Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File:                     94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier:          iiUTfR1gfvTh6flKm1BFq1RmGjMVepgjiYMc3tDkm58=
Subject key identifier:   48:E8:62:1B:A8:B0:62:52:20:41:57:8A:46:2D:34:5B:F6:4E:CC:E4
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer:       /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial:       01974D7BD28FF4949BB80635544EE34D602C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number:          1511
Signing time:             Sun 08 Jun 2025 03:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:49 +0000
Files and hashes:         1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: /tFNTkewYMdWsjwRKIroJP/TM4y8vKMQY2Kj2gIeocE=)
                          2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:d2:8f:f4:94:9b:b8:06:35:54:4e:e3:4d:60:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
        Validity
            Not Before: Jun  8 03:00:49 2025 GMT
            Not After : Jun  9 03:00:49 2025 GMT
        Subject: CN=48e8621ba8b062522041578a462d345bf64ecce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f8:69:ce:e5:71:57:12:7e:d5:17:49:3e:53:
                    e9:2b:57:63:ab:60:54:51:58:d1:a6:4b:98:1d:78:
                    3d:f1:37:fc:6c:a5:e3:f4:c8:74:4d:c0:f7:4c:c3:
                    a9:08:1c:06:10:2b:b6:56:bb:99:9e:19:98:bc:68:
                    24:10:a7:c3:25:19:e1:da:81:56:6b:83:37:f1:0b:
                    38:9b:5a:95:ac:0f:0c:e6:dc:61:7f:a4:c2:54:d7:
                    09:82:0e:88:3a:e4:e8:50:f3:7d:69:ff:57:a5:be:
                    a6:6a:e8:5c:c7:7c:51:ff:eb:5a:82:a7:f2:fc:d9:
                    d7:3e:95:ac:dc:e3:f1:aa:20:73:6a:b1:07:86:6a:
                    75:90:39:f1:09:ff:07:e2:d6:73:95:c9:ee:d6:24:
                    79:39:e3:ae:a1:de:18:46:74:d0:47:e2:bc:50:44:
                    d4:a7:a8:7d:6e:aa:87:c5:ca:5b:0a:1f:7c:4d:a6:
                    cb:42:3b:cf:6d:f7:e2:36:28:74:9a:64:08:8d:90:
                    d8:57:6a:78:4e:3a:09:d2:de:17:6a:c3:fd:d1:88:
                    ee:d1:93:b6:c2:5c:4f:4f:bd:dd:52:23:59:5b:cf:
                    71:f3:80:ff:83:5f:c2:f0:2e:21:3e:2d:28:ed:2a:
                    0d:8d:94:a7:99:f5:f9:52:12:eb:83:5e:b2:ae:b9:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:62:1B:A8:B0:62:52:20:41:57:8A:46:2D:34:5B:F6:4E:CC:E4
            X509v3 Authority Key Identifier:
                keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:f5:ff:a6:1e:5a:ed:b4:44:17:18:72:8c:1b:54:ca:36:
         90:82:69:08:55:57:41:fa:27:8d:05:1e:63:26:70:a3:31:fc:
         e2:70:b5:9f:7f:36:57:ad:5c:00:fe:c4:a0:6a:0e:e6:db:8a:
         49:6a:ea:87:85:19:c9:de:dc:2f:2b:9d:9a:37:df:62:a3:e2:
         77:23:5b:fd:da:fa:1b:90:d6:9a:79:e0:06:d7:63:0e:d3:a0:
         ee:99:e2:91:b3:fc:44:06:79:d9:27:06:b4:98:50:d9:d1:cc:
         97:76:b5:a5:9a:a7:b9:11:d1:5c:91:18:2b:76:54:ee:b4:1f:
         16:fe:56:e6:02:61:50:32:cf:f4:b9:df:35:59:b3:85:2a:b4:
         98:4e:97:ea:9b:52:94:c3:fb:eb:97:a5:1d:d0:b2:3f:dd:38:
         d7:46:e8:23:02:39:c1:eb:04:b9:99:08:59:e1:2b:84:08:e8:
         34:fd:33:2e:a2:9f:63:95:4c:4e:23:01:2f:5a:bb:07:e5:3b:
         a8:d0:27:42:23:99:11:d6:78:86:ca:99:af:84:d4:54:7e:20:
         21:b7:a1:0e:a9:eb:34:da:a9:c9:64:b1:b3:e7:18:2a:7a:d6:
         94:9c:54:99:4f:99:d9:4f:63:c7:d4:b5:40:14:9a:22:f8:99:
         52:01:83:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe9KP9JSbuAY1VE7jTWAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjUwNjA4MDMwMDQ5WhcNMjUwNjA5MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg0OGU4NjIxYmE4YjA2MjUyMjA0MTU3OGE0NjJkMzQ1YmY2NGVjY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vhpzuVxVxJ+1RdJPlPpK1djq2BU
UVjRpkuYHXg98Tf8bKXj9Mh0TcD3TMOpCBwGECu2VruZnhmYvGgkEKfDJRnh2oFW
a4M38Qs4m1qVrA8M5txhf6TCVNcJgg6IOuToUPN9af9Xpb6mauhcx3xR/+tagqfy
/NnXPpWs3OPxqiBzarEHhmp1kDnxCf8H4tZzlcnu1iR5OeOuod4YRnTQR+K8UETU
p6h9bqqHxcpbCh98TabLQjvPbffiNih0mmQIjZDYV2p4TjoJ0t4XasP90Yju0ZO2
wlxPT73dUiNZW89x84D/g1/C8C4hPi0o7SoNjZSnmfX5UhLrg16yrrkHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjoYhuosGJSIEFXikYtNFv2TszkMB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPn1/6Ye
Wu20RBcYcowbVMo2kIJpCFVXQfonjQUeYyZwozH84nC1n382V61cAP7EoGoO5tuK
SWrqh4UZyd7cLyudmjffYqPidyNb/dr6G5DWmnngBtdjDtOg7pnikbP8RAZ52ScG
tJhQ2dHMl3a1pZqnuRHRXJEYK3ZU7rQfFv5W5gJhUDLP9LnfNVmzhSq0mE6X6ptS
lMP765elHdCyP90410boIwI5wesEuZkIWeErhAjoNP0zLqKfY5VMTiMBL1q7B+U7
qNAnQiOZEdZ4hsqZr4TUVH4gIbehDqnrNNqpyWSxs+cYKnrWlJxUmU+Z2U9jx9S1
QBSaIviZUgGDpg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:38:07 2025 by rpki-client