Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File:                     41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier:          x1pnbcOzQAqfQeVDcmB/8FENT9hczk1lg8UmGfwamMk=
Subject key identifier:   75:B2:7F:5B:68:D5:0F:39:08:AF:56:8C:55:50:86:82:E0:06:37:97
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer:       /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial:       0197B5FC37D269DAA54D925E6A821788408F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number:          09C3
Signing time:             Sat 28 Jun 2025 10:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:34 +0000
Files and hashes:         1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
                          2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: oOolEp+toJoW8Ay5lSVT1p5CS82ay1tAIYhI8FwEKtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:37:d2:69:da:a5:4d:92:5e:6a:82:17:88:40:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
        Validity
            Not Before: Jun 28 10:01:34 2025 GMT
            Not After : Jun 29 10:01:34 2025 GMT
        Subject: CN=75b27f5b68d50f3908af568c55508682e0063797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:e7:15:6c:0a:13:c0:8a:a3:72:d6:df:aa:
                    90:cc:d5:08:68:a3:fd:e6:bd:d9:2e:1b:2d:e9:a7:
                    9e:a4:f9:f2:4b:ab:6f:d9:46:2d:2f:f7:1f:37:75:
                    b9:f6:17:ae:6f:57:a8:66:c0:78:22:48:42:86:aa:
                    7e:57:4c:92:51:8e:1a:f9:9a:03:f8:70:3d:4e:41:
                    d9:f9:ec:10:6f:5a:bc:cd:cd:75:ae:f9:02:cc:49:
                    c1:41:1a:f6:f5:c5:a6:fb:80:c2:84:5c:da:84:00:
                    21:d5:2c:89:7b:b1:15:6f:7c:6c:fa:91:b5:d8:a2:
                    1b:07:04:99:b3:25:cb:11:ed:7b:00:f1:28:32:2d:
                    91:82:07:11:ca:ad:2d:05:ad:62:fb:1c:cb:46:49:
                    96:bc:63:a0:d9:2c:d1:0e:f7:85:2f:cb:dc:d2:03:
                    a5:31:71:03:e6:3e:19:40:76:c8:fb:43:39:a6:80:
                    16:e4:ce:b0:a4:65:bc:3d:e6:e7:c9:9e:14:e4:fb:
                    9c:4f:40:b2:ce:51:a1:80:c8:07:61:22:24:b3:34:
                    d1:8c:9f:86:16:75:78:b9:50:47:37:a6:ca:54:9e:
                    48:fb:a4:36:f4:a4:57:77:84:9f:41:c5:4e:9e:d7:
                    3f:96:66:df:49:34:99:9d:b0:88:1d:aa:31:60:15:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B2:7F:5B:68:D5:0F:39:08:AF:56:8C:55:50:86:82:E0:06:37:97
            X509v3 Authority Key Identifier:
                keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:02:0c:56:0a:d7:b1:e1:ac:01:2c:0c:20:80:02:46:96:
         b6:0d:b1:23:63:f9:9e:e1:2f:75:93:65:9a:77:c0:82:de:4b:
         05:77:a9:30:95:88:9a:c5:d0:37:2c:47:ee:18:aa:ef:33:79:
         65:b8:42:2d:e3:58:16:42:8e:64:35:90:b6:25:f0:a2:29:ce:
         95:41:fd:f5:76:b3:00:d2:5b:68:57:54:ad:25:10:49:a6:20:
         67:1f:21:1d:cf:e8:26:31:76:ed:cb:f4:ca:57:df:21:75:25:
         fb:2f:93:dd:f4:ef:09:82:03:8b:2a:8f:22:7b:86:d0:19:8f:
         5c:36:5c:c8:54:7b:43:5f:9b:56:25:8b:3c:19:cf:99:a8:cc:
         0d:ad:dc:31:27:57:01:33:de:32:d7:f9:34:de:5f:f2:95:c9:
         d1:e3:54:fe:81:a4:ee:8f:e0:6b:cb:7e:42:42:19:43:48:07:
         7f:41:7f:ad:e5:12:f9:32:e3:38:2b:d6:63:71:b7:e8:d6:13:
         8f:e9:e4:16:8a:80:2e:c7:62:b9:58:05:11:52:b4:83:ad:83:
         00:5c:f2:30:3e:03:49:67:63:2d:c6:39:69:43:89:6d:ac:7d:
         35:91:78:4f:96:f6:21:42:23:37:c6:68:a5:0c:3d:c8:46:a7:
         b1:9c:ab:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/DfSadqlTZJeaoIXiECPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNTZmNWMyM2NjZWM2NDY0MDY4NWU0NGQ1OWJjNGI2ZDQ0
ZGFhYjkwHhcNMjUwNjI4MTAwMTM0WhcNMjUwNjI5MTAwMTM0WjAzMTEwLwYDVQQD
Eyg3NWIyN2Y1YjY4ZDUwZjM5MDhhZjU2OGM1NTUwODY4MmUwMDYzNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY/nFWwKE8CKo3LW36qQzNUIaKP9
5r3ZLhst6aeepPnyS6tv2UYtL/cfN3W59heub1eoZsB4IkhChqp+V0ySUY4a+ZoD
+HA9TkHZ+ewQb1q8zc11rvkCzEnBQRr29cWm+4DChFzahAAh1SyJe7EVb3xs+pG1
2KIbBwSZsyXLEe17APEoMi2RggcRyq0tBa1i+xzLRkmWvGOg2SzRDveFL8vc0gOl
MXED5j4ZQHbI+0M5poAW5M6wpGW8PebnyZ4U5PucT0CyzlGhgMgHYSIkszTRjJ+G
FnV4uVBHN6bKVJ5I+6Q29KRXd4SfQcVOntc/lmbfSTSZnbCIHaoxYBWMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWyf1to1Q85CK9WjFVQhoLgBjeXMB8GA1UdIwQY
MBaAFONW9cI8zsZGQGheRNWbxLbUTaq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMt
M2NhZGVjNDZlNWMzLzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMtM2NhZGVjNDZlNWMz
LzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdECDFYK
17HhrAEsDCCAAkaWtg2xI2P5nuEvdZNlmnfAgt5LBXepMJWImsXQNyxH7hiq7zN5
ZbhCLeNYFkKOZDWQtiXwoinOlUH99XazANJbaFdUrSUQSaYgZx8hHc/oJjF27cv0
ylffIXUl+y+T3fTvCYIDiyqPInuG0BmPXDZcyFR7Q1+bViWLPBnPmajMDa3cMSdX
ATPeMtf5NN5f8pXJ0eNU/oGk7o/ga8t+QkIZQ0gHf0F/reUS+TLjOCvWY3G36NYT
j+nkFoqALsdiuVgFEVK0g62DAFzyMD4DSWdjLcY5aUOJbax9NZF4T5b2IUIjN8Zo
pQw9yEansZyrwg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:47 2025 by rpki-client