Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File:                     f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier:          /GrdtQw2bhiWIkRarkOYUUVpS+LYIztZWDYs+ZaoDoo=
Subject key identifier:   7D:46:F0:B4:F3:9D:05:13:C3:06:E1:49:F7:65:B3:EC:1D:FF:FC:4D
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer:       /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial:       01974D7BA99F7A6D4B86DD9327D8A68B1373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number:          1106
Signing time:             Sun 08 Jun 2025 03:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:39 +0000
Files and hashes:         1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
                          2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: fAfn75onguG2xYSj8Aa7rYExw/vBSbE9AJQuxmrr+Vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:a9:9f:7a:6d:4b:86:dd:93:27:d8:a6:8b:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
        Validity
            Not Before: Jun  8 03:00:39 2025 GMT
            Not After : Jun  9 03:00:39 2025 GMT
        Subject: CN=7d46f0b4f39d0513c306e149f765b3ec1dfffc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:3a:4e:1f:11:a8:77:21:e1:19:27:dc:90:
                    c2:12:eb:31:f2:6e:c5:d2:38:02:63:21:22:81:45:
                    ab:1f:63:94:5e:2f:b4:b4:a0:b1:76:34:ff:2c:8a:
                    9b:fc:29:78:ec:09:29:26:fe:2e:75:9f:e3:7c:73:
                    77:43:b2:d0:0e:ea:c4:90:cf:d3:af:24:5e:81:95:
                    38:ce:e6:9e:52:bc:87:f8:a3:24:4b:84:d3:a5:0e:
                    61:9c:79:ba:3e:99:28:93:35:c8:67:24:16:37:59:
                    83:75:09:37:fe:90:19:fa:b7:9f:78:40:02:c2:9e:
                    89:e9:cb:d2:44:75:b3:8b:29:9a:5c:9e:99:47:86:
                    cf:37:32:a7:6b:8a:72:57:ba:c5:e9:8c:e0:ca:17:
                    59:78:43:54:bd:e8:cc:72:d9:4b:f6:16:fe:92:ce:
                    57:ea:1a:ac:9f:d7:74:3a:c6:81:89:0d:ed:b3:a8:
                    90:dc:ab:a3:45:98:db:b8:2c:e2:27:f8:0e:2b:72:
                    ab:32:ec:24:c2:92:75:1c:66:cc:be:bd:07:b8:2d:
                    66:66:fd:ac:52:50:b6:81:62:f2:22:c8:5d:a0:c1:
                    bd:80:cd:6f:14:ce:f9:5d:0a:2b:d5:f3:da:f4:cf:
                    be:3d:b0:d1:68:f3:0a:91:ff:75:7a:90:df:12:5f:
                    ec:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:F0:B4:F3:9D:05:13:C3:06:E1:49:F7:65:B3:EC:1D:FF:FC:4D
            X509v3 Authority Key Identifier:
                keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:34:73:88:1c:66:3f:51:70:4b:fd:aa:13:f5:50:26:c1:
         e9:88:fe:30:bc:28:42:c2:2e:1b:22:c5:85:ce:91:52:b5:d8:
         80:10:13:f5:32:08:15:8c:5b:a1:bb:b3:5f:62:bb:fb:4c:de:
         6c:ff:50:89:3d:31:55:a3:56:0a:aa:85:4e:c8:b8:63:76:35:
         0c:2d:0f:e1:40:10:29:d8:fc:38:80:80:ea:fd:23:89:50:13:
         f9:67:3d:2d:14:e0:fa:c4:68:d8:00:47:83:bf:13:cb:0d:b4:
         5b:f6:f6:77:7a:c6:57:45:3f:89:53:8b:04:c0:c2:49:c7:d1:
         79:d0:2e:51:48:66:e1:dd:22:c1:7a:54:3c:7f:d2:59:8d:d7:
         c3:0f:9d:42:34:08:46:32:08:40:42:ac:e4:40:8c:00:13:f8:
         01:a9:8a:db:0a:8f:92:75:24:63:ff:73:ed:1e:23:c2:a8:3f:
         e3:62:c5:95:ea:5e:be:5c:df:35:c3:16:38:a6:7f:fb:58:2b:
         3a:2a:85:32:35:d2:fb:0e:6d:a6:d7:41:de:11:d1:e3:75:54:
         72:1a:20:ca:d6:42:4c:7e:41:9d:df:38:4b:73:63:20:30:c6:
         f4:ae:f2:db:fc:7e:90:a1:ec:7f:11:6c:23:37:e0:ed:d2:13:
         62:24:4e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe6mfem1Lht2TJ9imixNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDYyZTQyYzA4ZTE2MDFjNDU3MWUwZDg4YTM0OWEwNTA5
ZGVhNWUwHhcNMjUwNjA4MDMwMDM5WhcNMjUwNjA5MDMwMDM5WjAzMTEwLwYDVQQD
Eyg3ZDQ2ZjBiNGYzOWQwNTEzYzMwNmUxNDlmNzY1YjNlYzFkZmZmYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSA6Th8RqHch4Rkn3JDCEusx8m7F
0jgCYyEigUWrH2OUXi+0tKCxdjT/LIqb/Cl47AkpJv4udZ/jfHN3Q7LQDurEkM/T
ryRegZU4zuaeUryH+KMkS4TTpQ5hnHm6PpkokzXIZyQWN1mDdQk3/pAZ+refeEAC
wp6J6cvSRHWziymaXJ6ZR4bPNzKna4pyV7rF6YzgyhdZeENUvejMctlL9hb+ks5X
6hqsn9d0OsaBiQ3ts6iQ3KujRZjbuCziJ/gOK3KrMuwkwpJ1HGbMvr0HuC1mZv2s
UlC2gWLyIshdoMG9gM1vFM75XQor1fPa9M++PbDRaPMKkf91epDfEl/sEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1G8LTznQUTwwbhSfdls+wd//xNMB8GA1UdIwQY
MBaAFH/WLkLAjhYBxFceDYijSaBQnepeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAt
ZTc1YTVlYTg5ZmQxLzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAtZTc1YTVlYTg5ZmQx
LzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF80c4gc
Zj9RcEv9qhP1UCbB6Yj+MLwoQsIuGyLFhc6RUrXYgBAT9TIIFYxbobuzX2K7+0ze
bP9QiT0xVaNWCqqFTsi4Y3Y1DC0P4UAQKdj8OICA6v0jiVAT+Wc9LRTg+sRo2ABH
g78Tyw20W/b2d3rGV0U/iVOLBMDCScfRedAuUUhm4d0iwXpUPH/SWY3Xww+dQjQI
RjIIQEKs5ECMABP4AamK2wqPknUkY/9z7R4jwqg/42LFlepevlzfNcMWOKZ/+1gr
OiqFMjXS+w5tptdB3hHR43VUchogytZCTH5Bnd84S3NjIDDG9K7y2/x+kKHsfxFs
Izfg7dITYiROZA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:37 2025 by rpki-client