Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          GXh6pay5yhlgYdZpZ6yVHsBo3XRUc04zj+e+dnW57Cs=
Subject key identifier:   DC:6E:F5:83:8E:DC:BB:C2:F5:61:15:20:9E:31:1D:F2:FD:89:2E:B9
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       01974A7B0BF6E1DBB3562E4A57353AAE8469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          0E66
Signing time:             Sat 07 Jun 2025 13:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:07 +0000
Files and hashes:         1: 29X24t7NT92aPG0z8RFQ23FS_jI.roa (hash: G93+tglWxysvDK8JilYNm/tTbVtqW4gZHsRQKbZKomk=)
                          2: 4LblWvnTDGFwBH1_dfOwPBLeDmg.roa (hash: UqeHDqSDeUl+SIcuaYoYz3h3RB7+nyhFcvC7/RvkfVU=)
                          3: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: dyIlk96KyKghA0TyAdVpC0saKYCdPvZdET4++W2iwho=)
                          4: LHFc9aLVlSCzb4Ljxh_Feoo1cTs.roa (hash: BvDezmkc/DjCeeq5MwTLyFGwqS1thdnCUhhPEQYa+nY=)
                          5: SW5rOT-I_TKdCQhlQPFGnstXhQU.roa (hash: g9My/qk5ljxZS6oPdcHUARy/Y8teVsqkMfCfq/dyURY=)
                          6: hnuhuS0YrQGdjTQRIpxs4Wvf2fs.roa (hash: Hp9SysXyt9mq4hm8fSV42S86rV21TF0tL/0ofX/fZL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:0b:f6:e1:db:b3:56:2e:4a:57:35:3a:ae:84:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: Jun  7 13:01:07 2025 GMT
            Not After : Jun  8 13:01:07 2025 GMT
        Subject: CN=dc6ef5838edcbbc2f56115209e311df2fd892eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:9c:d2:ab:d7:32:42:6a:51:4c:d7:4e:e1:
                    f0:44:9d:5f:9d:76:58:b5:e1:41:35:8c:15:8a:a0:
                    5b:aa:54:00:fc:14:58:1a:1a:fc:47:eb:be:d2:3f:
                    66:02:85:85:12:de:85:b6:aa:f6:0c:23:0f:98:2d:
                    1e:e4:f6:e3:90:27:5f:fa:8f:35:88:91:9f:85:26:
                    ae:2e:b6:b6:3b:3e:da:0d:27:c6:ab:62:c7:c5:13:
                    2a:44:36:08:0c:b7:74:d5:2b:eb:21:d3:f3:05:13:
                    e4:66:41:5e:8b:9b:60:3b:8b:70:12:2b:5c:a5:3a:
                    28:c8:d9:a4:9c:6a:40:75:bb:6d:5c:62:29:80:a6:
                    ed:b1:83:d0:67:95:44:fb:eb:68:70:5e:bf:6b:74:
                    d0:64:ac:a0:e4:98:39:3d:82:ca:8c:b5:ff:78:e2:
                    a7:be:79:fb:a3:da:8d:ad:3e:1f:4f:c6:19:76:b6:
                    3b:ab:c3:bd:d0:30:ef:3b:b7:01:e5:e5:c1:bd:27:
                    6b:a8:7d:29:18:ef:b0:1c:75:f0:e7:00:35:c2:e6:
                    5d:97:7a:8a:71:b1:1d:64:6f:5a:f0:7e:02:35:fc:
                    f6:e7:4c:e4:dc:cc:ea:3e:6c:40:6a:28:8e:46:3b:
                    0e:8d:0a:cc:d5:28:cf:a6:b8:52:a0:1e:2b:ec:c1:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:F5:83:8E:DC:BB:C2:F5:61:15:20:9E:31:1D:F2:FD:89:2E:B9
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:22:c5:92:a3:7b:95:48:d8:1a:e9:61:56:29:fa:33:65:
         23:7a:c2:b2:82:9a:95:9a:57:b4:5a:42:6a:55:cc:6a:d7:c0:
         02:41:3c:88:1b:4c:4b:f1:6e:bf:53:3a:5b:48:64:0a:06:f5:
         7b:c3:a1:70:77:03:92:47:24:d3:d2:81:73:4f:7c:87:86:b5:
         9f:6f:82:b5:5b:e9:37:76:3c:66:99:70:d7:72:50:3e:7e:3b:
         f7:6b:dd:7b:31:af:74:63:d5:e1:1f:42:6a:d7:7f:7d:d5:56:
         45:c6:e9:84:f3:65:3c:8b:b8:f4:86:48:5e:45:93:0d:75:02:
         b7:12:5d:5b:08:88:7c:0d:4d:ba:e4:eb:da:d0:c0:ae:e5:e8:
         c9:a0:b7:39:81:2a:66:75:8f:f5:3a:35:f4:91:87:43:2c:bd:
         b0:45:6b:6b:b4:c2:40:6f:4f:10:3e:ba:bf:fa:f6:d2:27:43:
         30:93:49:31:9e:16:0d:79:76:c3:0b:d1:7a:16:29:f2:6d:18:
         ab:01:2e:37:c0:ab:e6:42:31:86:f1:24:92:e6:b5:f1:0b:26:
         25:e1:96:40:7d:09:bb:65:66:e0:9b:7c:9c:10:fb:63:6c:55:
         4b:06:aa:f8:cc:6f:95:9b:6c:d3:96:8f:55:9f:32:b2:8a:71:
         6c:49:4e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKewv24duzVi5KVzU6roRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzE2NzJkYmJiZjcxNjVhNmE4M2IzMjI3YTcxMTlmMGQz
MWU4ZWUwHhcNMjUwNjA3MTMwMTA3WhcNMjUwNjA4MTMwMTA3WjAzMTEwLwYDVQQD
EyhkYzZlZjU4MzhlZGNiYmMyZjU2MTE1MjA5ZTMxMWRmMmZkODkyZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EGc0qvXMkJqUUzXTuHwRJ1fnXZY
teFBNYwViqBbqlQA/BRYGhr8R+u+0j9mAoWFEt6Ftqr2DCMPmC0e5PbjkCdf+o81
iJGfhSauLra2Oz7aDSfGq2LHxRMqRDYIDLd01SvrIdPzBRPkZkFei5tgO4twEitc
pTooyNmknGpAdbttXGIpgKbtsYPQZ5VE++tocF6/a3TQZKyg5Jg5PYLKjLX/eOKn
vnn7o9qNrT4fT8YZdrY7q8O90DDvO7cB5eXBvSdrqH0pGO+wHHXw5wA1wuZdl3qK
cbEdZG9a8H4CNfz250zk3MzqPmxAaiiORjsOjQrM1SjPprhSoB4r7MEA1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxu9YOO3LvC9WEVIJ4xHfL9iS65MB8GA1UdIwQY
MBaAFCHBZy27v3Flpqg7MienEZ8NMejuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQt
MzQ3N2M3ZmNkNGQ5LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQtMzQ3N2M3ZmNkNGQ5
LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFoixZKj
e5VI2BrpYVYp+jNlI3rCsoKalZpXtFpCalXMatfAAkE8iBtMS/Fuv1M6W0hkCgb1
e8OhcHcDkkck09KBc098h4a1n2+CtVvpN3Y8Zplw13JQPn4792vdezGvdGPV4R9C
atd/fdVWRcbphPNlPIu49IZIXkWTDXUCtxJdWwiIfA1NuuTr2tDAruXoyaC3OYEq
ZnWP9To19JGHQyy9sEVra7TCQG9PED66v/r20idDMJNJMZ4WDXl2wwvRehYp8m0Y
qwEuN8Cr5kIxhvEkkua18QsmJeGWQH0Ju2Vm4Jt8nBD7Y2xVSwaq+MxvlZts05aP
VZ8ysopxbElOPg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:20:39 2025 by rpki-client