Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          kNKcDjz6R5UvU5TmYGFLptV9hlqjE0Shb6dk/8eEQS8=
Subject key identifier:   0D:F6:0A:68:A6:D6:CB:B3:38:BC:4D:3A:86:A6:E4:E6:1E:6D:DC:83
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       0197B6326F88B3EBC912E55500C35B496B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          0D71
Signing time:             Sat 28 Jun 2025 11:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:48 +0000
Files and hashes:         1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
                          2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
                          3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: tCRubmnav/xofEbED6+Ic+5U5yYYLJR081ckkv3mdps=)
                          4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=)
                          5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:6f:88:b3:eb:c9:12:e5:55:00:c3:5b:49:6b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: Jun 28 11:00:48 2025 GMT
            Not After : Jun 29 11:00:48 2025 GMT
        Subject: CN=0df60a68a6d6cbb338bc4d3a86a6e4e61e6ddc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:d5:cc:c2:21:3f:4a:46:6f:b6:3d:85:e4:
                    a1:e4:7b:bd:84:f7:b1:37:dc:ec:c2:24:9f:40:69:
                    82:d4:43:45:0f:64:72:10:91:94:6c:69:e1:40:f8:
                    a3:59:3c:7a:dc:01:d5:65:67:4d:39:07:54:3c:44:
                    43:9c:79:c0:df:8a:4e:de:32:55:66:00:15:9a:ec:
                    fe:b9:11:26:61:12:73:d3:f5:ce:63:fa:db:8e:25:
                    84:d0:32:7f:2d:38:94:5d:c1:ce:53:d7:ca:2b:ca:
                    a8:35:a7:7f:70:a7:58:50:ce:36:53:9f:87:e7:db:
                    d7:f9:43:64:5a:f0:ce:5e:8d:fe:e7:6b:83:25:7f:
                    a0:e7:a0:9c:58:b1:8a:d6:00:a2:64:33:ae:2b:b2:
                    82:69:9d:be:02:61:65:e9:7e:fd:f3:6a:95:7e:79:
                    79:e3:c9:ac:72:cb:86:89:71:33:86:0a:ab:a4:6b:
                    db:71:98:f0:e5:f3:08:c8:09:5c:0a:79:cc:6f:55:
                    f4:59:b6:ed:12:4c:97:af:b0:40:42:6e:ec:97:fd:
                    ff:ad:f2:c8:18:0c:98:17:cc:cc:42:1b:46:60:b6:
                    4f:87:8d:40:61:08:05:ff:4d:49:f2:3a:be:22:97:
                    08:3f:42:4c:e5:0a:b2:43:fd:41:ff:e3:48:4f:78:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:0A:68:A6:D6:CB:B3:38:BC:4D:3A:86:A6:E4:E6:1E:6D:DC:83
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:a7:36:35:f9:f3:fd:14:75:f7:32:d3:34:6f:b0:89:cf:
         51:77:f8:3f:ef:c0:8b:7f:39:2b:30:34:db:c4:98:82:52:3e:
         1b:40:70:53:3c:c0:5f:61:65:54:6c:c9:24:6c:09:34:5b:47:
         bf:f3:28:66:a2:de:9e:0d:da:81:b3:b4:31:d5:a8:c6:8a:74:
         94:34:51:e4:0e:3b:9b:50:fb:2a:55:57:c7:a6:79:e7:17:da:
         be:31:d3:84:cb:79:4f:ef:48:b2:00:08:ac:ea:91:c6:9f:c7:
         81:4f:57:47:f1:9a:f9:28:bf:c7:01:ad:cc:37:e4:fa:df:b7:
         1e:60:3b:b7:9f:ab:46:a9:67:b1:da:76:37:c1:6c:f7:30:04:
         cc:a3:a6:f4:34:f4:16:d4:b7:b4:00:8f:92:80:28:a8:19:ed:
         f6:55:df:0c:64:9b:82:b3:5b:2e:03:82:2e:39:7e:bf:e6:ce:
         24:a0:df:d3:a4:3e:c5:48:d4:62:93:b1:01:fb:55:f9:2c:18:
         11:b4:dd:21:21:20:c4:c4:80:d4:6e:1e:1f:2f:0f:94:f4:5a:
         c1:28:65:e4:42:75:d5:96:6a:85:53:35:0e:cb:29:5e:6b:f8:
         1d:ac:2a:84:11:41:e0:92:25:4a:e7:2c:9b:54:97:f5:d4:f2:
         d0:54:94:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mm+Is+vJEuVVAMNbSWtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx
OTM1MDMwHhcNMjUwNjI4MTEwMDQ4WhcNMjUwNjI5MTEwMDQ4WjAzMTEwLwYDVQQD
EygwZGY2MGE2OGE2ZDZjYmIzMzhiYzRkM2E4NmE2ZTRlNjFlNmRkYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUfVzMIhP0pGb7Y9heSh5Hu9hPex
N9zswiSfQGmC1ENFD2RyEJGUbGnhQPijWTx63AHVZWdNOQdUPERDnHnA34pO3jJV
ZgAVmuz+uREmYRJz0/XOY/rbjiWE0DJ/LTiUXcHOU9fKK8qoNad/cKdYUM42U5+H
59vX+UNkWvDOXo3+52uDJX+g56CcWLGK1gCiZDOuK7KCaZ2+AmFl6X7982qVfnl5
48mscsuGiXEzhgqrpGvbcZjw5fMIyAlcCnnMb1X0WbbtEkyXr7BAQm7sl/3/rfLI
GAyYF8zMQhtGYLZPh41AYQgF/01J8jq+IpcIP0JM5QqyQ/1B/+NIT3jpLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA32Cmim1suzOLxNOoam5OYebdyDMB8GA1UdIwQY
MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt
YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm
LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7CnNjX5
8/0Udfcy0zRvsInPUXf4P+/Ai385KzA028SYglI+G0BwUzzAX2FlVGzJJGwJNFtH
v/MoZqLeng3agbO0MdWoxop0lDRR5A47m1D7KlVXx6Z55xfavjHThMt5T+9IsgAI
rOqRxp/HgU9XR/Ga+Si/xwGtzDfk+t+3HmA7t5+rRqlnsdp2N8Fs9zAEzKOm9DT0
FtS3tACPkoAoqBnt9lXfDGSbgrNbLgOCLjl+v+bOJKDf06Q+xUjUYpOxAftV+SwY
EbTdISEgxMSA1G4eHy8PlPRawShl5EJ11ZZqhVM1DsspXmv4HawqhBFB4JIlSucs
m1SX9dTy0FSU0w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:37 2025 by rpki-client