Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          KqYipRIc8g2Y24cK4VXYJUAlMCX469X+hUqk5N5A2sE=
Subject key identifier:   03:7B:A8:B5:46:1A:94:8B:6A:96:61:88:4F:27:5D:EC:CC:44:D9:4B
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       019747426B315EB21D686FAB683D036C7629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          12CB
Signing time:             Fri 06 Jun 2025 22:00:24 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:24 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: 6cwNtC0M+SqKHjJb1wt0xzYs27qDTvkSfwUjEahssDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:6b:31:5e:b2:1d:68:6f:ab:68:3d:03:6c:76:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Jun  6 22:00:24 2025 GMT
            Not After : Jun  7 22:00:24 2025 GMT
        Subject: CN=037ba8b5461a948b6a9661884f275deccc44d94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:9a:b8:47:b9:6c:f1:76:46:d2:b1:85:3c:
                    3e:28:77:3e:7d:1c:6d:0c:49:77:08:38:07:41:32:
                    64:ea:95:e0:cf:51:77:1d:37:20:a5:c7:21:3e:15:
                    55:be:59:b9:84:a0:11:dd:cc:5a:d1:a1:b2:c6:06:
                    4b:2f:88:02:e3:db:51:06:79:06:7e:2f:6c:2a:3a:
                    63:0f:ff:2c:7f:c8:44:8e:df:e7:a2:1d:a6:09:37:
                    70:0f:57:80:d8:53:66:89:34:bb:f9:3a:3a:3d:e9:
                    14:f5:ef:f3:37:07:aa:88:98:48:33:57:ea:99:98:
                    6c:28:f3:cc:4f:4b:96:d4:d8:7a:55:31:fd:9a:6a:
                    18:21:85:ef:ef:84:81:49:00:e1:92:f6:66:09:53:
                    04:fb:05:6e:b3:d1:c0:a0:19:4b:65:1e:c3:0c:92:
                    8a:bb:fe:e1:a3:d0:15:30:10:77:1b:ab:de:88:be:
                    6e:ca:25:cc:bf:ca:f8:64:cb:a1:7f:02:43:7c:39:
                    b1:ba:ad:52:65:80:82:9d:09:ca:80:80:04:f1:35:
                    00:f9:d9:39:c4:f1:4e:48:58:b9:73:4d:90:81:9c:
                    31:04:6f:8a:13:6e:50:45:bb:35:14:dd:2d:98:32:
                    0f:1b:89:14:30:c0:19:c3:e4:5d:63:a8:1c:38:26:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7B:A8:B5:46:1A:94:8B:6A:96:61:88:4F:27:5D:EC:CC:44:D9:4B
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:df:b7:30:03:55:64:92:13:ad:c9:3c:9c:c4:9f:14:32:
         11:b3:5c:c2:ce:60:72:90:16:9f:e1:b1:61:38:0f:2b:54:d1:
         12:46:fa:5c:2a:42:9d:95:8e:0b:83:1c:ea:9b:eb:dc:13:56:
         f4:83:97:8a:37:05:6e:93:9f:70:f7:12:a1:0d:de:44:88:6b:
         39:c0:ae:fd:f0:2c:d7:fb:4d:39:57:e0:40:63:14:04:23:dc:
         40:02:e5:ee:e7:b0:5d:2e:ec:e9:cf:64:cd:d7:a4:6c:6f:e4:
         26:49:0d:20:36:23:74:24:fa:8d:2d:42:84:c0:9c:00:a5:88:
         c4:45:05:93:9d:ef:e3:18:e9:d5:e8:27:11:01:2a:57:b8:1e:
         d6:5f:61:54:16:fe:dc:30:f5:89:04:e4:e1:ea:ba:b5:d6:e0:
         64:c6:e3:f4:bd:38:35:5e:f7:4c:e7:f7:97:d1:68:56:0c:40:
         87:27:e5:57:a5:9a:29:58:cc:05:0c:99:92:75:e9:04:4e:67:
         c9:50:08:9a:a6:4f:69:f9:9b:2b:a9:b1:74:49:d9:1f:d9:5c:
         8f:74:42:a4:f8:b9:bc:cc:0a:7f:3d:d1:e8:65:96:6b:06:69:
         84:62:38:3c:2e:ee:68:72:33:2a:22:e9:b8:41:80:93:b2:1b:
         f2:da:68:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQmsxXrIdaG+raD0DbHYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj
MjAzMmUwHhcNMjUwNjA2MjIwMDI0WhcNMjUwNjA3MjIwMDI0WjAzMTEwLwYDVQQD
EygwMzdiYThiNTQ2MWE5NDhiNmE5NjYxODg0ZjI3NWRlY2NjNDRkOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXiauEe5bPF2RtKxhTw+KHc+fRxt
DEl3CDgHQTJk6pXgz1F3HTcgpcchPhVVvlm5hKAR3cxa0aGyxgZLL4gC49tRBnkG
fi9sKjpjD/8sf8hEjt/noh2mCTdwD1eA2FNmiTS7+To6PekU9e/zNweqiJhIM1fq
mZhsKPPMT0uW1Nh6VTH9mmoYIYXv74SBSQDhkvZmCVME+wVus9HAoBlLZR7DDJKK
u/7ho9AVMBB3G6veiL5uyiXMv8r4ZMuhfwJDfDmxuq1SZYCCnQnKgIAE8TUA+dk5
xPFOSFi5c02QgZwxBG+KE25QRbs1FN0tmDIPG4kUMMAZw+RdY6gcOCYhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN7qLVGGpSLapZhiE8nXezMRNlLMB8GA1UdIwQY
MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct
OWUyMjBmMDRhOTAxLzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx
LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9TftzAD
VWSSE63JPJzEnxQyEbNcws5gcpAWn+GxYTgPK1TREkb6XCpCnZWOC4Mc6pvr3BNW
9IOXijcFbpOfcPcSoQ3eRIhrOcCu/fAs1/tNOVfgQGMUBCPcQALl7uewXS7s6c9k
zdekbG/kJkkNIDYjdCT6jS1ChMCcAKWIxEUFk53v4xjp1egnEQEqV7ge1l9hVBb+
3DD1iQTk4eq6tdbgZMbj9L04NV73TOf3l9FoVgxAhyflV6WaKVjMBQyZknXpBE5n
yVAImqZPafmbK6mxdEnZH9lcj3RCpPi5vMwKfz3R6GWWawZphGI4PC7uaHIzKiLp
uEGAk7Ib8tpoOw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:42:57 2025 by rpki-client