Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          mRFjpkUBS296IfQhQ9y3MR7Pa6pYik74t0KCdOpX2Uo=
Subject key identifier:   A5:C2:BC:9A:A3:60:20:6B:B6:3C:89:95:85:8F:04:CB:88:1B:1B:81
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       01976FD11F982BF9BDCC818C5E72C77A6ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          0265
Signing time:             Sat 14 Jun 2025 19:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:05 +0000
Files and hashes:         1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: Rr4mYhjt6+T/nb28RTOJGwFW4dRDqxstgeHiernDEj0=)
                          2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
                          3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
                          4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:1f:98:2b:f9:bd:cc:81:8c:5e:72:c7:7a:6e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Jun 14 19:01:05 2025 GMT
            Not After : Jun 15 19:01:05 2025 GMT
        Subject: CN=a5c2bc9aa360206bb63c8995858f04cb881b1b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:ad:16:9b:1b:31:d6:da:5f:cd:b4:35:c0:
                    a9:ba:39:c6:40:e4:a2:db:03:2e:83:78:6b:b4:e1:
                    85:ab:d3:a4:5a:67:9d:58:cc:d9:b3:37:21:63:38:
                    ce:85:c1:d8:ba:06:81:b6:f0:14:ea:a1:32:de:50:
                    39:f9:e5:c3:c0:22:28:e7:26:f1:1a:f3:ab:34:5e:
                    5f:16:cc:3e:c9:62:0a:ba:9d:49:a1:8a:97:90:69:
                    50:d5:2d:8e:c4:e9:60:46:25:bb:b8:65:94:9b:5f:
                    a0:54:72:23:f0:dc:d9:31:6a:31:9b:27:6f:32:e5:
                    cc:be:74:a6:c3:27:82:3b:65:9e:a0:8b:ae:0e:8c:
                    db:19:68:50:cf:0d:75:ce:32:1c:2e:53:03:fe:40:
                    c4:a4:5b:3b:f4:55:fa:c2:c6:86:40:ae:36:6d:6f:
                    e8:1a:78:37:d8:d7:54:3a:0f:6e:03:ed:a6:a0:e5:
                    bb:09:b2:d0:6d:ad:d6:c9:a1:f9:0c:da:f9:8a:a0:
                    3f:df:f4:8e:2e:8a:6f:55:6a:89:18:b7:e7:75:a1:
                    12:79:6e:3a:7d:63:d0:48:76:8a:65:30:8d:de:b2:
                    c8:9e:91:1c:c6:a1:01:79:ec:a2:11:1d:76:da:35:
                    e2:5c:71:f6:cc:50:43:aa:32:e9:58:a6:b6:69:22:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C2:BC:9A:A3:60:20:6B:B6:3C:89:95:85:8F:04:CB:88:1B:1B:81
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ef:70:c4:3a:52:16:90:42:be:93:9c:5c:01:c9:fc:76:47:
         48:63:c7:9d:98:2d:bb:18:1c:31:88:3b:11:c7:68:73:5e:81:
         e6:d7:98:4c:aa:ee:1f:b7:86:77:28:02:d5:6e:5b:f9:61:2c:
         3b:4c:0c:9a:51:72:29:51:3c:cd:ee:f6:18:fa:28:b4:39:1b:
         02:33:83:06:84:40:a7:97:89:5e:d0:af:2c:74:6c:1e:0a:65:
         1b:65:5e:c8:4a:51:56:47:78:29:36:12:47:f0:d9:e8:a4:16:
         d4:b9:3a:e1:cc:51:39:8c:e1:c8:20:22:8e:c5:81:92:7f:da:
         f4:df:40:f5:a3:70:e9:3c:71:ad:e4:d3:3d:c5:8a:23:8a:ea:
         d3:f3:43:82:a6:46:58:1d:69:a4:bf:bd:d3:92:ec:f8:d0:4a:
         f2:01:a4:e5:26:d5:34:4c:15:d9:60:21:c8:99:23:04:cf:cd:
         d8:76:db:5a:0d:79:80:76:e5:52:57:98:89:5d:9f:f2:48:53:
         b8:e1:90:2e:1b:0f:3c:62:8c:a5:3b:77:42:94:86:fb:49:65:
         68:09:ec:a7:ea:25:2d:b3:cb:4b:b3:55:7d:b8:e4:47:9d:87:
         d1:b8:42:a8:94:cb:73:03:e9:81:cd:4e:b0:c3:d2:bc:23:80:
         6d:74:da:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0R+YK/m9zIGMXnLHem7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj
ZDcwOTEwHhcNMjUwNjE0MTkwMTA1WhcNMjUwNjE1MTkwMTA1WjAzMTEwLwYDVQQD
EyhhNWMyYmM5YWEzNjAyMDZiYjYzYzg5OTU4NThmMDRjYjg4MWIxYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunGtFpsbMdbaX820NcCpujnGQOSi
2wMug3hrtOGFq9OkWmedWMzZszchYzjOhcHYugaBtvAU6qEy3lA5+eXDwCIo5ybx
GvOrNF5fFsw+yWIKup1JoYqXkGlQ1S2OxOlgRiW7uGWUm1+gVHIj8NzZMWoxmydv
MuXMvnSmwyeCO2WeoIuuDozbGWhQzw11zjIcLlMD/kDEpFs79FX6wsaGQK42bW/o
Gng32NdUOg9uA+2moOW7CbLQba3WyaH5DNr5iqA/3/SOLopvVWqJGLfndaESeW46
fWPQSHaKZTCN3rLInpEcxqEBeeyiER122jXiXHH2zFBDqjLpWKa2aSLgJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXCvJqjYCBrtjyJlYWPBMuIGxuBMB8GA1UdIwQY
MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt
ODJmYTNkMjYwODY5LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5
LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAre9wxDpS
FpBCvpOcXAHJ/HZHSGPHnZgtuxgcMYg7Ecdoc16B5teYTKruH7eGdygC1W5b+WEs
O0wMmlFyKVE8ze72GPootDkbAjODBoRAp5eJXtCvLHRsHgplG2VeyEpRVkd4KTYS
R/DZ6KQW1Lk64cxROYzhyCAijsWBkn/a9N9A9aNw6TxxreTTPcWKI4rq0/NDgqZG
WB1ppL+905Ls+NBK8gGk5SbVNEwV2WAhyJkjBM/N2HbbWg15gHblUleYiV2f8khT
uOGQLhsPPGKMpTt3QpSG+0llaAnsp+olLbPLS7NVfbjkR52H0bhCqJTLcwPpgc1O
sMPSvCOAbXTaRw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:02:46 2025 by rpki-client