Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File:                     MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier:          3GtcAJ3cZRAd93RFOm4Huxq+uP5ypSUd6PZ5lEwVStY=
Subject key identifier:   4E:8D:E1:5A:A5:30:BE:98:90:A9:BD:95:98:0A:C9:D4:5B:25:27:7E
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer:       /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial:       0197643ABA927F9C35DA3268CF67E55AB07B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number:          01F7
Signing time:             Thu 12 Jun 2025 13:00:59 +0000
Manifest this update:     Thu 12 Jun 2025 13:00:59 +0000
Manifest next update:     Fri 13 Jun 2025 13:00:59 +0000
Files and hashes:         1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
                          2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: 554ng/FTHzhwTIZOR7ihI7eWHRn5rfBi0qp0yemV5Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:3a:ba:92:7f:9c:35:da:32:68:cf:67:e5:5a:b0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
        Validity
            Not Before: Jun 12 13:00:59 2025 GMT
            Not After : Jun 13 13:00:59 2025 GMT
        Subject: CN=4e8de15aa530be9890a9bd95980ac9d45b25277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:de:91:c1:25:78:d6:12:d8:c6:51:f1:85:
                    bc:4e:71:d9:e9:03:6f:96:d9:10:04:92:14:7c:3c:
                    1a:44:c2:ac:11:aa:21:0d:63:32:f8:b1:66:18:5f:
                    0b:8c:7d:24:0c:78:de:0b:ac:1b:79:d3:16:05:0a:
                    d0:74:e5:d5:a8:45:5d:b5:5a:b6:fd:d9:b6:c9:d5:
                    57:40:7c:72:3d:af:d1:b7:8c:48:17:96:de:52:08:
                    0d:cc:85:d5:3e:da:12:80:ba:f7:0e:2e:19:a5:df:
                    f0:4b:18:e9:60:53:69:1d:67:d6:cf:f5:b8:1c:34:
                    23:fe:68:be:d9:be:6f:9f:8a:dd:37:77:1a:2e:fd:
                    08:af:e2:c2:67:19:84:41:02:06:39:f8:57:e6:88:
                    7f:d5:cf:92:4e:e6:2a:65:df:2c:1d:6d:e2:00:ac:
                    a8:82:c6:9f:83:47:8e:c7:98:23:d2:bc:41:f1:13:
                    60:e8:fb:90:85:ea:8b:32:c1:b9:2c:05:70:2e:6d:
                    73:ba:0f:dc:a7:d3:0d:b9:73:a3:5a:be:0c:01:05:
                    37:af:ad:c9:51:3d:a2:41:7b:3e:7c:06:48:37:90:
                    5c:37:a6:dd:c7:d9:34:24:c0:32:a8:9e:6d:24:f4:
                    21:22:34:4e:44:1f:19:e2:2f:43:72:d7:7c:9c:9d:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8D:E1:5A:A5:30:BE:98:90:A9:BD:95:98:0A:C9:D4:5B:25:27:7E
            X509v3 Authority Key Identifier:
                keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:a3:d5:6a:92:1c:2d:d6:0e:e1:a9:ca:7f:d8:86:6f:e9:
         7f:db:44:fe:02:6a:54:bc:72:d5:f5:75:8d:4b:5a:65:8d:52:
         0b:c9:b4:3d:30:ec:38:11:97:76:71:ed:38:c8:dd:8f:2e:f9:
         07:f4:43:7b:46:6d:03:09:28:45:1b:be:cb:b9:1b:dc:40:82:
         2c:a0:77:ed:cc:26:f1:e6:34:97:99:a1:5b:96:e0:93:db:c3:
         d7:09:ea:ed:2f:a0:12:01:a1:d0:bb:79:8c:f2:43:53:5e:73:
         45:7e:81:2d:4c:75:b7:f0:2f:37:0a:ea:c5:e9:d3:7e:f9:2c:
         c6:a4:e9:14:e4:d3:23:e8:6b:97:f2:d1:19:c4:4e:fc:1b:d0:
         57:c1:04:57:e6:34:c1:61:d1:8c:12:a0:af:a9:a6:c3:93:9f:
         ad:c5:cf:ab:af:c9:db:91:8f:e3:a2:fd:46:0b:cc:c5:9e:3f:
         de:d6:4f:05:10:de:2d:44:8d:d5:86:7d:79:4d:f1:cf:42:a3:
         44:2e:95:e2:cd:c3:53:5c:51:fb:b4:31:89:b7:43:52:e9:d4:
         c7:4d:74:b7:53:98:72:41:bf:4a:e0:c8:a5:8b:b1:db:84:8e:
         13:73:68:60:94:c7:d3:2b:cd:c3:c3:3b:fe:9f:40:79:db:b8:
         fe:09:25:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkOrqSf5w12jJoz2flWrB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl
ODRhNjkwHhcNMjUwNjEyMTMwMDU5WhcNMjUwNjEzMTMwMDU5WjAzMTEwLwYDVQQD
Eyg0ZThkZTE1YWE1MzBiZTk4OTBhOWJkOTU5ODBhYzlkNDViMjUyNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqivekcEleNYS2MZR8YW8TnHZ6QNv
ltkQBJIUfDwaRMKsEaohDWMy+LFmGF8LjH0kDHjeC6wbedMWBQrQdOXVqEVdtVq2
/dm2ydVXQHxyPa/Rt4xIF5beUggNzIXVPtoSgLr3Di4Zpd/wSxjpYFNpHWfWz/W4
HDQj/mi+2b5vn4rdN3caLv0Ir+LCZxmEQQIGOfhX5oh/1c+STuYqZd8sHW3iAKyo
gsafg0eOx5gj0rxB8RNg6PuQheqLMsG5LAVwLm1zug/cp9MNuXOjWr4MAQU3r63J
UT2iQXs+fAZIN5BcN6bdx9k0JMAyqJ5tJPQhIjRORB8Z4i9Dctd8nJ3NYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6N4VqlML6YkKm9lZgKydRbJSd+MB8GA1UdIwQY
MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt
NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2
LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD+j1WqS
HC3WDuGpyn/Yhm/pf9tE/gJqVLxy1fV1jUtaZY1SC8m0PTDsOBGXdnHtOMjdjy75
B/RDe0ZtAwkoRRu+y7kb3ECCLKB37cwm8eY0l5mhW5bgk9vD1wnq7S+gEgGh0Lt5
jPJDU15zRX6BLUx1t/AvNwrqxenTfvksxqTpFOTTI+hrl/LRGcRO/BvQV8EEV+Y0
wWHRjBKgr6mmw5OfrcXPq6/J25GP46L9RgvMxZ4/3tZPBRDeLUSN1YZ9eU3xz0Kj
RC6V4s3DU1xR+7QxibdDUunUx010t1OYckG/SuDIpYux24SOE3NoYJTH0yvNw8M7
/p9Aedu4/gklXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:04:14 2025 by rpki-client