Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File:                     v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier:          1skDUbQg3ybayd0Y5hAsaaXN1AhBX6dqOBFPtguw/7s=
Subject key identifier:   E0:E3:9D:BE:02:EF:BE:77:1A:A0:BC:FB:EC:BA:0A:B5:F8:F7:D8:9E
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       0197496848603FC63A38EC3660915BD4B27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number:          03B5
Signing time:             Sat 07 Jun 2025 08:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:00 +0000
Files and hashes:         1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: R/Ekc59NrC49HZFAp0z5dPEBqJNf8LYDdsgc4FwggZI=)
                          2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:48:60:3f:c6:3a:38:ec:36:60:91:5b:d4:b2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Jun  7 08:01:00 2025 GMT
            Not After : Jun  8 08:01:00 2025 GMT
        Subject: CN=e0e39dbe02efbe771aa0bcfbecba0ab5f8f7d89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:9d:93:5d:eb:63:2a:90:37:00:67:a7:10:
                    93:87:41:c9:1f:48:d3:1a:f7:67:90:6c:8b:a2:95:
                    1f:a8:2f:d4:e8:da:7d:08:50:63:e1:83:6a:eb:cc:
                    7c:78:8d:88:1c:34:d7:d8:92:de:95:5a:8f:bc:55:
                    7b:9c:ea:15:e5:b6:45:65:37:ed:11:95:64:fc:97:
                    91:74:53:ec:76:73:c9:59:de:39:88:51:72:13:45:
                    47:2c:c8:30:33:3d:59:fa:2e:2d:74:eb:af:5f:78:
                    9c:9b:c1:49:24:1b:64:c9:4e:ef:68:94:52:67:d9:
                    0e:10:06:ab:eb:9e:e5:09:28:d2:b1:9f:f9:50:14:
                    0c:48:cc:b8:df:cb:f0:7d:05:44:42:51:2a:87:0e:
                    ee:cf:a6:ad:05:53:b2:61:01:28:22:03:30:03:c3:
                    bd:a3:ac:66:2b:23:0a:9b:b8:3d:14:80:a3:ad:30:
                    6f:54:b8:25:b9:45:4e:8a:32:64:03:36:59:2e:87:
                    56:0f:03:4a:9b:0d:60:00:c7:6b:2e:2f:0a:cd:8a:
                    1f:19:e2:40:2d:ab:27:f6:24:5c:8e:92:b2:08:b1:
                    e8:c0:26:a6:95:8e:6e:5c:49:70:89:f4:51:c5:a8:
                    83:af:4b:a4:3a:0d:be:8d:5b:bb:70:5a:88:29:52:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E3:9D:BE:02:EF:BE:77:1A:A0:BC:FB:EC:BA:0A:B5:F8:F7:D8:9E
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:57:40:00:82:34:3f:0d:5e:3c:5a:11:9e:b2:a9:4d:22:e4:
         e3:d3:21:b8:f1:2b:2c:eb:f1:95:33:d5:4b:40:ca:6b:b4:44:
         65:ea:4d:ad:bb:53:6b:c5:f6:4c:cf:64:64:93:84:08:0e:2c:
         a1:18:51:fa:a2:cf:57:83:2e:78:8a:70:be:34:e6:e2:8e:4a:
         1a:04:ca:60:b6:fd:4a:08:c5:21:c7:3c:66:1a:2b:43:03:92:
         58:8d:f4:05:e6:0e:87:17:6c:b4:d5:bc:2a:c9:cf:b7:d1:9b:
         f4:88:32:e6:ce:df:ff:ab:c5:f5:9a:29:2b:2f:4a:3e:5d:9b:
         72:53:3b:46:f6:a2:74:22:7e:dd:41:d0:33:09:05:5a:ef:af:
         e2:97:c1:6f:53:8e:b4:03:5c:43:2a:b8:78:7a:71:b1:7b:1b:
         97:f8:0d:23:79:99:c3:fc:67:5a:27:87:6f:43:cb:fd:4d:39:
         1c:e8:60:bc:07:fb:08:b9:68:f5:7e:4b:ba:bb:5d:80:16:a8:
         77:98:67:55:cb:4f:be:47:67:1a:fe:91:e5:27:02:d2:f5:e1:
         6f:f4:a4:32:9c:21:2c:e4:65:c1:db:82:bf:5f:f8:a8:b5:7f:
         d0:bd:8a:d0:9a:a7:d2:28:12:20:8d:e0:be:1a:05:3e:c4:00:
         2a:96:45:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaEhgP8Y6OOw2YJFb1LJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTRkYmYwMGQ3NDU5MGM4OTEzZGVjOGIxY2YwODRkOGZj
ZjY5M2MwHhcNMjUwNjA3MDgwMTAwWhcNMjUwNjA4MDgwMTAwWjAzMTEwLwYDVQQD
EyhlMGUzOWRiZTAyZWZiZTc3MWFhMGJjZmJlY2JhMGFiNWY4ZjdkODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozKdk13rYyqQNwBnpxCTh0HJH0jT
GvdnkGyLopUfqC/U6Np9CFBj4YNq68x8eI2IHDTX2JLelVqPvFV7nOoV5bZFZTft
EZVk/JeRdFPsdnPJWd45iFFyE0VHLMgwMz1Z+i4tdOuvX3icm8FJJBtkyU7vaJRS
Z9kOEAar657lCSjSsZ/5UBQMSMy438vwfQVEQlEqhw7uz6atBVOyYQEoIgMwA8O9
o6xmKyMKm7g9FICjrTBvVLgluUVOijJkAzZZLodWDwNKmw1gAMdrLi8KzYofGeJA
Lasn9iRcjpKyCLHowCamlY5uXElwifRRxaiDr0ukOg2+jVu7cFqIKVLDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODjnb4C7753GqC8++y6CrX499ieMB8GA1UdIwQY
MBaAFL9U2/ANdFkMiRPeyLHPCE2Pz2k8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjIt
YTQ3ZmI5YTk0ZmZkLzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81MjliMjgtM2EzOS00OWJmLThlZjItYTQ3ZmI5YTk0ZmZk
LzEvdjFUYjhBMTBXUXlKRTk3SXNjOElUWV9QYVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1FdAAII0
Pw1ePFoRnrKpTSLk49MhuPErLOvxlTPVS0DKa7REZepNrbtTa8X2TM9kZJOECA4s
oRhR+qLPV4MueIpwvjTm4o5KGgTKYLb9SgjFIcc8ZhorQwOSWI30BeYOhxdstNW8
KsnPt9Gb9Igy5s7f/6vF9ZopKy9KPl2bclM7RvaidCJ+3UHQMwkFWu+v4pfBb1OO
tANcQyq4eHpxsXsbl/gNI3mZw/xnWieHb0PL/U05HOhgvAf7CLlo9X5LurtdgBao
d5hnVctPvkdnGv6R5ScC0vXhb/SkMpwhLORlwduCv1/4qLV/0L2K0Jqn0igSII3g
vhoFPsQAKpZF0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:42 2025 by rpki-client