Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File:                     2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier:          8pdC69dFtW1B6QrGyJM911Yd28P1R0Tp8ETZc7dH4F4=
Subject key identifier:   A3:B0:D9:E4:E9:91:5A:64:52:14:F1:B0:7D:FD:49:32:12:62:43:8F
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       0197B6A167CC7358842AD34EC99D09343652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 13:02:00 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:00 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:00 +0000
Files and hashes:         1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=)
                          2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: i4DmR6JuK40Q7vTDXonZOEypkghIWNV4idvIGIKNh1U=)
                          3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=)
                          4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=)
                          5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=)
                          6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:67:cc:73:58:84:2a:d3:4e:c9:9d:09:34:36:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: Jun 28 13:02:00 2025 GMT
            Not After : Jun 29 13:02:00 2025 GMT
        Subject: CN=a3b0d9e4e9915a645214f1b07dfd49321262438f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:ae:0a:5c:07:cb:61:d3:cc:79:b3:67:78:
                    ed:33:04:e1:52:74:52:98:aa:6b:58:33:67:4e:35:
                    60:9b:42:f4:f8:16:6e:7e:2f:4d:08:67:78:25:66:
                    b4:8a:93:e1:5e:89:d0:b3:fb:cc:3f:51:86:c8:e7:
                    3f:9d:1f:3c:4b:88:c8:2e:92:9b:b2:fe:a5:55:39:
                    18:a2:a7:c9:45:e5:3e:ea:4b:1e:dc:ed:e6:2b:1f:
                    37:56:91:69:75:c3:c2:dd:ac:30:24:cf:32:e6:dd:
                    4b:d7:48:e7:61:89:38:2b:1d:8d:39:7e:38:f8:49:
                    d0:27:c9:29:ed:13:5e:20:7a:b3:5f:df:83:ad:28:
                    37:43:04:4b:3f:a0:be:27:39:de:39:ee:a4:88:1c:
                    46:eb:8f:b1:d8:8a:20:d0:0d:a1:19:99:17:75:36:
                    35:5d:b7:22:b5:97:c7:7c:76:3c:55:82:0a:04:ef:
                    ae:07:fa:31:60:86:64:3d:d2:a2:2f:e7:f7:42:67:
                    f3:3b:23:18:f1:19:83:3c:45:e5:52:cf:7f:8d:ff:
                    5c:8f:d2:23:6a:d3:42:5b:1a:77:4e:84:c5:df:ca:
                    0b:2b:da:53:06:60:8c:39:e5:97:df:77:f4:68:79:
                    30:5d:51:18:1c:8b:5b:f3:a4:d1:b0:2b:6e:36:a5:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B0:D9:E4:E9:91:5A:64:52:14:F1:B0:7D:FD:49:32:12:62:43:8F
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:c3:a6:8c:4f:f8:80:a5:6f:45:9d:4a:52:57:f7:a2:b5:
         71:58:10:2f:c2:0c:2c:55:99:60:91:55:13:f3:60:5e:db:6b:
         b7:b3:4f:b5:9e:dc:79:16:04:7e:15:2b:0b:2a:de:7f:e5:5b:
         b0:cb:cc:41:ab:d4:0e:72:ef:83:59:25:6e:75:82:8b:66:d4:
         6d:02:c1:af:9a:31:2e:52:24:f4:50:67:32:3d:0e:9d:59:dc:
         c9:9c:19:f3:de:6d:e6:f8:ba:1e:f3:b8:ca:66:8a:bf:a4:27:
         1c:56:59:8a:fe:3f:b6:86:7d:f5:d6:2d:72:16:32:64:c1:2a:
         5e:bd:3c:ec:52:a8:30:de:67:c7:15:9f:35:27:6b:f7:23:fd:
         22:de:94:7b:12:6a:1f:95:cd:c0:f4:57:d6:2a:89:23:a9:d4:
         e7:3d:18:74:68:2e:fc:eb:b3:fd:bc:18:86:e5:e5:fe:b9:77:
         02:8c:49:0d:6a:f3:61:78:50:7b:39:71:60:74:35:61:8b:77:
         98:45:e6:a4:59:24:27:b9:8a:40:db:cd:73:a6:cf:9e:38:24:
         db:47:ce:e9:03:c9:e1:b0:f8:af:10:b4:7b:8e:6d:dd:05:18:
         18:fe:f0:25:72:6f:ad:62:8f:e2:c8:9e:df:f4:d5:af:6d:04:
         05:02:88:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWfMc1iEKtNOyZ0JNDZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5
NWE0ZWQwHhcNMjUwNjI4MTMwMjAwWhcNMjUwNjI5MTMwMjAwWjAzMTEwLwYDVQQD
EyhhM2IwZDllNGU5OTE1YTY0NTIxNGYxYjA3ZGZkNDkzMjEyNjI0MzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn52uClwHy2HTzHmzZ3jtMwThUnRS
mKprWDNnTjVgm0L0+BZufi9NCGd4JWa0ipPhXonQs/vMP1GGyOc/nR88S4jILpKb
sv6lVTkYoqfJReU+6kse3O3mKx83VpFpdcPC3awwJM8y5t1L10jnYYk4Kx2NOX44
+EnQJ8kp7RNeIHqzX9+DrSg3QwRLP6C+JzneOe6kiBxG64+x2Iog0A2hGZkXdTY1
XbcitZfHfHY8VYIKBO+uB/oxYIZkPdKiL+f3QmfzOyMY8RmDPEXlUs9/jf9cj9Ij
atNCWxp3ToTF38oLK9pTBmCMOeWX33f0aHkwXVEYHItb86TRsCtuNqX12QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOw2eTpkVpkUhTxsH39STISYkOPMB8GA1UdIwQY
MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfHDpoxP
+IClb0WdSlJX96K1cVgQL8IMLFWZYJFVE/NgXttrt7NPtZ7ceRYEfhUrCyref+Vb
sMvMQavUDnLvg1klbnWCi2bUbQLBr5oxLlIk9FBnMj0OnVncyZwZ895t5vi6HvO4
ymaKv6QnHFZZiv4/toZ99dYtchYyZMEqXr087FKoMN5nxxWfNSdr9yP9It6UexJq
H5XNwPRX1iqJI6nU5z0YdGgu/Ouz/bwYhuXl/rl3AoxJDWrzYXhQezlxYHQ1YYt3
mEXmpFkkJ7mKQNvNc6bPnjgk20fO6QPJ4bD4rxC0e45t3QUYGP7wJXJvrWKP4sie
3/TVr20EBQKIIw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:09 2025 by rpki-client