Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File:                     T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier:          s9aUOOMsos4Rr5Imlacyau1N9gfeRD3aj5H4nQE/3hw=
Subject key identifier:   19:2C:D0:57:C6:64:95:B7:B2:67:76:3A:8E:DB:0B:6D:8C:AD:64:03
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer:       /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial:       019758DB70E567D179E20558AADF1C0E2EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number:          0E1B
Signing time:             Tue 10 Jun 2025 08:01:05 +0000
Manifest this update:     Tue 10 Jun 2025 08:01:05 +0000
Manifest next update:     Wed 11 Jun 2025 08:01:05 +0000
Files and hashes:         1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: bzZJE+5d4wZxZz1CmPimo7bSn119aMvyvAexuDWDZQU=)
                          2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:70:e5:67:d1:79:e2:05:58:aa:df:1c:0e:2e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
        Validity
            Not Before: Jun 10 08:01:05 2025 GMT
            Not After : Jun 11 08:01:05 2025 GMT
        Subject: CN=192cd057c66495b7b267763a8edb0b6d8cad6403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:38:2c:92:8c:05:93:bb:50:6e:5a:64:97:
                    d3:a4:4d:5f:55:ff:d7:58:c5:a3:81:23:76:cf:7f:
                    07:37:54:ff:4a:5b:00:7f:a7:10:ab:35:58:40:1c:
                    4d:b8:f7:e2:a8:2a:6c:c3:b3:03:fc:a1:84:48:8d:
                    0a:f0:4d:1f:1b:8a:ba:f0:4c:9b:bb:a5:61:4a:b9:
                    c1:f4:f0:c0:a6:48:f3:8b:87:3e:c2:4a:14:16:e2:
                    02:f8:52:75:10:1e:25:b9:8d:2e:2f:e4:15:c3:b1:
                    4f:9a:63:8b:de:2a:a6:98:30:e2:99:b6:31:6f:a8:
                    bd:47:ba:53:f8:33:81:35:42:dc:32:56:52:7a:df:
                    5a:4e:4a:ab:c9:d4:c2:c0:b8:b9:49:1b:c5:62:3c:
                    90:54:e6:a4:4c:f6:0b:75:bc:52:81:9b:f7:e4:5a:
                    b7:a9:1b:2f:96:6d:65:4f:fc:b0:85:d3:ff:00:0e:
                    49:18:ac:e2:57:ed:b5:ae:06:3f:e0:42:f5:08:6a:
                    fc:85:cc:2c:8d:c5:ad:39:d5:80:b4:6d:81:53:08:
                    d2:48:4f:29:84:5e:74:6d:01:63:ed:d8:fe:2b:eb:
                    c1:a6:da:ad:66:59:44:1c:89:29:c5:4a:3c:13:e9:
                    12:c2:a0:ef:0f:17:b3:6a:61:07:26:f4:77:34:63:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2C:D0:57:C6:64:95:B7:B2:67:76:3A:8E:DB:0B:6D:8C:AD:64:03
            X509v3 Authority Key Identifier:
                keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:21:ad:ca:f1:96:1d:42:b1:e6:d9:42:b9:57:5d:0d:61:
         4d:08:69:ee:b5:76:2d:47:26:ad:44:6a:2e:34:be:85:91:25:
         3e:f6:b6:ee:6d:53:5e:84:4e:fc:89:57:6d:82:4b:d0:8b:f1:
         97:0a:c8:64:bb:8f:10:a3:4e:0f:3c:09:81:57:0b:12:b3:d5:
         34:ff:3c:b3:72:ff:4a:55:0a:49:f7:9e:2f:05:de:70:7e:5b:
         5f:15:3c:60:36:cb:17:1f:b2:b7:ec:0c:c7:f2:d2:bb:2f:5e:
         1e:9d:e8:3d:e5:7e:8f:22:bb:2e:aa:db:95:38:18:8a:af:4c:
         2e:bb:5b:2f:a5:e5:c8:fa:83:d9:aa:44:c8:7a:38:15:78:4b:
         74:9a:d3:b0:14:1f:5c:6e:dc:9f:de:6e:5c:50:ab:b3:5d:6a:
         25:cc:1f:1c:72:c2:5c:db:65:89:e7:57:cd:f3:20:bf:d4:02:
         1a:d8:b1:df:40:89:84:3c:dc:a0:a2:34:66:70:ef:ef:0e:19:
         16:cb:c1:67:f3:06:b5:e3:46:b0:05:ed:90:83:32:85:62:61:
         da:01:8e:a7:0c:61:1f:1a:c4:bb:d5:38:61:71:72:e2:b1:93:
         92:bd:eb:81:94:73:4f:eb:2e:eb:de:e3:c6:20:2a:6c:db:29:
         5d:aa:6e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY23DlZ9F54gVYqt8cDi7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1
ZTJmZTkwHhcNMjUwNjEwMDgwMTA1WhcNMjUwNjExMDgwMTA1WjAzMTEwLwYDVQQD
EygxOTJjZDA1N2M2NjQ5NWI3YjI2Nzc2M2E4ZWRiMGI2ZDhjYWQ2NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVo4LJKMBZO7UG5aZJfTpE1fVf/X
WMWjgSN2z38HN1T/SlsAf6cQqzVYQBxNuPfiqCpsw7MD/KGESI0K8E0fG4q68Eyb
u6VhSrnB9PDApkjzi4c+wkoUFuIC+FJ1EB4luY0uL+QVw7FPmmOL3iqmmDDimbYx
b6i9R7pT+DOBNULcMlZSet9aTkqrydTCwLi5SRvFYjyQVOakTPYLdbxSgZv35Fq3
qRsvlm1lT/ywhdP/AA5JGKziV+21rgY/4EL1CGr8hcwsjcWtOdWAtG2BUwjSSE8p
hF50bQFj7dj+K+vBptqtZllEHIkpxUo8E+kSwqDvDxezamEHJvR3NGM1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBks0FfGZJW3smd2Oo7bC22MrWQDMB8GA1UdIwQY
MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt
NTU3OTVjMjZlYWNhLzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh
LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKIhrcrx
lh1CsebZQrlXXQ1hTQhp7rV2LUcmrURqLjS+hZElPva27m1TXoRO/IlXbYJL0Ivx
lwrIZLuPEKNODzwJgVcLErPVNP88s3L/SlUKSfeeLwXecH5bXxU8YDbLFx+yt+wM
x/LSuy9eHp3oPeV+jyK7LqrblTgYiq9MLrtbL6XlyPqD2apEyHo4FXhLdJrTsBQf
XG7cn95uXFCrs11qJcwfHHLCXNtliedXzfMgv9QCGtix30CJhDzcoKI0ZnDv7w4Z
FsvBZ/MGteNGsAXtkIMyhWJh2gGOpwxhHxrEu9U4YXFy4rGTkr3rgZRzT+su697j
xiAqbNspXapubw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:05 2025 by rpki-client