Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File:                     ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier:          mvLMTJXnZ6XX0Pr77znan8twUqO1/ak/J4pCDeLPjjA=
Subject key identifier:   2E:0D:51:F7:1C:3C:F7:6C:11:08:05:C6:E9:DD:A0:8F:4A:83:4D:71
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer:       /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial:       01974C9FEAB87FA4133290832B113227F246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number:          037B
Signing time:             Sat 07 Jun 2025 23:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:38 +0000
Files and hashes:         1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
                          2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: fB5B5iDtIfCAPqA0u9GMBMChsGlLU8a49x+an7ArcKM=)
                          3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
                          4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:ea:b8:7f:a4:13:32:90:83:2b:11:32:27:f2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
        Validity
            Not Before: Jun  7 23:00:38 2025 GMT
            Not After : Jun  8 23:00:38 2025 GMT
        Subject: CN=2e0d51f71c3cf76c110805c6e9dda08f4a834d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:86:25:3c:a1:e1:c6:bf:83:6d:85:fc:a3:
                    e6:49:3a:54:54:d7:81:8e:95:c5:17:b2:ea:22:05:
                    bb:9d:81:60:29:ae:1a:99:0b:4a:4e:0e:e2:ed:93:
                    8d:c0:f6:13:71:0c:3a:99:81:4d:26:23:61:c0:83:
                    12:81:21:0c:c7:ea:2b:37:bb:72:c9:ba:c5:59:82:
                    fb:ec:66:86:3b:31:71:2b:35:21:1d:21:1d:d7:6c:
                    ed:7e:5c:b2:b0:fd:9b:21:1a:41:ab:80:4e:f9:df:
                    44:5c:f2:ae:ff:68:58:b2:b7:b6:0d:c2:73:48:fd:
                    87:df:f2:32:f2:99:33:6f:14:71:ca:e9:37:97:fa:
                    c8:e8:59:a4:22:38:05:96:66:7f:4a:a1:29:64:01:
                    9e:04:51:a2:96:2e:5e:a4:d7:44:4d:d7:16:61:dd:
                    b1:4a:00:0f:47:9a:9d:34:6d:19:a5:fd:f1:f9:47:
                    92:c3:5d:fc:bb:ec:af:09:70:ef:ec:26:da:1f:43:
                    9b:ca:6c:7f:d8:7a:aa:6c:e6:d6:08:88:c3:a2:ba:
                    74:75:69:ff:35:fb:32:9e:19:6e:5b:96:b1:56:26:
                    86:4f:1e:35:27:9f:56:a1:d4:65:a2:f5:32:9b:3b:
                    05:b1:86:a2:ea:0c:89:86:8c:e0:62:38:ca:fe:73:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0D:51:F7:1C:3C:F7:6C:11:08:05:C6:E9:DD:A0:8F:4A:83:4D:71
            X509v3 Authority Key Identifier:
                keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:da:ca:66:33:6f:b1:13:51:ad:82:f2:69:b5:17:ad:0e:8a:
         e2:ed:62:f9:5b:1e:40:c6:60:81:0a:e9:c3:bc:cf:e9:1b:04:
         4c:6f:86:31:9d:d5:05:7a:af:78:2f:ec:d2:28:d6:f8:c4:60:
         d2:f8:62:e4:58:36:30:f6:96:bb:e0:f4:95:ce:0e:86:d0:21:
         93:26:23:73:15:4c:37:12:c1:4d:51:7f:ec:b9:89:e9:a4:20:
         0d:f4:17:83:b8:86:03:1d:6f:0e:d2:ae:91:1b:79:77:0d:18:
         80:a8:d7:11:63:e7:96:09:f3:26:27:1a:11:b0:33:fa:ba:36:
         ed:56:50:ce:f1:c0:2d:0c:9b:61:fa:26:6a:8f:af:71:8a:f9:
         88:a1:ce:5e:d8:73:31:57:90:66:4b:f1:35:21:cb:e8:71:da:
         cc:6c:62:89:8e:37:04:98:17:08:93:fe:75:82:94:cd:e8:20:
         3a:1f:6f:01:a0:75:81:01:a3:cc:c3:44:d0:e4:a5:52:e4:b3:
         b7:fd:17:ce:e4:d8:0f:2b:cf:15:72:3d:f5:ba:58:58:8c:a3:
         53:ab:1c:76:8b:45:fb:34:9f:39:32:20:3b:a3:f3:59:bd:f0:
         a2:e9:ff:52:4b:76:5b:45:a9:0a:f3:eb:a4:27:d8:62:f8:e2:
         cc:ee:47:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn+q4f6QTMpCDKxEyJ/JGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWRkOGVhYWViM2E0NzhkN2U1ZGYzZTdlZTFjMzIzZjE2
NmJmMjgwHhcNMjUwNjA3MjMwMDM4WhcNMjUwNjA4MjMwMDM4WjAzMTEwLwYDVQQD
EygyZTBkNTFmNzFjM2NmNzZjMTEwODA1YzZlOWRkYTA4ZjRhODM0ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7KGJTyh4ca/g22F/KPmSTpUVNeB
jpXFF7LqIgW7nYFgKa4amQtKTg7i7ZONwPYTcQw6mYFNJiNhwIMSgSEMx+orN7ty
ybrFWYL77GaGOzFxKzUhHSEd12ztflyysP2bIRpBq4BO+d9EXPKu/2hYsre2DcJz
SP2H3/Iy8pkzbxRxyuk3l/rI6FmkIjgFlmZ/SqEpZAGeBFGili5epNdETdcWYd2x
SgAPR5qdNG0Zpf3x+UeSw138u+yvCXDv7CbaH0Obymx/2HqqbObWCIjDorp0dWn/
NfsynhluW5axViaGTx41J59WodRlovUymzsFsYai6gyJhozgYjjK/nMvPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4NUfccPPdsEQgFxundoI9Kg01xMB8GA1UdIwQY
MBaAFIWt2Oqus6R41+XfPn7hwyPxZr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODIt
MWI3ZWMzOGU5ZjQ0LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODItMWI3ZWMzOGU5ZjQ0
LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtrKZjNv
sRNRrYLyabUXrQ6K4u1i+VseQMZggQrpw7zP6RsETG+GMZ3VBXqveC/s0ijW+MRg
0vhi5Fg2MPaWu+D0lc4OhtAhkyYjcxVMNxLBTVF/7LmJ6aQgDfQXg7iGAx1vDtKu
kRt5dw0YgKjXEWPnlgnzJicaEbAz+ro27VZQzvHALQybYfomao+vcYr5iKHOXthz
MVeQZkvxNSHL6HHazGxiiY43BJgXCJP+dYKUzeggOh9vAaB1gQGjzMNE0OSlUuSz
t/0XzuTYDyvPFXI99bpYWIyjU6scdotF+zSfOTIgO6PzWb3woun/Ukt2W0WpCvPr
pCfYYvjizO5Hxw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:00 2025 by rpki-client