Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          +Xy1hjXJ0/tD/OaZkk3V05oLUED/EOQq3/pEdlG90dU=
Subject key identifier:   27:A0:C3:23:90:A4:80:37:EF:EE:D9:52:73:8C:1C:F5:0C:80:F9:39
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       01974CD68E5F9FE0B5EE3098B5485B0054A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          0A09
Signing time:             Sun 08 Jun 2025 00:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:18 +0000
Files and hashes:         1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=)
                          2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=)
                          3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=)
                          4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=)
                          5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=)
                          6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: kjO13QPbzzkZ2EcKLmHFRsHPSUdIsRV9HXUTehSv9A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:8e:5f:9f:e0:b5:ee:30:98:b5:48:5b:00:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Jun  8 00:00:18 2025 GMT
            Not After : Jun  9 00:00:18 2025 GMT
        Subject: CN=27a0c32390a48037efeed952738c1cf50c80f939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:16:20:ba:6e:95:3d:45:7c:02:fe:33:47:5c:
                    8c:36:b9:a3:75:3c:6c:e0:a9:02:32:9c:e9:6d:53:
                    cc:d8:d8:d8:ef:47:c3:4f:8f:36:52:46:ec:f4:6c:
                    b8:e9:ba:db:99:e0:81:e7:8a:41:a4:6a:13:73:be:
                    19:55:c6:05:a6:d7:20:2b:65:71:46:e2:d8:c6:2c:
                    0c:3f:b6:97:7f:a5:46:85:86:96:c8:aa:94:cd:66:
                    c2:06:e8:8e:56:e6:da:a3:2a:7e:06:4a:42:6c:a5:
                    0d:74:da:ba:e2:f5:49:fd:a0:d4:7e:93:13:1a:c3:
                    ec:6c:a0:ea:ae:eb:59:3e:d9:32:74:bb:f9:e0:4c:
                    31:1f:b3:6c:23:d0:55:76:33:85:79:49:42:d2:8f:
                    71:8d:68:27:39:9d:93:81:5c:08:3f:c9:1d:dc:66:
                    ee:9b:aa:0d:87:f1:42:be:e5:05:e1:75:00:b4:e6:
                    d1:c1:6d:9a:fd:2c:7e:f7:a7:60:06:0a:4c:5c:b3:
                    25:cd:ea:24:d4:95:21:31:9c:5a:14:6c:99:3a:17:
                    63:bd:48:24:36:c8:0b:60:c7:9e:6a:50:47:38:61:
                    95:cf:ac:22:33:20:e4:c2:f6:17:50:d6:58:3c:4e:
                    a0:5c:fa:a6:5e:b1:15:80:70:0c:1d:a2:88:99:1d:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:C3:23:90:A4:80:37:EF:EE:D9:52:73:8C:1C:F5:0C:80:F9:39
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:c5:22:cc:48:65:d6:dd:6b:c9:14:83:a8:62:0a:31:72:
         ed:f6:e3:43:8f:3a:49:f0:7e:b0:82:c4:01:98:08:ad:a6:a6:
         df:c9:2d:7a:ef:f5:a5:93:b6:d9:80:63:7e:01:e6:3b:d4:48:
         8b:2e:96:dd:81:cd:8e:c8:cd:d5:ab:a6:7f:a9:0b:15:5d:70:
         ce:e8:ec:cd:47:e4:e9:18:65:76:dc:da:17:a7:14:f7:a5:9e:
         d0:93:7e:17:bf:15:97:5f:d7:6d:07:e2:57:a9:a2:54:86:55:
         06:4b:ad:1e:bf:23:db:8f:f4:2b:2d:22:d4:18:19:74:28:fd:
         a8:a5:67:a8:6f:fa:d8:e8:33:9b:c2:37:2d:c5:bf:f4:be:9b:
         64:66:3b:2b:69:d3:36:2c:3f:4a:eb:54:97:e5:d4:42:e4:c2:
         8e:3e:6b:4e:76:ef:16:00:38:7e:98:59:ea:4e:ce:a5:f9:61:
         91:e8:fd:9d:1e:8e:f3:e6:5f:d5:ee:8e:4c:5e:fd:8b:4f:78:
         b4:68:1f:88:f0:63:18:34:03:c0:a4:73:10:77:05:25:fd:8a:
         2d:1a:39:1d:7d:c0:c6:39:ab:0c:2a:ba:70:d8:f9:65:0b:e7:
         2c:e1:61:18:3f:db:c6:bd:81:df:a2:c4:e3:1c:d9:bc:d8:9c:
         4c:7c:30:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1o5fn+C17jCYtUhbAFSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey
NTY4MTMwHhcNMjUwNjA4MDAwMDE4WhcNMjUwNjA5MDAwMDE4WjAzMTEwLwYDVQQD
EygyN2EwYzMyMzkwYTQ4MDM3ZWZlZWQ5NTI3MzhjMWNmNTBjODBmOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xYgum6VPUV8Av4zR1yMNrmjdTxs
4KkCMpzpbVPM2NjY70fDT482Ukbs9Gy46brbmeCB54pBpGoTc74ZVcYFptcgK2Vx
RuLYxiwMP7aXf6VGhYaWyKqUzWbCBuiOVubaoyp+BkpCbKUNdNq64vVJ/aDUfpMT
GsPsbKDqrutZPtkydLv54EwxH7NsI9BVdjOFeUlC0o9xjWgnOZ2TgVwIP8kd3Gbu
m6oNh/FCvuUF4XUAtObRwW2a/Sx+96dgBgpMXLMlzeok1JUhMZxaFGyZOhdjvUgk
NsgLYMeealBHOGGVz6wiMyDkwvYXUNZYPE6gXPqmXrEVgHAMHaKImR2kzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCegwyOQpIA37+7ZUnOMHPUMgPk5MB8GA1UdIwQY
MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt
NjRkMjljODZiZjNlLzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl
LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamfFIsxI
Zdbda8kUg6hiCjFy7fbjQ486SfB+sILEAZgIraam38kteu/1pZO22YBjfgHmO9RI
iy6W3YHNjsjN1aumf6kLFV1wzujszUfk6RhldtzaF6cU96We0JN+F78Vl1/XbQfi
V6miVIZVBkutHr8j24/0Ky0i1BgZdCj9qKVnqG/62Ogzm8I3LcW/9L6bZGY7K2nT
Niw/SutUl+XUQuTCjj5rTnbvFgA4fphZ6k7Opflhkej9nR6O8+Zf1e6OTF79i094
tGgfiPBjGDQDwKRzEHcFJf2KLRo5HX3AxjmrDCq6cNj5ZQvnLOFhGD/bxr2B36LE
4xzZvNicTHwwtg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:59 2025 by rpki-client