Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File:                     D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier:          ViU27CWj/ciNzbBfxrkijJpKUD5+7w9z35IvT8kOUEE=
Subject key identifier:   76:14:FC:05:34:76:4D:0A:86:5F:0D:33:10:5A:91:24:60:5F:E4:73
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer:       /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial:       01974A0CC39ABDAA6952781AB46668239C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number:          02E0
Signing time:             Sat 07 Jun 2025 11:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:39 +0000
Files and hashes:         1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: f4B06LHnxpPh04cCQ95XU4emNbghCXutZ8vM81UyrMc=)
                          2: n5HWKOnZqMf_HeJzgOhByI-5MCw.roa (hash: YxqtLi8VJbl+yyfM6G5PrLuDd8IPpzOnurqCTIlxay8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:c3:9a:bd:aa:69:52:78:1a:b4:66:68:23:9c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
        Validity
            Not Before: Jun  7 11:00:39 2025 GMT
            Not After : Jun  8 11:00:39 2025 GMT
        Subject: CN=7614fc0534764d0a865f0d33105a9124605fe473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:26:dc:04:ea:0a:74:e4:01:c9:4d:e1:68:
                    43:50:9e:b7:44:32:17:50:45:19:42:e5:72:91:ef:
                    65:3c:b7:ad:15:05:9b:40:97:af:31:37:80:65:c4:
                    c4:af:ce:95:06:5b:2d:66:76:70:59:4a:46:a4:69:
                    77:ac:d7:a4:70:69:30:1f:11:ea:bd:b1:e7:67:a1:
                    ea:7b:a2:81:27:94:53:e6:b7:1d:8e:bd:a5:31:48:
                    2a:66:fc:85:80:28:11:82:ca:10:28:cd:53:8a:58:
                    86:e1:9e:a5:8a:e9:83:6c:f3:fd:a2:d0:2f:7a:5d:
                    3a:84:72:9b:86:3c:f7:c6:5c:c7:50:e8:be:78:d3:
                    6d:cb:d7:21:ba:0f:33:6a:dd:78:8c:5e:3f:94:69:
                    c0:87:36:7d:dc:e0:cc:f1:c2:6b:7e:bb:01:a9:8e:
                    13:9d:27:86:20:d2:8c:ee:f4:64:d1:57:7f:b9:ab:
                    16:f4:67:53:55:54:33:12:01:10:99:78:73:70:ed:
                    dc:fa:82:ea:7a:d9:b3:3d:c9:b4:51:65:23:27:7b:
                    05:97:21:97:88:26:0a:30:e7:cc:d3:08:13:a8:d7:
                    f0:6e:89:56:23:72:88:7d:5e:47:81:f8:03:16:23:
                    f7:d3:d7:a2:94:6c:fc:0f:e4:bd:0f:32:b4:78:fd:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:FC:05:34:76:4D:0A:86:5F:0D:33:10:5A:91:24:60:5F:E4:73
            X509v3 Authority Key Identifier:
                keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:24:cb:c8:20:9a:c2:68:e8:a9:c8:c9:83:f3:0d:b9:d7:
         26:0c:2a:34:67:79:39:7c:eb:47:ac:c9:53:78:fa:0e:1c:5c:
         d7:bc:0c:57:a7:a2:4e:81:0c:32:37:40:d6:cf:64:b7:49:84:
         18:9b:92:4c:8a:90:bc:7b:d6:e2:05:bf:39:28:ee:25:8c:70:
         5c:26:f0:42:b3:4e:36:ec:29:bf:8d:94:e8:99:ad:10:0a:8d:
         9e:d9:03:75:62:6b:c5:30:80:e6:9c:e0:4e:8f:fe:db:d2:f5:
         78:0a:7d:10:ee:95:50:c7:a8:7a:55:a6:13:c2:c8:05:5c:29:
         33:d9:08:c8:bf:df:e0:3c:be:ce:67:07:67:88:a8:7a:1c:05:
         00:62:37:05:b6:a0:9e:a6:95:33:ed:ca:7e:ee:b0:d1:67:35:
         a6:f2:3b:57:7e:05:e0:40:5e:aa:51:97:2c:62:83:fd:3a:19:
         d9:f3:c1:20:aa:5d:1b:88:49:86:5b:e9:50:a1:52:33:23:7a:
         df:85:8f:2d:21:35:af:98:21:c0:57:fe:79:08:8c:b6:6f:64:
         36:2a:4d:4e:c0:94:0f:12:f7:92:31:15:86:3c:7b:75:12:28:
         7a:af:c5:c2:4f:10:e2:d4:ca:62:ca:04:44:03:4c:12:8e:c4:
         af:98:8e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDMOavappUngatGZoI5x6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx
OTE2ZDEwHhcNMjUwNjA3MTEwMDM5WhcNMjUwNjA4MTEwMDM5WjAzMTEwLwYDVQQD
Eyg3NjE0ZmMwNTM0NzY0ZDBhODY1ZjBkMzMxMDVhOTEyNDYwNWZlNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli0m3ATqCnTkAclN4WhDUJ63RDIX
UEUZQuVyke9lPLetFQWbQJevMTeAZcTEr86VBlstZnZwWUpGpGl3rNekcGkwHxHq
vbHnZ6Hqe6KBJ5RT5rcdjr2lMUgqZvyFgCgRgsoQKM1TiliG4Z6liumDbPP9otAv
el06hHKbhjz3xlzHUOi+eNNty9chug8zat14jF4/lGnAhzZ93ODM8cJrfrsBqY4T
nSeGINKM7vRk0Vd/uasW9GdTVVQzEgEQmXhzcO3c+oLqetmzPcm0UWUjJ3sFlyGX
iCYKMOfM0wgTqNfwbolWI3KIfV5HgfgDFiP309eilGz8D+S9DzK0eP1vqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYU/AU0dk0Khl8NMxBakSRgX+RzMB8GA1UdIwQY
MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt
YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3
LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcMky8gg
msJo6KnIyYPzDbnXJgwqNGd5OXzrR6zJU3j6Dhxc17wMV6eiToEMMjdA1s9kt0mE
GJuSTIqQvHvW4gW/OSjuJYxwXCbwQrNONuwpv42U6JmtEAqNntkDdWJrxTCA5pzg
To/+29L1eAp9EO6VUMeoelWmE8LIBVwpM9kIyL/f4Dy+zmcHZ4ioehwFAGI3Bbag
nqaVM+3Kfu6w0Wc1pvI7V34F4EBeqlGXLGKD/ToZ2fPBIKpdG4hJhlvpUKFSMyN6
34WPLSE1r5ghwFf+eQiMtm9kNipNTsCUDxL3kjEVhjx7dRIoeq/Fwk8Q4tTKYsoE
RANMEo7Er5iOPw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:32 2025 by rpki-client