Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File:                     15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier:          wvCEmGORZiGBYSpXwvXLhLy9YVoRScrvGMiGnJezpzs=
Subject key identifier:   46:42:66:83:60:FA:45:5B:0E:D5:B1:7F:96:49:3B:0F:E7:C1:51:22
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       019767733E421E16A50FE2933288766755DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number:          0C95
Signing time:             Fri 13 Jun 2025 04:01:35 +0000
Manifest this update:     Fri 13 Jun 2025 04:01:35 +0000
Manifest next update:     Sat 14 Jun 2025 04:01:35 +0000
Files and hashes:         1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: OIkq8J5RXb1I5uK0Te9yB2FPFiNOU5Z3ZQSlrFh2QvM=)
                          2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
                          3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 04:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:73:3e:42:1e:16:a5:0f:e2:93:32:88:76:67:55:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Jun 13 04:01:35 2025 GMT
            Not After : Jun 14 04:01:35 2025 GMT
        Subject: CN=4642668360fa455b0ed5b17f96493b0fe7c15122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:dd:78:50:91:12:83:c8:ef:e5:24:30:eb:
                    c7:a6:40:a8:1b:81:e7:12:73:b8:47:18:ca:62:b1:
                    91:97:48:0f:74:30:cd:f5:ce:f7:e8:88:17:4b:e8:
                    da:d2:ff:e5:c5:36:96:cf:59:b6:17:71:48:a0:f4:
                    c7:c1:06:09:08:58:d6:54:ca:c4:f6:44:2d:ae:37:
                    b0:85:30:88:ad:1f:d4:ea:b6:56:cb:8d:b2:7c:0d:
                    21:8f:9f:c7:c8:13:46:3a:46:52:ec:72:24:1e:6e:
                    27:13:ec:4d:b8:0b:44:69:26:c0:a3:3f:69:7b:b7:
                    c4:8b:72:7f:03:06:20:78:fe:25:d2:c4:eb:86:51:
                    5b:5e:98:8b:7a:07:66:ff:dd:1b:9c:88:18:df:53:
                    f2:0a:b4:cc:49:4e:31:1b:f9:7e:46:f7:5e:f8:0e:
                    c8:1b:e9:75:d4:d3:ff:6a:e1:fa:ca:d4:c4:e1:45:
                    35:a7:be:c4:1a:e1:cb:b3:89:4c:17:fa:fd:dc:fe:
                    34:9b:89:c9:87:ba:ec:a1:94:21:63:82:4f:75:5e:
                    6d:6e:f2:5f:10:15:82:ba:72:95:75:e8:a3:76:50:
                    1e:9e:83:45:2f:99:60:21:f8:c9:c7:8d:91:a1:22:
                    6f:cc:b4:26:30:7c:e9:a2:ba:6e:59:61:2f:9c:de:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:42:66:83:60:FA:45:5B:0E:D5:B1:7F:96:49:3B:0F:E7:C1:51:22
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:61:ba:c0:58:da:84:ff:98:56:7e:0e:53:c8:59:cb:f6:1e:
         66:63:f2:8b:4a:c5:e9:1b:f3:a7:0c:3f:b4:14:17:fc:13:37:
         e9:ab:32:8b:cb:2c:40:35:74:a5:d7:9d:9c:92:03:42:25:cd:
         ac:98:04:56:8a:78:57:ab:ae:b8:34:f3:85:09:a9:94:98:b1:
         23:91:90:fd:1b:a5:79:cf:c0:98:e8:e0:01:68:db:15:98:29:
         03:b3:26:08:04:fe:40:6c:f7:e6:74:0f:44:00:87:8b:a0:ec:
         6f:04:7d:dd:ff:83:78:4b:67:03:3a:ee:6c:16:80:cf:1a:85:
         51:31:4c:46:d7:19:ae:45:ba:f7:49:53:c6:01:6a:b3:07:79:
         40:fc:ba:4c:89:06:b5:50:e8:25:b5:96:b9:ea:1d:ca:a9:d6:
         fb:ad:c3:09:9c:12:89:d1:d1:0c:6b:8c:d9:a2:a5:02:fc:39:
         b1:68:0c:00:00:e6:23:35:17:d1:01:57:87:43:c6:43:07:ed:
         1a:45:56:5b:15:58:73:c2:03:78:12:7c:13:8c:8b:9e:df:3d:
         fc:d9:5c:e2:1d:32:5b:c2:30:88:69:f4:d4:44:4b:67:3b:6c:
         94:78:d9:e8:82:62:f6:bb:96:11:a8:73:5b:d1:cd:49:ef:8a:
         6b:19:42:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdncz5CHhalD+KTMoh2Z1XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjUwNjEzMDQwMTM1WhcNMjUwNjE0MDQwMTM1WjAzMTEwLwYDVQQD
Eyg0NjQyNjY4MzYwZmE0NTViMGVkNWIxN2Y5NjQ5M2IwZmU3YzE1MTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooTdeFCREoPI7+UkMOvHpkCoG4Hn
EnO4RxjKYrGRl0gPdDDN9c736IgXS+ja0v/lxTaWz1m2F3FIoPTHwQYJCFjWVMrE
9kQtrjewhTCIrR/U6rZWy42yfA0hj5/HyBNGOkZS7HIkHm4nE+xNuAtEaSbAoz9p
e7fEi3J/AwYgeP4l0sTrhlFbXpiLegdm/90bnIgY31PyCrTMSU4xG/l+Rvde+A7I
G+l11NP/auH6ytTE4UU1p77EGuHLs4lMF/r93P40m4nJh7rsoZQhY4JPdV5tbvJf
EBWCunKVdeijdlAenoNFL5lgIfjJx42RoSJvzLQmMHzporpuWWEvnN6uIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZCZoNg+kVbDtWxf5ZJOw/nwVEiMB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWG6wFja
hP+YVn4OU8hZy/YeZmPyi0rF6Rvzpww/tBQX/BM36asyi8ssQDV0pdednJIDQiXN
rJgEVop4V6uuuDTzhQmplJixI5GQ/Rulec/AmOjgAWjbFZgpA7MmCAT+QGz35nQP
RACHi6DsbwR93f+DeEtnAzrubBaAzxqFUTFMRtcZrkW690lTxgFqswd5QPy6TIkG
tVDoJbWWueodyqnW+63DCZwSidHRDGuM2aKlAvw5sWgMAADmIzUX0QFXh0PGQwft
GkVWWxVYc8IDeBJ8E4yLnt89/Nlc4h0yW8IwiGn01ERLZztslHjZ6IJi9ruWEahz
W9HNSe+KaxlCBg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:40:26 2025 by rpki-client