Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File:                     rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier:          /5qOYJFya9aF7z0QULmp5zX5kYgZNLnV4aozga6T4GA=
Subject key identifier:   CE:F1:79:23:24:E6:67:13:A2:3A:B6:3F:5F:EC:1D:82:F9:40:BC:ED
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer:       /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial:       019750B4355B908F4B212DB4C4DDD6D6C873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number:          0E15
Signing time:             Sun 08 Jun 2025 18:01:16 +0000
Manifest this update:     Sun 08 Jun 2025 18:01:16 +0000
Manifest next update:     Mon 09 Jun 2025 18:01:16 +0000
Files and hashes:         1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
                          2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: Gv9+OYeTGqETCgMHV9ooi2ib3ZBJOFP7L8/kn3yCbQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b4:35:5b:90:8f:4b:21:2d:b4:c4:dd:d6:d6:c8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
        Validity
            Not Before: Jun  8 18:01:16 2025 GMT
            Not After : Jun  9 18:01:16 2025 GMT
        Subject: CN=cef1792324e66713a23ab63f5fec1d82f940bced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:71:ae:43:b8:7d:f2:f7:57:25:03:80:70:
                    26:b1:35:2b:27:f0:f6:cb:8c:25:de:40:90:e0:a5:
                    5a:49:90:db:1f:5e:65:e3:ca:8d:00:03:a7:ce:c1:
                    b6:b8:e7:92:8a:47:68:74:a8:61:0f:3f:24:82:35:
                    38:9a:31:ec:34:08:92:f3:b6:dc:7b:9d:9b:90:3a:
                    08:3a:1c:0d:a4:ef:e5:2a:76:09:ca:42:a4:0a:4c:
                    0c:cc:bc:0e:04:36:6b:61:15:4d:71:0a:5e:02:2b:
                    d9:74:20:63:47:96:b7:21:c3:de:fe:51:13:d6:64:
                    86:d0:c1:1c:c7:28:45:95:f0:21:bc:75:16:ca:0b:
                    21:27:5e:27:f7:8a:27:84:95:09:71:60:5c:34:bb:
                    d7:7d:13:83:84:ac:c8:d7:13:b0:5f:f1:82:da:62:
                    6f:b0:a6:9d:cf:c2:18:b4:4c:d3:a9:66:99:b4:98:
                    66:6e:90:97:53:fc:81:7d:71:fd:77:7c:a5:09:a1:
                    f0:2f:bf:d3:64:53:48:b2:9f:6a:78:ea:22:8f:b4:
                    19:56:35:92:de:22:bd:81:8e:78:9e:2d:12:6a:7c:
                    5d:0f:c1:21:3e:3a:55:67:34:7e:49:98:96:b6:20:
                    cd:ef:59:87:3c:50:fa:a6:08:49:99:7f:0f:67:86:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:79:23:24:E6:67:13:A2:3A:B6:3F:5F:EC:1D:82:F9:40:BC:ED
            X509v3 Authority Key Identifier:
                keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1a:77:b0:82:93:77:05:09:41:8a:2e:77:7b:7a:c3:7c:18:
         cf:84:28:45:0b:99:89:99:52:52:45:72:a1:c1:28:4d:49:63:
         ba:c3:01:6e:22:91:ba:b6:0e:84:c2:98:e7:9e:f1:ca:26:54:
         b5:b8:a1:57:fc:24:ee:13:f2:c0:68:b1:bb:a4:86:43:0c:13:
         06:72:87:58:5a:b1:ed:d0:f7:28:b7:b3:f0:d2:e7:6d:5b:da:
         68:46:ea:13:12:df:ed:32:81:fb:84:f2:9c:98:5e:fb:2c:26:
         4e:0a:fd:3e:5d:f9:57:a0:7f:0d:8f:61:02:c2:c6:a1:55:e4:
         9b:e0:37:55:c7:d2:25:66:70:54:84:92:ae:9c:db:79:bd:23:
         a1:dd:30:c7:43:96:70:99:45:de:dc:db:30:bc:f6:68:ee:bc:
         18:36:af:ff:3f:9c:46:17:27:e5:f3:6f:5d:e0:8c:02:82:bd:
         ed:57:ff:5b:ae:db:f2:02:9c:dc:40:7f:75:72:9f:51:e9:b1:
         be:cb:0c:b4:b4:e5:3c:49:57:cf:14:9d:e6:be:e7:f1:4e:9d:
         a8:31:c9:b1:6e:6e:b8:bb:7a:f8:b1:4c:bd:d5:64:36:35:08:
         02:5a:10:e1:33:6b:e5:1e:bd:d3:64:aa:81:e8:84:9e:b4:c2:
         3a:69:04:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtDVbkI9LIS20xN3W1shzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjUwNjA4MTgwMTE2WhcNMjUwNjA5MTgwMTE2WjAzMTEwLwYDVQQD
EyhjZWYxNzkyMzI0ZTY2NzEzYTIzYWI2M2Y1ZmVjMWQ4MmY5NDBiY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5dxrkO4ffL3VyUDgHAmsTUrJ/D2
y4wl3kCQ4KVaSZDbH15l48qNAAOnzsG2uOeSikdodKhhDz8kgjU4mjHsNAiS87bc
e52bkDoIOhwNpO/lKnYJykKkCkwMzLwOBDZrYRVNcQpeAivZdCBjR5a3IcPe/lET
1mSG0MEcxyhFlfAhvHUWygshJ14n94onhJUJcWBcNLvXfRODhKzI1xOwX/GC2mJv
sKadz8IYtEzTqWaZtJhmbpCXU/yBfXH9d3ylCaHwL7/TZFNIsp9qeOoij7QZVjWS
3iK9gY54ni0SanxdD8EhPjpVZzR+SZiWtiDN71mHPFD6pghJmX8PZ4ZUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7xeSMk5mcTojq2P1/sHYL5QLztMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhp3sIKT
dwUJQYoud3t6w3wYz4QoRQuZiZlSUkVyocEoTUljusMBbiKRurYOhMKY557xyiZU
tbihV/wk7hPywGixu6SGQwwTBnKHWFqx7dD3KLez8NLnbVvaaEbqExLf7TKB+4Ty
nJhe+ywmTgr9Pl35V6B/DY9hAsLGoVXkm+A3VcfSJWZwVISSrpzbeb0jod0wx0OW
cJlF3tzbMLz2aO68GDav/z+cRhcn5fNvXeCMAoK97Vf/W67b8gKc3EB/dXKfUemx
vssMtLTlPElXzxSd5r7n8U6dqDHJsW5uuLt6+LFMvdVkNjUIAloQ4TNr5R6902Sq
geiEnrTCOmkEHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:55:35 2025 by rpki-client