Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File:                     O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier:          Xw5BWIAYAAG4BRb80LjmG7ZGZEzY+ilBe2Ww5oBqC6s=
Subject key identifier:   9B:59:B0:41:73:86:D4:9F:16:75:35:1F:09:2F:50:20:78:B2:8A:79
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       01974D0DB19EF50D9E38B455EECFF5951712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number:          0A78
Signing time:             Sun 08 Jun 2025 01:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:32 +0000
Files and hashes:         1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
                          2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: ElSY5XWtvJMu/wEl8YUSEySeYYAjfdgynBuodAJXfP4=)
                          3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
                          4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:b1:9e:f5:0d:9e:38:b4:55:ee:cf:f5:95:17:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Jun  8 01:00:32 2025 GMT
            Not After : Jun  9 01:00:32 2025 GMT
        Subject: CN=9b59b0417386d49f1675351f092f502078b28a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:08:73:4a:54:29:17:92:a0:a4:1e:70:ca:
                    8d:85:5d:95:e8:fe:30:f9:39:c7:59:e8:62:3a:98:
                    c3:a1:a7:52:23:b2:e1:73:69:85:0c:54:cb:f5:41:
                    b2:f8:a7:9c:e4:d3:2e:b0:b8:33:7c:1b:fb:f0:5c:
                    22:46:27:62:e9:63:eb:74:5d:5a:38:8f:56:ec:b3:
                    0a:e3:b0:27:1c:89:4a:d7:fd:12:3c:e1:01:90:99:
                    c8:97:ff:fe:5c:81:f5:22:3d:2e:c1:bd:bd:a2:51:
                    fc:e3:a8:1c:75:b6:42:c8:1b:1d:df:b4:28:3b:d4:
                    3a:a2:cf:ff:86:25:68:f9:5a:05:3b:44:a5:bd:c2:
                    c0:4a:29:b8:7c:46:e8:df:eb:f8:e9:37:48:b7:de:
                    0b:62:60:e7:54:83:3c:0f:ef:1b:04:a2:06:37:72:
                    ab:12:46:97:6b:3e:e9:9e:14:50:7f:a4:f7:71:a6:
                    85:1e:4f:cc:1d:ae:2b:8d:60:d6:db:e2:95:8d:a7:
                    96:59:c6:9b:48:29:8a:31:00:80:31:df:57:38:3b:
                    15:4c:d4:71:62:80:2c:c4:4f:93:ad:1f:e7:a2:e4:
                    fb:58:71:35:79:d7:2d:e3:aa:15:ea:f4:0c:64:74:
                    f9:b0:0f:56:64:bc:fc:8f:64:2b:29:dc:6d:d9:bd:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:B0:41:73:86:D4:9F:16:75:35:1F:09:2F:50:20:78:B2:8A:79
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:98:de:67:59:e0:84:1b:00:47:5d:ae:01:6a:33:20:35:
         f9:43:85:5d:a5:08:3d:65:e3:2d:9d:21:81:fd:2c:b0:04:82:
         c0:4a:a8:b8:29:59:d9:11:62:36:94:2f:44:f3:08:67:d0:47:
         50:a1:d2:c5:a9:9f:d6:5c:d4:c0:30:6e:89:4f:09:e0:fc:59:
         14:cf:c9:f5:02:7a:66:f3:fb:ff:14:ea:4d:8f:5f:d9:c5:41:
         ad:23:dd:e4:81:80:99:ff:b9:3a:52:43:87:e4:3d:1d:27:95:
         ea:44:04:6c:95:32:00:a8:18:b7:4c:da:6a:75:95:a5:a5:db:
         d7:62:c2:dc:d8:6e:0b:f4:4b:9a:c4:91:fa:cf:ae:b9:77:52:
         2b:33:83:5a:2e:fe:24:02:ec:80:23:07:ae:ef:a4:8e:e2:f5:
         75:9f:c1:07:74:3c:3b:f7:bb:11:60:65:eb:b6:7b:cf:66:61:
         f1:a8:2f:30:ae:cc:06:c7:86:f4:62:20:86:2f:7c:23:12:ac:
         30:ad:1d:e3:fc:69:ff:48:3d:a3:73:e7:83:78:a5:d6:a0:77:
         50:fc:6e:70:68:84:8b:d3:6a:9a:3f:fb:55:e9:33:58:08:49:
         59:d5:a7:48:de:b3:b2:2e:bb:94:dd:87:8a:1d:8b:04:93:97:
         bf:41:f5:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDbGe9Q2eOLRV7s/1lRcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk
YWY2NDQwHhcNMjUwNjA4MDEwMDMyWhcNMjUwNjA5MDEwMDMyWjAzMTEwLwYDVQQD
Eyg5YjU5YjA0MTczODZkNDlmMTY3NTM1MWYwOTJmNTAyMDc4YjI4YTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV8Ic0pUKReSoKQecMqNhV2V6P4w
+TnHWehiOpjDoadSI7Lhc2mFDFTL9UGy+Kec5NMusLgzfBv78FwiRidi6WPrdF1a
OI9W7LMK47AnHIlK1/0SPOEBkJnIl//+XIH1Ij0uwb29olH846gcdbZCyBsd37Qo
O9Q6os//hiVo+VoFO0SlvcLASim4fEbo3+v46TdIt94LYmDnVIM8D+8bBKIGN3Kr
EkaXaz7pnhRQf6T3caaFHk/MHa4rjWDW2+KVjaeWWcabSCmKMQCAMd9XODsVTNRx
YoAsxE+TrR/nouT7WHE1edct46oV6vQMZHT5sA9WZLz8j2QrKdxt2b1YNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtZsEFzhtSfFnU1HwkvUCB4sop5MB8GA1UdIwQY
MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt
MzA3MzNkMzcwZGYzLzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz
LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPiY3mdZ
4IQbAEddrgFqMyA1+UOFXaUIPWXjLZ0hgf0ssASCwEqouClZ2RFiNpQvRPMIZ9BH
UKHSxamf1lzUwDBuiU8J4PxZFM/J9QJ6ZvP7/xTqTY9f2cVBrSPd5IGAmf+5OlJD
h+Q9HSeV6kQEbJUyAKgYt0zaanWVpaXb12LC3NhuC/RLmsSR+s+uuXdSKzODWi7+
JALsgCMHru+kjuL1dZ/BB3Q8O/e7EWBl67Z7z2Zh8agvMK7MBseG9GIghi98IxKs
MK0d4/xp/0g9o3Png3il1qB3UPxucGiEi9Nqmj/7VekzWAhJWdWnSN6zsi67lN2H
ih2LBJOXv0H1Dw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:50 2025 by rpki-client