Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File:                     B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier:          ZkqP/djVSW2gkhmoU3LdTk+zhEN8WR+mhrpzZVpqPzw=
Subject key identifier:   E1:CA:B7:47:26:09:79:7D:87:97:F7:45:3A:74:EC:15:0B:5A:C4:A4
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer:       /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial:       019765F283C9BE9C16AC9A3DA545CC2441AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number:          0662
Signing time:             Thu 12 Jun 2025 21:01:21 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:21 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:21 +0000
Files and hashes:         1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: POnzCgbn1mwzY3nCcLyrFFRaMkkh6iETxbKs73cfzco=)
                          2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:83:c9:be:9c:16:ac:9a:3d:a5:45:cc:24:41:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
        Validity
            Not Before: Jun 12 21:01:21 2025 GMT
            Not After : Jun 13 21:01:21 2025 GMT
        Subject: CN=e1cab7472609797d8797f7453a74ec150b5ac4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:a8:64:0d:5a:3a:e8:64:27:e6:14:3f:9a:
                    66:11:a6:90:d4:8a:53:55:a6:8c:7f:98:b7:88:dc:
                    f4:b7:dd:bd:bd:f4:fc:88:53:8b:fe:86:a1:a8:36:
                    15:d7:45:ad:d3:fd:51:31:82:55:bf:dd:d6:8e:a5:
                    0a:3c:7d:b4:81:db:50:88:32:cb:3c:a7:8e:c6:e2:
                    83:6c:8a:24:a0:e8:70:60:a0:c1:3b:e3:b6:f0:a5:
                    a1:e1:2b:87:fd:47:d6:71:6d:19:f7:a2:a1:d8:57:
                    e7:e5:fb:90:7d:d2:32:22:b2:aa:7b:2b:4e:cc:79:
                    cd:61:f3:ea:c0:5d:f5:26:cb:2f:cb:7f:4e:3c:f5:
                    cf:f0:2f:31:96:b3:74:5f:b5:9d:46:b2:56:01:45:
                    68:ae:42:53:e9:59:bd:08:c4:63:1e:ad:ee:13:17:
                    06:ad:44:b4:bf:f2:9d:2c:0d:7f:58:e4:35:67:2b:
                    cb:0e:da:09:4d:43:42:ad:77:2a:bb:e7:0f:1d:d6:
                    92:3c:52:ec:78:4e:83:ed:63:3c:e4:2f:a6:54:9c:
                    7f:6f:ad:d3:20:77:cc:78:fa:14:f5:7a:8d:47:e9:
                    ac:4b:07:04:f3:25:12:94:1e:be:33:4f:22:7a:82:
                    02:22:44:86:3c:33:8a:62:ef:48:4a:40:08:6c:ad:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:B7:47:26:09:79:7D:87:97:F7:45:3A:74:EC:15:0B:5A:C4:A4
            X509v3 Authority Key Identifier:
                keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:05:ef:04:e7:6e:39:dc:eb:0c:af:8c:91:7e:a4:a9:3c:
         f1:86:3f:4f:6c:c0:97:21:4a:03:c7:f8:46:f4:17:a6:92:25:
         1f:ae:18:0b:09:ce:6a:74:8c:57:9d:1b:9e:a9:b8:6a:dc:0f:
         6b:1e:54:1b:b3:49:3a:e4:57:86:b8:50:01:74:27:a1:47:cf:
         1f:31:14:8f:fd:3b:c0:33:39:01:39:91:f0:5b:cb:cc:07:7d:
         af:1a:38:54:38:c4:82:54:62:d2:86:1c:a8:f6:f6:ec:f3:2a:
         fc:cd:ec:64:f1:aa:50:92:63:8b:f2:6b:9f:c1:d1:b6:e6:98:
         f1:d6:2c:f9:28:9a:23:c2:a6:f9:45:3c:2e:d6:cc:1f:9b:e1:
         7c:3f:f1:bd:0c:ef:13:01:cd:a6:9e:78:70:05:9e:dc:18:0a:
         ab:c0:bf:c8:41:46:d8:94:07:69:b5:b8:fd:5a:b6:42:56:8d:
         ae:45:2d:16:2e:41:e1:35:74:74:f1:eb:a2:67:82:7c:19:ac:
         66:25:e2:71:1f:14:e4:bf:a5:a9:13:9c:2b:bd:3b:39:8c:6c:
         61:85:0b:c6:00:43:c9:4f:18:0b:17:93:d0:9b:a2:84:7d:44:
         d5:29:4e:6a:72:3a:13:1a:76:76:50:9d:cf:79:60:f3:1d:f8:
         5b:72:78:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8oPJvpwWrJo9pUXMJEGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl
ZmE1MGYwHhcNMjUwNjEyMjEwMTIxWhcNMjUwNjEzMjEwMTIxWjAzMTEwLwYDVQQD
EyhlMWNhYjc0NzI2MDk3OTdkODc5N2Y3NDUzYTc0ZWMxNTBiNWFjNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVCoZA1aOuhkJ+YUP5pmEaaQ1IpT
VaaMf5i3iNz0t929vfT8iFOL/oahqDYV10Wt0/1RMYJVv93WjqUKPH20gdtQiDLL
PKeOxuKDbIokoOhwYKDBO+O28KWh4SuH/UfWcW0Z96Kh2Ffn5fuQfdIyIrKqeytO
zHnNYfPqwF31Jssvy39OPPXP8C8xlrN0X7WdRrJWAUVorkJT6Vm9CMRjHq3uExcG
rUS0v/KdLA1/WOQ1ZyvLDtoJTUNCrXcqu+cPHdaSPFLseE6D7WM85C+mVJx/b63T
IHfMePoU9XqNR+msSwcE8yUSlB6+M08ieoICIkSGPDOKYu9ISkAIbK1srQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHKt0cmCXl9h5f3RTp07BULWsSkMB8GA1UdIwQY
MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt
MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi
LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuIF7wTn
bjnc6wyvjJF+pKk88YY/T2zAlyFKA8f4RvQXppIlH64YCwnOanSMV50bnqm4atwP
ax5UG7NJOuRXhrhQAXQnoUfPHzEUj/07wDM5ATmR8FvLzAd9rxo4VDjEglRi0oYc
qPb27PMq/M3sZPGqUJJji/Jrn8HRtuaY8dYs+SiaI8Km+UU8LtbMH5vhfD/xvQzv
EwHNpp54cAWe3BgKq8C/yEFG2JQHabW4/Vq2QlaNrkUtFi5B4TV0dPHromeCfBms
ZiXicR8U5L+lqROcK707OYxsYYULxgBDyU8YCxeT0JuihH1E1SlOanI6Exp2dlCd
z3lg8x34W3J4ag==
-----END CERTIFICATE-----
Generated at Fri Jun 13 05:38:22 2025 by rpki-client