Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File:                     a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier:          6k3TMKp+RQ4xfenJYBHbaKsn4t+vFNX5ve6yHItVE14=
Subject key identifier:   28:51:99:B2:79:17:DF:E1:30:78:84:46:BF:98:69:65:41:3D:77:85
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer:       /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial:       0197474261AE3898AB4E8F50DC19BE2A7A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number:          1476
Signing time:             Fri 06 Jun 2025 22:00:22 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:22 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:22 +0000
Files and hashes:         1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: zQP7wM4LKnI+R+ao40MjS32cXZVUNfSvTFZwucd9JV0=)
                          2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:61:ae:38:98:ab:4e:8f:50:dc:19:be:2a:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
        Validity
            Not Before: Jun  6 22:00:22 2025 GMT
            Not After : Jun  7 22:00:22 2025 GMT
        Subject: CN=285199b27917dfe130788446bf986965413d7785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:84:1e:61:71:1d:68:98:ef:eb:62:bb:e9:
                    0e:14:5f:60:b2:b5:7f:af:d9:c7:d5:4d:27:9b:e2:
                    7a:d2:a6:bc:0a:53:b3:c4:e0:de:49:02:e5:be:45:
                    1b:13:c5:fe:e6:f8:e7:3e:f6:24:60:20:91:03:a2:
                    4e:56:8b:f8:0a:36:06:7a:76:91:1b:fb:66:c2:a3:
                    ae:e3:5c:f7:a7:f1:dd:bd:81:2e:18:bf:ca:60:97:
                    0b:7e:b5:9a:22:f8:e9:e0:81:7c:4c:bc:8b:bb:ce:
                    f2:02:18:85:7d:a2:cf:65:5e:4d:8d:c9:56:79:28:
                    cb:0f:e1:23:fd:ba:8b:4f:47:98:fe:56:c7:c4:b0:
                    47:63:2e:9e:40:d4:f2:da:2f:3f:e0:8f:b2:ca:bb:
                    f9:6d:51:8f:3f:87:57:fc:32:f3:7f:a3:9c:c3:6e:
                    89:9d:d9:1b:24:3d:33:33:a1:b4:56:62:a7:a9:fb:
                    c4:4c:7d:56:ff:79:7f:c9:42:cc:53:bd:59:ee:dd:
                    d4:ae:f4:60:7f:b6:23:eb:a5:70:b2:5a:6a:40:15:
                    e8:2e:63:5d:a5:75:84:6e:43:23:e3:08:58:30:e3:
                    ca:cb:76:cf:92:da:08:ab:41:6f:56:e7:dc:f4:93:
                    1e:c5:82:6a:5e:22:d8:ca:9b:c4:58:7c:0d:9a:63:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:99:B2:79:17:DF:E1:30:78:84:46:BF:98:69:65:41:3D:77:85
            X509v3 Authority Key Identifier:
                keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:ff:13:f8:ce:32:1e:c6:42:09:b7:27:e9:3b:b5:bc:33:
         53:a1:c2:d5:f5:be:a4:0e:ae:50:6b:7a:9e:ab:0a:9c:50:10:
         1b:f5:38:91:d1:25:f3:d4:24:af:5f:a5:dc:d5:c8:15:a5:43:
         60:95:cb:9f:3d:5e:65:70:6f:70:a8:5b:af:d1:ba:03:b1:b4:
         16:d0:ca:f8:d9:a8:6b:9f:9c:bc:17:87:2b:23:49:55:0a:60:
         4c:78:0c:69:d6:24:47:7d:1a:f7:0e:c1:80:55:68:9b:5e:03:
         bc:74:42:76:36:1d:9d:27:7c:a5:2d:77:d4:83:b9:4e:9b:f1:
         3b:52:17:f1:d8:fb:52:e1:9a:b9:50:77:62:55:1e:67:ef:5d:
         55:74:23:34:98:6d:51:5c:5a:fa:8d:58:28:4a:6a:d2:48:f6:
         b5:08:04:2b:4c:97:e0:18:36:d4:d7:3e:c6:20:6f:49:63:25:
         9f:a6:c5:b1:9e:57:f0:c5:44:aa:bd:45:53:18:67:12:b5:f0:
         1e:cd:54:b3:ab:de:2d:50:a5:0f:73:73:27:77:8e:c3:42:da:
         6e:75:99:39:86:f5:eb:a5:c7:6f:e6:3e:92:66:2b:40:6e:b7:
         7d:3c:44:49:c4:4d:bc:c1:ae:64:ad:4e:79:8e:09:1c:a7:3a:
         8b:99:ab:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQmGuOJirTo9Q3Bm+KnpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1
NWMzZmIwHhcNMjUwNjA2MjIwMDIyWhcNMjUwNjA3MjIwMDIyWjAzMTEwLwYDVQQD
EygyODUxOTliMjc5MTdkZmUxMzA3ODg0NDZiZjk4Njk2NTQxM2Q3Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0uEHmFxHWiY7+tiu+kOFF9gsrV/
r9nH1U0nm+J60qa8ClOzxODeSQLlvkUbE8X+5vjnPvYkYCCRA6JOVov4CjYGenaR
G/tmwqOu41z3p/HdvYEuGL/KYJcLfrWaIvjp4IF8TLyLu87yAhiFfaLPZV5NjclW
eSjLD+Ej/bqLT0eY/lbHxLBHYy6eQNTy2i8/4I+yyrv5bVGPP4dX/DLzf6Ocw26J
ndkbJD0zM6G0VmKnqfvETH1W/3l/yULMU71Z7t3UrvRgf7Yj66VwslpqQBXoLmNd
pXWEbkMj4whYMOPKy3bPktoIq0FvVufc9JMexYJqXiLYypvEWHwNmmOK5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChRmbJ5F9/hMHiERr+YaWVBPXeFMB8GA1UdIwQY
MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt
YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2
LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOr/E/jO
Mh7GQgm3J+k7tbwzU6HC1fW+pA6uUGt6nqsKnFAQG/U4kdEl89Qkr1+l3NXIFaVD
YJXLnz1eZXBvcKhbr9G6A7G0FtDK+Nmoa5+cvBeHKyNJVQpgTHgMadYkR30a9w7B
gFVom14DvHRCdjYdnSd8pS131IO5TpvxO1IX8dj7UuGauVB3YlUeZ+9dVXQjNJht
UVxa+o1YKEpq0kj2tQgEK0yX4Bg21Nc+xiBvSWMln6bFsZ5X8MVEqr1FUxhnErXw
Hs1Us6veLVClD3NzJ3eOw0LabnWZOYb166XHb+Y+kmYrQG63fTxEScRNvMGuZK1O
eY4JHKc6i5mrhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:46 2025 by rpki-client