Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File:                     kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier:          NOfiFD2HveCUvf8WhUtlUwMBuKq7oKGwjKU6qQjfljI=
Subject key identifier:   A7:34:CF:D5:0E:82:87:80:3D:67:7B:CE:3B:9A:51:68:A4:F4:F7:9E
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer:       /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial:       01975E6F18B08A6490AB9BB965EBEE37D0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number:          02A0
Signing time:             Wed 11 Jun 2025 10:00:28 +0000
Manifest this update:     Wed 11 Jun 2025 10:00:28 +0000
Manifest next update:     Thu 12 Jun 2025 10:00:28 +0000
Files and hashes:         1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: 7WXsTeBbF8RMGazwnUiTDmuDXK9uMKH2IJYWsKfBKRo=)
                          2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:6f:18:b0:8a:64:90:ab:9b:b9:65:eb:ee:37:d0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
        Validity
            Not Before: Jun 11 10:00:28 2025 GMT
            Not After : Jun 12 10:00:28 2025 GMT
        Subject: CN=a734cfd50e8287803d677bce3b9a5168a4f4f79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:e9:b1:87:29:11:3e:d3:0d:82:81:c8:05:
                    22:02:86:8f:09:1a:01:dc:53:e1:31:6b:49:f4:c5:
                    26:c3:ca:fb:4e:0d:27:9e:81:66:3e:65:93:5c:17:
                    c4:78:b8:04:bd:5d:c1:cd:f0:ac:0c:e8:15:29:15:
                    f8:df:5e:55:ef:b7:89:fa:4b:c9:db:95:0d:6a:84:
                    b7:d8:52:2e:78:89:dc:a5:56:40:77:74:79:3e:43:
                    ac:95:0a:05:13:72:75:28:26:b0:7a:4f:0e:42:36:
                    b9:ff:90:3b:20:90:4e:1d:5a:8e:31:b3:e0:68:07:
                    fb:2d:2e:d4:94:8f:e4:7e:05:94:30:b1:fe:d2:9e:
                    9e:1c:64:be:cb:e1:8c:ca:8b:08:32:d9:fb:32:76:
                    da:18:4f:9a:e1:05:e5:1b:6e:f8:52:cf:2a:86:35:
                    da:47:a6:d9:c8:6d:3c:9a:11:cc:36:fc:c0:6b:84:
                    3d:26:7a:fb:16:a1:20:59:9c:62:07:76:d8:b8:45:
                    c5:d3:69:87:05:fd:5b:af:24:9f:30:d4:3e:82:f1:
                    d0:2a:17:39:70:f9:a6:0b:82:6b:c6:dc:55:96:10:
                    f2:31:90:54:3f:23:23:08:e8:26:50:c3:d5:67:dc:
                    1e:ed:47:36:30:84:2d:c1:73:01:bb:b0:1c:ea:7a:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:34:CF:D5:0E:82:87:80:3D:67:7B:CE:3B:9A:51:68:A4:F4:F7:9E
            X509v3 Authority Key Identifier:
                keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:06:55:40:9f:05:9e:c5:88:0c:f0:5c:45:c6:d1:b5:e0:66:
         ad:36:66:ee:11:42:63:f4:71:d6:6a:67:1a:74:2f:03:10:9e:
         b6:82:ce:81:e8:e5:61:f1:e3:dd:b6:1f:ba:80:ea:92:b9:29:
         bf:57:10:79:6d:5a:57:f2:91:99:38:ec:bc:58:5a:71:88:91:
         1f:8d:f1:77:4f:b2:22:44:ad:ea:92:76:d9:aa:54:aa:fd:9d:
         84:2f:35:b1:e3:a3:bb:de:cf:a2:a4:03:f3:7a:e0:b3:73:9a:
         59:a6:f1:e7:86:2f:2a:7c:9b:27:31:8b:3e:4e:31:13:99:f8:
         ef:21:2e:b3:0c:68:a6:2d:c6:95:9d:58:a3:df:d8:e8:23:87:
         66:13:b1:c9:b0:63:ae:75:22:ee:6f:7f:ce:48:bd:b5:e5:6c:
         2f:82:dc:25:de:49:57:af:dc:f4:89:d3:2a:d1:bd:e6:cd:7a:
         65:4f:cf:fb:a1:7f:d4:94:99:ab:84:d6:25:68:8a:76:ea:da:
         d1:ec:17:22:1a:d3:a6:3a:35:ae:c0:cf:f7:c0:8f:a9:84:2f:
         c0:1d:35:eb:71:86:bf:33:aa:cc:e5:46:d6:22:36:97:83:89:
         55:77:ca:21:96:ce:34:44:5d:51:38:9d:7a:40:c0:a2:c1:c3:
         51:0c:fe:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdebxiwimSQq5u5ZevuN9DKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx
MTAyY2EwHhcNMjUwNjExMTAwMDI4WhcNMjUwNjEyMTAwMDI4WjAzMTEwLwYDVQQD
EyhhNzM0Y2ZkNTBlODI4NzgwM2Q2NzdiY2UzYjlhNTE2OGE0ZjRmNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheLpsYcpET7TDYKByAUiAoaPCRoB
3FPhMWtJ9MUmw8r7Tg0nnoFmPmWTXBfEeLgEvV3BzfCsDOgVKRX4315V77eJ+kvJ
25UNaoS32FIueIncpVZAd3R5PkOslQoFE3J1KCawek8OQja5/5A7IJBOHVqOMbPg
aAf7LS7UlI/kfgWUMLH+0p6eHGS+y+GMyosIMtn7MnbaGE+a4QXlG274Us8qhjXa
R6bZyG08mhHMNvzAa4Q9Jnr7FqEgWZxiB3bYuEXF02mHBf1brySfMNQ+gvHQKhc5
cPmmC4JrxtxVlhDyMZBUPyMjCOgmUMPVZ9we7Uc2MIQtwXMBu7Ac6nq8TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc0z9UOgoeAPWd7zjuaUWik9PeeMB8GA1UdIwQY
MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt
ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh
LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgZVQJ8F
nsWIDPBcRcbRteBmrTZm7hFCY/Rx1mpnGnQvAxCetoLOgejlYfHj3bYfuoDqkrkp
v1cQeW1aV/KRmTjsvFhacYiRH43xd0+yIkSt6pJ22apUqv2dhC81seOju97PoqQD
83rgs3OaWabx54YvKnybJzGLPk4xE5n47yEuswxopi3GlZ1Yo9/Y6COHZhOxybBj
rnUi7m9/zki9teVsL4LcJd5JV6/c9InTKtG95s16ZU/P+6F/1JSZq4TWJWiKdura
0ewXIhrTpjo1rsDP98CPqYQvwB0163GGvzOqzOVG1iI2l4OJVXfKIZbONERdUTid
ekDAosHDUQz+9A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:46:42 2025 by rpki-client