Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File:                     1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier:          8dj0NXYtrlLgr5ye/+F6/tGsh52nrLTwgov2O/WNhgo=
Subject key identifier:   B1:AB:BC:1E:90:16:D7:CA:01:4B:4C:32:7A:18:AC:56:C0:8F:5A:6D
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer:       /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial:       01974AE8C48E2EA31268BF55F18B962D7B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number:          09CD
Signing time:             Sat 07 Jun 2025 15:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:58 +0000
Files and hashes:         1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: GDBAaRykzNnKHwNE4T9HeYu6PjI4Qk+VWL/i8wMJtt8=)
                          2: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (hash: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:c4:8e:2e:a3:12:68:bf:55:f1:8b:96:2d:7b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
        Validity
            Not Before: Jun  7 15:00:58 2025 GMT
            Not After : Jun  8 15:00:58 2025 GMT
        Subject: CN=b1abbc1e9016d7ca014b4c327a18ac56c08f5a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:02:c5:ba:40:7f:62:c3:eb:f0:23:51:0e:
                    7b:ee:0e:4c:08:07:b0:d7:1b:5f:44:41:eb:1c:37:
                    33:8e:ff:8e:26:da:5b:d2:6b:69:6b:91:85:54:a8:
                    c9:2b:af:ff:4a:15:63:b6:cb:b4:96:41:c4:66:72:
                    4c:cf:5c:b6:08:88:1c:c4:cd:db:c8:49:0e:1e:24:
                    fe:d2:d2:fe:39:f9:d2:29:70:9e:66:97:cc:ba:8a:
                    1b:0d:e0:b7:19:df:bc:27:e0:99:6c:b3:9e:39:96:
                    e9:ba:3c:69:86:8f:ad:3c:83:c9:f6:e2:75:ad:ca:
                    32:f1:63:b3:3a:3b:09:cc:1d:a2:02:f2:4d:41:d1:
                    83:48:96:3d:c3:1c:c0:d7:a1:71:6c:f0:f1:ce:83:
                    f8:b3:7b:a9:f1:13:71:3d:6c:ef:49:00:79:a6:f1:
                    a2:d1:a7:ab:96:e2:8a:2c:61:ff:e1:7e:75:7f:1e:
                    5a:c4:b1:43:d1:5e:a9:03:35:d0:1b:43:c6:e1:c2:
                    5e:10:95:41:45:75:26:ad:88:70:18:f4:8e:1a:05:
                    4e:5f:ac:02:39:7d:60:67:58:ef:7f:b3:a8:22:10:
                    7d:45:02:17:7a:22:fb:c1:76:24:98:15:12:5d:9b:
                    e6:e1:34:c6:44:ab:12:f0:c1:58:de:ef:59:c0:8d:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:BC:1E:90:16:D7:CA:01:4B:4C:32:7A:18:AC:56:C0:8F:5A:6D
            X509v3 Authority Key Identifier:
                keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:8d:59:5a:bb:f2:c5:42:b5:15:8b:06:e1:74:26:ec:e2:
         c6:d2:02:57:45:e2:ee:94:a8:a8:76:49:fe:59:fe:d1:e0:0e:
         46:81:5b:a3:ba:16:29:41:a5:51:f0:08:20:59:9a:ef:30:e6:
         8b:55:d1:f7:5e:b8:09:32:94:ce:30:81:43:00:4f:22:11:ed:
         2f:0f:81:87:53:f7:9e:af:61:18:f8:bf:9a:f3:3b:08:70:fd:
         61:8a:19:35:01:32:9d:a0:fc:82:e2:88:ed:0d:77:eb:20:6d:
         57:46:c5:5a:78:ce:eb:b2:4b:d7:34:9c:c9:70:d4:38:a6:a9:
         1d:16:db:e4:b6:be:0c:16:a7:98:e8:ef:93:63:20:ae:38:42:
         8e:62:75:0d:7b:d6:02:75:cc:08:e1:bc:f5:5f:22:e3:a5:0c:
         28:a2:fd:d3:b8:70:da:00:d5:81:4b:0c:a9:62:cc:63:2a:7b:
         1a:74:5b:84:f2:fb:55:01:c1:7c:bf:dd:48:21:59:f5:92:ae:
         3d:07:73:fe:9f:37:23:7a:b7:66:62:e1:86:3c:f3:dc:54:09:
         67:e9:b8:59:8d:70:7d:0b:76:99:f1:39:39:3d:04:04:cb:ce:
         93:cb:4c:23:41:e8:33:30:1a:86:59:69:42:76:68:2c:3b:ee:
         18:bb:2b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6MSOLqMSaL9V8YuWLXtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1Zjk0Nzg2ZDAzNjY4NTQ0MDkwMWEzZGNlNWEzMzRjZjEz
MjcyYTAwHhcNMjUwNjA3MTUwMDU4WhcNMjUwNjA4MTUwMDU4WjAzMTEwLwYDVQQD
EyhiMWFiYmMxZTkwMTZkN2NhMDE0YjRjMzI3YTE4YWM1NmMwOGY1YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorYCxbpAf2LD6/AjUQ577g5MCAew
1xtfREHrHDczjv+OJtpb0mtpa5GFVKjJK6//ShVjtsu0lkHEZnJMz1y2CIgcxM3b
yEkOHiT+0tL+OfnSKXCeZpfMuoobDeC3Gd+8J+CZbLOeOZbpujxpho+tPIPJ9uJ1
rcoy8WOzOjsJzB2iAvJNQdGDSJY9wxzA16FxbPDxzoP4s3up8RNxPWzvSQB5pvGi
0aerluKKLGH/4X51fx5axLFD0V6pAzXQG0PG4cJeEJVBRXUmrYhwGPSOGgVOX6wC
OX1gZ1jvf7OoIhB9RQIXeiL7wXYkmBUSXZvm4TTGRKsS8MFY3u9ZwI06PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGrvB6QFtfKAUtMMnoYrFbAj1ptMB8GA1UdIwQY
MBaAFNX5R4bQNmhUQJAaPc5aM0zxMnKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3Njkt
YzlhNjk2ODNhOGU4LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3NjktYzlhNjk2ODNhOGU4
LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlh+NWVq7
8sVCtRWLBuF0JuzixtICV0Xi7pSoqHZJ/ln+0eAORoFbo7oWKUGlUfAIIFma7zDm
i1XR9164CTKUzjCBQwBPIhHtLw+Bh1P3nq9hGPi/mvM7CHD9YYoZNQEynaD8guKI
7Q136yBtV0bFWnjO67JL1zScyXDUOKapHRbb5La+DBanmOjvk2MgrjhCjmJ1DXvW
AnXMCOG89V8i46UMKKL907hw2gDVgUsMqWLMYyp7GnRbhPL7VQHBfL/dSCFZ9ZKu
PQdz/p83I3q3ZmLhhjzz3FQJZ+m4WY1wfQt2mfE5OT0EBMvOk8tMI0HoMzAahllp
QnZoLDvuGLsrow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:14 2025 by rpki-client