Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File:                     Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier:          YT6OLP0QP80w0K3nokgsXyYDitL0tixIBmhjjyYzkWA=
Subject key identifier:   C1:71:D4:2A:A2:E4:53:BB:E1:F8:A8:63:75:45:CB:02:7E:38:BB:78
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer:       /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial:       01976283425C502BE66A40567FBA065DE6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number:          07D6
Signing time:             Thu 12 Jun 2025 05:00:58 +0000
Manifest this update:     Thu 12 Jun 2025 05:00:58 +0000
Manifest next update:     Fri 13 Jun 2025 05:00:58 +0000
Files and hashes:         1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
                          2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: wiXOH4m/weXoCf+kWRT/3nFHcwiZ6aKLxhlQv+TxPL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:42:5c:50:2b:e6:6a:40:56:7f:ba:06:5d:e6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
        Validity
            Not Before: Jun 12 05:00:58 2025 GMT
            Not After : Jun 13 05:00:58 2025 GMT
        Subject: CN=c171d42aa2e453bbe1f8a8637545cb027e38bb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:dc:14:25:b5:82:a9:5d:fe:83:91:dd:91:
                    43:97:f3:3f:91:27:e5:fb:b4:12:2e:29:36:34:ed:
                    4a:ae:ed:a6:cd:d9:2a:16:b9:4f:37:7b:83:80:fc:
                    84:64:0a:6c:0a:69:47:f6:50:5e:71:89:3b:62:13:
                    2a:a3:00:4c:d2:a8:59:f5:0e:70:00:13:a0:c2:bb:
                    7a:b1:c0:be:1e:ca:6c:02:25:e9:5d:50:f4:ba:35:
                    2f:10:b2:57:98:f9:9d:0a:5f:0a:94:8e:b2:21:23:
                    94:f3:d7:3b:ab:45:ed:86:26:e0:26:d7:0e:3c:40:
                    49:e1:9f:83:76:fd:70:a8:79:09:ab:8d:03:68:24:
                    51:c2:1c:9d:d0:a7:47:88:18:71:75:47:e6:90:a8:
                    4b:92:56:67:40:d6:1b:ef:26:06:84:51:67:1f:b1:
                    95:ad:13:57:20:7c:80:9d:c9:07:85:b5:8c:db:90:
                    be:a9:13:ec:bc:31:3a:10:a4:c3:25:af:8c:fe:d3:
                    88:de:31:59:ec:a2:89:68:61:b0:97:40:4a:91:c9:
                    5c:c9:ea:cb:11:84:cb:11:4d:dd:82:ae:7f:c8:d3:
                    90:4b:f7:0b:7b:1f:a0:a1:c7:59:2c:48:7d:18:01:
                    e7:4b:24:17:25:8c:0c:11:e6:19:31:92:17:70:2b:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:D4:2A:A2:E4:53:BB:E1:F8:A8:63:75:45:CB:02:7E:38:BB:78
            X509v3 Authority Key Identifier:
                keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:98:a8:56:f7:74:a9:4a:db:9d:34:09:4e:ff:ca:8f:72:9a:
         05:a5:98:d8:09:d6:be:ad:e8:a7:b7:95:59:78:ef:eb:02:c6:
         8a:9f:0e:0c:fc:ca:2c:bd:ac:4d:ff:60:8c:1f:69:f6:5e:a1:
         ef:3f:4f:46:63:0c:b0:b6:4e:fc:b1:65:22:a1:60:fe:2d:32:
         66:a9:d2:96:b1:2c:3f:a5:0c:39:76:b7:b0:e2:2d:76:31:a8:
         16:3a:83:e8:24:a0:2f:be:a4:de:a5:90:2a:78:52:27:6d:48:
         70:9b:5b:44:ef:a0:2f:96:2e:ff:09:70:17:41:b3:76:82:66:
         ea:5a:36:c0:76:a6:9c:3f:e8:fb:96:0f:00:a8:5e:7b:f4:00:
         ee:c6:83:9f:11:63:6b:e3:0d:3e:72:0d:ca:1e:d2:c9:7a:34:
         ab:bd:3f:84:77:00:5c:0e:4e:d9:cc:c8:39:5c:e6:24:f3:ab:
         61:de:76:5f:25:53:df:c6:67:d9:12:0b:1f:31:05:c7:8f:f6:
         73:4a:5e:2e:c8:49:e6:a6:c2:1c:7b:4a:1b:29:87:2e:b4:b8:
         ba:c4:fd:3f:78:82:36:7b:a8:ac:32:d5:79:03:1b:4c:2e:d5:
         e3:8e:89:b8:b7:a8:7c:1c:a1:98:70:25:1f:45:80:99:bc:ee:
         b2:30:e1:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdig0JcUCvmakBWf7oGXealMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm
YWUyOTEwHhcNMjUwNjEyMDUwMDU4WhcNMjUwNjEzMDUwMDU4WjAzMTEwLwYDVQQD
EyhjMTcxZDQyYWEyZTQ1M2JiZTFmOGE4NjM3NTQ1Y2IwMjdlMzhiYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34zcFCW1gqld/oOR3ZFDl/M/kSfl
+7QSLik2NO1Kru2mzdkqFrlPN3uDgPyEZApsCmlH9lBecYk7YhMqowBM0qhZ9Q5w
ABOgwrt6scC+HspsAiXpXVD0ujUvELJXmPmdCl8KlI6yISOU89c7q0XthibgJtcO
PEBJ4Z+Ddv1wqHkJq40DaCRRwhyd0KdHiBhxdUfmkKhLklZnQNYb7yYGhFFnH7GV
rRNXIHyAnckHhbWM25C+qRPsvDE6EKTDJa+M/tOI3jFZ7KKJaGGwl0BKkclcyerL
EYTLEU3dgq5/yNOQS/cLex+gocdZLEh9GAHnSyQXJYwMEeYZMZIXcCtr3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFx1Cqi5FO74fioY3VFywJ+OLt4MB8GA1UdIwQY
MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt
NTYxY2VkNWJiZjkyLzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky
LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZioVvd0
qUrbnTQJTv/Kj3KaBaWY2AnWvq3op7eVWXjv6wLGip8ODPzKLL2sTf9gjB9p9l6h
7z9PRmMMsLZO/LFlIqFg/i0yZqnSlrEsP6UMOXa3sOItdjGoFjqD6CSgL76k3qWQ
KnhSJ21IcJtbRO+gL5Yu/wlwF0GzdoJm6lo2wHamnD/o+5YPAKhee/QA7saDnxFj
a+MNPnINyh7SyXo0q70/hHcAXA5O2czIOVzmJPOrYd52XyVT38Zn2RILHzEFx4/2
c0peLshJ5qbCHHtKGymHLrS4usT9P3iCNnuorDLVeQMbTC7V446JuLeofByhmHAl
H0WAmbzusjDhiw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:22:56 2025 by rpki-client