Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          SlcppCdWmHIjlVwGrJ0ro0Y58vQHggBSXHh5kJeKu/s=
Subject key identifier:   F8:EB:5F:DC:70:67:64:65:74:A5:D9:F2:7B:8B:DC:89:4D:F1:61:BC
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       01974A0C807389750A151E17AD0C8B1E5A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          0D9D
Signing time:             Sat 07 Jun 2025 11:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:22 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: bK6Ay+GKqhcZzwlmx/zlcbK5zxBIL7HsHVvpQ95USVY=)
                          2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:80:73:89:75:0a:15:1e:17:ad:0c:8b:1e:5a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Jun  7 11:00:22 2025 GMT
            Not After : Jun  8 11:00:22 2025 GMT
        Subject: CN=f8eb5fdc7067646574a5d9f27b8bdc894df161bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:df:30:31:84:a4:b3:3b:d0:bb:ab:52:3b:
                    33:bd:ee:36:70:69:8f:30:89:a2:c9:19:6c:b4:b5:
                    fb:05:11:06:de:4c:63:ff:ec:ec:e1:1e:8d:20:09:
                    f9:7a:dd:fb:30:1f:c1:ee:d2:57:d5:b6:53:3e:99:
                    1b:07:39:58:6b:ef:8b:07:a3:21:39:47:dd:03:46:
                    0b:ff:3e:85:f6:23:45:e2:29:aa:22:26:56:94:f3:
                    01:82:38:bc:fb:59:56:0d:90:56:32:1f:de:24:e6:
                    15:1d:61:28:f8:23:a8:f2:c3:45:97:59:27:26:cf:
                    b5:2d:a8:ce:f7:e1:76:08:9d:2e:45:3d:f3:48:23:
                    ab:21:c4:74:d1:70:13:68:bb:ef:38:f8:50:8a:0a:
                    e5:7e:4c:6a:f3:1f:e9:7a:30:5e:7c:6f:b8:0b:31:
                    9d:c6:0c:95:5a:84:ec:ef:d7:ea:e5:40:8f:fc:e4:
                    0f:7e:ad:03:b4:93:f7:da:ca:91:f7:5d:07:11:86:
                    90:d8:91:49:f3:14:40:4d:46:b8:78:3b:a7:ab:6f:
                    3c:00:2d:59:95:8d:3b:d7:66:86:a2:24:a2:68:3c:
                    aa:34:fb:7a:64:1e:da:20:3b:05:b3:f8:25:79:f5:
                    a5:85:e1:b5:7b:1f:52:39:aa:00:8f:8d:a2:bc:bc:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:5F:DC:70:67:64:65:74:A5:D9:F2:7B:8B:DC:89:4D:F1:61:BC
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:18:44:59:61:91:92:67:3e:72:6a:63:35:ef:c2:0c:f6:
         e2:19:65:6c:cb:3c:ff:44:46:5b:34:91:f3:b9:40:df:34:a3:
         e0:bc:5f:90:fe:1a:de:25:0b:82:f9:be:2c:23:a4:d4:8c:07:
         0e:d3:19:65:bc:ae:d2:c0:a2:62:75:4f:09:7f:db:0f:ff:6e:
         8b:26:47:4e:d4:eb:ba:91:0e:99:b7:58:f2:97:61:fc:14:c6:
         9b:15:ab:d1:99:3c:66:03:20:2c:75:9f:f3:c5:2a:28:79:91:
         61:49:19:df:67:64:ae:01:c3:12:c5:59:60:1c:8b:1f:b8:9a:
         28:50:62:44:9b:33:ab:93:be:cf:5f:f4:60:19:43:e9:dc:f0:
         b9:a6:92:81:76:bb:1f:03:59:25:b3:b7:f2:80:f4:5b:53:79:
         ce:ba:15:a3:98:a1:f1:a9:6b:51:b9:3b:93:52:64:29:11:4c:
         f0:c2:4c:1f:2e:6d:37:8a:11:8d:81:70:ad:15:01:19:54:70:
         66:f5:e0:6f:6c:cc:85:70:d8:8a:40:b4:12:d2:88:87:15:64:
         a1:c3:20:00:81:1c:f0:63:f0:8b:5f:39:68:8f:0d:14:4a:53:
         ac:b6:1a:76:c8:02:de:60:f6:e3:fc:21:21:0a:3f:b5:3a:08:
         58:c2:54:04
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdKDIBziXUKFR4XrQyLHloJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTUxYmE1NjMyOTMyM2I0YzYwZjYyMGQ2YTczOTFlNzA3
YjU1NTYwHhcNMjUwNjA3MTEwMDIyWhcNMjUwNjA4MTEwMDIyWjAzMTEwLwYDVQQD
EyhmOGViNWZkYzcwNjc2NDY1NzRhNWQ5ZjI3YjhiZGM4OTRkZjE2MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIvfMDGEpLM70LurUjszve42cGmP
MImiyRlstLX7BREG3kxj/+zs4R6NIAn5et37MB/B7tJX1bZTPpkbBzlYa++LB6Mh
OUfdA0YL/z6F9iNF4imqIiZWlPMBgji8+1lWDZBWMh/eJOYVHWEo+COo8sNFl1kn
Js+1LajO9+F2CJ0uRT3zSCOrIcR00XATaLvvOPhQigrlfkxq8x/pejBefG+4CzGd
xgyVWoTs79fq5UCP/OQPfq0DtJP32sqR910HEYaQ2JFJ8xRATUa4eDunq288AC1Z
lY0712aGoiSiaDyqNPt6ZB7aIDsFs/glefWlheG1ex9SOaoAj42ivLwpEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPjrX9xwZ2RldKXZ8nuL3IlN8WG8MB8GA1UdIwQY
MBaAFPmVG6VjKTI7TGD2INanOR5we1VWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aVWJwV01wTWp0TVlQWWcxcWM1SG5CN1ZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJm
LTQ3NDVkN2NkOTNmMS8xLzEtWlVicFdNcE1qdE1ZUFlnMXFjNUhuQjdWVlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzhmNWNiZC1mNTM5LTRmZmYtYjQyZi00NzQ1ZDdjZDkz
ZjEvMS8xLVpVYnBXTXBNanRNWVBZZzFxYzVIbkI3VlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNgY
RFlhkZJnPnJqYzXvwgz24hllbMs8/0RGWzSR87lA3zSj4LxfkP4a3iULgvm+LCOk
1IwHDtMZZbyu0sCiYnVPCX/bD/9uiyZHTtTrupEOmbdY8pdh/BTGmxWr0Zk8ZgMg
LHWf88UqKHmRYUkZ32dkrgHDEsVZYByLH7iaKFBiRJszq5O+z1/0YBlD6dzwuaaS
gXa7HwNZJbO38oD0W1N5zroVo5ih8alrUbk7k1JkKRFM8MJMHy5tN4oRjYFwrRUB
GVRwZvXgb2zMhXDYikC0EtKIhxVkocMgAIEc8GPwi185aI8NFEpTrLYadsgC3mD2
4/whIQo/tToIWMJUBA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:53 2025 by rpki-client