Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          Xc0hO0ebL8bmUB6BSzs2XUqW8NflU8dIMEtxfDN2Klo=
Subject key identifier:   6F:A5:D1:3B:B4:10:8D:6B:8C:F1:76:8F:86:56:28:89:CB:5B:68:C5
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       01973CBF08D4670FDB894F63C5DA82645DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          11F1
Signing time:             Wed 04 Jun 2025 21:00:41 +0000
Manifest this update:     Wed 04 Jun 2025 21:00:41 +0000
Manifest next update:     Thu 05 Jun 2025 21:00:41 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: 44wb6IfBzyYiVmslFGkcs7/5KhuBbWB9WhgK1SLKfeI=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3c:bf:08:d4:67:0f:db:89:4f:63:c5:da:82:64:5d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Jun  4 21:00:41 2025 GMT
            Not After : Jun  5 21:00:41 2025 GMT
        Subject: CN=6fa5d13bb4108d6b8cf1768f86562889cb5b68c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:20:56:d6:60:35:5b:c4:3a:53:0e:73:13:
                    aa:63:70:10:b1:90:da:a7:bf:d6:f7:22:35:79:d5:
                    75:3f:4a:27:fe:ef:20:9f:c2:28:16:fa:81:37:2f:
                    55:ca:3f:35:8b:91:6a:9c:ae:d2:c6:c1:d2:a3:76:
                    82:e3:e8:90:df:57:4b:59:bb:f9:0b:b4:f1:c4:36:
                    df:cf:5b:e5:d2:9c:ee:ce:67:a2:ec:e0:46:6c:16:
                    50:1d:ac:03:23:b2:b0:02:12:54:70:e7:d7:a9:38:
                    68:db:1a:08:e1:06:b9:6e:ff:e5:41:ff:b4:31:4e:
                    c3:b4:0c:9d:46:35:d7:43:38:2d:c5:1d:0b:d0:c1:
                    26:13:84:0d:56:3c:52:a5:f3:bf:21:a2:84:7b:5c:
                    cc:75:60:bb:b8:73:ec:18:c5:04:ed:bd:5e:45:34:
                    f8:95:b5:00:42:97:e2:d9:5f:04:08:7e:22:8f:d2:
                    d2:b0:9d:8b:73:fe:a4:ff:a9:57:26:23:5a:9e:25:
                    39:82:1b:d7:5b:89:5a:ea:2a:75:4a:62:0e:d2:0c:
                    a9:a0:74:68:c2:f6:98:40:ca:2d:cd:ca:26:ca:4f:
                    9c:2f:e1:4b:eb:9c:54:db:94:e8:8f:c6:25:b5:65:
                    76:0b:58:34:6d:62:45:f4:5b:4d:07:61:5d:bd:41:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A5:D1:3B:B4:10:8D:6B:8C:F1:76:8F:86:56:28:89:CB:5B:68:C5
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:96:52:28:4d:ff:0f:42:03:c2:72:da:ee:af:98:f6:79:ed:
         ce:6d:2a:6b:17:33:f1:70:c1:c4:5b:38:af:ab:f8:67:dc:3c:
         20:79:43:78:52:8f:0c:1f:b7:1f:f8:a4:6c:fe:3a:f0:e3:c8:
         a2:d2:92:6f:06:d3:de:41:ae:66:85:77:eb:2c:03:77:05:29:
         a1:14:2e:01:58:cb:82:b1:9c:47:e5:ac:70:55:e9:c1:ee:7a:
         bd:d2:78:51:53:01:8a:45:d3:fd:f4:39:b7:70:3e:5f:51:95:
         07:f5:e5:d3:81:bd:e7:36:36:c7:ac:ea:da:8b:43:3b:f8:ea:
         36:e3:88:f8:6e:34:3c:f4:2f:7a:6e:47:14:92:93:13:7b:13:
         6e:d2:bd:11:a3:d1:c3:0a:ee:35:bf:7f:c2:d9:a6:5f:9c:1c:
         3f:d4:2d:9c:92:0f:a1:1d:c2:c0:b4:85:0b:7e:14:32:c6:b2:
         1e:b2:3b:37:9b:aa:1a:33:b4:70:a7:c9:14:e2:7d:b2:3d:ab:
         9b:86:9f:b0:f6:03:b4:40:b4:57:e9:01:91:05:7d:2a:d4:13:
         2d:1f:47:c3:9a:d7:a1:52:e7:7d:5a:b6:6c:b3:bd:dc:25:de:
         aa:d6:f4:df:32:8a:24:dd:9a:e9:d9:d8:84:fa:bd:de:b5:56:
         48:8f:cc:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc8vwjUZw/biU9jxdqCZF3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz
MmVhOWIwHhcNMjUwNjA0MjEwMDQxWhcNMjUwNjA1MjEwMDQxWjAzMTEwLwYDVQQD
Eyg2ZmE1ZDEzYmI0MTA4ZDZiOGNmMTc2OGY4NjU2Mjg4OWNiNWI2OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraggVtZgNVvEOlMOcxOqY3AQsZDa
p7/W9yI1edV1P0on/u8gn8IoFvqBNy9Vyj81i5FqnK7SxsHSo3aC4+iQ31dLWbv5
C7TxxDbfz1vl0pzuzmei7OBGbBZQHawDI7KwAhJUcOfXqTho2xoI4Qa5bv/lQf+0
MU7DtAydRjXXQzgtxR0L0MEmE4QNVjxSpfO/IaKEe1zMdWC7uHPsGMUE7b1eRTT4
lbUAQpfi2V8ECH4ij9LSsJ2Lc/6k/6lXJiNaniU5ghvXW4la6ip1SmIO0gypoHRo
wvaYQMotzcomyk+cL+FL65xU25Toj8YltWV2C1g0bWJF9FtNB2FdvUGaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+l0Tu0EI1rjPF2j4ZWKInLW2jFMB8GA1UdIwQY
MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5ZSKE3/
D0IDwnLa7q+Y9nntzm0qaxcz8XDBxFs4r6v4Z9w8IHlDeFKPDB+3H/ikbP468OPI
otKSbwbT3kGuZoV36ywDdwUpoRQuAVjLgrGcR+WscFXpwe56vdJ4UVMBikXT/fQ5
t3A+X1GVB/Xl04G95zY2x6zq2otDO/jqNuOI+G40PPQvem5HFJKTE3sTbtK9EaPR
wwruNb9/wtmmX5wcP9QtnJIPoR3CwLSFC34UMsayHrI7N5uqGjO0cKfJFOJ9sj2r
m4afsPYDtEC0V+kBkQV9KtQTLR9Hw5rXoVLnfVq2bLO93CXeqtb03zKKJN2a6dnY
hPq93rVWSI/MPA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 05:11:42 2025 by rpki-client