Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File:                     ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier:          1gK31CQMBCviK5NUYAe6D64SXd+O5Q+cEtfims3tKEA=
Subject key identifier:   D3:FA:AF:78:E4:A9:50:13:DD:9E:F9:52:1A:F6:BD:6B:2E:36:A7:77
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer:       /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial:       0197684E7A250762CA7D1A929A5B0D8E0458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number:          0E63
Signing time:             Fri 13 Jun 2025 08:01:02 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:02 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:02 +0000
Files and hashes:         1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: 2/9iM1sgBmct3YeONfzYmKqae8dXiFnqvhVNj8NimUQ=)
                          2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:7a:25:07:62:ca:7d:1a:92:9a:5b:0d:8e:04:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
        Validity
            Not Before: Jun 13 08:01:02 2025 GMT
            Not After : Jun 14 08:01:02 2025 GMT
        Subject: CN=d3faaf78e4a95013dd9ef9521af6bd6b2e36a777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:44:85:13:c2:28:1e:c2:42:d6:99:21:f0:
                    fc:d9:b4:32:45:2d:7e:bc:37:54:00:72:8a:e2:8a:
                    7c:fa:2a:e2:4e:fd:d1:43:1b:db:92:54:a9:68:42:
                    ff:39:7f:e6:da:e1:24:3d:60:94:4d:51:5a:27:83:
                    35:46:41:6a:af:1f:62:f1:5d:fa:ef:6a:4d:83:7a:
                    0e:37:eb:cd:63:ab:4f:44:33:01:34:48:32:96:75:
                    cb:4a:32:15:55:de:b6:d2:7e:59:5f:50:57:bd:1d:
                    65:ca:7e:ea:9a:ba:39:a9:94:7f:57:0f:e5:9d:3f:
                    4e:39:d4:10:66:8c:fd:0e:14:2a:2e:5f:95:37:8c:
                    e2:bb:ff:79:bc:36:28:fc:9e:a8:a5:a4:66:13:6e:
                    b4:7e:9e:d0:ec:43:5a:a0:aa:b0:da:d6:92:53:61:
                    fd:48:d8:ab:8d:22:ca:93:66:5a:9f:b3:36:61:39:
                    8a:00:c0:61:02:04:5e:41:d7:74:1c:ff:fe:49:4c:
                    92:e7:83:a9:3f:71:89:7b:83:fa:84:3f:bc:8c:48:
                    41:c5:53:95:41:77:59:94:17:7f:bc:05:18:42:6b:
                    90:db:28:37:8b:b8:73:65:13:f2:ea:83:4d:bb:2e:
                    ca:6f:51:bf:78:63:47:8c:bb:e2:17:f2:2c:69:8e:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:AF:78:E4:A9:50:13:DD:9E:F9:52:1A:F6:BD:6B:2E:36:A7:77
            X509v3 Authority Key Identifier:
                keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:dc:bb:e0:4a:15:82:79:fd:32:6c:02:c3:48:13:65:42:
         51:d3:e4:08:64:ed:65:aa:7e:73:47:af:05:25:19:c7:58:05:
         6e:f9:cf:61:35:0a:74:e7:6f:b3:00:75:53:6e:28:74:b4:d1:
         d5:55:d2:d4:9e:b7:67:31:cc:57:1a:0b:a2:c3:d1:15:de:b0:
         07:fc:25:cb:76:42:60:b2:0c:5a:08:f2:9d:d5:d5:da:bb:69:
         06:81:bc:f2:50:03:7f:d5:09:60:c1:e9:02:63:77:e2:b3:7f:
         29:a7:98:4b:87:7f:51:d4:97:e5:8d:9d:3d:ba:33:bc:da:fc:
         c0:51:ea:37:fd:41:4d:ea:3e:c5:0f:89:29:59:db:cf:d1:e6:
         a4:73:9f:e3:e2:8a:88:9f:0c:22:5b:56:69:4a:01:74:71:43:
         09:3d:66:c0:51:a2:af:69:44:74:4b:90:52:3f:d6:ae:1f:b5:
         6f:67:ea:3c:db:5e:7e:cf:c0:dc:b8:93:28:13:d5:70:c8:2a:
         1f:57:0c:84:d0:15:ad:9b:11:0f:49:c2:ac:25:0d:f1:e2:d5:
         0e:66:4a:04:f7:9d:10:cf:46:71:dc:5c:76:3a:50:c1:ff:c3:
         be:fe:37:25:ee:83:fe:a5:56:77:a5:fd:2a:37:66:ab:42:9c:
         b5:df:01:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTnolB2LKfRqSmlsNjgRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw
MGNiNjQwHhcNMjUwNjEzMDgwMTAyWhcNMjUwNjE0MDgwMTAyWjAzMTEwLwYDVQQD
EyhkM2ZhYWY3OGU0YTk1MDEzZGQ5ZWY5NTIxYWY2YmQ2YjJlMzZhNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx55EhRPCKB7CQtaZIfD82bQyRS1+
vDdUAHKK4op8+iriTv3RQxvbklSpaEL/OX/m2uEkPWCUTVFaJ4M1RkFqrx9i8V36
72pNg3oON+vNY6tPRDMBNEgylnXLSjIVVd620n5ZX1BXvR1lyn7qmro5qZR/Vw/l
nT9OOdQQZoz9DhQqLl+VN4ziu/95vDYo/J6opaRmE260fp7Q7ENaoKqw2taSU2H9
SNirjSLKk2Zan7M2YTmKAMBhAgReQdd0HP/+SUyS54OpP3GJe4P6hD+8jEhBxVOV
QXdZlBd/vAUYQmuQ2yg3i7hzZRPy6oNNuy7Kb1G/eGNHjLviF/IsaY4ZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP6r3jkqVAT3Z75Uhr2vWsuNqd3MB8GA1UdIwQY
MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt
Y2EzMzUwZTc2MGNiLzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi
LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/jcu+BK
FYJ5/TJsAsNIE2VCUdPkCGTtZap+c0evBSUZx1gFbvnPYTUKdOdvswB1U24odLTR
1VXS1J63ZzHMVxoLosPRFd6wB/wly3ZCYLIMWgjyndXV2rtpBoG88lADf9UJYMHp
AmN34rN/KaeYS4d/UdSX5Y2dPbozvNr8wFHqN/1BTeo+xQ+JKVnbz9HmpHOf4+KK
iJ8MIltWaUoBdHFDCT1mwFGir2lEdEuQUj/Wrh+1b2fqPNtefs/A3LiTKBPVcMgq
H1cMhNAVrZsRD0nCrCUN8eLVDmZKBPedEM9GcdxcdjpQwf/Dvv43Je6D/qVWd6X9
Kjdmq0Kctd8BMg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:03:19 2025 by rpki-client