Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File:                     8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier:          /NQElOwvOTxa22oNvCO8/HSO5YpvMRrNjblx5lKLHYM=
Subject key identifier:   4A:D3:79:E9:B7:04:AA:33:7A:72:77:15:BE:AA:A6:FA:4B:18:34:40
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer:       /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial:       0197628352907F752E86BDB8EAA1195D62FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number:          0A1F
Signing time:             Thu 12 Jun 2025 05:01:02 +0000
Manifest this update:     Thu 12 Jun 2025 05:01:02 +0000
Manifest next update:     Fri 13 Jun 2025 05:01:02 +0000
Files and hashes:         1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: hfVP7CeQsgp04kWfTHWVoQPprfiFaE8RbTvBvquYAwI=)
                          2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:52:90:7f:75:2e:86:bd:b8:ea:a1:19:5d:62:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
        Validity
            Not Before: Jun 12 05:01:02 2025 GMT
            Not After : Jun 13 05:01:02 2025 GMT
        Subject: CN=4ad379e9b704aa337a727715beaaa6fa4b183440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:cc:49:ad:f1:2a:10:1d:a1:64:88:54:b1:
                    9c:56:dc:bd:1b:6a:21:ea:5b:e7:62:ea:55:79:23:
                    f3:1c:53:d1:63:69:ed:f5:d3:1b:07:cd:a6:d3:9a:
                    15:df:b3:33:41:75:3d:ae:57:64:18:7c:c2:6b:3b:
                    64:8d:b9:5d:54:42:7b:b1:34:a8:61:b5:4f:14:ba:
                    64:b4:8c:64:3f:43:09:c5:0f:20:40:42:03:6b:5c:
                    b5:29:ba:89:82:9b:f7:c7:59:ce:30:e1:4e:11:62:
                    e0:99:7b:e1:e0:bc:85:23:fa:41:fd:a0:fd:fb:bb:
                    51:27:1b:5c:0a:6a:67:50:c1:ab:30:29:3c:cc:66:
                    a0:6b:6c:ce:9f:a4:bb:d0:a1:d4:06:fb:54:a3:b1:
                    cc:71:14:2f:3c:07:92:8f:97:86:ab:50:14:6a:9d:
                    ca:8d:55:57:97:bd:be:4a:1b:44:e2:78:ee:11:e5:
                    48:78:47:b4:fe:08:cd:61:c1:cd:6e:6d:f3:92:51:
                    c7:5f:18:ad:e3:37:6b:9e:ff:7a:a2:f4:49:26:56:
                    7d:95:91:2e:c4:f2:3d:5f:29:61:78:bb:1b:3c:81:
                    72:ca:08:9b:1c:59:03:73:91:77:c5:ef:c9:f5:af:
                    88:9e:9c:65:b3:68:b1:17:37:7c:13:9c:60:b3:29:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D3:79:E9:B7:04:AA:33:7A:72:77:15:BE:AA:A6:FA:4B:18:34:40
            X509v3 Authority Key Identifier:
                keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:18:d8:3b:bd:a5:d6:a1:cc:bd:9e:91:32:4b:78:80:70:e4:
         fb:70:ab:c6:eb:0e:dd:2e:43:ba:73:dd:57:95:4d:3a:0d:95:
         a4:82:06:5a:c6:3e:85:ab:8d:ff:f7:1d:21:86:70:2c:9a:1b:
         0d:d6:3b:8d:6a:13:45:12:30:50:91:de:42:7d:7d:03:32:9e:
         2a:be:49:ea:41:b1:48:c8:89:91:da:fd:30:ab:70:c6:9b:c7:
         51:3a:0f:3a:e6:e0:02:ea:3e:7e:1b:22:34:ef:a7:bd:1e:6a:
         6f:b0:bd:63:26:32:e9:54:30:14:72:84:30:20:fc:78:22:c5:
         1e:d9:81:cd:92:5a:b7:ac:72:8d:ec:f9:a0:1e:9a:02:7b:eb:
         bf:80:b5:80:17:6d:fe:79:00:e2:34:fe:85:3a:d6:37:07:a4:
         2a:a4:ea:da:68:02:7b:f8:c1:ef:9b:73:b5:f3:34:a0:48:bc:
         17:65:d6:06:a8:e3:a1:96:94:dc:7a:4e:6c:49:49:69:29:2b:
         91:ce:0b:e1:83:c1:aa:c9:08:ef:21:54:71:65:8a:6b:17:ce:
         0b:99:cf:01:8f:b9:40:6e:da:0d:9e:21:a3:b2:a9:e7:25:ce:
         a3:59:69:7c:80:c4:c1:3f:41:b4:31:25:45:56:d6:56:17:59:
         a6:f7:a1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdig1KQf3Uuhr246qEZXWL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx
ZTBlODQwHhcNMjUwNjEyMDUwMTAyWhcNMjUwNjEzMDUwMTAyWjAzMTEwLwYDVQQD
Eyg0YWQzNzllOWI3MDRhYTMzN2E3Mjc3MTViZWFhYTZmYTRiMTgzNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwATMSa3xKhAdoWSIVLGcVty9G2oh
6lvnYupVeSPzHFPRY2nt9dMbB82m05oV37MzQXU9rldkGHzCaztkjbldVEJ7sTSo
YbVPFLpktIxkP0MJxQ8gQEIDa1y1KbqJgpv3x1nOMOFOEWLgmXvh4LyFI/pB/aD9
+7tRJxtcCmpnUMGrMCk8zGaga2zOn6S70KHUBvtUo7HMcRQvPAeSj5eGq1AUap3K
jVVXl72+ShtE4njuEeVIeEe0/gjNYcHNbm3zklHHXxit4zdrnv96ovRJJlZ9lZEu
xPI9XylheLsbPIFyygibHFkDc5F3xe/J9a+Inpxls2ixFzd8E5xgsyllTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErTeem3BKozenJ3Fb6qpvpLGDRAMB8GA1UdIwQY
MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt
ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk
LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBjYO72l
1qHMvZ6RMkt4gHDk+3CrxusO3S5DunPdV5VNOg2VpIIGWsY+hauN//cdIYZwLJob
DdY7jWoTRRIwUJHeQn19AzKeKr5J6kGxSMiJkdr9MKtwxpvHUToPOubgAuo+fhsi
NO+nvR5qb7C9YyYy6VQwFHKEMCD8eCLFHtmBzZJat6xyjez5oB6aAnvrv4C1gBdt
/nkA4jT+hTrWNwekKqTq2mgCe/jB75tztfM0oEi8F2XWBqjjoZaU3HpObElJaSkr
kc4L4YPBqskI7yFUcWWKaxfOC5nPAY+5QG7aDZ4ho7Kp5yXOo1lpfIDEwT9BtDEl
RVbWVhdZpvehVw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:36:56 2025 by rpki-client