Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File:                     sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier:          tdoeRjgMJNxNHDxI88vawBHOotp8pOnXQIGV7W2fdsg=
Subject key identifier:   2D:BF:C8:23:71:2D:2F:D1:57:6A:27:8D:26:15:45:71:AC:6E:A8:AB
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer:       /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial:       01974FD7AC942E55E3D852D87EC714238A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number:          0A76
Signing time:             Sun 08 Jun 2025 14:00:23 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:23 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:23 +0000
Files and hashes:         1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
                          2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: Tr+mJKV6Fh2/BzD5l8Ea3FouFROYBiU1zdB+4HFU2+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:ac:94:2e:55:e3:d8:52:d8:7e:c7:14:23:8a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
        Validity
            Not Before: Jun  8 14:00:23 2025 GMT
            Not After : Jun  9 14:00:23 2025 GMT
        Subject: CN=2dbfc823712d2fd1576a278d26154571ac6ea8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:ae:c0:83:a4:ba:ab:f7:26:46:70:53:94:
                    63:1a:e5:09:4f:4d:8a:75:97:80:f7:1b:c8:e1:74:
                    34:fc:ca:38:47:44:93:88:17:27:e9:c4:94:71:e0:
                    d5:3d:50:e2:cb:d8:e8:57:61:d2:85:c6:09:2d:36:
                    c9:d6:32:1a:16:68:21:4b:49:1b:18:8f:d8:24:ab:
                    09:16:c8:83:68:e5:d2:41:23:c9:4d:27:b6:7b:9b:
                    e4:f9:60:85:08:de:a4:e4:7b:fc:f0:35:fa:1e:5d:
                    8d:f1:e5:39:f9:2b:aa:f6:29:4d:98:b8:0c:e7:d5:
                    c5:90:37:b2:c7:fa:ab:20:4f:81:0f:fa:0b:a1:5f:
                    cd:ac:ae:2a:36:57:5c:0a:05:2a:e4:15:bb:f7:a2:
                    02:7d:51:09:91:05:96:f7:d1:9d:f0:ef:50:52:dd:
                    8e:3b:31:40:38:fa:a9:0e:ff:88:fc:dc:68:66:89:
                    b0:5f:ac:d5:ff:ac:85:0a:61:29:13:e1:9c:63:74:
                    4e:07:ae:28:5c:96:43:e0:38:82:a4:2f:87:46:4d:
                    1f:10:f0:85:f2:20:2d:a0:7d:83:f9:f6:36:a0:f7:
                    20:51:e8:d9:83:5c:7c:53:48:e8:dd:09:ed:23:31:
                    ff:c1:b1:69:6b:93:dc:c4:41:a2:ef:f7:66:d7:2a:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:C8:23:71:2D:2F:D1:57:6A:27:8D:26:15:45:71:AC:6E:A8:AB
            X509v3 Authority Key Identifier:
                keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:e2:0e:94:4f:fc:4f:41:82:c9:1d:aa:7a:53:93:8a:14:
         74:06:24:a3:55:85:94:a2:97:e2:ea:bd:99:e9:c9:3e:01:8a:
         23:59:4e:3c:55:29:af:ca:0e:fc:2f:4f:2c:8f:f5:32:b3:a7:
         86:ab:af:84:cd:1c:3f:de:74:5f:3b:75:64:a4:20:07:57:39:
         9a:d9:42:73:d3:c1:a7:6f:d3:3e:9b:91:b7:d6:d1:90:61:98:
         1c:83:83:a8:ad:8f:69:8b:f4:9c:09:90:b2:8f:2c:96:04:2e:
         5c:a1:4f:2c:c0:da:a5:1d:3e:c9:39:2c:91:81:b4:e5:ef:95:
         73:81:96:31:3f:6b:d9:89:ca:61:6e:10:ca:a9:7b:6a:e3:ba:
         20:38:00:85:6b:58:e9:f6:ed:f1:bb:46:eb:6d:03:a0:4f:25:
         4d:1d:39:a5:be:1e:52:70:76:1c:ed:35:85:ce:1a:f3:64:31:
         61:24:56:ee:a0:cd:bf:6a:1c:84:1d:03:97:04:04:b8:60:7f:
         dc:83:57:68:ad:5f:fe:9d:eb:45:ad:10:f9:e0:f1:4d:f2:de:
         a8:ee:61:08:20:65:3d:1b:28:5f:f7:c1:9e:89:73:8a:05:b7:
         82:cd:a8:90:4a:03:0b:11:9e:4e:68:75:2f:33:18:4b:78:0a:
         75:8a:4e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP16yULlXj2FLYfscUI4okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzJjOGQ0ZmM5ODZkZWI5ZmNlYjFmMGQwY2FlMjdjMWMz
MTM1YzMwHhcNMjUwNjA4MTQwMDIzWhcNMjUwNjA5MTQwMDIzWjAzMTEwLwYDVQQD
EygyZGJmYzgyMzcxMmQyZmQxNTc2YTI3OGQyNjE1NDU3MWFjNmVhOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwKuwIOkuqv3JkZwU5RjGuUJT02K
dZeA9xvI4XQ0/Mo4R0STiBcn6cSUceDVPVDiy9joV2HShcYJLTbJ1jIaFmghS0kb
GI/YJKsJFsiDaOXSQSPJTSe2e5vk+WCFCN6k5Hv88DX6Hl2N8eU5+Suq9ilNmLgM
59XFkDeyx/qrIE+BD/oLoV/NrK4qNldcCgUq5BW796ICfVEJkQWW99Gd8O9QUt2O
OzFAOPqpDv+I/NxoZomwX6zV/6yFCmEpE+GcY3ROB64oXJZD4DiCpC+HRk0fEPCF
8iAtoH2D+fY2oPcgUejZg1x8U0jo3QntIzH/wbFpa5PcxEGi7/dm1yrk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2/yCNxLS/RV2onjSYVRXGsbqirMB8GA1UdIwQY
MBaAFLFyyNT8mG3rn86x8NDK4nwcMTXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hMSTFQeVliZXVmenJIdzBNcmlmQnd4TmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iYjNiNjItMzMwMi00NWFhLTk2OGEt
ZWNiYjNmYzBhNzI1LzEvc1hMSTFQeVliZXVmenJIdzBNcmlmQnd4TmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iYjNiNjItMzMwMi00NWFhLTk2OGEtZWNiYjNmYzBhNzI1
LzEvc1hMSTFQeVliZXVmenJIdzBNcmlmQnd4TmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpziDpRP
/E9BgskdqnpTk4oUdAYko1WFlKKX4uq9menJPgGKI1lOPFUpr8oO/C9PLI/1MrOn
hquvhM0cP950Xzt1ZKQgB1c5mtlCc9PBp2/TPpuRt9bRkGGYHIODqK2PaYv0nAmQ
so8slgQuXKFPLMDapR0+yTkskYG05e+Vc4GWMT9r2YnKYW4Qyql7auO6IDgAhWtY
6fbt8btG620DoE8lTR05pb4eUnB2HO01hc4a82QxYSRW7qDNv2ochB0DlwQEuGB/
3INXaK1f/p3rRa0Q+eDxTfLeqO5hCCBlPRsoX/fBnolzigW3gs2okEoDCxGeTmh1
LzMYS3gKdYpOPg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:20:06 2025 by rpki-client