Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          GlBsvkcu9qMblwYTa/Fbv7rnYtECAVwbvkD1mONpjIU=
Subject key identifier:   AD:50:6D:59:A1:B3:4E:7B:A3:8B:D4:8B:C4:96:91:5E:49:DF:23:64
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       0197B6A1CE327994FABFAFF82A18D24FA6DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          12F8
Signing time:             Sat 28 Jun 2025 13:02:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:26 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: /9z36GY2QQ4iCf/6dPq3nqEgAW9F1UbtrZZRbEZnpIc=)
                          2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:ce:32:79:94:fa:bf:af:f8:2a:18:d2:4f:a6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: Jun 28 13:02:26 2025 GMT
            Not After : Jun 29 13:02:26 2025 GMT
        Subject: CN=ad506d59a1b34e7ba38bd48bc496915e49df2364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:37:f7:20:39:df:1f:d1:db:b1:c8:57:7b:
                    a3:31:31:97:24:82:b9:4b:d4:38:68:b0:92:93:79:
                    c3:98:d7:97:f2:8c:41:27:80:c1:62:73:6a:e8:32:
                    79:16:45:9f:12:18:7a:ad:52:fb:4b:d8:41:4a:47:
                    cd:b1:81:bc:39:8d:31:1d:28:58:da:e0:fe:ae:96:
                    99:4f:73:80:1d:67:25:37:08:de:f6:98:dc:e7:fc:
                    38:72:d5:53:ca:74:f6:2d:63:9d:cf:37:5d:b1:a3:
                    3c:58:19:26:f2:13:18:62:b8:88:0c:0a:4d:f7:9f:
                    5c:6e:0e:51:fb:03:1f:2d:d1:48:4e:89:df:c6:d8:
                    20:f1:c4:df:18:e3:52:7e:08:fc:81:3a:8d:a3:da:
                    47:9e:a4:5a:ca:e7:d8:b0:e4:ae:63:00:b8:9a:8b:
                    e9:fe:fd:46:a7:5e:da:0a:04:07:f6:e4:d8:f2:11:
                    ce:fc:16:8b:85:55:61:36:c8:60:ec:e0:d2:4e:0b:
                    9f:f7:ec:67:fe:f6:4c:d0:02:fc:ab:51:bc:35:3f:
                    91:9c:48:ff:43:3c:c7:f2:e8:17:dc:f7:9b:5a:66:
                    3a:77:e4:08:55:2c:32:c6:52:af:08:e1:f3:da:8b:
                    27:f9:2e:8d:dd:f7:aa:25:37:d5:e1:e6:ab:f6:09:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:50:6D:59:A1:B3:4E:7B:A3:8B:D4:8B:C4:96:91:5E:49:DF:23:64
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:8c:ea:6b:fd:e6:b7:b0:b7:dd:b8:54:58:66:a0:eb:30:
         6e:9d:ab:80:11:4f:5e:2a:df:92:4b:65:8b:32:51:d8:b2:f1:
         f1:4d:3d:bb:5d:91:31:2b:0a:cd:54:9f:69:81:df:43:d7:a1:
         c3:12:de:42:72:f8:a8:15:fe:a9:5c:27:8d:6b:e5:41:18:ce:
         ab:0e:79:ce:1a:45:3a:d3:7e:f5:e1:f1:6a:56:b7:d8:37:55:
         a9:95:ef:b5:b4:1a:57:6d:cb:35:c8:70:1c:b1:19:97:c6:6d:
         89:06:3e:d0:1b:8d:45:1d:92:c1:f7:68:d9:72:bc:87:ce:a1:
         bd:7a:b6:05:b4:d3:78:8d:d7:16:11:57:2c:6c:c9:9f:59:6c:
         53:24:bc:16:da:63:7e:07:05:4d:a5:7f:5c:7d:27:d7:50:24:
         41:cd:a8:b6:41:eb:dc:63:63:6c:17:ca:55:b3:49:1e:1a:c6:
         19:c8:b7:8d:cb:ed:27:32:d8:57:21:e9:ee:3f:91:cc:6b:a8:
         2a:2b:35:1d:54:f8:9f:f5:7f:7f:52:27:f9:a6:79:d8:7e:0c:
         b7:b8:c5:8e:0a:bf:a0:34:2a:58:e5:66:d1:37:7d:df:66:00:
         92:8f:27:7d:f8:55:8e:b4:b8:a9:c0:25:7f:63:af:95:19:73:
         43:7c:83:6e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe2oc4yeZT6v6/4KhjST6bbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MDZlYzljZjFkZWFiZjlkNmNkNWY4ODkxYmI4MmQ1NmY5
MWQ2NzgwHhcNMjUwNjI4MTMwMjI2WhcNMjUwNjI5MTMwMjI2WjAzMTEwLwYDVQQD
EyhhZDUwNmQ1OWExYjM0ZTdiYTM4YmQ0OGJjNDk2OTE1ZTQ5ZGYyMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDs39yA53x/R27HIV3ujMTGXJIK5
S9Q4aLCSk3nDmNeX8oxBJ4DBYnNq6DJ5FkWfEhh6rVL7S9hBSkfNsYG8OY0xHShY
2uD+rpaZT3OAHWclNwje9pjc5/w4ctVTynT2LWOdzzddsaM8WBkm8hMYYriIDApN
959cbg5R+wMfLdFITonfxtgg8cTfGONSfgj8gTqNo9pHnqRayufYsOSuYwC4movp
/v1Gp17aCgQH9uTY8hHO/BaLhVVhNshg7ODSTguf9+xn/vZM0AL8q1G8NT+RnEj/
QzzH8ugX3PebWmY6d+QIVSwyxlKvCOHz2osn+S6N3feqJTfV4ear9gmxFQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK1QbVmhs057o4vUi8SWkV5J3yNkMB8GA1UdIwQY
MBaAFPgG7Jzx3qv51s1fiJG7gtVvkdZ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BYnNuUEhlcV9uV3pWLUlrYnVDMVctUjFuZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDQwNGY1LWUxMGMtNDE5MC05Mjcw
LWFjMGE4NGEyN2Q1My8xLzEtQWJzblBIZXFfbld6Vi1Ja2J1QzFXLVIxbmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzQ0MDRmNS1lMTBjLTQxOTAtOTI3MC1hYzBhODRhMjdk
NTMvMS8xLUFic25QSGVxX25XelYtSWtidUMxVy1SMW5nLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3KM
6mv95rewt924VFhmoOswbp2rgBFPXirfkktlizJR2LLx8U09u12RMSsKzVSfaYHf
Q9ehwxLeQnL4qBX+qVwnjWvlQRjOqw55zhpFOtN+9eHxala32DdVqZXvtbQaV23L
NchwHLEZl8ZtiQY+0BuNRR2Swfdo2XK8h86hvXq2BbTTeI3XFhFXLGzJn1lsUyS8
FtpjfgcFTaV/XH0n11AkQc2otkHr3GNjbBfKVbNJHhrGGci3jcvtJzLYVyHp7j+R
zGuoKis1HVT4n/V/f1In+aZ52H4Mt7jFjgq/oDQqWOVm0Td932YAko8nffhVjrS4
qcAlf2OvlRlzQ3yDbg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:50 2025 by rpki-client