Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File:                     ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier:          jVoszvvBCPxXW7W2sF4DyWOs4CE3JFj/U5KwX3gV7fA=
Subject key identifier:   22:CD:D4:6E:AB:5C:09:90:0B:D7:5D:5C:C3:BC:CE:81:64:E0:48:13
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer:       /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial:       01974967E9DED43A5C253976F307E3FDF7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number:          0CA4
Signing time:             Sat 07 Jun 2025 08:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:36 +0000
Files and hashes:         1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
                          2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: EbPEKAG/0Rj38nG+EGtEVnepiljOAhSMpCXkrdiMlCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:e9:de:d4:3a:5c:25:39:76:f3:07:e3:fd:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
        Validity
            Not Before: Jun  7 08:00:36 2025 GMT
            Not After : Jun  8 08:00:36 2025 GMT
        Subject: CN=22cdd46eab5c09900bd75d5cc3bcce8164e04813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:6e:d0:85:70:70:19:91:a8:9f:0c:94:cc:
                    74:ba:6b:17:71:2b:73:22:fc:a7:5e:5b:92:43:c1:
                    e7:92:c3:84:84:72:53:e1:79:4c:af:4b:34:97:72:
                    80:44:24:44:ed:28:c6:c3:1d:bd:5f:61:4d:06:54:
                    de:24:fe:c7:43:c3:f5:fa:95:03:18:4a:d8:33:da:
                    47:93:cf:c1:0a:94:86:22:1f:01:f8:b5:21:ff:52:
                    8e:1b:4b:2d:53:66:1f:83:00:7d:1a:12:d1:f1:29:
                    e5:b5:7e:ee:81:f9:91:48:15:43:88:19:ba:c1:17:
                    61:2b:cd:f2:37:8a:c4:ab:f5:9f:e5:98:36:13:b1:
                    91:8c:5a:65:77:41:71:e8:8b:6f:f3:e9:95:af:01:
                    53:d3:e5:5e:35:ce:26:49:ff:71:a4:33:92:1f:45:
                    9d:76:c7:38:f3:c0:8f:1b:74:35:6b:db:36:f2:b2:
                    2c:47:15:09:fb:1c:ab:a8:57:fd:67:d0:51:4f:7e:
                    90:6b:87:fa:1c:fa:39:68:68:51:fd:06:dd:60:93:
                    40:d5:95:51:8b:be:d8:6c:56:52:fa:b1:0a:79:2f:
                    d9:ff:ba:ec:66:98:1f:ae:18:eb:70:25:44:61:fb:
                    43:31:61:4e:33:ce:e8:18:68:2c:97:3b:4c:b0:a8:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CD:D4:6E:AB:5C:09:90:0B:D7:5D:5C:C3:BC:CE:81:64:E0:48:13
            X509v3 Authority Key Identifier:
                keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:09:95:0b:b8:08:d7:d6:b3:10:b0:3a:b0:2b:6f:d6:35:
         15:f6:c0:06:74:c3:fe:8e:81:3d:d1:fe:9d:ff:7f:0c:81:b2:
         9b:10:16:11:4f:21:a3:cc:47:e2:cb:f6:89:98:22:b6:55:e8:
         04:48:a2:b9:f7:91:f8:3f:e0:77:64:04:df:31:87:ca:a4:c4:
         2a:66:bd:ea:74:d1:72:e8:4a:d3:04:da:25:82:42:dd:d5:d6:
         d5:ac:09:4c:16:2b:1c:29:43:02:79:f4:fb:db:a1:ea:11:6c:
         74:a9:bc:e7:fa:1b:ef:09:e0:16:3d:3b:5a:30:76:f0:09:d7:
         4e:35:65:5b:10:dc:32:7a:ad:19:08:1d:c6:23:cb:fa:03:24:
         75:0a:e0:65:3c:3f:d7:c3:98:b4:e2:5c:a0:61:91:f8:79:e9:
         08:ac:4a:c4:81:80:cf:c3:57:15:f4:d6:77:75:2f:18:d9:c5:
         22:21:17:e6:49:b1:21:2b:2b:49:32:43:ec:d9:56:31:30:3b:
         ca:76:47:44:ec:2f:80:22:32:03:df:f5:da:f1:1c:bc:2f:51:
         e3:6d:c6:82:89:d4:d1:58:95:9c:69:a9:f9:b7:66:95:4e:79:
         77:cf:6f:88:14:70:5b:32:19:cf:c2:0d:82:4a:9b:b8:08:b1:
         e3:ec:b7:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ+ne1DpcJTl28wfj/ffXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwNjA3MDgwMDM2WhcNMjUwNjA4MDgwMDM2WjAzMTEwLwYDVQQD
EygyMmNkZDQ2ZWFiNWMwOTkwMGJkNzVkNWNjM2JjY2U4MTY0ZTA0ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJRu0IVwcBmRqJ8MlMx0umsXcStz
IvynXluSQ8HnksOEhHJT4XlMr0s0l3KARCRE7SjGwx29X2FNBlTeJP7HQ8P1+pUD
GErYM9pHk8/BCpSGIh8B+LUh/1KOG0stU2YfgwB9GhLR8SnltX7ugfmRSBVDiBm6
wRdhK83yN4rEq/Wf5Zg2E7GRjFpld0Fx6Itv8+mVrwFT0+VeNc4mSf9xpDOSH0Wd
dsc488CPG3Q1a9s28rIsRxUJ+xyrqFf9Z9BRT36Qa4f6HPo5aGhR/QbdYJNA1ZVR
i77YbFZS+rEKeS/Z/7rsZpgfrhjrcCVEYftDMWFOM87oGGgslztMsKiXjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLN1G6rXAmQC9ddXMO8zoFk4EgTMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0oJlQu4
CNfWsxCwOrArb9Y1FfbABnTD/o6BPdH+nf9/DIGymxAWEU8ho8xH4sv2iZgitlXo
BEiiufeR+D/gd2QE3zGHyqTEKma96nTRcuhK0wTaJYJC3dXW1awJTBYrHClDAnn0
+9uh6hFsdKm85/ob7wngFj07WjB28AnXTjVlWxDcMnqtGQgdxiPL+gMkdQrgZTw/
18OYtOJcoGGR+HnpCKxKxIGAz8NXFfTWd3UvGNnFIiEX5kmxISsrSTJD7NlWMTA7
ynZHROwvgCIyA9/12vEcvC9R423GgonU0ViVnGmp+bdmlU55d89viBRwWzIZz8IN
gkqbuAix4+y3bw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:44:22 2025 by rpki-client