Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File:                     Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier:          Ms0AFO2ivSyFPZ3LxFtfujy4cUJc5ioSF3L1UKBHSq8=
Subject key identifier:   C0:51:80:2F:BD:27:33:BC:C3:CF:5C:E4:2C:BD:7C:D6:B9:ED:AC:8F
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer:       /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial:       019749686D1AA92FFDBA384709A4790A500D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number:          14E0
Signing time:             Sat 07 Jun 2025 08:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:09 +0000
Files and hashes:         1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: t+fcE0Mq+WPZ7jWxgmCY0eiMqxIXFp2O95e/+auRvik=)
                          2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:6d:1a:a9:2f:fd:ba:38:47:09:a4:79:0a:50:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
        Validity
            Not Before: Jun  7 08:01:09 2025 GMT
            Not After : Jun  8 08:01:09 2025 GMT
        Subject: CN=c051802fbd2733bcc3cf5ce42cbd7cd6b9edac8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0f:33:e2:33:86:08:c7:fa:23:80:35:f4:2a:
                    3d:33:fb:3a:17:37:ef:b9:77:5a:ed:e0:54:a6:a3:
                    9c:39:e7:87:a0:81:aa:dc:1e:53:9f:0d:67:b9:ad:
                    a4:f4:11:72:80:b1:25:b0:db:34:3c:88:7b:5b:6b:
                    07:21:b9:66:c8:54:1a:78:df:f7:9d:46:18:c8:cd:
                    11:05:ec:d5:24:63:4f:bc:a1:3c:55:19:e1:e8:74:
                    85:82:82:42:67:94:45:30:71:b1:85:d4:58:60:9e:
                    07:9f:06:4b:ba:6b:ce:07:85:d0:14:0f:7b:47:81:
                    e6:ca:ab:51:3f:1e:c7:84:10:3c:20:70:9b:3f:50:
                    8c:1d:c4:4a:33:97:87:b3:4e:c2:8d:d5:ea:26:c5:
                    7c:af:05:95:2d:68:8f:a5:e4:68:92:16:32:82:cd:
                    f6:b9:c8:1a:32:f4:ca:ac:51:51:2e:11:a2:16:08:
                    2e:ed:31:67:53:5c:cd:f9:0c:03:f7:f5:2f:87:1d:
                    a1:5a:07:8c:9c:d7:80:be:72:1f:bb:4a:52:86:52:
                    ab:8c:39:60:ee:70:0c:b0:bf:ee:e5:1a:17:02:de:
                    d8:f3:94:07:b1:0c:d9:37:cd:3d:1f:15:f4:84:9e:
                    18:35:d8:3b:12:78:3a:ac:3b:45:11:40:fa:f9:f2:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:51:80:2F:BD:27:33:BC:C3:CF:5C:E4:2C:BD:7C:D6:B9:ED:AC:8F
            X509v3 Authority Key Identifier:
                keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:92:5c:c1:4c:2e:8b:8f:41:07:9f:41:53:cf:9a:88:56:31:
         99:7f:6f:e5:cd:ce:ee:50:6c:bf:21:83:0c:39:da:72:2b:78:
         1d:73:4c:0e:60:48:18:fb:9e:e5:bb:b8:96:49:2c:e6:52:c0:
         7f:91:8c:09:8b:38:d3:65:e1:39:f6:9b:f4:44:ca:23:43:f8:
         f9:55:0c:39:e1:54:49:59:46:2d:1f:b5:2e:cc:ae:23:03:5d:
         33:14:ef:17:b3:65:43:df:e1:69:25:9f:cb:f0:32:b2:5f:44:
         bc:77:a5:78:1f:63:fe:32:64:b0:57:8e:28:5e:5c:4d:4e:c7:
         9c:32:70:5b:aa:20:e5:b9:e7:f2:d8:a4:05:84:a0:03:1e:87:
         9a:c0:51:b3:8e:3d:50:c2:9f:73:9d:2b:11:ae:4a:9f:47:95:
         a4:5e:1e:c2:1b:cc:ae:1d:a8:a9:88:40:e6:12:af:31:e4:6b:
         28:90:43:01:c5:76:13:cd:c9:9e:fc:19:ca:45:9f:33:a7:46:
         51:af:71:ad:9b:4b:a9:48:66:6c:7f:6e:18:f1:7e:d9:e1:ef:
         f5:26:11:ff:38:de:d3:c5:1a:62:8a:4f:3d:c3:f9:54:25:fa:
         7f:fb:f3:c5:54:31:d7:9e:7e:c3:44:b0:a1:86:c8:23:c5:5b:
         b3:fe:a2:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaG0aqS/9ujhHCaR5ClANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMWRjMjA1ZTI0YTIzYTVhMDQ1NGExM2YxZDRhMGM5NjM3
YTQzOWQwHhcNMjUwNjA3MDgwMTA5WhcNMjUwNjA4MDgwMTA5WjAzMTEwLwYDVQQD
EyhjMDUxODAyZmJkMjczM2JjYzNjZjVjZTQyY2JkN2NkNmI5ZWRhYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w8z4jOGCMf6I4A19Co9M/s6Fzfv
uXda7eBUpqOcOeeHoIGq3B5Tnw1nua2k9BFygLElsNs0PIh7W2sHIblmyFQaeN/3
nUYYyM0RBezVJGNPvKE8VRnh6HSFgoJCZ5RFMHGxhdRYYJ4HnwZLumvOB4XQFA97
R4HmyqtRPx7HhBA8IHCbP1CMHcRKM5eHs07CjdXqJsV8rwWVLWiPpeRokhYygs32
ucgaMvTKrFFRLhGiFggu7TFnU1zN+QwD9/Uvhx2hWgeMnNeAvnIfu0pShlKrjDlg
7nAMsL/u5RoXAt7Y85QHsQzZN809HxX0hJ4YNdg7Eng6rDtFEUD6+fJ4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBRgC+9JzO8w89c5Cy9fNa57ayPMB8GA1UdIwQY
MBaAFCsdwgXiSiOloEVKE/HUoMljekOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQt
ZGJjOWE1MjJjZDEyLzEvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQtZGJjOWE1MjJjZDEy
LzEvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpJcwUwu
i49BB59BU8+aiFYxmX9v5c3O7lBsvyGDDDnacit4HXNMDmBIGPue5bu4lkks5lLA
f5GMCYs402XhOfab9ETKI0P4+VUMOeFUSVlGLR+1LsyuIwNdMxTvF7NlQ9/haSWf
y/Aysl9EvHeleB9j/jJksFeOKF5cTU7HnDJwW6og5bnn8tikBYSgAx6HmsBRs449
UMKfc50rEa5Kn0eVpF4ewhvMrh2oqYhA5hKvMeRrKJBDAcV2E83JnvwZykWfM6dG
Ua9xrZtLqUhmbH9uGPF+2eHv9SYR/zje08UaYopPPcP5VCX6f/vzxVQx155+w0Sw
oYbII8Vbs/6i1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:24 2025 by rpki-client