Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          PxQz7WuWoFzn8WP6PkMbIiqPlHePsJ1jP1pbPbTBVP0=
Subject key identifier:   3F:37:6D:02:D9:38:B4:04:CA:18:48:FF:21:68:67:E2:89:2D:64:01
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       019749D5DDBA16D55F065D3C5776B61751B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 10:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:42 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: FuIUHJdFsdg9Kyo928HPcpv1TOA7bW9XolDQ9fgVUY8=)
                          2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:dd:ba:16:d5:5f:06:5d:3c:57:76:b6:17:51:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: Jun  7 10:00:42 2025 GMT
            Not After : Jun  8 10:00:42 2025 GMT
        Subject: CN=3f376d02d938b404ca1848ff216867e2892d6401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:fc:31:c3:3d:05:59:3c:b2:08:c0:e5:64:
                    ab:d4:60:6d:63:e7:7a:ed:cb:e1:a9:a1:4e:93:cc:
                    ba:ce:cf:f6:ce:90:3d:4a:71:fc:d8:b5:32:70:e1:
                    2c:55:1d:70:67:cb:49:ab:2f:1f:64:08:58:b4:47:
                    df:86:d9:71:6c:b4:ce:bf:61:9c:ae:d1:1f:54:3c:
                    c4:7c:41:20:3c:99:5e:52:a7:2e:47:e3:70:4d:7f:
                    62:00:06:27:78:23:fa:c6:c0:b3:83:2d:8f:38:0e:
                    ae:26:6e:83:f0:9a:f9:c1:3a:bd:b3:7a:af:29:24:
                    b7:3c:a1:b5:a8:c9:da:15:d2:4e:e1:bd:4e:d1:b0:
                    f2:9e:46:3e:08:a2:16:e9:c3:12:bc:ec:92:71:95:
                    c0:32:a5:d5:1e:32:ed:bc:ee:f4:fa:81:59:9a:e8:
                    9d:5d:d0:39:74:ab:a4:fd:5b:42:c6:a1:91:5e:ec:
                    27:6a:0f:b9:1a:13:0d:23:13:03:28:33:c8:c4:0e:
                    7e:97:7c:34:ea:ab:70:2f:90:2b:1b:eb:6f:90:92:
                    2d:01:2e:c7:95:c4:0f:7a:28:29:51:8e:ec:83:5a:
                    20:12:9f:ac:80:ae:38:a1:43:8b:37:20:5c:cd:a8:
                    4c:26:d4:d3:72:4c:3c:2c:c5:7e:23:36:06:dc:f1:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:6D:02:D9:38:B4:04:CA:18:48:FF:21:68:67:E2:89:2D:64:01
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:cf:59:c6:1a:40:62:5f:b1:3d:fe:de:32:84:08:47:4c:
         f0:ce:1d:a7:27:fe:5f:03:11:5d:2d:b9:ab:05:d9:98:72:97:
         92:e1:68:22:06:36:61:eb:af:82:38:89:80:e0:e9:50:07:84:
         f5:08:24:29:a3:2d:67:92:af:b1:3c:1e:65:ae:80:14:19:42:
         bd:26:c9:16:ed:b8:b9:88:05:ce:4b:ea:f6:26:6f:6d:ba:83:
         5e:f3:74:81:16:7e:52:c4:73:aa:4f:ab:f0:c7:32:55:db:91:
         d3:4f:f8:55:c6:67:24:ce:c6:fd:92:e9:35:79:f6:5f:7d:8b:
         07:9a:ee:33:65:e8:19:0a:86:34:6f:98:7b:13:f0:26:35:a8:
         94:c7:21:8f:4b:1d:3d:05:50:63:b4:31:31:ab:02:1b:bd:f6:
         91:6c:3b:89:16:68:8b:5d:05:b4:b1:79:d4:67:79:f9:ea:49:
         0c:bb:ab:f6:e4:28:a6:da:b3:75:fa:5f:99:d5:e7:10:24:38:
         e2:49:41:68:78:1d:fa:81:6a:fb:98:77:e4:87:81:28:65:80:
         ef:e9:ee:a7:97:66:62:ac:a7:33:b8:d5:81:90:13:7e:99:47:
         88:14:0b:dc:1a:db:f7:35:21:08:67:89:aa:a3:46:a5:0c:3b:
         f2:e6:d2:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1d26FtVfBl08V3a2F1G1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl
Y2E4ZGUwHhcNMjUwNjA3MTAwMDQyWhcNMjUwNjA4MTAwMDQyWjAzMTEwLwYDVQQD
EygzZjM3NmQwMmQ5MzhiNDA0Y2ExODQ4ZmYyMTY4NjdlMjg5MmQ2NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E78McM9BVk8sgjA5WSr1GBtY+d6
7cvhqaFOk8y6zs/2zpA9SnH82LUycOEsVR1wZ8tJqy8fZAhYtEffhtlxbLTOv2Gc
rtEfVDzEfEEgPJleUqcuR+NwTX9iAAYneCP6xsCzgy2POA6uJm6D8Jr5wTq9s3qv
KSS3PKG1qMnaFdJO4b1O0bDynkY+CKIW6cMSvOyScZXAMqXVHjLtvO70+oFZmuid
XdA5dKuk/VtCxqGRXuwnag+5GhMNIxMDKDPIxA5+l3w06qtwL5ArG+tvkJItAS7H
lcQPeigpUY7sg1ogEp+sgK44oUOLNyBczahMJtTTckw8LMV+IzYG3PGFuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD83bQLZOLQEyhhI/yFoZ+KJLWQBMB8GA1UdIwQY
MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt
YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4
LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgvPWcYa
QGJfsT3+3jKECEdM8M4dpyf+XwMRXS25qwXZmHKXkuFoIgY2YeuvgjiJgODpUAeE
9QgkKaMtZ5KvsTweZa6AFBlCvSbJFu24uYgFzkvq9iZvbbqDXvN0gRZ+UsRzqk+r
8McyVduR00/4VcZnJM7G/ZLpNXn2X32LB5ruM2XoGQqGNG+YexPwJjWolMchj0sd
PQVQY7QxMasCG732kWw7iRZoi10FtLF51Gd5+epJDLur9uQoptqzdfpfmdXnECQ4
4klBaHgd+oFq+5h35IeBKGWA7+nup5dmYqynM7jVgZATfplHiBQL3Brb9zUhCGeJ
qqNGpQw78ubSdA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:38 2025 by rpki-client