Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File:                     MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier:          3qFBx8b1816FiaF4ab41So3dLnTdb6n1u2SpxzqK67M=
Subject key identifier:   F7:87:07:C7:4B:B4:77:DF:13:58:4F:55:48:A2:51:9E:35:32:B8:07
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer:       /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial:       0197469E1BE31FD460B75CEF2035E50CCBD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number:          0C61
Signing time:             Fri 06 Jun 2025 19:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:56 +0000
Files and hashes:         1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: XvoGKEnisg/9mfJn7gpxcbVMS4PdhRthw9SRKPWBMPI=)
                          2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:1b:e3:1f:d4:60:b7:5c:ef:20:35:e5:0c:cb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
        Validity
            Not Before: Jun  6 19:00:56 2025 GMT
            Not After : Jun  7 19:00:56 2025 GMT
        Subject: CN=f78707c74bb477df13584f5548a2519e3532b807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:4a:bc:61:f4:43:3a:17:2e:27:1d:8e:c1:
                    9c:05:8e:f9:d7:81:98:03:a6:77:95:55:2c:fb:3f:
                    7b:11:a1:cc:b8:42:9d:54:51:73:6e:bf:4a:1e:42:
                    c5:39:0e:5a:73:d0:05:fb:84:4a:3c:e7:97:e7:5d:
                    db:f7:21:35:e2:1e:d8:f6:04:63:04:5c:fd:55:a4:
                    8c:5e:31:93:aa:f5:ce:ab:5e:8b:b3:42:66:6a:86:
                    27:8f:40:15:fe:2e:f6:bd:63:ee:f3:47:7f:f3:2c:
                    24:99:3e:90:ab:21:54:20:30:df:72:a1:c7:00:7b:
                    82:d7:7b:4a:22:07:ea:0e:6e:80:49:92:78:e6:d9:
                    0e:b3:9a:bb:ec:c7:c4:67:77:41:e1:eb:0a:8f:15:
                    57:d1:87:08:45:53:10:1b:01:1a:bd:62:f7:70:8b:
                    da:93:b4:f1:4c:70:b0:f8:b4:54:67:2d:0a:ab:e9:
                    13:1e:ef:ce:30:a0:d9:1f:a2:63:68:78:f6:fd:ba:
                    27:c2:49:e6:c9:b2:75:5d:e3:a7:23:69:8d:43:7d:
                    0d:48:d1:d7:58:b5:64:e4:e8:96:8b:f3:1c:f7:a6:
                    a1:38:4a:9c:6c:dd:17:7b:a2:42:95:eb:00:44:39:
                    c1:f9:aa:10:40:0f:1c:15:7b:84:52:c1:e8:cc:04:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:87:07:C7:4B:B4:77:DF:13:58:4F:55:48:A2:51:9E:35:32:B8:07
            X509v3 Authority Key Identifier:
                keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:f7:74:86:29:90:01:a0:ed:25:ea:2f:da:a6:67:84:ca:96:
         dd:0f:99:26:8b:51:6e:4d:0d:52:e8:fd:28:81:13:ed:4f:d6:
         d9:13:f6:f6:54:9a:ba:2f:73:af:96:b0:f5:fc:ad:94:31:20:
         65:58:cc:e5:f1:a3:d0:60:ba:95:54:f8:ab:65:96:c1:0a:8e:
         bf:64:f2:57:d9:e0:81:4f:4e:d6:a4:08:b3:9a:42:74:d5:65:
         a4:08:56:50:e2:be:32:e8:5e:3d:a2:f8:21:88:f9:91:ab:c1:
         65:d0:02:72:d4:4b:01:50:40:37:7f:f0:62:a7:a8:04:dd:b3:
         f2:d4:52:a6:95:23:31:e8:c4:0a:2e:d9:22:af:c8:93:19:c5:
         23:f3:74:c2:73:02:87:7a:e8:77:5a:d0:fc:76:11:ea:d4:a1:
         23:7e:ce:14:96:c7:41:79:80:ee:20:f9:75:a8:99:c1:19:ea:
         3e:ca:72:d9:74:44:76:cb:9a:55:47:64:3b:fc:7d:75:00:ab:
         cb:b4:0d:be:56:34:93:e6:40:e0:a5:18:a6:15:e7:29:70:6c:
         76:11:8a:98:dc:d6:76:f2:04:d2:2d:df:16:82:00:c6:48:3a:
         eb:7d:2f:15:ca:b4:7a:7d:89:e3:cc:99:70:91:34:fe:3e:b5:
         72:51:6e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnhvjH9Rgt1zvIDXlDMvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0
ZGI2OTAwHhcNMjUwNjA2MTkwMDU2WhcNMjUwNjA3MTkwMDU2WjAzMTEwLwYDVQQD
EyhmNzg3MDdjNzRiYjQ3N2RmMTM1ODRmNTU0OGEyNTE5ZTM1MzJiODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmRKvGH0QzoXLicdjsGcBY7514GY
A6Z3lVUs+z97EaHMuEKdVFFzbr9KHkLFOQ5ac9AF+4RKPOeX513b9yE14h7Y9gRj
BFz9VaSMXjGTqvXOq16Ls0JmaoYnj0AV/i72vWPu80d/8ywkmT6QqyFUIDDfcqHH
AHuC13tKIgfqDm6ASZJ45tkOs5q77MfEZ3dB4esKjxVX0YcIRVMQGwEavWL3cIva
k7TxTHCw+LRUZy0Kq+kTHu/OMKDZH6JjaHj2/bonwknmybJ1XeOnI2mNQ30NSNHX
WLVk5OiWi/Mc96ahOEqcbN0Xe6JClesARDnB+aoQQA8cFXuEUsHozATHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeHB8dLtHffE1hPVUiiUZ41MrgHMB8GA1UdIwQY
MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt
ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx
LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Pd0himQ
AaDtJeov2qZnhMqW3Q+ZJotRbk0NUuj9KIET7U/W2RP29lSaui9zr5aw9fytlDEg
ZVjM5fGj0GC6lVT4q2WWwQqOv2TyV9nggU9O1qQIs5pCdNVlpAhWUOK+MuhePaL4
IYj5kavBZdACctRLAVBAN3/wYqeoBN2z8tRSppUjMejECi7ZIq/IkxnFI/N0wnMC
h3rod1rQ/HYR6tShI37OFJbHQXmA7iD5daiZwRnqPspy2XREdsuaVUdkO/x9dQCr
y7QNvlY0k+ZA4KUYphXnKXBsdhGKmNzWdvIE0i3fFoIAxkg6630vFcq0en2J48yZ
cJE0/j61clFuuw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:57 2025 by rpki-client