Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          GVeu4xzpielpZnYnTM+bLkQdJ9p/Jor4pxuLgYBySvg=
Subject key identifier:   2E:40:BA:CF:3A:97:8C:E7:6D:25:CB:59:80:22:00:51:BA:62:78:9E
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       0197499F1C162A7D5B7F7030E60242EE60C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          09FD
Signing time:             Sat 07 Jun 2025 09:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:53 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: rkBi5MjyLNHCih//fikDhMTwT9YvF1J2HVM0zGl2xeE=)
                          2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:1c:16:2a:7d:5b:7f:70:30:e6:02:42:ee:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Jun  7 09:00:53 2025 GMT
            Not After : Jun  8 09:00:53 2025 GMT
        Subject: CN=2e40bacf3a978ce76d25cb5980220051ba62789e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:99:52:53:fa:e6:ea:cb:8f:a7:93:8b:bb:
                    aa:1f:0d:2f:ed:00:a9:1b:39:32:f7:bc:f0:d9:80:
                    0f:60:94:71:b1:0f:f6:f4:83:5d:4d:5e:82:48:98:
                    3a:cf:e6:25:b7:da:3a:ca:7a:b9:0f:64:c7:43:d7:
                    9f:53:f8:42:44:b7:ab:5c:d9:b7:73:79:c0:69:81:
                    42:23:8f:41:58:f4:88:7a:2f:33:0e:1d:fe:25:7d:
                    09:d5:23:09:a1:9b:7d:c9:c4:3a:cb:01:eb:64:8a:
                    eb:7a:03:3c:f1:b1:ff:a4:44:45:cc:15:47:a7:57:
                    06:70:07:84:9d:50:79:c6:71:d1:5d:b8:66:d6:80:
                    b4:d5:01:21:b5:9d:d1:e9:42:c3:85:9c:0d:98:78:
                    fe:4f:50:e4:36:ce:1f:77:24:e3:43:a9:e1:50:5e:
                    d9:05:80:85:17:aa:7b:2c:93:38:52:73:1c:4b:54:
                    65:76:1d:24:d5:6b:1d:b4:7e:f1:f5:8d:fe:fc:ea:
                    a2:89:9b:fa:00:72:98:57:41:79:48:97:81:47:94:
                    88:7b:04:ba:58:8c:9f:ff:c4:89:19:cb:e2:64:c8:
                    b9:6d:51:0f:57:71:66:de:db:e3:98:56:c0:5a:13:
                    f0:88:d2:a6:d4:fa:4f:43:a2:4d:03:2f:d9:d1:0e:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:40:BA:CF:3A:97:8C:E7:6D:25:CB:59:80:22:00:51:BA:62:78:9E
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:8f:1d:8b:7a:ba:57:2f:5c:61:c5:43:9d:fb:ea:34:c3:
         55:42:0d:5d:9e:96:db:e0:33:d5:7e:16:ff:b0:3e:be:18:a5:
         c0:b6:aa:7c:8f:96:04:13:53:58:3d:0c:07:e8:82:ac:12:61:
         71:77:58:bb:c0:5f:ad:85:12:d4:a1:0a:ef:bd:2b:4d:e3:ff:
         c9:7a:f5:fd:b0:37:b0:27:5f:bc:b4:ef:c7:31:a4:6e:b4:89:
         ce:5a:c7:a3:de:b4:91:69:e0:f8:b4:47:b5:3e:b2:87:f1:ee:
         41:c7:41:96:1e:45:a1:55:d5:c4:1f:5e:0f:0a:05:b7:f7:5c:
         f0:05:d8:75:e6:c7:18:20:bb:17:8e:e5:09:2f:cc:09:89:03:
         dc:37:fa:04:56:fd:37:b1:4a:06:05:6c:e8:6e:c9:91:77:40:
         61:d1:37:47:15:86:b0:fd:72:40:3e:b0:e5:cc:29:47:fa:a6:
         de:f5:a8:cf:f7:9b:3e:68:c1:96:c9:73:49:3f:40:ca:d2:79:
         92:c0:45:5e:2f:c1:d0:3c:ce:fb:bc:a9:75:88:f1:5f:67:21:
         15:a7:6b:fa:3e:f4:94:b1:64:af:c3:b2:02:44:4b:b5:6e:95:
         d3:09:21:7d:e9:61:57:83:4c:8d:f4:d8:75:f5:8b:60:2c:58:
         98:32:0b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnxwWKn1bf3Aw5gJC7mDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0
YTk0YWUwHhcNMjUwNjA3MDkwMDUzWhcNMjUwNjA4MDkwMDUzWjAzMTEwLwYDVQQD
EygyZTQwYmFjZjNhOTc4Y2U3NmQyNWNiNTk4MDIyMDA1MWJhNjI3ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsaZUlP65urLj6eTi7uqHw0v7QCp
Gzky97zw2YAPYJRxsQ/29INdTV6CSJg6z+Ylt9o6ynq5D2THQ9efU/hCRLerXNm3
c3nAaYFCI49BWPSIei8zDh3+JX0J1SMJoZt9ycQ6ywHrZIrregM88bH/pERFzBVH
p1cGcAeEnVB5xnHRXbhm1oC01QEhtZ3R6ULDhZwNmHj+T1DkNs4fdyTjQ6nhUF7Z
BYCFF6p7LJM4UnMcS1Rldh0k1WsdtH7x9Y3+/OqiiZv6AHKYV0F5SJeBR5SIewS6
WIyf/8SJGcviZMi5bVEPV3Fm3tvjmFbAWhPwiNKm1PpPQ6JNAy/Z0Q5RrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5Aus86l4znbSXLWYAiAFG6YnieMB8GA1UdIwQY
MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt
MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj
LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/6PHYt6
ulcvXGHFQ5376jTDVUINXZ6W2+Az1X4W/7A+vhilwLaqfI+WBBNTWD0MB+iCrBJh
cXdYu8BfrYUS1KEK770rTeP/yXr1/bA3sCdfvLTvxzGkbrSJzlrHo960kWng+LRH
tT6yh/HuQcdBlh5FoVXVxB9eDwoFt/dc8AXYdebHGCC7F47lCS/MCYkD3Df6BFb9
N7FKBgVs6G7JkXdAYdE3RxWGsP1yQD6w5cwpR/qm3vWoz/ebPmjBlslzST9AytJ5
ksBFXi/B0DzO+7ypdYjxX2chFadr+j70lLFkr8OyAkRLtW6V0wkhfelhV4NMjfTY
dfWLYCxYmDILeA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:42 2025 by rpki-client