Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File:                     v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier:          oSMPsWJ5qbxBTG0d3IQKpTx6uK2OktycOPQ1UOeJqiY=
Subject key identifier:   CB:E7:2C:99:BA:35:F9:59:6B:57:7D:B9:8F:58:99:0F:DF:E0:6D:BE
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer:       /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial:       019749D62F7D2B5157F86A55A512355BDC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number:          026F
Signing time:             Sat 07 Jun 2025 10:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:02 +0000
Files and hashes:         1: cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (hash: dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=)
                          2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: oGq5arAAs6vQxa3XZ8yUpgXpHKSEkeT+s1SSzqV3eLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:2f:7d:2b:51:57:f8:6a:55:a5:12:35:5b:dc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
        Validity
            Not Before: Jun  7 10:01:02 2025 GMT
            Not After : Jun  8 10:01:02 2025 GMT
        Subject: CN=cbe72c99ba35f9596b577db98f58990fdfe06dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:06:43:29:5a:c8:95:a4:a1:9b:ca:e7:96:
                    b0:97:88:ab:5a:82:8e:50:67:3d:c1:66:78:3a:42:
                    b6:c9:de:42:4f:7a:36:8d:b4:70:93:2a:af:f5:b5:
                    86:3f:f0:08:be:f1:e2:4a:ac:04:5d:48:9b:7a:92:
                    07:96:a3:72:41:c3:9e:69:ec:12:d8:86:5e:a1:a1:
                    0b:5e:8f:e9:97:42:2d:e7:e5:3e:d0:92:da:19:6f:
                    52:e6:0b:b0:61:20:a6:c5:dd:e5:fa:cc:2f:a0:23:
                    90:91:f8:06:d5:f8:67:95:8c:69:d7:21:7d:86:58:
                    c5:88:b7:88:ba:b9:98:2b:3a:68:7f:de:75:9f:24:
                    a4:27:9a:8d:5e:02:93:0e:4f:b4:41:e6:25:4c:f5:
                    f1:59:93:3d:25:33:77:8b:b5:93:35:ed:e7:54:d6:
                    03:45:57:b9:58:1d:84:d2:b9:f2:e5:39:33:80:73:
                    e8:48:d6:4b:7b:96:58:c2:90:e7:48:fe:60:5c:be:
                    73:e6:f7:09:42:ab:b5:ca:52:d1:32:59:06:e9:40:
                    8d:64:f0:8b:a1:cb:a0:5e:9c:b4:df:f1:5d:b8:05:
                    c3:d6:e2:06:d7:07:d1:eb:7b:2f:11:4e:58:f2:32:
                    ff:23:15:d5:10:e1:0b:2b:65:93:af:9e:a0:9f:fd:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E7:2C:99:BA:35:F9:59:6B:57:7D:B9:8F:58:99:0F:DF:E0:6D:BE
            X509v3 Authority Key Identifier:
                keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:17:ac:fa:cc:fb:4e:4e:cc:95:59:f4:25:98:8d:fe:61:80:
         4e:e5:25:69:20:e8:1c:b8:91:94:a8:94:d6:98:a8:fe:63:da:
         4f:bd:8b:3c:db:8e:a2:ed:3f:25:31:d7:42:d6:2e:94:ef:2f:
         50:84:48:f9:a2:f5:a3:ee:8b:d8:c7:89:e0:6a:51:3a:b4:41:
         78:b2:89:71:09:e3:29:a9:ed:c3:f5:ef:7f:bd:e0:18:26:80:
         c0:0d:f2:f5:9f:65:74:4d:9b:34:4c:39:7c:27:36:97:e8:ef:
         2d:67:12:51:e3:b6:a4:ff:ee:0f:70:bc:09:1d:e1:55:cd:1e:
         d3:61:ee:a9:e5:49:97:9b:53:53:fe:57:3b:fb:ba:2f:dd:93:
         72:a6:06:b5:ff:c1:eb:c9:f6:2a:72:19:47:59:8a:b7:cf:fa:
         91:69:42:95:7a:e7:11:25:c7:66:5a:e3:8b:53:b4:60:30:89:
         b0:28:7c:b1:94:f2:fc:0a:a6:46:8d:9b:bf:50:d4:fd:95:d2:
         54:ac:87:d2:24:83:a5:13:89:2b:ac:1f:4c:0d:95:41:51:90:
         cf:80:c3:38:07:40:8d:7b:31:86:5b:ba:53:de:61:fe:93:1f:
         1c:b8:ba:c3:37:3a:f3:b2:12:43:ce:2b:62:06:d8:1c:29:45:
         3d:7b:ad:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1i99K1FX+GpVpRI1W9xeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOGQwODFjOTZmYTdkMGZjMmE5ZDMyYWVkZDUwYzIzYTYx
YzZmMTEwHhcNMjUwNjA3MTAwMTAyWhcNMjUwNjA4MTAwMTAyWjAzMTEwLwYDVQQD
EyhjYmU3MmM5OWJhMzVmOTU5NmI1NzdkYjk4ZjU4OTkwZmRmZTA2ZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCwGQylayJWkoZvK55awl4irWoKO
UGc9wWZ4OkK2yd5CT3o2jbRwkyqv9bWGP/AIvvHiSqwEXUibepIHlqNyQcOeaewS
2IZeoaELXo/pl0It5+U+0JLaGW9S5guwYSCmxd3l+swvoCOQkfgG1fhnlYxp1yF9
hljFiLeIurmYKzpof951nySkJ5qNXgKTDk+0QeYlTPXxWZM9JTN3i7WTNe3nVNYD
RVe5WB2E0rny5TkzgHPoSNZLe5ZYwpDnSP5gXL5z5vcJQqu1ylLRMlkG6UCNZPCL
ocugXpy03/FduAXD1uIG1wfR63svEU5Y8jL/IxXVEOELK2WTr56gn/1mSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvnLJm6NflZa1d9uY9YmQ/f4G2+MB8GA1UdIwQY
MBaAFL+NCByW+n0PwqnTKu3VDCOmHG8RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZjZmOTYtNjY0Yy00YzYxLWJkMjUt
MDk3NGYwOTg3OWE5LzEvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83ZjZmOTYtNjY0Yy00YzYxLWJkMjUtMDk3NGYwOTg3OWE5
LzEvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhes+sz7
Tk7MlVn0JZiN/mGATuUlaSDoHLiRlKiU1pio/mPaT72LPNuOou0/JTHXQtYulO8v
UIRI+aL1o+6L2MeJ4GpROrRBeLKJcQnjKantw/Xvf73gGCaAwA3y9Z9ldE2bNEw5
fCc2l+jvLWcSUeO2pP/uD3C8CR3hVc0e02HuqeVJl5tTU/5XO/u6L92TcqYGtf/B
68n2KnIZR1mKt8/6kWlClXrnESXHZlrji1O0YDCJsCh8sZTy/AqmRo2bv1DU/ZXS
VKyH0iSDpROJK6wfTA2VQVGQz4DDOAdAjXsxhlu6U95h/pMfHLi6wzc687ISQ84r
YgbYHClFPXutKw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:24 2025 by rpki-client