Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File:                     x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier:          xMxVtRuHHOmF7U6fcYeoZKVQ5JQl0a3giQYXu/wvL24=
Subject key identifier:   A1:D0:F9:AC:4C:40:F2:DC:E4:A5:B5:A9:E4:0C:A4:2D:F0:61:A2:E5
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer:       /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial:       01974F32E2F40EDF2A0C725DB58A57AAAD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number:          098D
Signing time:             Sun 08 Jun 2025 11:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:24 +0000
Files and hashes:         1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
                          2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: M8HypFTVhSy0IOGd/WCG+iYZl2WyRW9u8tNEniR0XxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:32:e2:f4:0e:df:2a:0c:72:5d:b5:8a:57:aa:ad:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
        Validity
            Not Before: Jun  8 11:00:24 2025 GMT
            Not After : Jun  9 11:00:24 2025 GMT
        Subject: CN=a1d0f9ac4c40f2dce4a5b5a9e40ca42df061a2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:74:ec:07:2f:36:02:f2:16:44:06:6e:08:
                    59:46:f2:81:4b:36:65:3f:d1:d7:58:5a:5c:53:2e:
                    6c:06:4b:33:a8:b1:5f:a0:cf:cf:ff:6e:fb:2f:41:
                    5d:0a:c6:67:25:7a:a2:07:35:77:c5:06:ec:92:6d:
                    de:eb:79:04:71:a5:a6:34:7c:de:88:47:a2:ba:c0:
                    c1:8d:f6:7b:33:8f:b3:54:16:40:1a:81:b6:fe:04:
                    d7:ac:d4:0f:55:2e:e6:79:c5:05:01:6e:d3:6a:c9:
                    7c:50:cc:a8:c6:22:5a:ff:96:fe:ba:f9:72:a9:67:
                    46:e2:e8:7b:f1:01:94:0d:cc:67:37:72:3d:06:31:
                    ae:7d:0c:f5:81:21:e6:cd:23:84:ca:7c:41:1d:e1:
                    a1:2f:35:cf:bf:3c:7f:7e:63:6e:f7:0a:09:70:dd:
                    bc:d7:87:34:5d:d7:7d:ab:bf:b8:f0:14:20:60:c1:
                    b4:24:45:de:e3:e9:4d:37:e5:11:c9:bd:75:e5:b3:
                    ef:e6:2d:e6:65:36:6a:33:77:e3:62:c3:46:8d:16:
                    4b:18:8b:d6:99:7c:0f:f0:02:22:06:43:dd:2e:8d:
                    93:0e:b3:df:e0:6f:2b:03:fd:05:ee:46:d2:ba:f8:
                    7b:f3:7c:d5:75:dd:8c:c3:f2:9b:eb:83:f5:15:f2:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D0:F9:AC:4C:40:F2:DC:E4:A5:B5:A9:E4:0C:A4:2D:F0:61:A2:E5
            X509v3 Authority Key Identifier:
                keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:24:64:0a:a9:b1:c4:90:60:57:ca:87:7d:af:a2:e6:3b:
         a0:79:1f:f3:60:89:e8:ca:e2:4e:4f:99:e0:b0:a1:cc:72:50:
         58:f6:b6:b4:9f:58:e9:04:2f:c1:b5:f9:5c:bb:b5:69:3f:33:
         81:aa:e3:f5:a1:e7:77:be:c8:de:49:e2:f6:ac:1e:2d:58:bd:
         c3:8d:78:a0:4e:b0:3a:0e:79:c4:a0:93:59:e1:86:d0:03:ef:
         18:53:dc:96:1e:e3:0c:9b:28:fb:fb:77:94:45:29:a8:9b:25:
         2a:7c:fe:c6:6d:0d:73:c8:0e:97:65:ec:1e:33:58:6c:74:d4:
         7f:5c:be:08:fd:1a:2c:3c:2a:bf:94:ba:3c:fb:bf:08:c1:7f:
         05:98:98:f5:c9:ca:12:e0:7e:b8:b5:23:88:a8:b2:19:d7:76:
         70:c0:13:38:30:fd:db:9f:2c:51:4c:1f:7b:87:c3:33:5c:62:
         f6:13:0a:b3:d3:7a:60:d2:65:64:6d:c0:c1:76:30:0d:32:e6:
         d6:09:7d:86:68:40:4a:33:a4:f5:43:b4:14:8f:22:4b:d5:a4:
         cf:90:39:28:11:fa:70:45:3f:98:04:4a:67:ed:b0:58:3f:3a:
         10:b6:03:41:43:0f:9d:da:4d:b3:d6:41:ab:9f:bd:ae:09:61:
         9e:e9:60:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPMuL0Dt8qDHJdtYpXqq0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2
OWQzMGQwHhcNMjUwNjA4MTEwMDI0WhcNMjUwNjA5MTEwMDI0WjAzMTEwLwYDVQQD
EyhhMWQwZjlhYzRjNDBmMmRjZTRhNWI1YTllNDBjYTQyZGYwNjFhMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg907AcvNgLyFkQGbghZRvKBSzZl
P9HXWFpcUy5sBkszqLFfoM/P/277L0FdCsZnJXqiBzV3xQbskm3e63kEcaWmNHze
iEeiusDBjfZ7M4+zVBZAGoG2/gTXrNQPVS7mecUFAW7Tasl8UMyoxiJa/5b+uvly
qWdG4uh78QGUDcxnN3I9BjGufQz1gSHmzSOEynxBHeGhLzXPvzx/fmNu9woJcN28
14c0Xdd9q7+48BQgYMG0JEXe4+lNN+URyb115bPv5i3mZTZqM3fjYsNGjRZLGIvW
mXwP8AIiBkPdLo2TDrPf4G8rA/0F7kbSuvh783zVdd2Mw/Kb64P1FfJk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHQ+axMQPLc5KW1qeQMpC3wYaLlMB8GA1UdIwQY
MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt
MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl
LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC4kZAqp
scSQYFfKh32vouY7oHkf82CJ6MriTk+Z4LChzHJQWPa2tJ9Y6QQvwbX5XLu1aT8z
garj9aHnd77I3kni9qweLVi9w414oE6wOg55xKCTWeGG0APvGFPclh7jDJso+/t3
lEUpqJslKnz+xm0Nc8gOl2XsHjNYbHTUf1y+CP0aLDwqv5S6PPu/CMF/BZiY9cnK
EuB+uLUjiKiyGdd2cMATODD9258sUUwfe4fDM1xi9hMKs9N6YNJlZG3AwXYwDTLm
1gl9hmhASjOk9UO0FI8iS9Wkz5A5KBH6cEU/mARKZ+2wWD86ELYDQUMPndpNs9ZB
q5+9rglhnulgtw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:51:36 2025 by rpki-client