Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          UKZOlZWFw0K/hvIrGf3X35xjPwRf7gFy52zHPdO8bcE=
Subject key identifier:   36:9B:21:3A:0B:60:78:E1:47:A9:0D:AF:78:8E:F1:0B:E1:AD:C1:C8
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019761DDF3A6E759D1176727CE8259A317EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0BEE
Signing time:             Thu 12 Jun 2025 02:00:25 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:25 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:25 +0000
Files and hashes:         1: 5rlrSe1HUXIj3_aBpG64a8NmOts.roa (hash: nRWsn8kltCpTHjq/8c/7GOAD+GlBtZhRnZ/ImlddXgU=)
                          2: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: yZRWDcDIgZ23pzRJTrRR6PX3SS9TUgw6tKwif0sg/ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:dd:f3:a6:e7:59:d1:17:67:27:ce:82:59:a3:17:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Jun 12 02:00:25 2025 GMT
            Not After : Jun 13 02:00:25 2025 GMT
        Subject: CN=369b213a0b6078e147a90daf788ef10be1adc1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:45:69:22:82:ba:92:2c:e1:3b:cb:3d:87:
                    ef:23:6a:aa:be:ae:c2:c6:bb:e1:c0:c6:5f:81:be:
                    52:9a:0f:5d:03:0f:ce:d8:c5:9e:84:b4:14:df:93:
                    6e:73:8f:8d:f4:9e:97:fc:57:1b:ac:78:7b:a5:94:
                    d6:5f:61:01:4e:93:92:49:3b:17:e0:65:30:d0:7b:
                    ae:15:85:62:ad:86:e0:08:6c:1a:5b:cd:99:42:33:
                    52:9c:1b:0b:a2:fe:7a:b9:ad:90:6d:64:68:50:9f:
                    d6:8e:d8:97:23:b4:ce:0b:96:35:4e:e7:e2:07:3c:
                    27:08:75:d9:8f:4d:43:ef:bb:78:f9:53:92:f8:56:
                    70:33:d5:eb:47:85:29:d2:8a:d3:cb:64:8a:64:f6:
                    c1:1d:8f:bc:1f:93:8c:6e:bf:20:bf:c6:d3:e6:8c:
                    8d:fa:d7:21:bc:3a:82:05:b3:4f:b3:73:3d:ba:d3:
                    ba:02:61:fd:17:8c:5c:bd:6a:1a:9d:8b:c7:59:49:
                    77:df:d4:e9:a7:1f:2c:1d:3a:dd:7e:98:e3:44:75:
                    1d:19:ab:6c:c4:6b:bd:5a:f6:93:17:03:77:b2:18:
                    d6:b2:5b:5c:b6:31:6c:a3:c3:d2:91:0a:24:56:e0:
                    31:8d:ed:93:dc:f6:99:e2:33:29:65:e5:16:d8:30:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9B:21:3A:0B:60:78:E1:47:A9:0D:AF:78:8E:F1:0B:E1:AD:C1:C8
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:a5:0a:c6:06:68:26:9f:62:a8:1d:c6:9a:b0:b6:2b:49:
         df:e1:4b:de:a9:43:b6:a3:25:25:29:b6:bb:30:51:cf:dd:89:
         e1:aa:9d:59:92:61:59:fd:cd:7e:27:e3:ff:17:91:f5:28:07:
         47:dd:95:0f:1e:86:32:7a:2d:0c:77:f7:02:1a:67:d0:5f:fe:
         dd:a8:57:65:4e:0b:e4:c6:65:87:b4:0d:90:10:19:32:8d:f3:
         9c:94:e6:03:5e:02:1f:c0:48:d4:11:e5:61:6f:b5:73:81:7b:
         40:1e:b5:b7:23:60:96:82:4c:ff:1e:ae:94:ed:fc:04:d5:78:
         1e:52:04:b8:e6:6b:ca:e2:61:2a:66:61:ab:22:22:0e:f3:81:
         09:3e:aa:f4:15:89:56:ec:86:0b:72:a9:eb:f7:b2:a9:14:bd:
         5f:fc:d3:4c:ed:4f:93:d2:36:aa:55:9d:3b:09:75:05:f4:e3:
         23:70:4a:8c:2b:d5:d4:6a:29:c9:9a:10:6d:79:27:82:d1:19:
         f0:18:4d:6e:39:65:a1:34:42:4d:3c:83:86:df:ba:0a:90:b3:
         0c:f4:94:f5:90:e4:17:9c:8b:ad:07:16:6b:2b:09:6a:22:69:
         5c:4f:78:21:f8:a1:7b:bc:3b:ac:f9:cb:4c:b4:1c:e0:cf:91:
         99:f3:70:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdh3fOm51nRF2cnzoJZoxfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYTBmNzE0M2ZmYTIyMTEzNDQyZGM4NTg5ZWUxMzUyZWJl
M2RhYTMwHhcNMjUwNjEyMDIwMDI1WhcNMjUwNjEzMDIwMDI1WjAzMTEwLwYDVQQD
EygzNjliMjEzYTBiNjA3OGUxNDdhOTBkYWY3ODhlZjEwYmUxYWRjMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+dFaSKCupIs4TvLPYfvI2qqvq7C
xrvhwMZfgb5Smg9dAw/O2MWehLQU35Nuc4+N9J6X/FcbrHh7pZTWX2EBTpOSSTsX
4GUw0HuuFYVirYbgCGwaW82ZQjNSnBsLov56ua2QbWRoUJ/WjtiXI7TOC5Y1Tufi
BzwnCHXZj01D77t4+VOS+FZwM9XrR4Up0orTy2SKZPbBHY+8H5OMbr8gv8bT5oyN
+tchvDqCBbNPs3M9utO6AmH9F4xcvWoanYvHWUl339Tppx8sHTrdfpjjRHUdGats
xGu9WvaTFwN3shjWsltctjFso8PSkQokVuAxje2T3PaZ4jMpZeUW2DCl5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDabIToLYHjhR6kNr3iO8QvhrcHIMB8GA1UdIwQY
MBaAFBOg9xQ/+iIRNELchYnuE1Lr49qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgt
MTA0YTMzNDM3NjY1LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgtMTA0YTMzNDM3NjY1
LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNGlCsYG
aCafYqgdxpqwtitJ3+FL3qlDtqMlJSm2uzBRz92J4aqdWZJhWf3Nfifj/xeR9SgH
R92VDx6GMnotDHf3Ahpn0F/+3ahXZU4L5MZlh7QNkBAZMo3znJTmA14CH8BI1BHl
YW+1c4F7QB61tyNgloJM/x6ulO38BNV4HlIEuOZryuJhKmZhqyIiDvOBCT6q9BWJ
VuyGC3Kp6/eyqRS9X/zTTO1Pk9I2qlWdOwl1BfTjI3BKjCvV1GopyZoQbXkngtEZ
8BhNbjlloTRCTTyDht+6CpCzDPSU9ZDkF5yLrQcWaysJaiJpXE94Ifihe7w7rPnL
TLQc4M+RmfNwbg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 07:07:12 2025 by rpki-client