Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File:                     tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier:          A7kpi5FruPmwIiXxBSnU60LM0x3sk6SeKNcI7HuQpGs=
Subject key identifier:   1D:23:1F:9F:7F:21:45:D1:E9:FD:B2:CF:39:E7:D4:B3:22:B3:E7:81
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer:       /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial:       01974EFC6C592C3446F6BE56837DB5ADA85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number:          0C9D
Signing time:             Sun 08 Jun 2025 10:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:55 +0000
Files and hashes:         1: WKXMRCbOe7azjRi4M3txfig4AbQ.roa (hash: misoRXqMC74XUm7CVVuJWe90Pkw4I/1hXuzduVdNB/4=)
                          2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: LfEXWIkzotUsiomxQlFgekAbazBztOeH35gUpENANR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:6c:59:2c:34:46:f6:be:56:83:7d:b5:ad:a8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
        Validity
            Not Before: Jun  8 10:00:55 2025 GMT
            Not After : Jun  9 10:00:55 2025 GMT
        Subject: CN=1d231f9f7f2145d1e9fdb2cf39e7d4b322b3e781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:1d:04:aa:1c:0b:62:0b:d6:0b:b8:3a:bb:
                    4e:00:cc:d3:fd:a7:ae:e0:eb:e8:02:f2:c0:e9:8e:
                    59:f1:b1:f1:fa:c9:cb:56:40:ef:55:6c:42:8c:09:
                    04:70:63:3d:37:83:2c:cc:db:76:22:1b:1b:6c:66:
                    54:db:0e:1d:81:08:23:75:db:9f:99:2d:fa:e3:e7:
                    fb:4b:a7:f1:1d:f5:bb:b2:51:e5:d3:0d:f6:6c:80:
                    5e:98:16:8f:4b:41:70:2f:b7:a3:d6:19:6e:9e:9b:
                    51:11:87:31:6e:76:c6:e0:28:3d:8e:1e:3c:2f:9f:
                    14:80:00:49:d5:11:e8:52:84:eb:31:14:c8:75:30:
                    bf:29:57:c3:9e:d6:8d:1e:93:9c:87:7a:fa:26:ee:
                    63:95:a9:de:a6:d3:26:d1:14:7c:1a:35:77:ec:f8:
                    ec:19:1a:f9:2c:dd:ab:2d:20:58:73:9e:6c:94:26:
                    de:c9:e1:0b:0d:56:ad:32:b0:b4:fe:09:05:ea:a7:
                    7b:98:8b:02:2f:cc:f1:50:7b:49:3b:b2:cf:43:27:
                    61:60:25:53:e3:d7:11:1b:b1:4d:48:5f:0b:1c:f1:
                    e3:aa:e5:5f:5c:c9:61:cb:88:5f:b1:ef:bc:2c:cc:
                    e2:d7:cd:b3:cf:ed:37:03:b4:05:5b:e5:32:0e:e0:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:1F:9F:7F:21:45:D1:E9:FD:B2:CF:39:E7:D4:B3:22:B3:E7:81
            X509v3 Authority Key Identifier:
                keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:55:a0:f4:65:f6:eb:ab:16:6d:d4:aa:15:ea:98:94:f0:3e:
         16:ba:e8:cb:af:db:c2:4e:2b:0b:62:b8:d7:ff:53:70:40:e5:
         5d:b1:bb:2e:e2:70:37:8c:3e:ae:ba:c4:2b:90:b0:b2:11:61:
         e5:c2:d0:89:c4:66:f6:84:01:c0:e8:ae:89:fb:fb:f4:50:54:
         7d:78:e9:8a:2c:eb:fe:2f:c1:e2:c4:de:58:60:79:11:e7:47:
         35:f5:dd:37:bb:17:3e:40:82:36:61:93:73:bc:1d:e4:30:e6:
         73:2f:c4:de:10:1d:31:d0:3c:48:f8:14:01:06:55:ed:45:1a:
         cf:9a:e9:02:20:11:95:1a:0d:5e:98:06:68:62:0b:57:8b:91:
         71:9e:96:2a:08:69:3f:be:2f:48:9f:70:65:10:aa:8c:00:1e:
         e4:44:0c:31:85:0b:2c:ef:90:fb:8b:c0:5b:98:5e:34:99:55:
         0f:54:e7:e4:bc:1b:ca:6e:b0:3a:a5:95:71:9e:1b:8d:86:96:
         38:62:ec:79:bb:1b:a6:67:e0:1b:b9:8e:34:c3:d1:4b:84:66:
         a9:a4:54:17:bf:54:ea:5f:12:02:d5:5e:d5:81:d1:14:35:f1:
         de:99:97:dd:5b:82:d4:a1:70:20:cf:f6:ce:d5:b6:25:61:8d:
         b6:18:cc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/GxZLDRG9r5Wg321rahaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2MwZmFmYTY1MGRkOTRhM2I1NTgxNzM5ZjYzZDg4ZWZh
NDE0ZjMwHhcNMjUwNjA4MTAwMDU1WhcNMjUwNjA5MTAwMDU1WjAzMTEwLwYDVQQD
EygxZDIzMWY5ZjdmMjE0NWQxZTlmZGIyY2YzOWU3ZDRiMzIyYjNlNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrodBKocC2IL1gu4OrtOAMzT/aeu
4OvoAvLA6Y5Z8bHx+snLVkDvVWxCjAkEcGM9N4MszNt2IhsbbGZU2w4dgQgjdduf
mS364+f7S6fxHfW7slHl0w32bIBemBaPS0FwL7ej1hlunptREYcxbnbG4Cg9jh48
L58UgABJ1RHoUoTrMRTIdTC/KVfDntaNHpOch3r6Ju5jlaneptMm0RR8GjV37Pjs
GRr5LN2rLSBYc55slCbeyeELDVatMrC0/gkF6qd7mIsCL8zxUHtJO7LPQydhYCVT
49cRG7FNSF8LHPHjquVfXMlhy4hfse+8LMzi182zz+03A7QFW+UyDuBrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0jH59/IUXR6f2yzznn1LMis+eBMB8GA1UdIwQY
MBaAFLV8D6+mUN2Uo7VYFzn2PYjvpBTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGIt
MThiOWE4NTEwNTM5LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84YzAyZmYtYTljNS00Nzg4LWFlOGItMThiOWE4NTEwNTM5
LzEvdFh3UHI2WlEzWlNqdFZnWE9mWTlpTy1rRlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlWg9GX2
66sWbdSqFeqYlPA+Frroy6/bwk4rC2K41/9TcEDlXbG7LuJwN4w+rrrEK5CwshFh
5cLQicRm9oQBwOiuifv79FBUfXjpiizr/i/B4sTeWGB5EedHNfXdN7sXPkCCNmGT
c7wd5DDmcy/E3hAdMdA8SPgUAQZV7UUaz5rpAiARlRoNXpgGaGILV4uRcZ6WKghp
P74vSJ9wZRCqjAAe5EQMMYULLO+Q+4vAW5heNJlVD1Tn5Lwbym6wOqWVcZ4bjYaW
OGLsebsbpmfgG7mONMPRS4RmqaRUF79U6l8SAtVe1YHRFDXx3pmX3VuC1KFwIM/2
ztW2JWGNthjMtg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:03:23 2025 by rpki-client