Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File:                     oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier:          BdwECqw40yFwLHFen/SkuFnSC3Dimchx1nsjzXaHwY0=
Subject key identifier:   ED:BE:54:88:9D:12:29:AB:5C:5B:5B:ED:92:CD:17:99:57:1D:0A:14
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer:       /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial:       01974B8D5676160B06764F272D732D22AEDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number:          56
Signing time:             Sat 07 Jun 2025 18:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:43 +0000
Files and hashes:         1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
                          2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: UGPngjTtBMw/HAhCBuqr8+Yg/9mE4GqbpQ91+VHPWoo=)
                          3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:56:76:16:0b:06:76:4f:27:2d:73:2d:22:ae:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
        Validity
            Not Before: Jun  7 18:00:43 2025 GMT
            Not After : Jun  8 18:00:43 2025 GMT
        Subject: CN=edbe54889d1229ab5c5b5bed92cd1799571d0a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:c6:cf:41:d0:dc:14:60:4b:e9:c2:84:63:
                    9b:61:6a:be:77:53:51:59:41:56:73:7f:6c:77:3f:
                    bd:10:e4:31:ac:5b:5f:e2:aa:1a:09:1a:29:e7:39:
                    36:68:03:cb:f4:9e:c5:d0:6f:fc:af:0d:70:8e:5f:
                    49:95:44:7c:b4:69:4b:a6:b0:58:44:c3:91:e2:69:
                    dc:88:c1:eb:50:18:52:72:33:d6:e1:c4:86:15:86:
                    c1:60:9f:28:2d:2e:d0:15:ac:0b:37:3a:95:9a:cd:
                    e1:93:52:de:19:9e:d9:94:eb:9a:68:62:00:b9:0a:
                    26:4d:60:aa:35:d8:c8:ae:b5:76:fc:f7:ea:a6:3e:
                    80:04:1e:21:09:1f:81:c3:b8:7d:fa:73:aa:57:47:
                    ec:e0:bc:58:97:d8:67:3a:ff:55:aa:eb:f1:b3:b2:
                    60:8b:ed:f1:1e:04:ed:21:64:45:af:3a:e6:04:de:
                    af:15:be:15:a2:7d:4c:63:75:bf:28:78:89:af:48:
                    52:e3:e8:7f:23:cb:91:32:ee:31:e5:0a:6f:2e:fd:
                    9c:65:ca:72:67:0f:f6:9d:16:b2:b9:31:14:11:8c:
                    84:09:7f:06:1b:4e:05:23:ec:90:08:b0:1b:25:3e:
                    db:1a:75:4e:f8:09:e6:8d:5e:ea:df:f1:ca:a7:7d:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:54:88:9D:12:29:AB:5C:5B:5B:ED:92:CD:17:99:57:1D:0A:14
            X509v3 Authority Key Identifier:
                keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:1b:1e:54:50:1f:c5:df:dc:da:11:fe:a7:43:0f:b0:e3:
         28:ba:cf:bb:e8:0c:46:51:07:b2:62:6e:ce:0f:c5:8e:4c:6a:
         07:39:02:87:74:63:e1:88:74:e4:83:9f:c1:be:75:8b:45:f2:
         47:23:1b:c3:8f:a7:86:6f:cd:1a:36:33:59:d7:4b:09:b9:a1:
         0f:e4:90:89:13:80:38:68:db:79:33:c8:1b:5c:6c:00:cc:2e:
         81:70:5b:42:0c:3f:3d:98:c0:ff:6e:1a:33:1f:78:cc:96:64:
         49:af:7f:f2:57:c1:4f:90:fd:01:60:fb:ad:48:58:31:f0:24:
         54:a4:90:99:7d:3b:df:ab:5c:d4:13:96:c7:08:fb:74:11:e1:
         ea:97:8b:59:a5:92:92:b6:d6:81:70:36:4d:46:44:5d:10:cc:
         37:00:c8:9a:ad:9a:b7:1f:9c:63:04:b9:b1:6c:7c:db:16:e6:
         08:e6:d0:ee:35:60:5f:62:c6:45:83:49:d6:9f:7a:d2:00:64:
         7e:1b:97:d5:ab:e5:44:5c:a4:6d:32:32:68:40:b9:38:22:6a:
         62:9f:75:8a:92:1c:d7:4d:0e:2a:fe:7e:35:d9:31:02:b7:a3:
         07:42:68:af:8b:42:88:04:9d:69:53:5e:8f:70:1f:a1:8b:cd:
         c8:b0:06:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjVZ2FgsGdk8nLXMtIq7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjUwNjA3MTgwMDQzWhcNMjUwNjA4MTgwMDQzWjAzMTEwLwYDVQQD
EyhlZGJlNTQ4ODlkMTIyOWFiNWM1YjViZWQ5MmNkMTc5OTU3MWQwYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBvGz0HQ3BRgS+nChGObYWq+d1NR
WUFWc39sdz+9EOQxrFtf4qoaCRop5zk2aAPL9J7F0G/8rw1wjl9JlUR8tGlLprBY
RMOR4mnciMHrUBhScjPW4cSGFYbBYJ8oLS7QFawLNzqVms3hk1LeGZ7ZlOuaaGIA
uQomTWCqNdjIrrV2/Pfqpj6ABB4hCR+Bw7h9+nOqV0fs4LxYl9hnOv9Vquvxs7Jg
i+3xHgTtIWRFrzrmBN6vFb4Von1MY3W/KHiJr0hS4+h/I8uRMu4x5QpvLv2cZcpy
Zw/2nRayuTEUEYyECX8GG04FI+yQCLAbJT7bGnVO+AnmjV7q3/HKp31tuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2+VIidEimrXFtb7ZLNF5lXHQoUMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe8bHlRQ
H8Xf3NoR/qdDD7DjKLrPu+gMRlEHsmJuzg/FjkxqBzkCh3Rj4Yh05IOfwb51i0Xy
RyMbw4+nhm/NGjYzWddLCbmhD+SQiROAOGjbeTPIG1xsAMwugXBbQgw/PZjA/24a
Mx94zJZkSa9/8lfBT5D9AWD7rUhYMfAkVKSQmX0736tc1BOWxwj7dBHh6peLWaWS
krbWgXA2TUZEXRDMNwDImq2atx+cYwS5sWx82xbmCObQ7jVgX2LGRYNJ1p960gBk
fhuX1avlRFykbTIyaEC5OCJqYp91ipIc100OKv5+NdkxArejB0Jor4tCiASdaVNe
j3AfoYvNyLAGQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:57 2025 by rpki-client