Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
File:                     tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json)
Hash identifier:          24/HS+BsHGQ2EltpWOCPv3bFzbSXIl9ZyDimmRlTfVo=
Subject key identifier:   1B:85:99:EF:76:C8:F8:7D:5A:2F:2E:BE:7C:1A:F1:10:CF:F7:E8:38
Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
Certificate issuer:       /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Certificate serial:       01974C32408D054EE2CFF67AA3020724DA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
Manifest number:          B6
Signing time:             Sat 07 Jun 2025 21:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:51 +0000
Files and hashes:         1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=)
                          2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: 3cJc2LJanr///EOQRBlRgt4HPJPiNUemHrPYkJfKcRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:40:8d:05:4e:e2:cf:f6:7a:a3:02:07:24:da:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
        Validity
            Not Before: Jun  7 21:00:51 2025 GMT
            Not After : Jun  8 21:00:51 2025 GMT
        Subject: CN=1b8599ef76c8f87d5a2f2ebe7c1af110cff7e838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:2c:75:54:de:80:03:02:21:61:62:99:a3:
                    c4:3d:77:dc:72:33:f7:32:77:31:84:8f:80:84:cd:
                    b5:d2:1d:af:a2:59:97:06:a0:5f:12:e2:52:9c:7d:
                    29:8b:3b:95:4c:d7:54:4f:9d:e0:f9:ff:84:37:56:
                    57:99:68:fc:d0:4f:18:2d:e4:8f:40:7e:fc:3b:c5:
                    d3:86:07:11:b8:4f:f7:7c:a4:03:37:55:36:a6:70:
                    f6:6a:fb:3c:69:8d:53:f8:a6:7e:aa:93:7e:de:a4:
                    54:ab:9e:1a:2e:2e:85:08:a0:f9:b7:3f:24:a2:30:
                    ca:df:b6:a5:d4:d0:79:bd:46:18:ed:d5:93:9b:7c:
                    11:15:62:6c:23:e3:3e:6e:dd:72:53:5a:b6:a4:26:
                    41:c8:97:97:95:f0:f2:73:1d:18:a6:9e:64:00:9a:
                    ee:ce:72:a5:b6:3b:c8:86:89:e8:9b:5f:c7:77:25:
                    af:5d:e7:c6:a8:1b:83:c6:2a:1d:8b:30:3a:64:0b:
                    98:b1:60:15:12:38:0e:cb:67:32:18:6e:a4:a8:b9:
                    be:24:5c:65:21:3b:ea:31:70:4b:93:ec:a3:73:63:
                    80:ea:5b:ee:73:18:88:e6:20:b8:b7:f4:eb:51:31:
                    e0:89:e7:88:9f:bd:7c:98:35:f4:69:59:e1:93:c3:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:99:EF:76:C8:F8:7D:5A:2F:2E:BE:7C:1A:F1:10:CF:F7:E8:38
            X509v3 Authority Key Identifier:
                keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:f1:2e:0d:db:82:4e:bf:a0:3e:10:05:ae:b5:98:0d:e2:
         fd:d7:a5:d5:e7:12:5a:28:e4:0c:c2:08:96:0f:cd:a2:d9:7c:
         17:72:a5:e2:cd:70:a6:b1:a2:46:ae:2e:9f:f5:ea:59:9e:04:
         79:4c:65:42:23:82:66:f8:d7:c9:4b:1f:4e:44:82:21:d2:0a:
         80:02:cf:56:e1:6d:23:da:6c:31:23:df:1d:29:ea:17:2b:54:
         58:29:f9:63:72:5a:6a:2c:30:4b:b9:8f:f1:52:03:1b:ee:6a:
         13:a0:52:bf:c4:97:6c:5c:cb:cf:12:bd:5f:26:10:28:ed:f2:
         6f:cd:f4:be:9e:6c:7f:d4:70:9a:1b:9d:e2:39:f4:5a:65:68:
         01:9d:bb:07:b5:d1:1f:39:ff:a7:a4:52:3a:56:3e:e0:b4:eb:
         a0:58:82:8c:84:34:d1:ec:30:b9:9e:b5:60:df:c4:29:43:82:
         5b:b2:d4:0c:74:45:a8:a3:89:80:a8:10:d2:b3:14:f0:97:88:
         85:f0:bd:d1:75:62:b8:58:f6:62:19:41:b6:d6:81:74:75:18:
         f6:67:42:9b:d7:19:31:24:d7:4d:f0:42:45:e4:75:e3:74:45:
         73:a8:d8:ee:82:20:ab:9c:51:82:c6:7f:5c:79:55:68:19:d7:
         33:78:3f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMkCNBU7iz/Z6owIHJNo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjZkZmE3ZjllMjg4NGZiMjFkMTA3M2U0OGMwYmQ1ODg2
YWRlZTIwHhcNMjUwNjA3MjEwMDUxWhcNMjUwNjA4MjEwMDUxWjAzMTEwLwYDVQQD
EygxYjg1OTllZjc2YzhmODdkNWEyZjJlYmU3YzFhZjExMGNmZjdlODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbYsdVTegAMCIWFimaPEPXfccjP3
MncxhI+AhM210h2volmXBqBfEuJSnH0pizuVTNdUT53g+f+EN1ZXmWj80E8YLeSP
QH78O8XThgcRuE/3fKQDN1U2pnD2avs8aY1T+KZ+qpN+3qRUq54aLi6FCKD5tz8k
ojDK37al1NB5vUYY7dWTm3wRFWJsI+M+bt1yU1q2pCZByJeXlfDycx0Ypp5kAJru
znKltjvIhonom1/HdyWvXefGqBuDxiodizA6ZAuYsWAVEjgOy2cyGG6kqLm+JFxl
ITvqMXBLk+yjc2OA6lvucxiI5iC4t/TrUTHgieeIn718mDX0aVnhk8N7SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuFme92yPh9Wi8uvnwa8RDP9+g4MB8GA1UdIwQY
MBaAFLUm36f54ohPsh0Qc+SMC9WIat7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2It
ZDFjZDA5NTY4ZTgyLzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzAxMGUtNTY1NC00NDg2LTk5M2ItZDFjZDA5NTY4ZTgy
LzEvdFNiZnBfbmlpRS15SFJCejVJd0wxWWhxM3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUU3xLg3b
gk6/oD4QBa61mA3i/del1ecSWijkDMIIlg/Notl8F3Kl4s1wprGiRq4un/XqWZ4E
eUxlQiOCZvjXyUsfTkSCIdIKgALPVuFtI9psMSPfHSnqFytUWCn5Y3JaaiwwS7mP
8VIDG+5qE6BSv8SXbFzLzxK9XyYQKO3yb830vp5sf9Rwmhud4jn0WmVoAZ27B7XR
Hzn/p6RSOlY+4LTroFiCjIQ00ewwuZ61YN/EKUOCW7LUDHRFqKOJgKgQ0rMU8JeI
hfC90XViuFj2YhlBttaBdHUY9mdCm9cZMSTXTfBCReR143RFc6jY7oIgq5xRgsZ/
XHlVaBnXM3g/bA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:38 2025 by rpki-client