Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
File:                     mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft (raw, json)
Hash identifier:          iH5HfjM3kpdUf3Ur5jMaI3/LSU8b8YUuTjYbMslk8W4=
Subject key identifier:   90:D6:4E:49:00:AA:B1:E0:1A:55:2A:AA:71:07:55:48:D7:1E:13:5C
Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
Certificate issuer:       /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Certificate serial:       0197B70E990A82CFB0D9CC4E9F36CFCCE48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
Manifest number:          01BE
Signing time:             Sat 28 Jun 2025 15:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:16 +0000
Files and hashes:         1: B56y44YODLvIaK63HQtFyfRwg6M.roa (hash: gj5T46CEfqmvf3lZZB8Zxjkv61wJPVASA1iw+kPG+SU=)
                          2: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl (hash: lkECAUz+cXpzTBWwf2QHL5oFUxRbB7MrQTKd/L5ikkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:99:0a:82:cf:b0:d9:cc:4e:9f:36:cf:cc:e4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
        Validity
            Not Before: Jun 28 15:01:16 2025 GMT
            Not After : Jun 29 15:01:16 2025 GMT
        Subject: CN=90d64e4900aab1e01a552aaa71075548d71e135c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:5a:6a:72:75:5b:5a:98:62:e1:73:31:ae:
                    88:4a:05:17:03:5f:a5:ee:98:af:e5:58:67:3d:9c:
                    98:05:ee:e7:6e:24:68:a3:b7:09:28:81:2d:b7:5d:
                    48:d9:47:5a:a1:72:09:00:ea:15:ec:ac:07:b0:a7:
                    59:02:3f:97:04:68:8d:32:96:bc:21:6d:81:85:39:
                    3d:41:8d:b4:eb:cf:62:06:09:af:04:84:5d:17:56:
                    26:03:df:0c:b3:76:0a:bf:ec:4a:e7:ef:ab:12:1a:
                    b7:0e:72:da:bc:04:ad:c8:42:c8:ee:65:04:65:fd:
                    62:26:6d:fd:15:64:d9:e1:7c:d4:43:12:ea:d2:b4:
                    46:08:78:88:d6:b2:8e:32:4b:01:7b:e2:4d:b8:de:
                    c2:a3:4d:b7:18:f7:04:aa:b4:b2:33:6a:87:c0:f2:
                    74:ea:19:b6:37:ae:0d:a4:64:d2:80:d9:85:a5:70:
                    7e:5e:68:6f:20:66:c3:db:fd:f4:63:1b:23:e3:be:
                    9e:9b:f3:b4:2a:01:7e:3f:04:b5:25:c3:82:c6:a8:
                    c5:42:b7:2e:99:5d:e6:55:e6:63:25:d9:9f:16:9e:
                    bd:39:21:9d:0f:00:84:93:32:57:f2:54:dd:c1:3a:
                    15:20:82:2d:e7:b0:13:57:7b:22:0d:62:22:47:a1:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D6:4E:49:00:AA:B1:E0:1A:55:2A:AA:71:07:55:48:D7:1E:13:5C
            X509v3 Authority Key Identifier:
                keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:af:65:3c:5c:99:f6:01:9d:48:36:2f:e3:6e:f9:18:c3:
         ef:f5:e4:8a:4f:af:92:f0:98:b0:6d:8d:b9:30:83:3b:ca:2a:
         f0:88:d8:cf:ad:13:de:d2:6d:90:a8:0e:50:cc:f5:75:78:1d:
         df:ec:56:5a:19:59:62:35:72:b1:b6:1b:ec:45:fe:c1:8e:e2:
         ce:56:d6:29:31:88:e7:d1:64:ca:28:a8:ca:67:d7:98:37:2a:
         67:09:f3:d4:84:2a:61:3e:b8:6b:6d:53:f7:65:fa:08:d9:f5:
         2f:ad:e4:e7:04:1a:6c:f4:3b:ff:c9:32:9b:5c:56:79:12:33:
         83:7f:2c:d9:2a:0b:81:9a:c8:7e:a5:4c:2d:f5:a8:11:ab:b8:
         45:94:56:0d:d7:a3:24:12:9a:42:ad:3d:6f:13:c0:a9:34:66:
         89:ee:9d:b4:1c:99:2c:50:ec:75:67:2a:67:00:9d:cc:e8:7b:
         8e:fb:ac:31:98:57:28:4c:d7:34:1c:36:d9:65:27:d9:3e:1f:
         43:1e:90:25:cf:ab:d1:d1:e7:f6:7f:48:17:8c:cc:18:21:36:
         4c:7a:21:e2:14:63:d9:b0:09:8a:2b:a1:ac:e6:92:bc:96:8f:
         77:4f:43:e6:9c:20:8f:7d:2a:29:64:21:32:41:17:9f:35:38:
         9f:47:b2:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DpkKgs+w2cxOnzbPzOSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZjM4OGJmYTY2NWJiODQ2N2ZkNWNkY2QyYzMzMjdlYzdm
MjdmZWMwHhcNMjUwNjI4MTUwMTE2WhcNMjUwNjI5MTUwMTE2WjAzMTEwLwYDVQQD
Eyg5MGQ2NGU0OTAwYWFiMWUwMWE1NTJhYWE3MTA3NTU0OGQ3MWUxMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZBaanJ1W1qYYuFzMa6ISgUXA1+l
7piv5VhnPZyYBe7nbiRoo7cJKIEtt11I2UdaoXIJAOoV7KwHsKdZAj+XBGiNMpa8
IW2BhTk9QY20689iBgmvBIRdF1YmA98Ms3YKv+xK5++rEhq3DnLavAStyELI7mUE
Zf1iJm39FWTZ4XzUQxLq0rRGCHiI1rKOMksBe+JNuN7Co023GPcEqrSyM2qHwPJ0
6hm2N64NpGTSgNmFpXB+XmhvIGbD2/30Yxsj476em/O0KgF+PwS1JcOCxqjFQrcu
mV3mVeZjJdmfFp69OSGdDwCEkzJX8lTdwToVIIIt57ATV3siDWIiR6EHpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDWTkkAqrHgGlUqqnEHVUjXHhNcMB8GA1UdIwQY
MBaAFJjziL+mZbuEZ/1c3NLDMn7H8n/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZmZiOWMtN2Q0NC00Y2Y3LTg0ZWQt
MmY0YWE0NWNiNWVjLzEvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZmZiOWMtN2Q0NC00Y2Y3LTg0ZWQtMmY0YWE0NWNiNWVj
LzEvbVBPSXY2Wmx1NFJuX1Z6YzBzTXlmc2Z5Zi13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGmvZTxc
mfYBnUg2L+Nu+RjD7/Xkik+vkvCYsG2NuTCDO8oq8IjYz60T3tJtkKgOUMz1dXgd
3+xWWhlZYjVysbYb7EX+wY7izlbWKTGI59FkyiioymfXmDcqZwnz1IQqYT64a21T
92X6CNn1L63k5wQabPQ7/8kym1xWeRIzg38s2SoLgZrIfqVMLfWoEau4RZRWDdej
JBKaQq09bxPAqTRmie6dtByZLFDsdWcqZwCdzOh7jvusMZhXKEzXNBw22WUn2T4f
Qx6QJc+r0dHn9n9IF4zMGCE2THoh4hRj2bAJiiuhrOaSvJaPd09D5pwgj30qKWQh
MkEXnzU4n0eyZA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:20 2025 by rpki-client