkMGNmOGZiOGI4
LzEvaU5DTGhoVjhheWptckpndUREX3JHajdES0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHzjbQP4
FRtR+5F/3rNoUO2WMV0F6itkuUyZ9aWYYYYoVBuTpA6oyVt7zEgd8N9XALItbCeA
1E9hAzDNkroOAT3c/EMzarrKDddgBBpp44pckY9UfbTpAA8LS7nJXxSjTZaCpmc6
u1lL19J+DMd2L1nhQKNhaJltxh5HRTVry+pZeZ1g26vSUDCL7FO2aVX7/OWwieW1
2q6R+hzYQV7jO2YcCQF8u+7ZaNDzDBYX7r/1gcmNQ8b9wx50W/lFEgaaw0T3Aknq
4HQV0FKEZ0oKj+shlXXxKOQGBWzz07Jx0yNNww5Te1VMn/RxPHHfWhk4qmCZY3uE
3VJ8YhQvKh08Ww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:18 2025 by rpki-client