Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File:                     ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier:          nvVzzmmfxOSLPC+bbzObuudIPzJNLx39xoqyKbd4pBs=
Subject key identifier:   73:AB:F4:47:60:10:6D:53:45:EC:EC:B8:CB:DC:58:EF:7C:7E:23:08
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer:       /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial:       0196C984B96DA1A54B218B87F61C02CA191A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number:          0B66
Signing time:             Tue 13 May 2025 12:00:40 +0000
Manifest this update:     Tue 13 May 2025 12:00:40 +0000
Manifest next update:     Wed 14 May 2025 12:00:40 +0000
Files and hashes:         1: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: +UxI2KiRBpJbcRGxNXW6xc/MtFsVuJWeXw3BPw5af30=)
                          2: jUcUyasdB1F_jJ1Iu4Jesu2bOp8.roa (hash: BbNkNKRJ/r5Ixy3RnUBfFtFAmvmPYuPFYMJIKOu9VwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:84:b9:6d:a1:a5:4b:21:8b:87:f6:1c:02:ca:19:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
        Validity
            Not Before: May 13 12:00:40 2025 GMT
            Not After : May 14 12:00:40 2025 GMT
        Subject: CN=73abf44760106d5345ececb8cbdc58ef7c7e2308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:d1:c7:79:40:df:a7:78:66:38:39:15:68:
                    c2:eb:06:bf:e9:35:16:af:c9:a4:a2:e8:7e:39:c7:
                    bd:8f:40:77:80:f8:aa:cf:e3:06:78:67:28:32:1b:
                    28:12:cc:60:41:f0:e7:31:8f:49:45:6c:cb:85:25:
                    d4:61:a6:86:62:9c:31:6b:66:61:2a:4c:06:77:cb:
                    c7:90:e1:e9:8c:64:49:11:16:4e:87:ab:c5:20:5d:
                    af:67:c3:d0:1f:ad:dc:b6:cf:c6:8f:e2:88:a8:4f:
                    f1:4e:37:84:24:29:4d:42:d0:54:c6:aa:4c:3a:38:
                    cd:d9:45:87:27:67:fa:f9:44:37:25:c0:62:09:7b:
                    00:9b:df:99:31:28:9c:5a:81:19:df:c9:02:53:ac:
                    b4:c1:84:e1:8a:77:ff:d4:e4:8e:9a:20:3c:07:ea:
                    56:74:d5:74:82:e7:8f:13:17:62:e5:e5:42:f6:4e:
                    00:56:91:c8:49:7a:35:be:52:bb:5e:bf:83:71:35:
                    ee:9c:0d:a0:8d:fd:36:08:c8:2a:05:c9:68:cb:8b:
                    64:e5:4e:4c:f1:39:38:e8:d9:77:16:4d:db:5b:4e:
                    3b:26:78:f7:d9:f5:15:08:68:64:c6:1b:21:a1:f8:
                    30:5f:13:81:af:75:c0:59:25:c4:e4:9b:c6:9c:06:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:F4:47:60:10:6D:53:45:EC:EC:B8:CB:DC:58:EF:7C:7E:23:08
            X509v3 Authority Key Identifier:
                keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:90:fb:fe:f9:12:c1:29:85:49:ff:3a:b2:ef:c4:23:1c:10:
         78:61:f8:d6:6e:a8:0a:6f:d7:2c:fc:60:90:2c:42:81:ee:90:
         59:87:68:8b:09:a9:df:10:ac:19:ac:36:3a:28:f6:69:74:3a:
         86:a6:37:8a:4e:72:6f:a8:98:3e:3b:bd:4b:0a:52:56:29:76:
         d9:65:d7:25:88:db:15:82:6b:60:16:35:e4:d1:cb:4e:a4:07:
         cc:d2:90:e9:16:80:1c:de:92:04:d4:3e:23:de:65:7b:f6:c6:
         04:4f:9f:b3:9d:21:90:24:ce:8d:6e:8a:62:ad:f0:16:df:d9:
         15:88:d1:ea:a8:14:4a:1d:54:cd:45:62:58:94:68:a5:fd:7d:
         3c:8f:06:90:e0:ee:bb:0a:ea:2c:88:d9:f9:69:57:f4:3b:01:
         38:8a:b5:05:94:a4:68:b6:e6:b4:96:0a:f9:d9:86:eb:4b:f2:
         0a:af:8a:a7:31:73:fa:2f:39:d0:50:5c:f1:5a:10:0c:e2:8a:
         b4:2a:d1:be:9f:73:85:b6:fc:c5:ff:03:ee:ba:98:4e:8d:3f:
         73:6e:13:e5:e3:b2:38:1c:44:61:7b:49:56:32:48:37:60:85:
         0a:d1:56:34:f8:4f:3c:7b:57:2d:d8:46:15:e3:9b:1f:73:65:
         b7:da:c6:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJhLltoaVLIYuH9hwCyhkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjUwNTEzMTIwMDQwWhcNMjUwNTE0MTIwMDQwWjAzMTEwLwYDVQQD
Eyg3M2FiZjQ0NzYwMTA2ZDUzNDVlY2VjYjhjYmRjNThlZjdjN2UyMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx77Rx3lA36d4Zjg5FWjC6wa/6TUW
r8mkouh+Oce9j0B3gPiqz+MGeGcoMhsoEsxgQfDnMY9JRWzLhSXUYaaGYpwxa2Zh
KkwGd8vHkOHpjGRJERZOh6vFIF2vZ8PQH63cts/Gj+KIqE/xTjeEJClNQtBUxqpM
OjjN2UWHJ2f6+UQ3JcBiCXsAm9+ZMSicWoEZ38kCU6y0wYThinf/1OSOmiA8B+pW
dNV0guePExdi5eVC9k4AVpHISXo1vlK7Xr+DcTXunA2gjf02CMgqBcloy4tk5U5M
8Tk46Nl3Fk3bW047Jnj32fUVCGhkxhshofgwXxOBr3XAWSXE5JvGnAZ57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOr9EdgEG1TRezsuMvcWO98fiMIMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5D7/vkS
wSmFSf86su/EIxwQeGH41m6oCm/XLPxgkCxCge6QWYdoiwmp3xCsGaw2Oij2aXQ6
hqY3ik5yb6iYPju9SwpSVil22WXXJYjbFYJrYBY15NHLTqQHzNKQ6RaAHN6SBNQ+
I95le/bGBE+fs50hkCTOjW6KYq3wFt/ZFYjR6qgUSh1UzUViWJRopf19PI8GkODu
uwrqLIjZ+WlX9DsBOIq1BZSkaLbmtJYK+dmG60vyCq+KpzFz+i850FBc8VoQDOKK
tCrRvp9zhbb8xf8D7rqYTo0/c24T5eOyOBxEYXtJVjJIN2CFCtFWNPhPPHtXLdhG
FeObH3Nlt9rGFA==
-----END CERTIFICATE-----
Generated at Tue May 13 13:37:10 2025 by rpki-client