Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          vmdZfQUG2vODyZzp9cz9XWlOUTJtBZR/1xSsV4DvIac=
Subject key identifier:   A3:40:17:17:94:9B:32:33:5F:B3:15:F4:05:CC:C9:10:B9:2F:AB:72
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       0196C23993E831F7CAA320B67730A8C551B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          0D0E
Signing time:             Mon 12 May 2025 02:01:15 +0000
Manifest this update:     Mon 12 May 2025 02:01:15 +0000
Manifest next update:     Tue 13 May 2025 02:01:15 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: ET+ipN4Iw6/ChCVeDjjZHRm5LUPtIM+iz5zdgMtakTw=)
                          2: jJb63WHX8LsB3QDuigxBrD65ZR0.roa (hash: +ilD7JtRRxaEC6UNmKq5fdG6fZrQuNb1tHL4KgM7JRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:93:e8:31:f7:ca:a3:20:b6:77:30:a8:c5:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: May 12 02:01:15 2025 GMT
            Not After : May 13 02:01:15 2025 GMT
        Subject: CN=a3401717949b32335fb315f405ccc910b92fab72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:24:4d:d0:3d:0a:85:0f:59:85:0b:48:da:
                    cd:70:22:b1:38:83:de:c9:7c:d7:d6:3f:00:93:23:
                    df:44:69:8f:0d:fb:f4:58:4f:59:96:4a:cc:a1:df:
                    14:be:ec:05:b5:bd:5a:00:88:79:d1:2a:26:77:26:
                    ec:93:9a:52:39:10:f0:ba:65:c1:13:c3:29:ef:55:
                    0d:32:66:b7:ca:3e:80:b6:84:8a:98:9c:f6:03:a5:
                    12:38:d5:96:2f:7f:fa:a8:fb:7b:26:dc:0a:78:ed:
                    72:d6:e6:50:0c:25:ed:75:79:98:43:74:43:20:b5:
                    54:e3:d1:a5:77:4a:85:19:85:13:4c:51:4b:9c:99:
                    be:09:ea:fc:7a:53:21:19:bd:5c:09:61:b0:27:a7:
                    fa:09:0a:d4:3a:87:ad:52:f4:83:72:2f:17:b7:22:
                    f9:13:5f:47:39:e5:76:10:16:ee:79:92:e6:be:25:
                    31:2a:16:ea:74:8b:5a:d3:b8:cd:23:2f:3c:06:0a:
                    13:26:00:c6:d7:13:ac:74:cb:64:f4:7b:07:26:eb:
                    94:e8:e7:b6:fc:ce:fd:f6:f8:da:0c:8e:26:02:d2:
                    dd:37:f6:ec:a0:54:55:49:fd:c2:69:6c:9d:9c:43:
                    7b:7a:bd:af:e5:33:3b:34:b2:38:72:4f:92:5f:f1:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:17:17:94:9B:32:33:5F:B3:15:F4:05:CC:C9:10:B9:2F:AB:72
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:41:57:4c:6f:29:3a:c7:47:0e:4c:59:35:0f:94:d4:8e:
         29:bf:3c:65:44:60:c4:e1:dd:a2:cd:d1:5a:63:77:69:b5:a3:
         fb:fb:b2:d3:f8:d7:90:73:42:80:66:2a:e9:cd:55:df:17:bc:
         67:f0:95:af:1e:0a:26:f9:d0:22:9f:d1:33:3f:59:14:c6:7a:
         1c:b3:e8:c3:94:0c:dd:59:7d:86:59:5c:02:90:8c:d5:6b:08:
         b2:d1:de:8f:9b:71:9a:1b:df:16:60:81:cd:07:14:c5:3e:b2:
         fc:79:a8:2b:e1:5a:d3:86:2c:c7:af:56:2e:5d:c3:3f:ba:e2:
         38:84:2e:6a:37:b9:44:86:1f:99:df:a8:e6:f2:84:1e:8d:c3:
         0e:83:23:9a:04:7b:db:32:82:a6:63:6c:00:0f:da:de:0d:ec:
         d5:40:1b:55:56:32:0c:6a:59:5f:ab:ae:65:b6:7f:09:29:bf:
         b9:c5:22:22:2c:de:dd:ac:17:de:63:94:02:1e:55:72:25:c1:
         49:02:a7:a2:fb:e5:9d:75:85:30:2a:34:e5:df:b2:45:a0:44:
         d8:82:79:8e:86:63:f5:48:a5:0a:0b:38:61:4c:dd:16:77:0d:
         0c:a6:2f:ec:a7:22:0b:ab:a7:d8:54:ee:04:57:61:9e:19:9d:
         d7:20:aa:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOZPoMffKoyC2dzCoxVGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Yzg5YjNkY2RmYTI2OTdiNDg3MjEzMDhjNzZiNjczNzJh
MTNiMTUwHhcNMjUwNTEyMDIwMTE1WhcNMjUwNTEzMDIwMTE1WjAzMTEwLwYDVQQD
EyhhMzQwMTcxNzk0OWIzMjMzNWZiMzE1ZjQwNWNjYzkxMGI5MmZhYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ckTdA9CoUPWYULSNrNcCKxOIPe
yXzX1j8AkyPfRGmPDfv0WE9ZlkrMod8UvuwFtb1aAIh50Somdybsk5pSORDwumXB
E8Mp71UNMma3yj6AtoSKmJz2A6USONWWL3/6qPt7JtwKeO1y1uZQDCXtdXmYQ3RD
ILVU49Gld0qFGYUTTFFLnJm+Cer8elMhGb1cCWGwJ6f6CQrUOoetUvSDci8XtyL5
E19HOeV2EBbueZLmviUxKhbqdIta07jNIy88BgoTJgDG1xOsdMtk9HsHJuuU6Oe2
/M799vjaDI4mAtLdN/bsoFRVSf3CaWydnEN7er2v5TM7NLI4ck+SX/EV7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNAFxeUmzIzX7MV9AXMyRC5L6tyMB8GA1UdIwQY
MBaAFOjImz3N+iaXtIchMIx2tnNyoTsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUt
OTM0YjQ0MzkwOTJkLzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUtOTM0YjQ0MzkwOTJk
LzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsy1BV0xv
KTrHRw5MWTUPlNSOKb88ZURgxOHdos3RWmN3abWj+/uy0/jXkHNCgGYq6c1V3xe8
Z/CVrx4KJvnQIp/RMz9ZFMZ6HLPow5QM3Vl9hllcApCM1WsIstHej5txmhvfFmCB
zQcUxT6y/HmoK+Fa04Ysx69WLl3DP7riOIQuaje5RIYfmd+o5vKEHo3DDoMjmgR7
2zKCpmNsAA/a3g3s1UAbVVYyDGpZX6uuZbZ/CSm/ucUiIize3awX3mOUAh5VciXB
SQKnovvlnXWFMCo05d+yRaBE2IJ5joZj9UilCgs4YUzdFncNDKYv7KciC6un2FTu
BFdhnhmd1yCq5A==
-----END CERTIFICATE-----
Generated at Mon May 12 10:57:30 2025 by rpki-client