Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File:                     rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier:          o4IOoHxtDLU15HtexZ3kN4OfF1ACX5+0DtafoC9jV+M=
Subject key identifier:   81:8C:F9:2A:F9:AC:97:57:78:85:C9:58:66:F3:4A:B7:C0:C8:B2:F5
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer:       /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial:       01974AB1501B914D337AE3E9F26B9A066845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number:          0A28
Signing time:             Sat 07 Jun 2025 14:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:23 +0000
Files and hashes:         1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
                          2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: 92GTOJHatK0P1A2LIgZ+Q5D8JmoG5Gzux0Khw3RVDIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:50:1b:91:4d:33:7a:e3:e9:f2:6b:9a:06:68:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
        Validity
            Not Before: Jun  7 14:00:23 2025 GMT
            Not After : Jun  8 14:00:23 2025 GMT
        Subject: CN=818cf92af9ac97577885c95866f34ab7c0c8b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:ae:2a:da:cd:12:5a:1d:54:c3:ac:00:84:
                    48:81:b1:ba:2f:58:1a:36:5c:c8:9f:d4:9a:04:8f:
                    6b:21:a3:48:e8:f1:e7:dd:05:cb:16:f4:b3:93:1d:
                    d7:d3:3a:5a:e7:50:30:8e:31:99:79:76:26:5d:3a:
                    9a:42:21:d7:b0:6e:40:be:71:95:ee:50:98:25:04:
                    3d:2a:3e:62:95:50:3f:ef:2d:94:ca:7c:55:8f:f7:
                    4b:94:06:6c:f7:59:c6:98:14:4c:13:f2:83:fd:c9:
                    fa:1a:2b:86:19:b8:76:40:20:f0:e4:18:6f:15:ca:
                    3d:74:52:be:60:a2:81:8e:80:e6:ab:17:3c:ac:ca:
                    43:95:b6:93:72:44:ad:b7:26:b7:19:28:e7:51:c0:
                    f5:c3:2b:18:2e:05:d9:7d:91:87:12:83:6e:87:92:
                    7f:22:a6:5e:13:f4:5f:59:44:ad:b0:dc:ea:f4:87:
                    74:5b:0f:2b:08:74:c3:0d:81:92:a6:bb:73:89:42:
                    71:bd:b4:6e:4a:d2:fa:b6:98:d5:b2:38:26:da:c0:
                    20:4a:27:50:dc:a2:77:b3:1f:cb:07:94:0a:ee:d3:
                    94:a6:a5:6d:f7:12:7f:fe:02:3b:a8:39:8a:aa:5b:
                    70:c3:3a:60:3a:ea:d9:55:a3:2e:99:c0:74:83:df:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8C:F9:2A:F9:AC:97:57:78:85:C9:58:66:F3:4A:B7:C0:C8:B2:F5
            X509v3 Authority Key Identifier:
                keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:50:b4:ce:38:08:b4:ed:ac:d5:a6:16:2a:33:c2:a2:54:
         98:f9:86:a4:0c:23:ec:fb:bf:ab:27:a1:b9:23:64:60:be:b4:
         60:04:6e:a4:06:23:8c:57:36:e7:1a:d0:d5:70:9c:82:66:6f:
         b3:2d:b7:e8:1e:c2:e2:47:e2:8f:82:5d:60:72:67:bd:02:cd:
         63:95:09:3b:42:e6:99:a6:38:df:1d:21:f1:ad:e0:6a:4d:a0:
         24:54:74:22:45:42:03:25:9a:43:53:21:7f:40:22:cb:39:02:
         a5:b9:67:ee:2e:1c:d1:cb:23:3d:dc:0e:89:57:53:69:4f:25:
         62:be:b7:7c:79:c2:a3:37:d6:7b:dd:84:c9:3d:98:fe:a5:a9:
         98:2e:98:d4:c2:78:d6:15:bd:af:09:e8:3a:a6:35:3a:a2:22:
         5c:32:0f:c9:ae:dc:7c:72:21:01:c9:ba:1c:79:54:4c:f2:8a:
         72:66:1b:17:44:ae:8e:bb:a9:4b:41:6a:53:6d:90:2a:30:16:
         ae:cc:26:56:0c:42:03:6c:d5:26:f1:69:6d:f6:fc:5e:97:ba:
         c6:b8:8a:88:9f:7d:b9:31:9e:61:8f:1d:cb:1b:76:f1:0b:89:
         07:14:c5:47:bd:98:e4:63:8b:95:58:b4:26:be:19:57:8d:12:
         15:17:7d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsVAbkU0zeuPp8muaBmhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNGJkZDllOTdmMjEwMzcwY2MzMDEyNTdhYzE1ZmFlYjhm
YTUyNGUwHhcNMjUwNjA3MTQwMDIzWhcNMjUwNjA4MTQwMDIzWjAzMTEwLwYDVQQD
Eyg4MThjZjkyYWY5YWM5NzU3Nzg4NWM5NTg2NmYzNGFiN2MwYzhiMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SuuKtrNElodVMOsAIRIgbG6L1ga
NlzIn9SaBI9rIaNI6PHn3QXLFvSzkx3X0zpa51AwjjGZeXYmXTqaQiHXsG5AvnGV
7lCYJQQ9Kj5ilVA/7y2UynxVj/dLlAZs91nGmBRME/KD/cn6GiuGGbh2QCDw5Bhv
Fco9dFK+YKKBjoDmqxc8rMpDlbaTckSttya3GSjnUcD1wysYLgXZfZGHEoNuh5J/
IqZeE/RfWUStsNzq9Id0Ww8rCHTDDYGSprtziUJxvbRuStL6tpjVsjgm2sAgSidQ
3KJ3sx/LB5QK7tOUpqVt9xJ//gI7qDmKqltwwzpgOurZVaMumcB0g98diwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGM+Sr5rJdXeIXJWGbzSrfAyLL1MB8GA1UdIwQY
MBaAFKxL3Z6X8hA3DMMBJXrBX664+lJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQt
MTRiMGU4YzRlOGU3LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQtMTRiMGU4YzRlOGU3
LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1hQtM44
CLTtrNWmFiozwqJUmPmGpAwj7Pu/qyehuSNkYL60YARupAYjjFc25xrQ1XCcgmZv
sy236B7C4kfij4JdYHJnvQLNY5UJO0LmmaY43x0h8a3gak2gJFR0IkVCAyWaQ1Mh
f0AiyzkCpbln7i4c0csjPdwOiVdTaU8lYr63fHnCozfWe92EyT2Y/qWpmC6Y1MJ4
1hW9rwnoOqY1OqIiXDIPya7cfHIhAcm6HHlUTPKKcmYbF0SujrupS0FqU22QKjAW
rswmVgxCA2zVJvFpbfb8Xpe6xriKiJ99uTGeYY8dyxt28QuJBxTFR72Y5GOLlVi0
Jr4ZV40SFRd92A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:44 2025 by rpki-client