Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          m8GL4ICC3EktEfxSApQ//2XBwEJP+EtYYC1VZwAWgUA=
Subject key identifier:   41:2D:B9:BE:44:2A:76:41:81:CE:C7:D1:7B:B7:AE:73:D6:D5:C5:B9
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       0197B74553A3071CD1330388E9B8437CAA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          1548
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: 4KuSjXjGdyF1nScN1LwMlleHlmA.roa (hash: HlUuzXxOiMUBV49vY7GcCdve69QZxWM3RwORJ/36zYI=)
                          2: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: 8vs8vG3GRlRil8F9Fi1O3Tr8kBGdiacRvuVZ+i1rPrQ=)
                          3: 7lacSGraqTGoKqaT-zAuzKx29Fk.roa (hash: FcCPAhyHMElJytjQ2WhAIPJGkfaFqPbC3K17eZo24Pw=)
                          4: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (hash: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:53:a3:07:1c:d1:33:03:88:e9:b8:43:7c:aa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=412db9be442a764181cec7d17bb7ae73d6d5c5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:d4:60:9d:29:32:2d:a4:ae:48:f8:43:9f:
                    b7:38:62:eb:97:0f:ea:b4:6a:28:a6:c3:e5:78:a5:
                    29:3e:9d:22:f1:ef:a4:50:aa:c8:f7:b3:4b:54:71:
                    61:ed:3e:95:b5:f5:23:b0:5d:eb:df:54:8c:1b:bf:
                    0d:c3:3d:e1:81:c4:a7:fc:79:ff:35:be:5b:25:5f:
                    16:dc:42:a3:84:cb:90:ab:5b:dc:6d:fb:25:ef:da:
                    c0:cb:92:2c:52:37:45:27:ca:53:82:c2:de:bc:ed:
                    75:e6:47:61:07:a4:c0:38:75:26:fd:dd:89:66:75:
                    cd:ee:c6:17:ee:e0:70:82:ba:ad:e3:bd:2e:84:54:
                    02:b2:f7:7c:c2:01:c7:95:bc:ce:1c:c0:ca:d6:00:
                    00:8f:52:2d:f6:02:1e:45:3a:09:a5:d4:df:37:b2:
                    78:a8:41:1a:6b:71:c3:42:5e:74:48:be:44:9f:9c:
                    94:a7:1e:97:50:33:4f:14:e5:41:5d:ec:79:7d:fe:
                    ee:72:93:da:9b:1a:6a:6c:f3:a9:49:07:5e:44:7a:
                    d1:32:3b:f4:5d:78:82:9a:31:5d:b9:77:b8:e7:25:
                    40:96:a7:a9:a8:60:72:63:ee:7d:c2:6d:e6:a2:69:
                    fe:95:11:f5:da:f1:56:76:b4:46:7d:7b:42:27:17:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:B9:BE:44:2A:76:41:81:CE:C7:D1:7B:B7:AE:73:D6:D5:C5:B9
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:fe:bc:7b:cb:f3:6e:ed:26:75:0e:b3:47:a7:9e:dd:5d:
         83:10:b2:90:95:d8:fd:7e:2a:6e:f8:c5:46:72:af:3f:45:97:
         f4:e9:ff:84:cb:fd:1b:c4:06:75:43:9d:87:a2:76:8a:29:e8:
         0b:f4:0a:38:18:84:1f:45:98:cd:8c:d6:5a:fa:0f:18:e2:46:
         14:ca:8a:9a:5b:26:f7:1f:1b:6c:9e:32:d0:de:79:00:1e:76:
         ef:6a:1c:60:7b:39:04:12:f1:da:24:51:c3:99:d0:5f:37:48:
         d3:32:a9:25:45:52:77:1b:79:d2:05:19:31:05:19:06:e6:57:
         0e:65:3a:de:c7:40:42:26:16:d0:c9:88:83:4c:63:01:3a:b2:
         71:9d:f0:ca:28:3d:62:d0:1c:b2:c1:44:3e:01:cb:39:8b:f2:
         db:0c:98:3b:b6:d0:93:22:8e:ca:c6:65:f2:8f:9f:31:97:08:
         6d:07:f8:7c:ca:b2:83:7a:7c:0c:c2:25:ac:a3:9d:dd:cb:96:
         8c:0c:24:ab:62:7d:f3:19:56:7a:6e:ba:39:8d:56:d7:fa:aa:
         3f:89:fd:4c:08:1a:60:a9:67:ed:d1:49:0f:22:e4:a1:cf:8b:
         95:75:4b:69:cc:fb:95:fc:f9:9a:28:3f:b7:a8:dd:d1:6c:39:
         cc:ac:4d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVOjBxzRMwOI6bhDfKp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5
ZWMwYjUwHhcNMjUwNjI4MTYwMTAzWhcNMjUwNjI5MTYwMTAzWjAzMTEwLwYDVQQD
Eyg0MTJkYjliZTQ0MmE3NjQxODFjZWM3ZDE3YmI3YWU3M2Q2ZDVjNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjTUYJ0pMi2krkj4Q5+3OGLrlw/q
tGoopsPleKUpPp0i8e+kUKrI97NLVHFh7T6VtfUjsF3r31SMG78Nwz3hgcSn/Hn/
Nb5bJV8W3EKjhMuQq1vcbfsl79rAy5IsUjdFJ8pTgsLevO115kdhB6TAOHUm/d2J
ZnXN7sYX7uBwgrqt470uhFQCsvd8wgHHlbzOHMDK1gAAj1It9gIeRToJpdTfN7J4
qEEaa3HDQl50SL5En5yUpx6XUDNPFOVBXex5ff7ucpPamxpqbPOpSQdeRHrRMjv0
XXiCmjFduXe45yVAlqepqGByY+59wm3momn+lRH12vFWdrRGfXtCJxdlZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEtub5EKnZBgc7H0Xu3rnPW1cW5MB8GA1UdIwQY
MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt
MTlkZjViNGQxMDE0LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0
LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQD+vHvL
827tJnUOs0ennt1dgxCykJXY/X4qbvjFRnKvP0WX9On/hMv9G8QGdUOdh6J2iino
C/QKOBiEH0WYzYzWWvoPGOJGFMqKmlsm9x8bbJ4y0N55AB5272ocYHs5BBLx2iRR
w5nQXzdI0zKpJUVSdxt50gUZMQUZBuZXDmU63sdAQiYW0MmIg0xjATqycZ3wyig9
YtAcssFEPgHLOYvy2wyYO7bQkyKOysZl8o+fMZcIbQf4fMqyg3p8DMIlrKOd3cuW
jAwkq2J98xlWem66OY1W1/qqP4n9TAgaYKln7dFJDyLkoc+LlXVLacz7lfz5mig/
t6jd0Ww5zKxNAw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:18 2025 by rpki-client