Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
File:                     pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json)
Hash identifier:          qbhEcqdh3chkR+IVtNTU4RcXaPgonC0OnqusgM/RJd8=
Subject key identifier:   55:73:A6:95:F1:BE:FA:E8:D7:5D:8D:32:2B:5C:CD:7B:37:4B:37:F4
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Certificate issuer:       /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial:       01974A7A8781092DE4CAF6AE3710A4A725AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
Manifest number:          0839
Signing time:             Sat 07 Jun 2025 13:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:33 +0000
Files and hashes:         1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=)
                          2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: K/2gUQymyIHGTaKen++L5J2hwGMGtNUffshjx/wc8fM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:87:81:09:2d:e4:ca:f6:ae:37:10:a4:a7:25:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
        Validity
            Not Before: Jun  7 13:00:33 2025 GMT
            Not After : Jun  8 13:00:33 2025 GMT
        Subject: CN=5573a695f1befae8d75d8d322b5ccd7b374b37f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:9d:9c:84:1a:5d:9e:b6:0c:1a:ea:dd:63:
                    aa:56:b8:37:57:bf:a3:f8:7a:8d:dd:3b:eb:84:9d:
                    6b:0f:9b:63:5e:ee:db:b3:f0:92:4d:a7:a6:c6:b5:
                    f2:63:a3:a0:fc:da:a4:97:fc:10:a2:77:0e:f9:8d:
                    a4:3e:26:da:4f:ca:03:95:62:30:e6:b2:13:fb:31:
                    40:69:8f:19:af:cb:8d:6f:c0:42:f8:b5:bb:27:e6:
                    b6:a2:f3:b6:98:e6:48:8a:87:88:0e:dd:3d:d3:c3:
                    56:3c:cc:8a:34:c3:9e:f1:f0:e4:cd:f6:e8:7d:29:
                    0e:26:91:b6:6a:c4:3b:24:4a:e5:c0:c3:f3:44:4d:
                    05:72:a3:fd:bb:39:4d:10:be:f1:87:f9:ea:f4:f8:
                    0c:23:b7:0c:e3:91:e0:8f:b8:dc:76:6e:f4:e2:bc:
                    98:4e:14:8a:7e:35:b1:00:42:35:fb:58:d3:26:28:
                    41:64:bf:82:e7:d4:47:a2:8b:5b:51:de:20:48:15:
                    88:4d:c3:45:b2:8b:af:64:50:be:12:4c:3a:2e:66:
                    ab:52:40:f8:e3:43:78:2f:5e:42:f1:d5:5c:4a:3e:
                    6b:df:95:76:31:73:8c:80:fb:e7:6a:96:24:c6:9a:
                    f9:2b:f8:a0:db:69:6f:e1:ed:0d:0f:d7:8e:45:75:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:73:A6:95:F1:BE:FA:E8:D7:5D:8D:32:2B:5C:CD:7B:37:4B:37:F4
            X509v3 Authority Key Identifier:
                keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:26:27:36:d0:e5:df:d1:ef:5c:d3:b9:fc:55:41:be:b4:
         e4:ac:63:b1:1f:eb:ab:96:e0:b8:be:d4:f9:32:63:9f:92:b1:
         4b:d8:ce:9f:2a:03:61:40:81:21:cf:f9:db:34:49:79:6e:56:
         7c:df:89:ab:ce:45:82:dc:81:76:c1:ef:cd:7d:f1:1c:be:11:
         1e:c5:f5:3c:2e:99:ae:7e:9c:5b:bb:ea:bd:a3:f7:b5:10:da:
         eb:ec:ee:d9:8c:34:61:5a:6a:32:d7:d7:eb:a2:db:23:85:ec:
         50:26:b7:a3:02:1d:c1:e7:16:a4:cb:4d:4d:6e:70:7a:53:9d:
         c0:3d:9f:b8:6b:6a:f7:af:f9:0b:1b:40:26:27:82:d7:29:24:
         ef:d3:f6:d1:26:f9:a1:a9:f1:1e:ab:20:da:15:bc:94:10:03:
         b2:85:9f:a8:dd:0b:93:2c:b7:7d:92:9a:12:a5:78:a9:bc:09:
         8b:0a:70:e4:61:e7:67:83:7c:e2:48:2e:d1:35:34:fa:cf:1b:
         ed:7c:75:9f:16:ed:ff:dd:07:84:12:e2:b7:fa:cf:da:fd:15:
         8d:1a:f8:0d:e1:04:a5:c7:60:12:b5:32:82:d8:30:7b:59:0b:
         c1:fb:c5:46:b8:b4:aa:51:f6:ae:8d:4c:76:38:05:29:63:9b:
         50:9e:8f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeoeBCS3kyvauNxCkpyWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDA0M2IzZTEzYWVkMzk3Zjg5MzJjZjVkMTNmZjRmNGFh
ZmU2YmEwHhcNMjUwNjA3MTMwMDMzWhcNMjUwNjA4MTMwMDMzWjAzMTEwLwYDVQQD
Eyg1NTczYTY5NWYxYmVmYWU4ZDc1ZDhkMzIyYjVjY2Q3YjM3NGIzN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHOdnIQaXZ62DBrq3WOqVrg3V7+j
+HqN3TvrhJ1rD5tjXu7bs/CSTaemxrXyY6Og/Nqkl/wQoncO+Y2kPibaT8oDlWIw
5rIT+zFAaY8Zr8uNb8BC+LW7J+a2ovO2mOZIioeIDt0908NWPMyKNMOe8fDkzfbo
fSkOJpG2asQ7JErlwMPzRE0FcqP9uzlNEL7xh/nq9PgMI7cM45Hgj7jcdm704ryY
ThSKfjWxAEI1+1jTJihBZL+C59RHootbUd4gSBWITcNFsouvZFC+Ekw6LmarUkD4
40N4L15C8dVcSj5r35V2MXOMgPvnapYkxpr5K/ig22lv4e0ND9eORXWP/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVzppXxvvro112NMitczXs3Szf0MB8GA1UdIwQY
MBaAFKQAQ7PhOu05f4kyz10T/09Kr+a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjkt
YjljMGRmNzBhZDNmLzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjktYjljMGRmNzBhZDNm
LzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQYmJzbQ
5d/R71zTufxVQb605KxjsR/rq5bguL7U+TJjn5KxS9jOnyoDYUCBIc/52zRJeW5W
fN+Jq85FgtyBdsHvzX3xHL4RHsX1PC6Zrn6cW7vqvaP3tRDa6+zu2Yw0YVpqMtfX
66LbI4XsUCa3owIdwecWpMtNTW5welOdwD2fuGtq96/5CxtAJieC1ykk79P20Sb5
oanxHqsg2hW8lBADsoWfqN0Lkyy3fZKaEqV4qbwJiwpw5GHnZ4N84kgu0TU0+s8b
7Xx1nxbt/90HhBLit/rP2v0VjRr4DeEEpcdgErUygtgwe1kLwfvFRri0qlH2ro1M
djgFKWObUJ6PTA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:19 2025 by rpki-client