Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File:                     gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier:          U/5a79K8oFXlQk15m3IahNg+VXtb7wI9W71gx9Rtmq4=
Subject key identifier:   00:1B:9C:FC:C4:03:98:AA:E8:62:0C:7E:60:94:38:ED:31:62:26:4D
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer:       /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial:       01975045ACA704F3BB7E3233DBEF1E29947A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number:          06FC
Signing time:             Sun 08 Jun 2025 16:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:32 +0000
Files and hashes:         1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=)
                          2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: djtVEO7eogr2d3mHee53TYsvI0WNTcAxQR/lvvwRSec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:ac:a7:04:f3:bb:7e:32:33:db:ef:1e:29:94:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
        Validity
            Not Before: Jun  8 16:00:32 2025 GMT
            Not After : Jun  9 16:00:32 2025 GMT
        Subject: CN=001b9cfcc40398aae8620c7e609438ed3162264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:08:a3:35:58:0e:df:69:1a:52:40:de:45:
                    a2:9e:b5:69:78:14:a4:db:64:a6:53:6a:3c:41:c0:
                    e1:8f:60:55:d7:62:39:26:3f:ab:be:f1:83:45:4c:
                    a7:f9:18:2f:2f:6e:e0:dc:96:dd:ab:cc:d0:af:99:
                    fa:9f:ab:e1:77:94:26:c6:ae:84:f4:0f:bc:85:3b:
                    34:90:e2:2a:10:ec:20:32:45:b0:59:d1:f0:8e:48:
                    1f:55:39:08:d8:69:94:18:4d:a8:d7:43:74:ea:a9:
                    26:1b:d7:96:f1:e3:1e:55:90:b0:2b:f8:6a:a1:6a:
                    e7:34:9b:0b:62:d8:9b:54:4b:0e:9d:91:b2:aa:0d:
                    af:7c:01:e7:6e:84:ec:48:76:3c:8e:a9:99:6f:9f:
                    1f:5d:0b:2f:e0:67:e7:61:65:56:63:ef:8f:0b:72:
                    75:aa:ef:f9:14:d6:5b:98:56:f4:fe:b5:fc:7f:a8:
                    c8:fc:6f:a2:c3:5e:45:b4:9f:0f:52:59:c8:1e:48:
                    13:c9:06:5e:cc:59:61:09:28:87:ff:f5:b9:76:1e:
                    8e:d7:6e:2f:53:f5:fa:68:e7:cc:c7:76:57:2f:d7:
                    a2:ef:fe:73:dd:76:be:ab:66:f0:21:6c:48:d8:85:
                    9d:df:8e:9f:fb:34:49:c9:c4:46:21:89:97:9b:66:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:9C:FC:C4:03:98:AA:E8:62:0C:7E:60:94:38:ED:31:62:26:4D
            X509v3 Authority Key Identifier:
                keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:15:a0:b9:15:8d:62:91:d2:99:fe:20:39:d5:c7:51:06:7e:
         cf:56:f3:0d:04:8b:92:9e:be:2b:04:11:05:69:77:eb:c3:3e:
         52:fa:8f:fa:55:e9:aa:fe:38:7e:75:a7:45:a0:29:0a:9a:37:
         b4:81:a3:6e:43:c8:90:6f:ce:94:95:78:8b:69:f0:a8:19:3a:
         60:d9:cc:8e:28:a4:f5:a9:ae:34:37:1e:95:e5:45:9c:5e:c1:
         5f:a1:8b:e2:63:ad:b5:c0:05:e1:d9:1a:7a:4b:b7:0b:99:5e:
         b6:7e:e4:0e:7b:15:79:3e:ff:ec:89:30:90:5e:cd:3d:58:28:
         d5:ae:68:d8:c1:c2:9f:64:0b:81:63:95:65:a7:a2:7c:d7:45:
         ec:71:83:3a:30:55:b1:18:8f:d5:81:bd:9d:eb:05:1f:c9:53:
         68:90:90:a6:28:a3:6b:67:86:51:33:99:62:b9:ef:0a:57:bd:
         04:59:a7:de:b4:32:f0:ce:a7:c0:21:a3:05:30:12:b3:de:6f:
         35:ca:10:09:3c:a8:0d:21:be:6c:15:f4:36:02:2a:54:0f:ea:
         10:16:2b:17:a3:4d:40:d6:65:61:36:44:5a:dc:19:61:c1:49:
         b3:6e:ab:c1:1e:50:74:c2:7c:da:d2:d2:71:ce:4a:b7:97:ba:
         c7:1b:f9:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRaynBPO7fjIz2+8eKZR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyY2Q1ZmQzY2VmM2UxY2FhMjBiYmE2MWZhMmQ1MWI2Yjk0
ZWI1NGQwHhcNMjUwNjA4MTYwMDMyWhcNMjUwNjA5MTYwMDMyWjAzMTEwLwYDVQQD
EygwMDFiOWNmY2M0MDM5OGFhZTg2MjBjN2U2MDk0MzhlZDMxNjIyNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsccIozVYDt9pGlJA3kWinrVpeBSk
22SmU2o8QcDhj2BV12I5Jj+rvvGDRUyn+RgvL27g3Jbdq8zQr5n6n6vhd5Qmxq6E
9A+8hTs0kOIqEOwgMkWwWdHwjkgfVTkI2GmUGE2o10N06qkmG9eW8eMeVZCwK/hq
oWrnNJsLYtibVEsOnZGyqg2vfAHnboTsSHY8jqmZb58fXQsv4GfnYWVWY++PC3J1
qu/5FNZbmFb0/rX8f6jI/G+iw15FtJ8PUlnIHkgTyQZezFlhCSiH//W5dh6O124v
U/X6aOfMx3ZXL9ei7/5z3Xa+q2bwIWxI2IWd346f+zRJycRGIYmXm2Yb+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAbnPzEA5iq6GIMfmCUOO0xYiZNMB8GA1UdIwQY
MBaAFILNX9PO8+HKogu6YfotUba5TrVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAt
ZjUyMzA2ZWViNzIyLzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAtZjUyMzA2ZWViNzIy
LzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhWguRWN
YpHSmf4gOdXHUQZ+z1bzDQSLkp6+KwQRBWl368M+UvqP+lXpqv44fnWnRaApCpo3
tIGjbkPIkG/OlJV4i2nwqBk6YNnMjiik9amuNDceleVFnF7BX6GL4mOttcAF4dka
eku3C5letn7kDnsVeT7/7IkwkF7NPVgo1a5o2MHCn2QLgWOVZaeifNdF7HGDOjBV
sRiP1YG9nesFH8lTaJCQpiija2eGUTOZYrnvCle9BFmn3rQy8M6nwCGjBTASs95v
NcoQCTyoDSG+bBX0NgIqVA/qEBYrF6NNQNZlYTZEWtwZYcFJs26rwR5QdMJ82tLS
cc5Kt5e6xxv5og==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:13:11 2025 by rpki-client