Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File:                     ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier:          PXkAcFccoO6n+mjvjQSurlgT2rYTj6kIaNxBrCm1uts=
Subject key identifier:   9D:AE:10:03:CF:B7:7A:0E:0F:4F:BC:00:41:25:DB:31:03:88:DC:E2
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer:       /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial:       0197481E9D48E19257397B150E81114F6032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number:          063E
Signing time:             Sat 07 Jun 2025 02:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:55 +0000
Files and hashes:         1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
                          2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: KlRnFYMyrZyPJVNb/oALizQr7LKz0sia3VTXgboragM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:9d:48:e1:92:57:39:7b:15:0e:81:11:4f:60:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
        Validity
            Not Before: Jun  7 02:00:55 2025 GMT
            Not After : Jun  8 02:00:55 2025 GMT
        Subject: CN=9dae1003cfb77a0e0f4fbc004125db310388dce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:16:78:7f:90:2a:a4:cf:1b:4b:74:07:cf:
                    9f:4c:44:89:ed:00:8c:e9:80:7c:5c:af:54:fb:28:
                    1c:00:ec:b5:51:d2:e0:8f:d6:2f:cd:73:b5:5a:8c:
                    6a:a0:db:6f:a2:f9:9b:b8:ff:34:00:55:69:6f:60:
                    ff:0c:ec:33:8f:03:9c:3a:e1:d5:5a:d1:75:51:16:
                    90:09:c5:f1:89:b5:e3:99:f3:2f:9d:bd:b1:ba:c0:
                    e7:4b:61:de:e9:fc:d5:15:34:01:29:1f:00:1b:3b:
                    d8:6d:c7:4b:90:a2:99:ef:38:e4:ba:2b:36:d9:dc:
                    12:6d:29:65:a9:d6:6b:c9:0b:d3:38:6c:86:ab:36:
                    a0:48:55:d0:1b:79:22:37:d5:70:46:56:5e:51:58:
                    e0:cd:d0:d0:13:cd:53:c3:17:11:88:d6:c9:3d:d0:
                    72:9d:83:5c:83:fa:02:c0:96:77:40:79:4c:a5:7d:
                    48:33:f2:df:a9:74:e5:b3:04:70:37:13:49:c9:1a:
                    5e:a8:ac:0e:8b:fe:db:f6:7a:9c:8c:8c:5a:7d:f2:
                    7b:9d:a9:48:f5:25:4b:8d:e1:65:07:7d:98:13:63:
                    91:a9:09:1e:be:0d:17:c3:98:3c:0e:ba:cd:aa:ba:
                    c5:de:c5:83:35:48:c8:ff:72:e2:7c:1a:c2:cc:77:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:10:03:CF:B7:7A:0E:0F:4F:BC:00:41:25:DB:31:03:88:DC:E2
            X509v3 Authority Key Identifier:
                keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:ea:02:d2:b8:fd:95:7f:54:ce:1f:52:06:0c:d2:13:ec:
         2d:e1:bb:17:5c:7f:e6:26:57:11:d1:fe:ca:d8:e0:27:2c:25:
         f5:e7:a9:f1:d8:83:1b:9d:85:24:00:9b:6d:a1:43:43:69:a8:
         68:c2:3d:c2:6f:c7:3c:5a:b5:72:0f:1b:14:7b:11:83:9b:e1:
         7c:ef:b3:82:94:72:f6:0a:23:a7:be:cd:01:98:15:10:d5:27:
         31:73:32:35:d5:6d:cc:1d:7c:07:c3:74:71:ef:d7:2a:55:c2:
         33:e2:50:28:3f:06:42:60:34:22:ab:22:dc:25:dd:fa:26:02:
         48:8a:a0:9d:a3:c6:79:20:6a:cc:a6:fe:f1:47:77:1b:5f:c4:
         bc:1f:8a:99:3c:7e:e1:9c:4e:4d:12:06:09:d4:88:bd:67:ca:
         82:37:6e:ed:ee:d2:85:28:7f:52:36:c0:ce:f7:29:f0:8b:93:
         8e:e1:6b:a0:ef:fd:da:e4:aa:7f:69:a6:19:7a:31:f9:32:93:
         ec:fb:4c:e3:da:56:b8:0b:35:24:11:f9:38:2b:29:b7:ab:58:
         10:9a:58:dd:89:85:5d:c9:5e:8e:6f:64:fc:ac:97:70:ae:a4:
         76:87:76:05:aa:fd:a8:d5:94:c7:de:7c:31:45:00:0f:b0:3d:
         12:29:bc:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHp1I4ZJXOXsVDoERT2AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1
ZjkwZTQwHhcNMjUwNjA3MDIwMDU1WhcNMjUwNjA4MDIwMDU1WjAzMTEwLwYDVQQD
Eyg5ZGFlMTAwM2NmYjc3YTBlMGY0ZmJjMDA0MTI1ZGIzMTAzODhkY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb4WeH+QKqTPG0t0B8+fTESJ7QCM
6YB8XK9U+ygcAOy1UdLgj9YvzXO1WoxqoNtvovmbuP80AFVpb2D/DOwzjwOcOuHV
WtF1URaQCcXxibXjmfMvnb2xusDnS2He6fzVFTQBKR8AGzvYbcdLkKKZ7zjkuis2
2dwSbSllqdZryQvTOGyGqzagSFXQG3kiN9VwRlZeUVjgzdDQE81TwxcRiNbJPdBy
nYNcg/oCwJZ3QHlMpX1IM/LfqXTlswRwNxNJyRpeqKwOi/7b9nqcjIxaffJ7nalI
9SVLjeFlB32YE2ORqQkevg0Xw5g8DrrNqrrF3sWDNUjI/3LifBrCzHeX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2uEAPPt3oOD0+8AEEl2zEDiNziMB8GA1UdIwQY
MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt
YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw
LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk7qAtK4
/ZV/VM4fUgYM0hPsLeG7F1x/5iZXEdH+ytjgJywl9eep8diDG52FJACbbaFDQ2mo
aMI9wm/HPFq1cg8bFHsRg5vhfO+zgpRy9gojp77NAZgVENUnMXMyNdVtzB18B8N0
ce/XKlXCM+JQKD8GQmA0Iqsi3CXd+iYCSIqgnaPGeSBqzKb+8Ud3G1/EvB+KmTx+
4ZxOTRIGCdSIvWfKgjdu7e7ShSh/UjbAzvcp8IuTjuFroO/92uSqf2mmGXox+TKT
7PtM49pWuAs1JBH5OCspt6tYEJpY3YmFXclejm9k/KyXcK6kdod2Bar9qNWUx958
MUUAD7A9Eim89A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:32:15 2025 by rpki-client