Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File:                     l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier:          VPYxQiR6x6GPFWeInOi5mSKgMdPdQ1ZhXgc6hCbMF5Y=
Subject key identifier:   31:6C:22:AE:C1:96:A7:25:DA:21:09:02:EE:14:BF:91:25:F0:7A:47
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer:       /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial:       0197B96AC2FDF137814B3D0CA582ED7CF205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number:          0764
Signing time:             Sun 29 Jun 2025 02:01:11 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:11 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:11 +0000
Files and hashes:         1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
                          2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
                          3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: 3wvQsOhPeIdn3K+kDx/XpAq28XOpz4VNL6jVV9gAsMo=)
                          4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:c2:fd:f1:37:81:4b:3d:0c:a5:82:ed:7c:f2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
        Validity
            Not Before: Jun 29 02:01:11 2025 GMT
            Not After : Jun 30 02:01:11 2025 GMT
        Subject: CN=316c22aec196a725da210902ee14bf9125f07a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:45:47:f9:bd:c3:9a:00:6b:ef:2c:1c:df:
                    58:ca:22:ed:7e:a9:0a:dc:38:78:34:2f:bb:33:e0:
                    d6:80:a4:c2:0b:d3:85:c2:4f:78:ed:d7:0a:da:dc:
                    9a:28:d9:2c:80:3a:60:01:85:ce:00:31:41:06:1c:
                    02:4a:e7:0a:d8:2b:e8:a7:3d:da:e9:c2:93:4d:18:
                    72:c2:a6:1e:42:49:5d:bd:a1:74:58:b5:7d:6a:75:
                    e2:49:c1:a0:5b:99:99:e1:ea:dc:29:9f:e2:4e:5a:
                    e9:82:75:e8:6a:fa:3f:80:2b:fa:30:41:93:8f:f3:
                    fb:62:5a:3e:18:d8:6e:7d:1d:58:28:6f:b5:73:ee:
                    af:d8:7b:2f:10:03:ec:70:5e:2e:4f:80:6c:37:47:
                    cd:e7:b9:da:65:61:29:c5:39:5c:94:1b:2f:31:fd:
                    f8:03:ba:f8:34:ec:34:d3:f3:65:0e:b3:0f:66:74:
                    21:c5:7d:c3:6f:e4:1e:3c:7a:0b:fa:f7:9c:cc:a5:
                    15:ca:0b:7b:39:04:1f:a5:2a:cf:8b:96:cc:a4:02:
                    59:a7:c5:b2:08:98:1a:97:72:38:19:11:c6:bf:f5:
                    d1:ef:2d:ec:fd:23:80:08:f6:8e:5b:c1:ac:bf:f0:
                    bf:a7:0e:6d:6b:37:76:6b:00:b4:a4:c7:5c:7f:d5:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:22:AE:C1:96:A7:25:DA:21:09:02:EE:14:BF:91:25:F0:7A:47
            X509v3 Authority Key Identifier:
                keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:1f:23:73:57:2f:9a:f6:01:db:bd:f9:6a:21:2a:b9:bf:
         72:d9:b5:6b:5b:7e:09:c7:42:90:34:2e:ba:48:3c:99:c6:36:
         17:2b:ea:c2:7e:f3:74:5b:e9:18:f4:2b:0c:eb:55:96:31:bf:
         5b:15:b0:83:1b:eb:fa:6c:75:3d:22:02:df:89:4f:16:6a:04:
         3e:75:b8:16:59:43:9f:20:e9:37:e0:4e:98:5a:44:b6:69:f8:
         0b:e2:94:74:8d:cb:18:e8:ad:27:02:e5:1d:23:65:d3:a3:14:
         ff:17:7d:9f:11:56:94:5a:43:3f:2a:dc:46:b8:b9:60:da:56:
         77:62:c9:2f:cb:79:a5:c8:a9:52:b8:a0:4e:07:67:83:75:a8:
         bc:0f:fd:81:e1:aa:07:e9:8a:79:83:10:17:51:11:86:34:75:
         2d:29:d7:e2:ef:5f:d1:3b:fa:fb:9c:96:00:d6:c7:c1:02:6c:
         79:27:2e:16:59:87:ad:a6:c2:a3:95:ed:e2:40:97:70:9c:2f:
         ca:01:b5:d6:ab:bc:86:21:e7:cd:51:41:09:ab:99:34:dd:9c:
         2e:8c:7b:52:88:58:31:a3:75:36:b7:d6:5e:06:e2:32:e8:16:
         8f:16:c7:75:62:84:5e:8d:87:df:b6:2e:14:a5:47:46:8f:ff:
         17:53:4e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5asL98TeBSz0MpYLtfPIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0
YjYxYTgwHhcNMjUwNjI5MDIwMTExWhcNMjUwNjMwMDIwMTExWjAzMTEwLwYDVQQD
EygzMTZjMjJhZWMxOTZhNzI1ZGEyMTA5MDJlZTE0YmY5MTI1ZjA3YTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswFFR/m9w5oAa+8sHN9YyiLtfqkK
3Dh4NC+7M+DWgKTCC9OFwk947dcK2tyaKNksgDpgAYXOADFBBhwCSucK2Cvopz3a
6cKTTRhywqYeQkldvaF0WLV9anXiScGgW5mZ4ercKZ/iTlrpgnXoavo/gCv6MEGT
j/P7Ylo+GNhufR1YKG+1c+6v2HsvEAPscF4uT4BsN0fN57naZWEpxTlclBsvMf34
A7r4NOw00/NlDrMPZnQhxX3Db+QePHoL+veczKUVygt7OQQfpSrPi5bMpAJZp8Wy
CJgal3I4GRHGv/XR7y3s/SOACPaOW8Gsv/C/pw5tazd2awC0pMdcf9VMIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFsIq7Blqcl2iEJAu4Uv5El8HpHMB8GA1UdIwQY
MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt
OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh
LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM48fI3NX
L5r2Adu9+WohKrm/ctm1a1t+CcdCkDQuukg8mcY2Fyvqwn7zdFvpGPQrDOtVljG/
WxWwgxvr+mx1PSIC34lPFmoEPnW4FllDnyDpN+BOmFpEtmn4C+KUdI3LGOitJwLl
HSNl06MU/xd9nxFWlFpDPyrcRri5YNpWd2LJL8t5pcipUrigTgdng3WovA/9geGq
B+mKeYMQF1ERhjR1LSnX4u9f0Tv6+5yWANbHwQJseScuFlmHrabCo5Xt4kCXcJwv
ygG11qu8hiHnzVFBCauZNN2cLox7UohYMaN1NrfWXgbiMugWjxbHdWKEXo2H37Yu
FKVHRo//F1NO8g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:34 2025 by rpki-client