Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File:                     RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier:          lAV+phL3o+2BRtvMYCZHL6P+B+fuuJVB8kGD+marSpo=
Subject key identifier:   C4:7C:7D:5C:F3:D4:56:BD:80:18:A5:48:C6:5C:86:E8:18:78:0C:B6
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer:       /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial:       019753B4D6936D57398952884A9001D74EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number:          0669
Signing time:             Mon 09 Jun 2025 08:00:49 +0000
Manifest this update:     Mon 09 Jun 2025 08:00:49 +0000
Manifest next update:     Tue 10 Jun 2025 08:00:49 +0000
Files and hashes:         1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: Dcr6eyN6f3rhheKBpJeCZxg8uW0DVpoMJAfmYIGXjI0=)
                          2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:b4:d6:93:6d:57:39:89:52:88:4a:90:01:d7:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
        Validity
            Not Before: Jun  9 08:00:49 2025 GMT
            Not After : Jun 10 08:00:49 2025 GMT
        Subject: CN=c47c7d5cf3d456bd8018a548c65c86e818780cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:21:6e:0d:17:ac:9d:09:9d:3f:94:64:51:de:
                    22:f6:8e:a3:ee:19:05:6f:d9:2d:7e:60:33:5f:c1:
                    0f:c4:e0:dd:d0:dc:84:18:ec:4b:14:5d:9b:2d:c9:
                    28:30:3e:77:b5:23:57:7b:47:c7:66:fe:c5:56:d6:
                    2c:2f:c1:be:39:7a:17:80:41:aa:cb:58:1b:78:e2:
                    38:36:50:41:1d:d8:b3:20:ff:b8:51:cf:ef:2e:3c:
                    86:5a:3f:f5:7d:70:b6:59:4d:f6:4a:1a:2c:31:00:
                    42:10:5d:2e:69:cd:fe:75:40:d5:31:3f:f8:61:05:
                    07:2c:2e:43:fd:cd:4f:e6:1f:fe:51:bd:d2:f3:40:
                    f5:b4:04:b6:2c:6d:32:48:1f:2c:0e:24:23:19:6c:
                    53:76:f4:ca:b7:12:f2:94:c7:cb:18:37:f0:66:5e:
                    bb:6e:6c:8f:43:d5:23:4e:ae:1c:4f:9c:60:12:5f:
                    aa:e2:a4:ea:e6:40:94:4a:a4:30:c3:8b:aa:26:06:
                    59:d0:80:9f:5c:f5:93:84:8a:be:2e:7b:3e:a6:10:
                    dc:b4:be:90:1f:d7:af:34:5c:3b:f4:e5:4a:30:41:
                    fb:1f:49:76:aa:0d:03:70:7d:fa:0e:13:52:03:a5:
                    ce:83:be:c5:c7:4c:b1:91:04:de:b7:ba:c3:0a:55:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7C:7D:5C:F3:D4:56:BD:80:18:A5:48:C6:5C:86:E8:18:78:0C:B6
            X509v3 Authority Key Identifier:
                keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9f:cd:a4:86:64:a2:a7:d5:23:b5:cd:41:da:03:b5:b8:0a:
         bb:97:7c:f1:c5:c7:a2:20:5e:87:fd:f0:28:b9:d8:1f:8f:5f:
         38:d6:cb:d3:b6:4e:06:ff:77:2a:cd:43:2f:25:a5:22:7c:4d:
         a7:33:9a:37:24:55:83:01:85:40:a8:39:d4:dc:b6:6e:86:73:
         a9:65:b9:fd:b9:86:92:08:41:28:85:05:47:3c:dc:37:06:48:
         68:8b:1a:51:dd:23:57:46:e9:4c:33:94:84:49:d0:aa:d6:18:
         46:fa:a6:88:cb:d3:ff:cd:e3:5f:fb:e5:80:48:90:b3:8a:2c:
         26:17:9d:e7:07:1f:e8:1f:88:7c:7d:b0:9a:1a:40:08:8b:1c:
         e0:93:cb:56:37:3f:ea:1d:af:3e:59:03:db:cd:16:49:d9:bc:
         c7:76:50:c5:42:f2:37:d4:a8:12:ad:cd:27:85:e2:c8:0d:5a:
         2d:a3:26:3b:01:b6:a6:53:b9:46:52:bf:d6:97:f3:87:fd:6b:
         11:5c:76:e2:65:63:0a:a2:2f:36:9a:b0:99:8a:0c:6b:29:dc:
         41:57:fb:ef:e0:e5:4f:74:19:38:bb:06:4e:a9:62:33:d3:30:
         e9:01:39:a2:b8:d3:dc:2b:d8:2c:c4:c0:20:b6:c1:b5:ce:ab:
         76:88:a2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtNaTbVc5iVKISpAB1062MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjIzYWM1ZGY5ZWVmY2Y3ZDI0ZjMxN2M3YjY5NDI5N2U0
ZjM2MmEwHhcNMjUwNjA5MDgwMDQ5WhcNMjUwNjEwMDgwMDQ5WjAzMTEwLwYDVQQD
EyhjNDdjN2Q1Y2YzZDQ1NmJkODAxOGE1NDhjNjVjODZlODE4NzgwY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yFuDResnQmdP5RkUd4i9o6j7hkF
b9ktfmAzX8EPxODd0NyEGOxLFF2bLckoMD53tSNXe0fHZv7FVtYsL8G+OXoXgEGq
y1gbeOI4NlBBHdizIP+4Uc/vLjyGWj/1fXC2WU32ShosMQBCEF0uac3+dUDVMT/4
YQUHLC5D/c1P5h/+Ub3S80D1tAS2LG0ySB8sDiQjGWxTdvTKtxLylMfLGDfwZl67
bmyPQ9UjTq4cT5xgEl+q4qTq5kCUSqQww4uqJgZZ0ICfXPWThIq+Lns+phDctL6Q
H9evNFw79OVKMEH7H0l2qg0DcH36DhNSA6XOg77Fx0yxkQTet7rDClUXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR8fVzz1Fa9gBilSMZchugYeAy2MB8GA1UdIwQY
MBaAFEZiOsXfnu/PfSTzF8e2lCl+TzYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUt
N2E1OGJhM2RkZjQzLzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hNzEzZTAtZDE2NC00ZmJiLWI0YWUtN2E1OGJhM2RkZjQz
LzEvUm1JNnhkLWU3ODk5SlBNWHg3YVVLWDVQTmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ/NpIZk
oqfVI7XNQdoDtbgKu5d88cXHoiBeh/3wKLnYH49fONbL07ZOBv93Ks1DLyWlInxN
pzOaNyRVgwGFQKg51Ny2boZzqWW5/bmGkghBKIUFRzzcNwZIaIsaUd0jV0bpTDOU
hEnQqtYYRvqmiMvT/83jX/vlgEiQs4osJhed5wcf6B+IfH2wmhpACIsc4JPLVjc/
6h2vPlkD280WSdm8x3ZQxULyN9SoEq3NJ4XiyA1aLaMmOwG2plO5RlK/1pfzh/1r
EVx24mVjCqIvNpqwmYoMayncQVf77+DlT3QZOLsGTqliM9Mw6QE5orjT3CvYLMTA
ILbBtc6rdoiiYQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:10 2025 by rpki-client