Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          NQLBbIuQzFPquOaZNxibFNL4cuV4h4ATVksDqj6v01c=
Subject key identifier:   1B:1E:7C:EA:88:F3:31:93:A1:15:5F:D0:38:C4:3F:2C:63:8D:9B:E4
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       019749D5DFA18CA0B37D7786B5BFEB41C415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          1229
Signing time:             Sat 07 Jun 2025 10:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:42 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: 4Sj92T1rF0pcv75SiV8uomA5STLrrYfU/YZ7doCIuxQ=)
                          2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:df:a1:8c:a0:b3:7d:77:86:b5:bf:eb:41:c4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: Jun  7 10:00:42 2025 GMT
            Not After : Jun  8 10:00:42 2025 GMT
        Subject: CN=1b1e7cea88f33193a1155fd038c43f2c638d9be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:14:8b:13:70:cd:de:1d:a6:11:1a:51:a8:
                    eb:2b:7f:f8:76:98:80:8a:19:ae:9f:9d:38:00:07:
                    c0:5d:df:15:42:e8:ce:fd:97:db:de:0f:3b:83:e6:
                    17:30:ba:ed:7a:c5:bd:d9:ea:38:7b:01:33:76:12:
                    55:a2:b5:6e:e4:ce:af:ab:2b:a8:7c:3b:ee:16:c6:
                    8a:bc:8f:48:11:1c:d6:12:4c:dc:20:29:22:85:e4:
                    7a:38:e6:3d:f6:ef:4b:3d:49:95:af:b0:23:99:50:
                    00:bd:07:fc:06:4d:09:45:ef:ed:bd:0e:52:05:1b:
                    d4:a2:22:da:b0:a5:d9:41:9e:0a:aa:a3:6e:7e:55:
                    7e:e9:d8:66:14:d6:64:60:29:b9:12:b7:e0:8b:ee:
                    b5:cf:34:9b:61:61:51:00:0e:bc:4f:8d:8a:1b:5e:
                    be:e9:c2:80:56:72:cf:5c:41:35:89:88:36:db:3a:
                    60:b4:97:7c:49:01:2d:26:19:93:c9:3a:7a:99:61:
                    bd:58:14:73:62:f0:d9:af:a7:9b:90:82:d3:e8:d7:
                    a7:f8:c2:ad:a0:96:c0:b7:83:31:61:27:55:5b:f4:
                    b6:2e:e9:74:cb:ac:58:8d:bd:91:fe:e1:59:8a:62:
                    a7:d8:85:80:d9:21:13:34:ec:a9:ff:42:f7:ee:0f:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:7C:EA:88:F3:31:93:A1:15:5F:D0:38:C4:3F:2C:63:8D:9B:E4
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:c7:01:00:7b:65:0d:0f:2e:20:a5:bd:bc:bb:e8:45:b2:
         e9:11:9c:f6:f2:4e:7c:8a:e8:eb:0a:96:d3:d6:e2:e0:13:3b:
         b7:eb:c4:08:69:0f:f5:29:94:ef:d9:23:8e:3c:b3:57:cc:fe:
         f9:c6:b5:5b:12:69:c0:08:9d:9e:03:87:6e:ba:a3:21:60:bc:
         ba:c7:95:df:75:09:d6:70:43:b9:e9:a4:0e:7d:12:0a:6c:d2:
         2e:81:1e:a2:67:a5:48:7f:12:b9:80:dc:34:45:f9:cf:03:d3:
         c0:38:2f:9c:b3:1e:e1:68:80:5a:aa:74:37:3f:f8:6e:42:81:
         32:cd:99:7a:15:d1:20:ce:90:e9:1c:15:de:53:53:b3:18:54:
         62:b5:7d:e8:0f:22:02:a5:b9:be:24:86:f7:4d:a2:fa:6f:f1:
         07:76:6f:54:1a:7c:ea:b2:48:d0:2b:63:25:95:b4:9b:3d:c8:
         88:25:61:70:a3:a2:7f:1e:c6:80:62:23:1d:ba:6b:34:31:87:
         3e:8a:93:9d:77:63:6d:dd:9c:7e:06:d6:2f:34:83:7c:42:2d:
         87:09:8c:70:eb:22:b1:38:7e:96:67:7c:71:c0:b4:99:69:0f:
         41:d8:f3:6a:9c:ee:7d:19:3b:17:b1:5a:08:46:7a:13:56:79:
         b8:eb:31:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1d+hjKCzfXeGtb/rQcQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGFhYmVhOGVlMjliZjdjOTE1YmMzZWYwYmJhY2MyN2Qw
ZWNlZGUwHhcNMjUwNjA3MTAwMDQyWhcNMjUwNjA4MTAwMDQyWjAzMTEwLwYDVQQD
EygxYjFlN2NlYTg4ZjMzMTkzYTExNTVmZDAzOGM0M2YyYzYzOGQ5YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8UixNwzd4dphEaUajrK3/4dpiA
ihmun504AAfAXd8VQujO/Zfb3g87g+YXMLrtesW92eo4ewEzdhJVorVu5M6vqyuo
fDvuFsaKvI9IERzWEkzcICkiheR6OOY99u9LPUmVr7AjmVAAvQf8Bk0JRe/tvQ5S
BRvUoiLasKXZQZ4KqqNuflV+6dhmFNZkYCm5Erfgi+61zzSbYWFRAA68T42KG16+
6cKAVnLPXEE1iYg22zpgtJd8SQEtJhmTyTp6mWG9WBRzYvDZr6ebkILT6Nen+MKt
oJbAt4MxYSdVW/S2Lul0y6xYjb2R/uFZimKn2IWA2SETNOyp/0L37g9jFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsefOqI8zGToRVf0DjEPyxjjZvkMB8GA1UdIwQY
MBaAFOOKq+qO4pv3yRW8PvC7rMJ9Ds7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEt
NmFlYWU2M2VkOGZlLzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEtNmFlYWU2M2VkOGZl
LzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3HHAQB7
ZQ0PLiClvby76EWy6RGc9vJOfIro6wqW09bi4BM7t+vECGkP9SmU79kjjjyzV8z+
+ca1WxJpwAidngOHbrqjIWC8useV33UJ1nBDuemkDn0SCmzSLoEeomelSH8SuYDc
NEX5zwPTwDgvnLMe4WiAWqp0Nz/4bkKBMs2ZehXRIM6Q6RwV3lNTsxhUYrV96A8i
AqW5viSG902i+m/xB3ZvVBp86rJI0CtjJZW0mz3IiCVhcKOifx7GgGIjHbprNDGH
PoqTnXdjbd2cfgbWLzSDfEIthwmMcOsisTh+lmd8ccC0mWkPQdjzapzufRk7F7Fa
CEZ6E1Z5uOsx5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:18 2025 by rpki-client