Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File:                     0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier:          KNJYyoTsZGWR8Lqb4/9ghMaKeYaD6AcBvd99Hwy9/d0=
Subject key identifier:   B7:70:99:BD:6E:4A:52:48:85:D1:B7:35:8E:DA:E9:CA:E1:B4:34:F4
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer:       /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial:       01974BC471B9F525DA3CDBFB99FF968E7A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number:          0B8A
Signing time:             Sat 07 Jun 2025 19:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:54 +0000
Files and hashes:         1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: 8UoOm7UbCMYGmbMZBhZqh8kgKLNCaFTzo04SABdc9Nc=)
                          2: 289E-Jj1-_NHnfIspmJ6dDyJHMo.roa (hash: WdW5apU9mzQj50OlelJWc6bz8hGD+pm8qBunEBj3yw4=)
                          3: Cs1qBn4VjrBIRHmPJXLiE1xFxCY.roa (hash: MWgCuKpBS+l+AyVioTFlRoxqt43GEYXQ/PHcMYuFOog=)
                          4: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (hash: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=)
                          5: iW93Iii_wpRaBJx4UitIZE8Hirs.roa (hash: nFhRjV7MRzVZ4mQI/ZjUoZj1OD4mh/1+uDWJfZv9Rc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:71:b9:f5:25:da:3c:db:fb:99:ff:96:8e:7a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
        Validity
            Not Before: Jun  7 19:00:54 2025 GMT
            Not After : Jun  8 19:00:54 2025 GMT
        Subject: CN=b77099bd6e4a524885d1b7358edae9cae1b434f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:80:8b:62:c3:94:49:e1:65:d9:5e:5d:b0:
                    46:18:21:d8:bc:30:23:05:93:b4:da:df:3c:4b:e3:
                    fa:c3:26:75:bb:19:d0:1d:ad:52:b8:40:ab:35:6a:
                    10:9a:0e:ac:a8:cf:5a:79:12:e6:d9:7d:fe:18:f8:
                    ae:15:9d:6f:2d:c9:54:6d:de:34:fb:49:dd:6a:82:
                    ae:13:de:69:ca:a5:eb:87:2b:9b:6b:b3:65:bc:8e:
                    aa:22:dc:0e:d7:e4:98:77:10:da:87:c0:31:b7:a6:
                    59:b7:ae:6f:7c:85:9f:b8:5b:90:66:61:43:84:01:
                    ec:17:1f:a3:7b:61:3d:9d:11:89:d0:26:b4:7a:7e:
                    8d:64:0c:bd:21:12:7e:b5:a8:22:7a:49:3b:44:1a:
                    de:42:94:1c:7c:cf:4f:45:f8:68:6d:a5:13:ad:4d:
                    c1:f8:c6:b2:bf:37:17:da:38:1b:2a:a6:34:ae:89:
                    3e:e9:a6:0b:84:ad:e6:4f:fe:e2:ff:91:96:29:66:
                    a6:fa:c6:67:96:ba:b6:ef:69:5a:a6:a0:69:0e:3e:
                    25:63:58:01:ac:49:c9:b7:f6:1d:b1:39:81:c6:db:
                    2d:e9:e8:fd:33:d9:09:6f:a9:be:1b:f9:de:b0:5b:
                    00:35:4e:e0:47:bc:64:00:ac:6a:04:55:54:ec:2e:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:70:99:BD:6E:4A:52:48:85:D1:B7:35:8E:DA:E9:CA:E1:B4:34:F4
            X509v3 Authority Key Identifier:
                keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:49:3b:e8:d0:8a:e5:b1:26:b8:e3:54:37:fa:64:da:a5:cf:
         4e:c1:41:a0:f1:34:8a:01:9d:5f:0c:e1:53:a1:3d:fa:49:33:
         1c:4b:00:6f:32:de:bb:1f:16:e5:46:b6:fe:30:ba:08:3f:5d:
         bf:ab:c4:f9:ff:79:c1:cf:ab:56:6c:c9:6b:f4:e1:78:a4:23:
         00:34:da:9a:bb:22:c2:d6:cd:ba:5c:5b:e1:7f:c8:0d:7e:06:
         a2:dd:76:03:8e:2d:2d:77:44:61:8e:14:1d:a0:32:d8:1d:08:
         c4:12:46:80:a7:6f:b8:59:f5:f0:47:a7:62:e7:59:32:82:87:
         21:69:b7:5f:43:2c:e2:4f:b5:31:86:fd:99:b4:5e:fd:71:08:
         0a:cb:c3:03:62:85:f0:c4:d4:41:a5:87:f9:11:d4:96:8e:de:
         06:52:a9:32:c6:6c:8e:b1:ad:91:48:2a:0e:e8:27:23:91:9f:
         2b:17:30:a6:1b:5e:78:9f:c3:49:ab:a7:7b:2b:fa:d5:f1:e3:
         f6:a1:1e:fd:5e:16:f3:46:7a:cc:65:82:77:9d:17:de:83:1f:
         09:22:03:50:85:fb:b9:fd:0f:3e:2b:48:ad:78:97:8d:3d:b5:
         9c:c2:84:6d:b1:77:83:4c:ec:ca:77:05:91:c1:35:4b:bc:09:
         3c:63:a6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxHG59SXaPNv7mf+WjnoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZmQzNDM2ZDdhMTlhNzM0M2ZhODAwZDg3YTAxYWYxODNk
YTMxOGIwHhcNMjUwNjA3MTkwMDU0WhcNMjUwNjA4MTkwMDU0WjAzMTEwLwYDVQQD
EyhiNzcwOTliZDZlNGE1MjQ4ODVkMWI3MzU4ZWRhZTljYWUxYjQzNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqWAi2LDlEnhZdleXbBGGCHYvDAj
BZO02t88S+P6wyZ1uxnQHa1SuECrNWoQmg6sqM9aeRLm2X3+GPiuFZ1vLclUbd40
+0ndaoKuE95pyqXrhyuba7NlvI6qItwO1+SYdxDah8Axt6ZZt65vfIWfuFuQZmFD
hAHsFx+je2E9nRGJ0Ca0en6NZAy9IRJ+tagiekk7RBreQpQcfM9PRfhobaUTrU3B
+MayvzcX2jgbKqY0rok+6aYLhK3mT/7i/5GWKWam+sZnlrq272lapqBpDj4lY1gB
rEnJt/YdsTmBxtst6ej9M9kJb6m+G/nesFsANU7gR7xkAKxqBFVU7C4PWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdwmb1uSlJIhdG3NY7a6crhtDT0MB8GA1UdIwQY
MBaAFNH9NDbXoZpzQ/qADYegGvGD2jGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMt
MzlhNjZjYmUxZTRkLzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMtMzlhNjZjYmUxZTRk
LzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0k76NCK
5bEmuONUN/pk2qXPTsFBoPE0igGdXwzhU6E9+kkzHEsAbzLeux8W5Ua2/jC6CD9d
v6vE+f95wc+rVmzJa/TheKQjADTamrsiwtbNulxb4X/IDX4Got12A44tLXdEYY4U
HaAy2B0IxBJGgKdvuFn18EenYudZMoKHIWm3X0Ms4k+1MYb9mbRe/XEICsvDA2KF
8MTUQaWH+RHUlo7eBlKpMsZsjrGtkUgqDugnI5GfKxcwphteeJ/DSauneyv61fHj
9qEe/V4W80Z6zGWCd50X3oMfCSIDUIX7uf0PPitIrXiXjT21nMKEbbF3g0zsyncF
kcE1S7wJPGOmtA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:06 2025 by rpki-client