Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File:                     5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier:          pr66YmhZerXVlYUglAKYuZZVN3+UNnYvklYuBH0v3/U=
Subject key identifier:   88:F9:5A:49:5E:85:F5:B1:9B:B4:2B:BC:8E:C6:19:81:E6:EF:E6:4E
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer:       /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial:       01974BC4293B12820D6A64A8C2FB004FE954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number:          0A13
Signing time:             Sat 07 Jun 2025 19:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:36 +0000
Files and hashes:         1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: guIJEU0+GmJXn7Ht2C4/2V8HA13b6epS9LOsX6jWZFs=)
                          2: ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa (hash: 6sUjW8COGptDdK0ohMchALwRnOd24SfrIMK9uss1g4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:29:3b:12:82:0d:6a:64:a8:c2:fb:00:4f:e9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
        Validity
            Not Before: Jun  7 19:00:36 2025 GMT
            Not After : Jun  8 19:00:36 2025 GMT
        Subject: CN=88f95a495e85f5b19bb42bbc8ec61981e6efe64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:e4:f4:1d:b4:3e:65:94:1d:cf:16:19:3a:
                    29:ba:49:77:8e:01:19:dd:c3:3f:20:aa:13:52:fa:
                    53:37:db:d4:b1:6c:ba:73:92:19:07:98:5e:54:5f:
                    93:f2:42:56:15:6b:ca:19:6f:e2:12:cc:b6:a7:4a:
                    f9:b2:a6:c1:10:5f:ce:49:4c:71:a0:67:7c:5b:d5:
                    a3:2c:01:a1:ee:a4:df:6f:4c:2a:bc:0a:f2:3a:6f:
                    7b:8f:b2:82:7d:b1:b6:d2:37:7c:ce:c7:16:65:4a:
                    8b:92:de:4a:a2:24:3e:5c:b9:8d:f4:2b:c8:e9:4b:
                    2a:17:2b:b3:68:be:90:eb:ae:6b:07:ba:5c:b5:6d:
                    4e:07:57:7c:e2:b3:a4:89:db:15:4c:ea:43:42:6d:
                    d9:63:be:f1:d4:29:59:f6:c4:6f:d9:65:26:49:18:
                    a9:4b:2d:8b:e4:a0:af:f2:77:9a:b6:26:eb:e3:92:
                    bb:77:83:af:8b:9c:89:eb:ee:46:08:1e:f8:c8:f2:
                    39:3b:1d:39:61:36:28:ad:aa:a3:41:db:63:ee:10:
                    dd:31:a1:76:64:0c:7e:4b:de:f7:24:b1:45:42:b2:
                    27:f5:ac:4d:f8:61:7f:84:a5:f7:f7:31:8c:8f:9d:
                    c7:08:21:05:a3:eb:43:51:94:12:07:92:08:95:ae:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F9:5A:49:5E:85:F5:B1:9B:B4:2B:BC:8E:C6:19:81:E6:EF:E6:4E
            X509v3 Authority Key Identifier:
                keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:26:4e:bb:37:9a:5c:06:d7:ac:ee:44:11:ba:b3:5f:31:
         a3:d9:3a:c6:77:ef:5c:37:ee:80:15:65:56:6e:eb:86:90:d5:
         4a:53:ca:32:0e:9a:1f:2d:36:8a:8e:60:12:5e:87:8f:dc:60:
         60:e4:60:de:c3:9a:3a:2d:5b:fd:d1:dc:8f:ff:db:10:27:f2:
         03:5a:19:13:f0:08:eb:6d:7a:af:f0:c0:36:4c:06:f0:5d:bc:
         23:ad:e3:56:d4:fa:07:66:df:00:ca:73:10:27:9c:4c:75:a1:
         3f:13:2c:30:91:2a:e8:c1:eb:39:41:9f:a4:a8:37:be:df:a3:
         aa:68:a8:9e:32:6a:b2:b0:ab:bf:97:02:53:4d:f5:5f:a6:1a:
         39:bb:df:cc:bc:44:b4:59:f6:a1:70:f9:e4:4f:1a:5a:d5:eb:
         0b:20:6a:8e:8c:87:35:9e:9d:63:db:5c:6d:ba:c4:e6:27:4b:
         1b:9b:1f:76:02:33:2d:ce:4f:00:9e:19:00:b5:98:fa:96:4d:
         74:88:3e:82:25:c1:3c:c5:01:91:37:be:c4:96:72:0e:c9:5c:
         bd:7c:52:93:3e:8c:08:2d:d8:db:ec:9b:f2:f3:ab:ba:8c:cc:
         a0:8e:42:f8:f3:69:4a:06:4f:77:f3:0d:16:c2:9b:e7:d9:de:
         1b:46:70:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxCk7EoINamSowvsAT+lUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmI2NDA5NDZkOGNmYWVmZTU2NDg5NDg3MDJhZDYwMzRh
MGU4YjkwHhcNMjUwNjA3MTkwMDM2WhcNMjUwNjA4MTkwMDM2WjAzMTEwLwYDVQQD
Eyg4OGY5NWE0OTVlODVmNWIxOWJiNDJiYmM4ZWM2MTk4MWU2ZWZlNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RXk9B20PmWUHc8WGTopukl3jgEZ
3cM/IKoTUvpTN9vUsWy6c5IZB5heVF+T8kJWFWvKGW/iEsy2p0r5sqbBEF/OSUxx
oGd8W9WjLAGh7qTfb0wqvAryOm97j7KCfbG20jd8zscWZUqLkt5KoiQ+XLmN9CvI
6UsqFyuzaL6Q665rB7pctW1OB1d84rOkidsVTOpDQm3ZY77x1ClZ9sRv2WUmSRip
Sy2L5KCv8neatibr45K7d4Ovi5yJ6+5GCB74yPI5Ox05YTYoraqjQdtj7hDdMaF2
ZAx+S973JLFFQrIn9axN+GF/hKX39zGMj53HCCEFo+tDUZQSB5IIla7NPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj5WklehfWxm7QrvI7GGYHm7+ZOMB8GA1UdIwQY
MBaAFOT7ZAlG2M+u/lZIlIcCrWA0oOi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZGJmM2QtOThkMi00ZWM0LThiODAt
MDc2ZGQ2YmQxMjRhLzEvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wZGJmM2QtOThkMi00ZWM0LThiODAtMDc2ZGQ2YmQxMjRh
LzEvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtMmTrs3
mlwG16zuRBG6s18xo9k6xnfvXDfugBVlVm7rhpDVSlPKMg6aHy02io5gEl6Hj9xg
YORg3sOaOi1b/dHcj//bECfyA1oZE/AI6216r/DANkwG8F28I63jVtT6B2bfAMpz
ECecTHWhPxMsMJEq6MHrOUGfpKg3vt+jqmionjJqsrCrv5cCU031X6YaObvfzLxE
tFn2oXD55E8aWtXrCyBqjoyHNZ6dY9tcbbrE5idLG5sfdgIzLc5PAJ4ZALWY+pZN
dIg+giXBPMUBkTe+xJZyDslcvXxSkz6MCC3Y2+yb8vOruozMoI5C+PNpSgZPd/MN
FsKb59neG0Zwcw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:24 2025 by rpki-client