Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File:                     ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier:          CuY4CgKCIgGXmxpHW6HNTxQpsjsyUCxkjlFgIWPba3g=
Subject key identifier:   1F:F5:D7:D8:FB:4D:30:16:53:58:2C:48:B2:10:D0:F2:68:F0:55:5D
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer:       /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial:       01974D44BFF68D7A7169084CB89182C65959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number:          1511
Signing time:             Sun 08 Jun 2025 02:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:40 +0000
Files and hashes:         1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: 4e8g0PBh0oiLPspuc5VtTYZ1+w9e/RX6GvXZhz6D9mg=)
                          2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:bf:f6:8d:7a:71:69:08:4c:b8:91:82:c6:59:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
        Validity
            Not Before: Jun  8 02:00:40 2025 GMT
            Not After : Jun  9 02:00:40 2025 GMT
        Subject: CN=1ff5d7d8fb4d301653582c48b210d0f268f0555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:2b:53:b3:60:4f:92:97:56:ed:4f:68:6e:
                    e9:98:7b:16:24:5f:a8:83:b6:8a:f0:e7:d9:0d:10:
                    8a:77:3f:89:4e:ed:ac:7f:48:81:84:c2:54:d0:94:
                    b1:65:12:0b:3d:63:3d:0a:b5:37:e8:a0:2b:15:8e:
                    b8:7e:c7:41:39:e3:d2:53:f1:6a:09:2f:c9:f1:d6:
                    98:90:1d:a0:2f:ef:c3:f3:66:b7:4e:ad:9f:22:59:
                    b6:bc:53:7a:69:e2:a8:69:ee:03:e8:70:a6:7f:cb:
                    27:50:ae:07:25:0d:34:b5:cd:ce:1d:44:28:39:1a:
                    57:7a:26:d8:48:52:37:b8:0d:f8:3a:d5:30:e0:db:
                    ac:39:2c:e7:a5:81:1a:c8:df:2c:61:c6:69:0a:0b:
                    9d:f2:3b:da:88:13:03:4f:dc:69:c3:77:81:53:c2:
                    7f:71:fc:97:96:0f:72:e7:2b:95:7a:d5:52:56:94:
                    9c:78:0b:f6:22:29:40:28:35:3d:5b:1e:33:c8:95:
                    8b:08:01:18:70:79:32:66:d9:ec:5a:58:87:5d:c8:
                    8c:e6:e6:e8:4b:e9:72:f9:7d:69:de:06:91:ed:20:
                    b3:f5:39:54:ab:09:ec:61:70:2e:58:0f:90:76:2e:
                    b8:e4:1a:e6:f4:a7:a8:3e:83:5f:a9:64:6e:8b:de:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F5:D7:D8:FB:4D:30:16:53:58:2C:48:B2:10:D0:F2:68:F0:55:5D
            X509v3 Authority Key Identifier:
                keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:23:1f:d4:d5:6e:50:df:bd:6c:61:a8:76:eb:4e:0a:0e:
         cc:91:ff:bc:9e:a0:71:43:87:9b:00:40:c2:29:7b:d7:b7:ee:
         22:4f:c4:4d:81:35:61:20:33:53:0f:1e:9f:82:e9:34:b1:ba:
         32:0b:5b:31:f2:45:98:df:81:f5:cf:ca:d1:c8:15:12:31:e2:
         0a:03:f5:f4:8d:bc:6d:9f:8e:85:ed:ae:69:b7:53:79:09:20:
         34:22:7d:44:ef:5d:9a:51:54:e7:f8:32:96:7b:71:d1:08:7a:
         f1:8e:a3:a9:e9:8a:86:b9:e5:57:30:09:46:62:3c:39:7b:d1:
         52:23:a1:61:af:48:c7:8e:75:23:a8:bb:1c:d3:32:c8:e4:d5:
         d9:cb:b4:c3:62:e8:c8:f5:fd:03:34:48:27:8d:bc:8c:5b:c3:
         c4:ad:f3:f5:6d:8a:de:88:09:0d:74:c9:d4:14:80:5f:30:8d:
         1b:b9:3b:92:47:d5:ea:fa:b5:79:6a:b0:3a:e8:ad:b2:ca:8d:
         36:d5:6e:7d:9a:d0:b8:d0:bf:ab:0a:d6:d5:d8:c6:d2:c3:f4:
         90:e2:bc:25:88:04:a6:f8:bd:6c:18:1c:bf:81:0c:3c:6e:db:
         de:1d:cc:9c:af:b0:5b:14:e6:d3:10:c2:3f:95:bc:f5:3a:96:
         35:78:35:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRL/2jXpxaQhMuJGCxllZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjUwNjA4MDIwMDQwWhcNMjUwNjA5MDIwMDQwWjAzMTEwLwYDVQQD
EygxZmY1ZDdkOGZiNGQzMDE2NTM1ODJjNDhiMjEwZDBmMjY4ZjA1NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43krU7NgT5KXVu1PaG7pmHsWJF+o
g7aK8OfZDRCKdz+JTu2sf0iBhMJU0JSxZRILPWM9CrU36KArFY64fsdBOePSU/Fq
CS/J8daYkB2gL+/D82a3Tq2fIlm2vFN6aeKoae4D6HCmf8snUK4HJQ00tc3OHUQo
ORpXeibYSFI3uA34OtUw4NusOSznpYEayN8sYcZpCgud8jvaiBMDT9xpw3eBU8J/
cfyXlg9y5yuVetVSVpSceAv2IilAKDU9Wx4zyJWLCAEYcHkyZtnsWliHXciM5ubo
S+ly+X1p3gaR7SCz9TlUqwnsYXAuWA+Qdi645Brm9KeoPoNfqWRui95h3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/119j7TTAWU1gsSLIQ0PJo8FVdMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW8jH9TV
blDfvWxhqHbrTgoOzJH/vJ6gcUOHmwBAwil717fuIk/ETYE1YSAzUw8en4LpNLG6
MgtbMfJFmN+B9c/K0cgVEjHiCgP19I28bZ+Ohe2uabdTeQkgNCJ9RO9dmlFU5/gy
lntx0Qh68Y6jqemKhrnlVzAJRmI8OXvRUiOhYa9Ix451I6i7HNMyyOTV2cu0w2Lo
yPX9AzRIJ428jFvDxK3z9W2K3ogJDXTJ1BSAXzCNG7k7kkfV6vq1eWqwOuitssqN
NtVufZrQuNC/qwrW1djG0sP0kOK8JYgEpvi9bBgcv4EMPG7b3h3MnK+wWxTm0xDC
P5W89TqWNXg1vg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:24:38 2025 by rpki-client