Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File:                     cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier:          Ia9RWUs3kKiaW+6+1z4mu5KCFmHa19nWV8/Z8APhmcI=
Subject key identifier:   7C:53:4E:61:8C:F1:A0:1E:DA:96:48:75:08:3C:03:47:95:2C:31:66
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer:       /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial:       01975BDCF06D66206E537FF1D2A650C3C8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number:          0D15
Signing time:             Tue 10 Jun 2025 22:01:35 +0000
Manifest this update:     Tue 10 Jun 2025 22:01:35 +0000
Manifest next update:     Wed 11 Jun 2025 22:01:35 +0000
Files and hashes:         1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
                          2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: iUpu9I7Dz7FzTm8tfIMY0XIsVWcbpPlegUuOU4kPF/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:f0:6d:66:20:6e:53:7f:f1:d2:a6:50:c3:c8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
        Validity
            Not Before: Jun 10 22:01:35 2025 GMT
            Not After : Jun 11 22:01:35 2025 GMT
        Subject: CN=7c534e618cf1a01eda964875083c0347952c3166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1d:a4:02:b7:4a:35:fe:78:08:87:5b:ab:e9:
                    ba:90:41:d2:6e:e7:9a:cf:d6:53:f9:0e:86:15:5b:
                    b7:50:89:61:58:0a:c1:10:49:08:5d:b6:8c:2e:5b:
                    27:b3:a5:61:df:64:6f:40:b2:21:57:e7:f0:0c:07:
                    95:d4:bb:55:c7:f7:fd:5e:a0:bb:87:1b:f4:be:32:
                    3a:4d:82:14:8b:a7:d2:d3:e9:dc:08:7b:65:39:ce:
                    80:93:8f:3f:54:f0:49:f6:a2:b0:21:bc:6a:ec:42:
                    9a:17:7a:27:39:14:23:cf:62:41:c0:37:35:cd:0b:
                    13:2a:70:35:1e:02:ec:35:0d:1d:2f:36:1f:f2:75:
                    80:c5:15:3b:0e:66:e3:20:4b:fd:a9:aa:c1:65:c9:
                    45:a6:6b:44:0c:8e:2d:82:10:52:f0:19:fb:c2:ce:
                    21:39:4a:28:5c:90:35:8e:1c:d2:13:9a:22:19:fc:
                    81:c4:3e:e8:58:3c:9e:c0:88:4f:e3:b0:52:13:c8:
                    62:19:b0:79:27:15:14:ed:a3:0c:ae:61:67:24:59:
                    a2:0e:f2:18:d8:78:69:63:c4:9e:b6:fc:8f:f9:a6:
                    ac:f9:63:ed:bd:c2:91:57:ff:a3:fd:b6:e6:40:56:
                    73:48:24:44:35:70:da:82:a5:bb:e5:0b:c7:87:03:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:4E:61:8C:F1:A0:1E:DA:96:48:75:08:3C:03:47:95:2C:31:66
            X509v3 Authority Key Identifier:
                keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:92:89:19:01:16:01:24:97:59:d1:98:67:27:3f:04:9a:
         66:4a:07:e8:01:5e:9e:63:35:2d:3c:6f:42:a0:9d:16:50:b0:
         75:78:ae:8a:f2:ec:8c:2d:d4:de:b8:88:9d:80:c4:17:32:b5:
         93:dc:84:4c:92:db:98:e7:9c:93:6b:cf:7d:28:37:be:f0:5f:
         05:49:17:1b:66:82:98:74:87:3c:13:1c:47:e3:72:ef:90:ff:
         d1:b3:83:ef:73:03:c4:aa:58:4c:38:47:ff:37:62:6b:c2:0d:
         53:f6:d9:47:31:92:ee:b5:0c:bf:90:76:c7:76:51:0f:2a:21:
         96:5f:7c:96:3d:4a:65:8e:dd:a2:6e:db:ca:cc:ba:02:14:3e:
         32:7b:f8:68:9a:8a:08:9e:d1:86:c7:07:2f:d1:b7:ef:a3:e5:
         17:7e:a8:bb:4c:d4:04:65:c6:a8:1d:f2:05:ed:f4:3b:5e:0c:
         47:4c:44:fc:cf:d5:03:b6:02:d3:47:8c:f7:06:94:5c:63:1a:
         fe:2d:1d:d7:81:07:44:e7:6c:d0:f3:d0:1f:39:65:4a:16:4b:
         e2:d8:ca:98:51:db:c6:19:c7:9f:c4:d2:47:58:ae:3b:5d:d1:
         ff:49:a5:05:67:39:70:b8:cf:38:b0:33:17:9f:7e:e1:76:05:
         8e:70:7d:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3PBtZiBuU3/x0qZQw8jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1
N2IzNjYwHhcNMjUwNjEwMjIwMTM1WhcNMjUwNjExMjIwMTM1WjAzMTEwLwYDVQQD
Eyg3YzUzNGU2MThjZjFhMDFlZGE5NjQ4NzUwODNjMDM0Nzk1MmMzMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x2kArdKNf54CIdbq+m6kEHSbuea
z9ZT+Q6GFVu3UIlhWArBEEkIXbaMLlsns6Vh32RvQLIhV+fwDAeV1LtVx/f9XqC7
hxv0vjI6TYIUi6fS0+ncCHtlOc6Ak48/VPBJ9qKwIbxq7EKaF3onORQjz2JBwDc1
zQsTKnA1HgLsNQ0dLzYf8nWAxRU7DmbjIEv9qarBZclFpmtEDI4tghBS8Bn7ws4h
OUooXJA1jhzSE5oiGfyBxD7oWDyewIhP47BSE8hiGbB5JxUU7aMMrmFnJFmiDvIY
2HhpY8SetvyP+aas+WPtvcKRV/+j/bbmQFZzSCRENXDagqW75QvHhwO/KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxTTmGM8aAe2pZIdQg8A0eVLDFmMB8GA1UdIwQY
MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt
NjczNjQwMjMzNjY1LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1
LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNaSiRkB
FgEkl1nRmGcnPwSaZkoH6AFenmM1LTxvQqCdFlCwdXiuivLsjC3U3riInYDEFzK1
k9yETJLbmOeck2vPfSg3vvBfBUkXG2aCmHSHPBMcR+Ny75D/0bOD73MDxKpYTDhH
/zdia8INU/bZRzGS7rUMv5B2x3ZRDyohll98lj1KZY7dom7bysy6AhQ+Mnv4aJqK
CJ7RhscHL9G376PlF36ou0zUBGXGqB3yBe30O14MR0xE/M/VA7YC00eM9waUXGMa
/i0d14EHROds0PPQHzllShZL4tjKmFHbxhnHn8TSR1iuO13R/0mlBWc5cLjPOLAz
F59+4XYFjnB9TA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:44:17 2025 by rpki-client