Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File:                     x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier:          jV+LMyc1YBL/4AnHsptkyCpE7G1IZHFx8K6U8/vjmLo=
Subject key identifier:   A1:F0:81:A9:DF:7A:56:45:64:44:9F:4B:82:98:73:27:B6:92:25:8F
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer:       /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial:       0197B6A2467A5372C101E79C21854BDF92D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number:          0A5B
Signing time:             Sat 28 Jun 2025 13:02:57 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:57 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:57 +0000
Files and hashes:         1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
                          2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
                          3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
                          4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: JpD7vz9rPOZQl5qgCgZmpa8J2q0s1Xl6YzLCUi4rQuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:46:7a:53:72:c1:01:e7:9c:21:85:4b:df:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Validity
            Not Before: Jun 28 13:02:57 2025 GMT
            Not After : Jun 29 13:02:57 2025 GMT
        Subject: CN=a1f081a9df7a564564449f4b82987327b692258f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:53:5c:ae:56:db:5c:c1:e6:f1:f6:c9:48:
                    10:95:32:3f:d1:dd:78:52:37:c2:18:3c:cb:b4:c4:
                    f8:e0:65:cf:8b:5c:9c:93:ab:15:77:a5:ba:59:03:
                    07:00:61:f0:bb:fc:78:66:2d:e8:fb:9a:d7:14:e7:
                    21:cc:7d:43:94:2f:29:7e:0d:04:98:bd:2c:71:50:
                    dc:93:80:ca:ba:00:8b:b4:6b:8f:77:b2:2b:6c:48:
                    21:cc:69:52:b3:4b:ff:e6:46:18:79:0a:ed:16:56:
                    18:f7:50:f4:91:06:66:f4:3d:33:3b:13:81:01:a3:
                    17:9d:f9:a6:28:f9:46:ec:11:b9:31:ff:c1:b9:25:
                    49:7e:a1:be:4f:95:e5:87:ee:08:0c:13:24:8f:49:
                    b2:f6:81:6b:05:91:91:84:d8:59:50:70:c0:d7:cb:
                    31:2a:8c:fd:e3:e3:59:7d:96:ca:1e:b9:ae:16:bc:
                    c6:60:82:df:12:a1:d1:fa:82:d2:07:3e:31:e4:20:
                    95:ff:df:cc:72:d6:c4:08:27:10:5a:4a:3f:c9:3b:
                    c5:52:ff:6a:7b:7c:fb:20:0e:96:53:d7:6d:84:3a:
                    e5:30:e8:50:f5:2b:54:1f:35:d2:21:15:9b:9a:c4:
                    07:54:b9:0e:03:58:d2:43:c4:58:f2:a4:93:9c:d7:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:81:A9:DF:7A:56:45:64:44:9F:4B:82:98:73:27:B6:92:25:8F
            X509v3 Authority Key Identifier:
                keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:c1:ec:e8:8d:8d:8c:42:ff:18:59:c8:98:36:40:70:27:
         1a:c9:ec:e2:89:7f:46:cb:4d:d6:1d:27:c9:5a:27:7d:2f:d6:
         85:c5:a6:d2:d8:40:23:3b:5a:55:17:d5:36:85:b0:d3:dd:75:
         5e:15:f7:6f:41:df:49:6c:e2:80:70:a6:4a:97:97:e1:d4:98:
         62:cf:9b:b6:1d:6a:1d:9f:6b:96:0b:0b:a5:f9:4f:d9:42:59:
         43:ae:e6:81:42:93:ba:54:c9:c7:65:d3:23:dd:91:5d:10:56:
         a3:f8:e8:c7:ee:21:26:c4:f3:16:3b:73:09:0a:4a:f2:c6:8d:
         82:96:85:3e:bc:b4:52:44:17:cc:f8:2a:34:ec:97:de:06:3f:
         85:16:ea:95:31:2b:c2:e9:28:78:4b:25:1e:b7:01:ab:95:c3:
         42:f0:42:70:12:70:cc:30:e1:8a:35:9a:39:f6:b6:aa:de:49:
         13:f4:a6:67:b4:20:43:b6:8b:50:1d:cc:d1:85:d3:f1:6a:ee:
         f7:ea:af:12:a2:83:1d:45:8c:9a:da:7f:e9:d0:b9:d0:85:00:
         f4:d6:ed:64:3a:c2:38:55:3d:84:40:51:9d:db:98:11:bd:e4:
         43:69:85:12:03:6e:66:9e:25:a3:da:0f:fd:ba:c4:01:bf:c0:
         71:55:52:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okZ6U3LBAeecIYVL35LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1
MzM2MTcwHhcNMjUwNjI4MTMwMjU3WhcNMjUwNjI5MTMwMjU3WjAzMTEwLwYDVQQD
EyhhMWYwODFhOWRmN2E1NjQ1NjQ0NDlmNGI4Mjk4NzMyN2I2OTIyNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI5TXK5W21zB5vH2yUgQlTI/0d14
UjfCGDzLtMT44GXPi1yck6sVd6W6WQMHAGHwu/x4Zi3o+5rXFOchzH1DlC8pfg0E
mL0scVDck4DKugCLtGuPd7IrbEghzGlSs0v/5kYYeQrtFlYY91D0kQZm9D0zOxOB
AaMXnfmmKPlG7BG5Mf/BuSVJfqG+T5Xlh+4IDBMkj0my9oFrBZGRhNhZUHDA18sx
Koz94+NZfZbKHrmuFrzGYILfEqHR+oLSBz4x5CCV/9/MctbECCcQWko/yTvFUv9q
e3z7IA6WU9dthDrlMOhQ9StUHzXSIRWbmsQHVLkOA1jSQ8RY8qSTnNcL7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHwganfelZFZESfS4KYcye2kiWPMB8GA1UdIwQY
MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt
MGVkMjRlYmM0ZWQ4LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4
LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXjB7OiN
jYxC/xhZyJg2QHAnGsns4ol/RstN1h0nyVonfS/WhcWm0thAIztaVRfVNoWw0911
XhX3b0HfSWzigHCmSpeX4dSYYs+bth1qHZ9rlgsLpflP2UJZQ67mgUKTulTJx2XT
I92RXRBWo/jox+4hJsTzFjtzCQpK8saNgpaFPry0UkQXzPgqNOyX3gY/hRbqlTEr
wukoeEslHrcBq5XDQvBCcBJwzDDhijWaOfa2qt5JE/SmZ7QgQ7aLUB3M0YXT8Wru
9+qvEqKDHUWMmtp/6dC50IUA9NbtZDrCOFU9hEBRnduYEb3kQ2mFEgNuZp4lo9oP
/brEAb/AcVVSbQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:06 2025 by rpki-client