Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          BJotvyzKKNAcxMCU8G7wff8+8b60vAOLCVbT6ZX/Xus=
Subject key identifier:   07:95:8B:13:BB:73:37:84:9E:E4:42:2D:5B:B4:C9:03:01:59:5F:38
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       019748C2EA538F447886C1090CA4EB5BCFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          0C6D
Signing time:             Sat 07 Jun 2025 05:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:22 +0000
Files and hashes:         1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: gJ8ei/WN+RTMf6puS2OIS2GqzEUuukFNNJh0HIAJfEU=)
                          2: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=)
                          3: ImgvJz4_mDjqxdrfNbxhGYCKGu0.roa (hash: /y4sZGaV5lW/RKRkRNk7SmLLY+Y8ezjiodQM42Rpemo=)
                          4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=)
                          5: peVRzfk7a5kMcnIN5l0vfDJAjV4.roa (hash: BZZQzoUGU3SVXNptLeHk5DArDqOJYETbuht6S7O+La0=)
                          6: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:ea:53:8f:44:78:86:c1:09:0c:a4:eb:5b:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Jun  7 05:00:22 2025 GMT
            Not After : Jun  8 05:00:22 2025 GMT
        Subject: CN=07958b13bb7337849ee4422d5bb4c90301595f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:41:d0:5e:48:dd:71:7c:0d:97:0e:39:fb:
                    b2:fd:ae:3c:52:ed:bb:76:85:27:5a:66:f4:0a:cb:
                    81:d1:20:ad:eb:b3:be:b8:4e:55:4c:c2:7e:2b:58:
                    2f:dd:ec:1a:cd:b9:bd:be:54:df:ff:e6:72:03:6c:
                    7a:6a:f4:b3:e3:70:11:e5:90:1d:5b:cd:ad:8d:09:
                    24:f2:27:2c:f2:73:c8:0e:3a:f0:c6:0b:bc:dd:66:
                    49:15:bb:56:40:7c:23:4b:97:a3:63:0d:1a:41:87:
                    e7:5a:dd:ec:cc:09:92:76:1b:21:04:a6:53:bf:38:
                    c6:1e:28:67:62:ee:8c:9a:a1:53:10:78:84:72:06:
                    53:84:ef:af:8d:6e:3d:12:bd:d0:bf:d8:96:f9:98:
                    56:12:ce:4b:ef:b8:0b:a6:25:2d:da:c5:b3:51:07:
                    a7:a1:2d:1c:df:1a:63:88:9a:c1:a3:b3:e5:59:4e:
                    99:61:6e:b0:54:40:c4:ef:43:60:11:78:8c:cc:94:
                    08:fe:87:e8:b2:e1:3b:52:5f:ea:ae:d6:94:25:22:
                    5f:bf:ab:b8:78:d4:6f:3d:c7:38:fb:9b:6a:88:c7:
                    58:a8:b2:e6:9b:58:9e:87:57:99:fb:ab:ab:64:b7:
                    e7:18:54:d4:b1:9d:0d:8d:d5:a0:8f:3f:1c:ce:fe:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:8B:13:BB:73:37:84:9E:E4:42:2D:5B:B4:C9:03:01:59:5F:38
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:dd:a5:e7:e1:5b:fc:04:91:31:18:83:f8:bf:d4:33:66:
         95:e7:14:53:30:5a:e3:e2:7c:69:9c:11:e2:bc:4b:c4:36:0b:
         bd:d0:04:b3:e9:ec:03:34:2e:10:e1:5a:e4:cd:03:12:e0:d3:
         e8:10:49:02:31:ce:c4:76:c1:6b:6d:dc:51:91:47:84:83:18:
         a9:a4:27:44:59:ed:31:13:5d:d9:34:c6:19:c6:d3:88:02:44:
         12:6b:75:e6:19:cd:f5:6b:d5:39:cc:e1:c4:1b:97:81:5f:44:
         2d:ea:80:e8:ba:ad:56:ba:e2:50:e4:20:35:e0:cd:58:3b:fa:
         47:26:8e:d6:fa:3a:1f:81:1a:85:66:99:f4:37:c0:27:38:5b:
         50:18:aa:3e:23:11:89:30:8e:17:73:68:29:c6:ed:f7:ca:67:
         fa:c4:5a:bc:ff:5c:6f:6f:5f:98:29:62:f3:42:03:4b:ae:96:
         cf:51:9a:7b:0f:5d:f8:c6:e0:59:67:da:17:07:20:3d:6b:21:
         cb:1c:32:a9:b0:70:46:59:56:d7:26:42:69:e2:a7:51:67:c2:
         9b:90:c2:98:29:f2:c2:95:ca:4b:58:59:eb:50:6a:6c:53:df:
         99:11:3b:3f:96:fe:1f:b2:6b:f5:c3:c3:53:17:be:16:4b:1a:
         53:0d:21:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwupTj0R4hsEJDKTrW8/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2
ZWM2ZTYwHhcNMjUwNjA3MDUwMDIyWhcNMjUwNjA4MDUwMDIyWjAzMTEwLwYDVQQD
EygwNzk1OGIxM2JiNzMzNzg0OWVlNDQyMmQ1YmI0YzkwMzAxNTk1ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qtB0F5I3XF8DZcOOfuy/a48Uu27
doUnWmb0CsuB0SCt67O+uE5VTMJ+K1gv3ewazbm9vlTf/+ZyA2x6avSz43AR5ZAd
W82tjQkk8ics8nPIDjrwxgu83WZJFbtWQHwjS5ejYw0aQYfnWt3szAmSdhshBKZT
vzjGHihnYu6MmqFTEHiEcgZThO+vjW49Er3Qv9iW+ZhWEs5L77gLpiUt2sWzUQen
oS0c3xpjiJrBo7PlWU6ZYW6wVEDE70NgEXiMzJQI/ofosuE7Ul/qrtaUJSJfv6u4
eNRvPcc4+5tqiMdYqLLmm1ieh1eZ+6urZLfnGFTUsZ0NjdWgjz8czv7CnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeVixO7czeEnuRCLVu0yQMBWV84MB8GA1UdIwQY
MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt
OTE2NGUzNTJhODNjLzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj
LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBHdpefh
W/wEkTEYg/i/1DNmlecUUzBa4+J8aZwR4rxLxDYLvdAEs+nsAzQuEOFa5M0DEuDT
6BBJAjHOxHbBa23cUZFHhIMYqaQnRFntMRNd2TTGGcbTiAJEEmt15hnN9WvVOczh
xBuXgV9ELeqA6LqtVrriUOQgNeDNWDv6RyaO1vo6H4EahWaZ9DfAJzhbUBiqPiMR
iTCOF3NoKcbt98pn+sRavP9cb29fmCli80IDS66Wz1Gaew9d+MbgWWfaFwcgPWsh
yxwyqbBwRllW1yZCaeKnUWfCm5DCmCnywpXKS1hZ61BqbFPfmRE7P5b+H7Jr9cPD
Uxe+FksaUw0hfg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:31 2025 by rpki-client