Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File:                     83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier:          DgTUqqSfHsNKP5Jnkh0n8fVULpBRNibtZFvK5bIa41w=
Subject key identifier:   A1:E0:5D:5D:1B:DB:CC:BB:CA:F9:54:B1:73:8F:8E:85:38:B6:F0:4B
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer:       /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial:       01974666D3CF5F9258DED4DE99EE0B43C692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number:          08B6
Signing time:             Fri 06 Jun 2025 18:00:33 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:33 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:33 +0000
Files and hashes:         1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: LLrGjBPPQpeLNxOYg8Isuw3zXn/QC6+I2dcDWtP1cZc=)
                          2: kDhp1dHjDBAXX9BsUPItX2dtNTc.roa (hash: PynDqUC0SP3COf4tmeohMx6MacUGS0U4TVEP+3iExHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:d3:cf:5f:92:58:de:d4:de:99:ee:0b:43:c6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
        Validity
            Not Before: Jun  6 18:00:33 2025 GMT
            Not After : Jun  7 18:00:33 2025 GMT
        Subject: CN=a1e05d5d1bdbccbbcaf954b1738f8e8538b6f04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:3a:92:f8:17:99:00:da:3f:f0:6c:1b:e0:
                    31:4f:17:19:af:d5:b3:e7:81:4e:41:42:90:5d:52:
                    b4:b7:55:20:89:91:d2:1b:5c:aa:6e:f3:32:93:1d:
                    b8:86:44:e9:7c:1f:9e:74:ef:12:a8:42:87:69:e2:
                    0a:b6:da:f7:73:99:33:09:30:40:3b:ca:28:6f:e4:
                    51:1c:19:9c:5a:67:43:80:5c:bf:2d:d9:b1:76:1f:
                    58:58:4d:4e:4e:f8:aa:ee:55:d3:9c:54:8b:3a:c4:
                    58:97:e6:c0:47:47:3a:e0:d9:e0:0d:74:62:cf:25:
                    15:ea:95:1f:38:b4:4a:b3:0c:8b:44:7b:81:d4:17:
                    ba:e1:06:26:66:80:46:37:0d:4a:1d:68:07:bc:67:
                    7e:9e:c0:c9:6a:66:83:6e:cd:85:f4:c0:78:fc:98:
                    81:f9:eb:f7:b2:df:50:4b:67:34:b7:ff:74:19:de:
                    9a:c4:fb:ee:88:03:b0:9c:69:75:b6:91:1b:bf:a9:
                    64:68:d8:9e:04:fb:b5:a0:af:64:c3:f5:a4:4d:9e:
                    9b:39:b8:cf:19:ae:ed:8f:e4:a0:5e:8a:88:10:be:
                    db:0c:7e:cf:a6:29:a2:fa:39:a2:88:79:92:79:70:
                    ff:e4:67:65:97:fe:0b:78:83:1c:cb:e3:db:42:97:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E0:5D:5D:1B:DB:CC:BB:CA:F9:54:B1:73:8F:8E:85:38:B6:F0:4B
            X509v3 Authority Key Identifier:
                keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:08:c6:ad:10:9a:cc:cd:72:96:02:bb:e2:89:24:2c:88:93:
         4b:72:74:5c:fb:18:aa:6d:f5:3d:c5:d8:9c:f4:cd:56:57:b1:
         59:61:da:32:ae:7a:88:8f:b9:28:f3:25:22:d6:b1:a1:bf:bb:
         75:c5:96:46:d8:7b:4d:d0:01:d7:17:1c:cc:51:f3:78:07:5e:
         d0:97:83:f8:a4:e8:53:72:52:af:5c:d1:0f:a4:8f:64:02:4b:
         a3:23:dd:3e:42:90:ad:ba:11:79:02:9a:11:4b:e0:d6:99:0c:
         e8:7e:e0:a1:d9:09:44:65:28:11:f3:0b:61:c6:58:d1:5b:ed:
         ab:79:cc:cb:05:7b:03:6e:66:bc:21:a4:61:22:0f:8f:a3:31:
         07:0f:3c:34:ee:31:a0:39:32:98:eb:c6:75:13:3a:bb:08:48:
         d3:50:90:e5:7b:d3:c2:36:0e:c5:ed:20:1c:d5:a4:3e:d7:dd:
         32:d7:9e:7f:f4:f8:37:b3:59:9b:d6:90:d2:86:90:f0:39:ab:
         f0:b5:d5:e0:da:49:c9:2e:ef:2d:ab:d6:a4:66:47:7e:fa:f6:
         bf:d9:3e:03:21:30:29:c6:16:1e:f0:e0:dc:0a:64:6c:d9:bd:
         3f:9a:bc:65:f9:47:57:20:42:c8:e4:72:24:2f:e2:00:c6:fd:
         9f:96:af:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZtPPX5JY3tTeme4LQ8aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzUyYzEwZjFiMGQwN2I1ZjQ4ZTU3OWRmZDE0ZTM3Mjcx
M2ZiNDcwHhcNMjUwNjA2MTgwMDMzWhcNMjUwNjA3MTgwMDMzWjAzMTEwLwYDVQQD
EyhhMWUwNWQ1ZDFiZGJjY2JiY2FmOTU0YjE3MzhmOGU4NTM4YjZmMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59g6kvgXmQDaP/BsG+AxTxcZr9Wz
54FOQUKQXVK0t1UgiZHSG1yqbvMykx24hkTpfB+edO8SqEKHaeIKttr3c5kzCTBA
O8oob+RRHBmcWmdDgFy/Ldmxdh9YWE1OTviq7lXTnFSLOsRYl+bAR0c64NngDXRi
zyUV6pUfOLRKswyLRHuB1Be64QYmZoBGNw1KHWgHvGd+nsDJamaDbs2F9MB4/JiB
+ev3st9QS2c0t/90Gd6axPvuiAOwnGl1tpEbv6lkaNieBPu1oK9kw/WkTZ6bObjP
Ga7tj+SgXoqIEL7bDH7Ppimi+jmiiHmSeXD/5Gdll/4LeIMcy+PbQpfYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHgXV0b28y7yvlUsXOPjoU4tvBLMB8GA1UdIwQY
MBaAFPN1LBDxsNB7X0jled/RTjcnE/tHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmMyYWYtNGY2ZC00NWJkLWFhMTAt
ZTg3MDJlYTU5MDE2LzEvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmMyYWYtNGY2ZC00NWJkLWFhMTAtZTg3MDJlYTU5MDE2
LzEvODNVc0VQR3cwSHRmU09WNTM5Rk9OeWNULTBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgjGrRCa
zM1ylgK74okkLIiTS3J0XPsYqm31PcXYnPTNVlexWWHaMq56iI+5KPMlItaxob+7
dcWWRth7TdAB1xcczFHzeAde0JeD+KToU3JSr1zRD6SPZAJLoyPdPkKQrboReQKa
EUvg1pkM6H7godkJRGUoEfMLYcZY0Vvtq3nMywV7A25mvCGkYSIPj6MxBw88NO4x
oDkymOvGdRM6uwhI01CQ5XvTwjYOxe0gHNWkPtfdMteef/T4N7NZm9aQ0oaQ8Dmr
8LXV4NpJyS7vLavWpGZHfvr2v9k+AyEwKcYWHvDg3ApkbNm9P5q8ZflHVyBCyORy
JC/iAMb9n5avvA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:25 2025 by rpki-client