Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File:                     87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier:          BZo+IMMeHmfnpOm6cWKXVvjCIjnjeJUp69wYsr0Fnlk=
Subject key identifier:   0C:BD:6B:BB:2A:CC:04:82:12:78:8C:84:C1:73:E8:7B:66:19:A6:F8
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       01974CD73BA1F251935B245F4C2B5EE11C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number:          0EB2
Signing time:             Sun 08 Jun 2025 00:01:03 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:03 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:03 +0000
Files and hashes:         1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: 3TCLZ9/yBgeNsBLszOVaJNBKK+ORHxBgg5dsK6JPoaw=)
                          2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=)
                          3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=)
                          4: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=)
                          5: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=)
                          6: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (hash: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:3b:a1:f2:51:93:5b:24:5f:4c:2b:5e:e1:1c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: Jun  8 00:01:03 2025 GMT
            Not After : Jun  9 00:01:03 2025 GMT
        Subject: CN=0cbd6bbb2acc048212788c84c173e87b6619a6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:14:00:16:3a:8c:89:74:ae:ef:a5:e8:6a:be:
                    ed:9d:f6:5e:67:dd:67:97:ec:e2:9c:69:26:f3:36:
                    10:fa:af:d7:49:d9:15:4f:93:29:ec:73:a0:58:c0:
                    b2:3c:e8:08:39:ea:e6:47:ca:57:2b:ec:65:37:92:
                    72:ed:80:68:3a:58:9e:11:0e:3b:a6:33:86:de:5d:
                    48:fe:c7:7e:b7:1c:80:38:4d:72:ea:95:4a:4b:53:
                    1c:b7:da:11:be:9a:79:c3:d8:e6:44:b9:bd:32:d5:
                    b1:d6:ce:c6:f8:e9:d0:1f:a5:16:ca:28:e3:75:85:
                    48:9a:86:18:8f:9d:88:12:e9:d1:44:bd:5d:06:4b:
                    ad:51:84:8e:eb:72:d8:06:75:f2:2c:a7:1e:4d:80:
                    ec:94:15:5b:5f:d2:37:cc:e1:34:c8:86:ae:b5:c1:
                    ad:91:09:1c:22:5f:89:68:0d:ce:59:5f:a6:e0:c9:
                    56:22:d1:e2:2f:9b:95:64:b5:b6:e3:d6:55:00:f6:
                    db:df:d3:ff:56:ef:17:69:01:ff:f3:fd:df:82:11:
                    bd:f8:00:9b:95:ec:57:3e:f7:06:9f:41:3d:7a:6e:
                    ad:68:5b:7f:39:3a:0e:2b:bc:a5:53:1e:31:61:e2:
                    97:b9:d4:4d:55:3d:c2:fb:42:b1:4b:f9:d0:1c:63:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:6B:BB:2A:CC:04:82:12:78:8C:84:C1:73:E8:7B:66:19:A6:F8
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:38:0d:b0:49:46:9a:e1:68:6f:0b:d0:fb:bb:4b:57:07:6a:
         b3:4f:60:2c:93:52:d2:be:4d:dd:50:3a:eb:ee:50:2a:aa:19:
         72:58:21:ff:a5:8b:2e:83:13:f4:d2:52:b8:77:38:2f:9d:ae:
         f7:f3:41:cc:4b:72:b3:70:5f:a4:2d:42:f6:ed:07:ba:89:7e:
         68:40:93:2b:16:24:2d:a3:88:6d:61:15:eb:e6:98:f6:d3:72:
         2e:4a:a2:46:80:05:f2:34:5b:58:10:f7:7e:ec:30:d5:9c:c6:
         72:7c:d9:67:ea:05:82:c4:1a:7d:59:71:66:32:36:c9:c9:1c:
         e9:6d:14:d9:e8:c1:dc:7a:3c:86:5d:8c:db:82:ea:0b:24:f6:
         27:5e:c4:3d:df:1f:71:a4:9e:30:1f:fb:9a:aa:86:10:a4:ea:
         f5:ed:cc:78:bd:b0:49:33:ed:45:1b:29:a4:40:8c:64:79:ec:
         67:9b:8b:87:fd:42:89:53:67:c3:c0:e9:b7:b1:7a:7a:bc:bd:
         09:bf:82:0d:bc:36:b1:c2:82:0f:d3:84:3f:6d:ff:9f:4c:e3:
         58:b7:c2:f4:a0:6b:70:80:e6:3c:d8:0a:5e:ea:d0:18:b9:e8:
         7e:17:da:11:bf:f0:46:c9:ac:88:37:00:11:43:92:ec:d0:79:
         22:09:b2:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1zuh8lGTWyRfTCte4Rw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2
MjlmYzIwHhcNMjUwNjA4MDAwMTAzWhcNMjUwNjA5MDAwMTAzWjAzMTEwLwYDVQQD
EygwY2JkNmJiYjJhY2MwNDgyMTI3ODhjODRjMTczZTg3YjY2MTlhNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RQAFjqMiXSu76Xoar7tnfZeZ91n
l+zinGkm8zYQ+q/XSdkVT5Mp7HOgWMCyPOgIOermR8pXK+xlN5Jy7YBoOlieEQ47
pjOG3l1I/sd+txyAOE1y6pVKS1Mct9oRvpp5w9jmRLm9MtWx1s7G+OnQH6UWyijj
dYVImoYYj52IEunRRL1dBkutUYSO63LYBnXyLKceTYDslBVbX9I3zOE0yIautcGt
kQkcIl+JaA3OWV+m4MlWItHiL5uVZLW249ZVAPbb39P/Vu8XaQH/8/3fghG9+ACb
lexXPvcGn0E9em6taFt/OToOK7ylUx4xYeKXudRNVT3C+0KxS/nQHGODKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy9a7sqzASCEniMhMFz6HtmGab4MB8GA1UdIwQY
MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt
ODNiYzc5NzI3OGUyLzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy
LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDgNsElG
muFobwvQ+7tLVwdqs09gLJNS0r5N3VA66+5QKqoZclgh/6WLLoMT9NJSuHc4L52u
9/NBzEtys3BfpC1C9u0Huol+aECTKxYkLaOIbWEV6+aY9tNyLkqiRoAF8jRbWBD3
fuww1ZzGcnzZZ+oFgsQafVlxZjI2yckc6W0U2ejB3Ho8hl2M24LqCyT2J17EPd8f
caSeMB/7mqqGEKTq9e3MeL2wSTPtRRsppECMZHnsZ5uLh/1CiVNnw8Dpt7F6ery9
Cb+CDbw2scKCD9OEP23/n0zjWLfC9KBrcIDmPNgKXurQGLnofhfaEb/wRsmsiDcA
EUOS7NB5Igmyug==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:22 2025 by rpki-client