Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          lv/BNCNvjAspPYoUoKeXmM/KX31kMkk9szoKJn37914=
Subject key identifier:   FD:B8:8D:7B:2F:D8:F7:61:78:28:69:78:B9:73:EF:5E:E5:90:F1:FC
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       0197B5FC64CB26E0A9510420395589D217DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          15BB
Signing time:             Sat 28 Jun 2025 10:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:46 +0000
Files and hashes:         1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
                          2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
                          3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
                          4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
                          5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: nWsPWHkEeHUkrpe4cE9WM305dZB17SFMuxaqzVmcjUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:64:cb:26:e0:a9:51:04:20:39:55:89:d2:17:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Jun 28 10:01:46 2025 GMT
            Not After : Jun 29 10:01:46 2025 GMT
        Subject: CN=fdb88d7b2fd8f76178286978b973ef5ee590f1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:ad:e5:d8:1b:5c:74:ff:18:6e:7c:de:c3:
                    bd:17:f6:c6:bb:21:17:69:60:b7:17:a2:da:69:d5:
                    18:df:71:aa:80:e2:4a:26:f1:87:8c:40:29:6c:e6:
                    0f:48:a5:7b:8a:93:54:18:25:e2:0e:59:71:86:33:
                    93:7a:19:2c:6f:4f:fb:ca:40:b4:bc:c0:4f:88:80:
                    b7:bd:98:61:5c:79:41:3f:3a:81:57:ed:04:2a:40:
                    2e:7b:0e:46:4b:52:df:49:7b:39:cd:5c:6b:b1:48:
                    4b:38:52:67:6d:2d:0b:ab:3f:ec:aa:b9:2d:55:1b:
                    63:37:f8:94:9a:ac:8c:d0:4c:4f:55:be:4c:a4:a0:
                    38:67:80:19:5c:e8:a5:0e:57:55:be:be:be:f1:12:
                    27:7f:3d:6f:25:a2:97:9b:93:b5:ae:cf:01:75:7f:
                    c6:bd:ce:39:4b:99:7a:9e:db:e9:0b:ac:4f:67:ac:
                    a8:85:c8:a1:6d:e9:22:88:b0:10:ce:69:a9:d4:96:
                    40:95:27:81:97:44:f5:c5:e4:1f:a7:5b:7e:3d:c8:
                    2d:10:55:2b:e1:32:48:64:40:d8:09:4b:3d:ba:fd:
                    9e:9e:30:5b:cd:5b:ac:14:9f:39:b4:67:4c:4b:26:
                    fb:c0:48:e2:7d:58:0d:ab:0c:31:78:ee:98:83:f3:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:8D:7B:2F:D8:F7:61:78:28:69:78:B9:73:EF:5E:E5:90:F1:FC
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:58:df:9c:f0:0d:f8:40:7c:4c:af:22:99:af:ef:7e:a8:3b:
         3f:24:d1:7b:e2:01:70:c2:b0:df:51:97:06:a6:3a:e1:2c:5d:
         c4:14:e0:75:56:05:2f:11:e5:bf:7d:f8:3c:56:ce:c7:91:98:
         45:06:78:c8:e9:df:df:c7:a2:20:c4:f1:0b:7e:34:3f:2c:08:
         c8:e5:bf:2b:c5:bd:cb:a1:c2:a7:3d:c9:08:8b:d0:2d:86:97:
         80:cc:e3:d7:d7:ce:69:e5:c1:41:8d:e6:8f:7f:43:6a:bd:bf:
         20:7e:52:e2:d6:24:1b:f1:64:72:3e:38:0e:e1:8b:68:27:aa:
         59:13:55:b3:61:21:c4:55:49:ef:b4:72:28:14:54:e0:4e:63:
         c3:03:ea:f6:66:0a:71:d5:8b:48:72:2b:40:4f:64:a5:d6:59:
         a7:eb:a7:73:8f:30:73:53:0d:1c:cc:85:3b:e2:52:8c:c8:ab:
         47:24:2f:1a:ad:fc:50:8f:d1:00:69:47:99:34:8a:9a:dc:12:
         a4:a3:46:70:93:60:97:14:66:91:7e:b3:57:f8:e6:e0:bf:54:
         35:53:6b:67:b6:f2:39:58:51:9f:1d:b4:93:11:99:3c:21:f8:
         53:1a:02:6c:31:45:cf:df:20:15:d9:08:58:f3:40:dc:01:e2:
         13:07:fa:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/GTLJuCpUQQgOVWJ0hfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTExMzI0ZTg2OWJjNGNhNWVjOGJhZDBkM2RkZmY2ODU0
NDE5NzkwHhcNMjUwNjI4MTAwMTQ2WhcNMjUwNjI5MTAwMTQ2WjAzMTEwLwYDVQQD
EyhmZGI4OGQ3YjJmZDhmNzYxNzgyODY5NzhiOTczZWY1ZWU1OTBmMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaut5dgbXHT/GG583sO9F/bGuyEX
aWC3F6LaadUY33GqgOJKJvGHjEApbOYPSKV7ipNUGCXiDllxhjOTehksb0/7ykC0
vMBPiIC3vZhhXHlBPzqBV+0EKkAuew5GS1LfSXs5zVxrsUhLOFJnbS0Lqz/sqrkt
VRtjN/iUmqyM0ExPVb5MpKA4Z4AZXOilDldVvr6+8RInfz1vJaKXm5O1rs8BdX/G
vc45S5l6ntvpC6xPZ6yohcihbekiiLAQzmmp1JZAlSeBl0T1xeQfp1t+PcgtEFUr
4TJIZEDYCUs9uv2enjBbzVusFJ85tGdMSyb7wEjifVgNqwwxeO6Yg/Pq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP24jXsv2PdheChpeLlz717lkPH8MB8GA1UdIwQY
MBaAFEyREyToabxMpeyLrQ093/aFRBl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUt
YjdkMWNhYzUxZTBjLzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yYjM4YjMtMTJmMS00MjQyLWFkYWUtYjdkMWNhYzUxZTBj
LzEvVEpFVEpPaHB2RXlsN0l1dERUM2Y5b1ZFR1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1jfnPAN
+EB8TK8ima/vfqg7PyTRe+IBcMKw31GXBqY64SxdxBTgdVYFLxHlv334PFbOx5GY
RQZ4yOnf38eiIMTxC340PywIyOW/K8W9y6HCpz3JCIvQLYaXgMzj19fOaeXBQY3m
j39Dar2/IH5S4tYkG/Fkcj44DuGLaCeqWRNVs2EhxFVJ77RyKBRU4E5jwwPq9mYK
cdWLSHIrQE9kpdZZp+unc48wc1MNHMyFO+JSjMirRyQvGq38UI/RAGlHmTSKmtwS
pKNGcJNglxRmkX6zV/jm4L9UNVNrZ7byOVhRnx20kxGZPCH4UxoCbDFFz98gFdkI
WPNA3AHiEwf6yA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:30 2025 by rpki-client