Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File:                     S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier:          JP+VEUS5sxYjqkCDa8DnCQOgM0kaRYQPxXSXJuBFH84=
Subject key identifier:   27:7A:B0:78:70:04:08:55:5A:57:64:D6:3C:F5:2A:7E:C7:89:44:5A
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer:       /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial:       019748F9D10EF89C38365B7F758948AD84CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number:          1056
Signing time:             Sat 07 Jun 2025 06:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:20 +0000
Files and hashes:         1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: 8opybHVJdPVWtSt17+KjB33t8J7XNJSO7Z33SgqjlcU=)
                          2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:d1:0e:f8:9c:38:36:5b:7f:75:89:48:ad:84:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
        Validity
            Not Before: Jun  7 06:00:20 2025 GMT
            Not After : Jun  8 06:00:20 2025 GMT
        Subject: CN=277ab078700408555a5764d63cf52a7ec789445a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:d2:ef:6f:9e:c7:33:a2:61:72:6c:bb:1e:
                    86:7f:b5:55:a6:3e:d5:ca:dd:6c:24:e5:bc:b6:6f:
                    da:60:cd:b4:e2:d7:ec:4d:56:d1:5d:25:18:6b:58:
                    54:d6:4a:e6:ce:f6:87:39:b8:fa:7a:2e:72:3f:9e:
                    47:f6:bb:87:dc:41:df:ec:1c:91:23:26:65:4d:b0:
                    84:c2:33:95:4d:ae:80:a1:26:c4:bf:75:01:fb:52:
                    70:fb:dc:5c:c0:09:58:a5:3f:8b:88:c4:ff:b9:4f:
                    cb:44:af:16:08:6e:1a:f5:f9:ab:9d:45:4e:8f:c5:
                    3d:2d:84:50:a9:f1:95:c1:86:48:19:b5:85:bd:40:
                    33:5d:62:e9:f1:ff:77:e9:fe:f0:8c:11:7b:b1:86:
                    05:a1:52:85:f1:92:17:88:38:86:26:7f:62:42:d6:
                    43:75:2a:68:9a:15:a7:1d:4f:5c:80:aa:f4:96:48:
                    71:c6:84:32:05:d4:e5:6b:cd:d1:b3:99:8c:88:e8:
                    6d:5f:89:40:71:d7:b0:0b:2b:d7:86:a0:7b:17:52:
                    73:42:1d:44:49:6e:f3:be:de:66:5f:15:b8:6c:d5:
                    7b:db:bd:9f:29:24:9e:26:fd:70:a5:97:20:06:f2:
                    8a:ff:64:cd:e0:f2:09:77:fa:47:ad:b4:ee:82:be:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:B0:78:70:04:08:55:5A:57:64:D6:3C:F5:2A:7E:C7:89:44:5A
            X509v3 Authority Key Identifier:
                keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:3b:30:bc:1c:f6:39:46:e5:6b:ec:00:e7:64:f4:c9:77:
         75:09:6d:95:ae:4c:de:e7:06:bf:a1:3b:3a:41:a2:7b:3b:bf:
         a6:e6:e2:1a:7a:ae:3f:57:40:55:21:a6:54:a6:69:f0:64:31:
         31:1e:5f:2a:fb:f9:55:d6:57:f9:bb:bc:9c:89:43:d2:dc:79:
         42:66:09:99:97:37:82:27:7a:2b:39:8c:7a:27:96:a6:c8:cf:
         9a:18:c9:ca:30:3d:2d:19:41:ce:ce:e2:46:c0:eb:c0:ec:e4:
         9d:d7:b9:4e:aa:95:31:e9:fe:7f:77:60:ce:64:a7:76:9f:ef:
         af:70:d1:a2:03:9f:45:0e:be:ca:7f:7d:a6:18:9f:e9:4f:82:
         e0:5a:c8:14:3b:01:2f:aa:0a:3d:d3:1c:68:73:4e:b2:d6:18:
         fe:54:cf:0d:83:7a:ec:02:35:40:c3:c6:b5:34:f5:b1:11:7c:
         a9:4a:e0:73:7e:52:72:95:9e:50:b6:01:43:73:48:5c:7a:f2:
         62:9b:8d:9e:14:0b:a3:36:a6:78:c3:28:f8:e8:da:3e:60:af:
         03:8a:55:81:3b:c2:79:92:a1:7f:7b:e1:99:ee:4a:59:d4:9f:
         3a:94:90:5e:17:ef:50:23:d8:8a:9a:54:51:c7:0c:7f:97:d4:
         4d:ad:6a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+dEO+Jw4Nlt/dYlIrYTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2Q3MmQ2Y2IzODVhM2EzM2M2YzhmZTU0NTljNjg2YTY4
NDk1MDkwHhcNMjUwNjA3MDYwMDIwWhcNMjUwNjA4MDYwMDIwWjAzMTEwLwYDVQQD
EygyNzdhYjA3ODcwMDQwODU1NWE1NzY0ZDYzY2Y1MmE3ZWM3ODk0NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk/S72+exzOiYXJsux6Gf7VVpj7V
yt1sJOW8tm/aYM204tfsTVbRXSUYa1hU1krmzvaHObj6ei5yP55H9ruH3EHf7ByR
IyZlTbCEwjOVTa6AoSbEv3UB+1Jw+9xcwAlYpT+LiMT/uU/LRK8WCG4a9fmrnUVO
j8U9LYRQqfGVwYZIGbWFvUAzXWLp8f936f7wjBF7sYYFoVKF8ZIXiDiGJn9iQtZD
dSpomhWnHU9cgKr0lkhxxoQyBdTla83Rs5mMiOhtX4lAcdewCyvXhqB7F1JzQh1E
SW7zvt5mXxW4bNV7272fKSSeJv1wpZcgBvKK/2TN4PIJd/pHrbTugr402wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd6sHhwBAhVWldk1jz1Kn7HiURaMB8GA1UdIwQY
MBaAFEvNctbLOFo6M8bI/lRZxoamhJUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUt
MmNjZTk2MDA2NjBmLzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUtMmNjZTk2MDA2NjBm
LzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnA7MLwc
9jlG5WvsAOdk9Ml3dQltla5M3ucGv6E7OkGiezu/pubiGnquP1dAVSGmVKZp8GQx
MR5fKvv5VdZX+bu8nIlD0tx5QmYJmZc3gid6KzmMeieWpsjPmhjJyjA9LRlBzs7i
RsDrwOzknde5TqqVMen+f3dgzmSndp/vr3DRogOfRQ6+yn99phif6U+C4FrIFDsB
L6oKPdMcaHNOstYY/lTPDYN67AI1QMPGtTT1sRF8qUrgc35ScpWeULYBQ3NIXHry
YpuNnhQLozameMMo+OjaPmCvA4pVgTvCeZKhf3vhme5KWdSfOpSQXhfvUCPYippU
UccMf5fUTa1q9A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:17 2025 by rpki-client