Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File:                     dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier:          vwAi3B+60An+l+XXLBQtrVzqInUXtbJO2NpbhfysNnM=
Subject key identifier:   09:7C:C2:B7:8F:2A:C5:DE:C6:19:D0:D4:FF:7D:FF:AF:AA:37:A4:A2
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer:       /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial:       01974CA00B51CEB43BBAD167BAD218914138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number:          0E4F
Signing time:             Sat 07 Jun 2025 23:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:46 +0000
Files and hashes:         1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: LFzVpIBRj0YJuWTCI9l3NaNHwcaxcfh0z1hp4DYJ1To=)
                          2: j_zwA3lMJMAwX3hbOGDvv36TWxI.roa (hash: jFs+ea1KgMM5z88rmof87A9yhp5WnGLZNGkzRM11ISg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:0b:51:ce:b4:3b:ba:d1:67:ba:d2:18:91:41:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
        Validity
            Not Before: Jun  7 23:00:46 2025 GMT
            Not After : Jun  8 23:00:46 2025 GMT
        Subject: CN=097cc2b78f2ac5dec619d0d4ff7dffafaa37a4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:c3:ad:04:91:94:cb:dd:1e:02:90:e5:e8:
                    d7:01:05:28:3f:95:5d:da:05:9c:7a:bc:6c:87:09:
                    a5:9a:a0:47:5d:93:59:49:98:0c:ae:ef:f7:8b:22:
                    cc:aa:e8:8e:17:ad:43:5a:7a:13:a8:0a:c2:e5:39:
                    71:e5:87:4e:77:67:f5:ad:7b:8a:14:4a:64:7c:58:
                    48:fb:7b:d1:1d:4f:6d:f2:95:5c:af:9a:1d:07:8f:
                    0f:a4:2a:a2:66:80:1a:61:48:7a:30:a0:fd:e1:f8:
                    96:6b:eb:8c:17:17:46:77:30:87:ad:d8:db:be:7e:
                    50:13:71:44:9d:28:a7:3d:39:e0:57:23:e2:cf:29:
                    df:cf:09:f0:a9:09:c0:11:31:e5:1d:54:a7:50:1a:
                    b7:ed:45:54:c8:3e:a6:d8:dc:99:bb:3b:ca:ba:36:
                    a9:cc:c6:4c:61:45:8a:6c:bf:79:50:24:b6:91:7d:
                    9c:a8:44:e3:12:f2:0f:17:7c:35:76:d8:24:0a:f2:
                    d0:7b:17:f0:94:02:d2:7b:60:1e:55:76:3e:3a:bc:
                    25:8c:39:cf:fd:c3:d5:1f:23:c8:7c:7f:1b:c6:ef:
                    ee:1d:87:32:86:d5:da:a1:b9:d5:04:2b:a8:41:b6:
                    87:f8:40:84:ec:a8:51:8a:91:50:8c:c6:86:b2:10:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7C:C2:B7:8F:2A:C5:DE:C6:19:D0:D4:FF:7D:FF:AF:AA:37:A4:A2
            X509v3 Authority Key Identifier:
                keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a0:6c:4d:43:13:f3:54:a6:f5:9b:76:dc:0b:4c:b9:2d:26:
         1a:26:d9:35:37:d5:fc:d1:6b:7a:9f:2d:d0:fb:eb:ce:17:4d:
         23:13:9b:9c:c0:98:b4:ba:fb:f0:df:65:22:7a:55:e3:f3:05:
         77:4f:db:ec:65:84:18:ac:7d:d2:c8:b3:c4:21:ff:da:6f:c0:
         31:6e:c1:41:89:01:82:f5:37:6e:50:a7:8b:49:fb:73:6d:90:
         7d:af:25:ab:6b:8c:cd:08:9c:bc:5b:da:b5:7c:d5:fb:d0:da:
         26:b3:80:34:3d:ee:ad:38:22:40:05:ba:e4:2f:56:e3:eb:3e:
         7c:c4:6e:18:6e:57:35:61:88:fe:38:1c:bd:24:8d:aa:dc:0f:
         02:01:12:b1:ef:65:cc:ce:f3:c1:46:2b:1f:f7:fd:92:94:e6:
         a7:73:10:84:d1:cd:6b:ed:31:5d:02:64:34:04:1e:42:99:c5:
         56:36:81:ee:b9:36:b4:f9:d7:ce:42:10:81:98:73:7a:91:fc:
         ef:67:56:9a:2a:84:7e:e8:b1:eb:49:08:5a:a6:69:81:33:b7:
         c0:30:9a:c1:91:bf:5b:6f:26:26:84:94:bd:54:c8:62:62:32:
         8b:35:e8:b8:28:1a:04:f3:50:c4:07:db:5d:6f:60:71:13:23:
         73:8b:6c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoAtRzrQ7utFnutIYkUE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYy
NDdlOGUwHhcNMjUwNjA3MjMwMDQ2WhcNMjUwNjA4MjMwMDQ2WjAzMTEwLwYDVQQD
EygwOTdjYzJiNzhmMmFjNWRlYzYxOWQwZDRmZjdkZmZhZmFhMzdhNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0HDrQSRlMvdHgKQ5ejXAQUoP5Vd
2gWcerxshwmlmqBHXZNZSZgMru/3iyLMquiOF61DWnoTqArC5Tlx5YdOd2f1rXuK
FEpkfFhI+3vRHU9t8pVcr5odB48PpCqiZoAaYUh6MKD94fiWa+uMFxdGdzCHrdjb
vn5QE3FEnSinPTngVyPizynfzwnwqQnAETHlHVSnUBq37UVUyD6m2NyZuzvKujap
zMZMYUWKbL95UCS2kX2cqETjEvIPF3w1dtgkCvLQexfwlALSe2AeVXY+OrwljDnP
/cPVHyPIfH8bxu/uHYcyhtXaobnVBCuoQbaH+ECE7KhRipFQjMaGshDfewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl8wrePKsXexhnQ1P99/6+qN6SiMB8GA1UdIwQY
MBaAFHSlm3+04DT2d3Xyh177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2It
YWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5
LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaBsTUMT
81Sm9Zt23AtMuS0mGibZNTfV/NFrep8t0PvrzhdNIxObnMCYtLr78N9lInpV4/MF
d0/b7GWEGKx90sizxCH/2m/AMW7BQYkBgvU3blCni0n7c22Qfa8lq2uMzQicvFva
tXzV+9DaJrOAND3urTgiQAW65C9W4+s+fMRuGG5XNWGI/jgcvSSNqtwPAgESse9l
zM7zwUYrH/f9kpTmp3MQhNHNa+0xXQJkNAQeQpnFVjaB7rk2tPnXzkIQgZhzepH8
72dWmiqEfuix60kIWqZpgTO3wDCawZG/W28mJoSUvVTIYmIyizXouCgaBPNQxAfb
XW9gcRMjc4tsoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:16 2025 by rpki-client