Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File:                     0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier:          jrcUvNXpm2fZyrVZQ2Z6CeXxTIHTN6iVnVycylat/Rc=
Subject key identifier:   AF:0F:9E:D4:E8:A5:44:5D:F4:D2:08:43:3C:31:B1:44:72:A3:72:92
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer:       /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial:       0197B8C62647A98E1345E2C4445D40BBDD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 23:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 23:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 23:01:22 +0000
Files and hashes:         1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: MY7F6c69SVnmFQI9PMYUbG7FTtwdbiBagJgoBq8pX+M=)
                          2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c6:26:47:a9:8e:13:45:e2:c4:44:5d:40:bb:dd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
        Validity
            Not Before: Jun 28 23:01:22 2025 GMT
            Not After : Jun 29 23:01:22 2025 GMT
        Subject: CN=af0f9ed4e8a5445df4d208433c31b14472a37292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:b8:b8:03:1d:9e:8a:90:63:c3:15:ea:6f:
                    06:55:32:25:06:d1:13:e7:92:e6:c0:41:23:ed:cf:
                    5a:2c:96:26:58:2e:e3:b6:85:f3:a0:7d:cb:43:52:
                    52:dd:cd:82:ed:e0:40:8c:b2:84:0f:1e:fb:c6:3f:
                    c2:18:0c:87:0b:ad:cb:bb:45:b4:3e:a0:2e:57:f5:
                    b4:a0:d8:51:0c:6b:ed:97:58:67:e5:42:1e:31:b8:
                    2f:c1:d5:74:a1:1f:7a:d2:c3:52:40:1f:ce:ea:79:
                    01:5d:d5:8a:10:8e:1e:4b:d4:2c:ff:fb:3d:3d:9b:
                    d8:2f:4e:a9:28:74:69:45:eb:3c:ad:cd:18:03:fb:
                    f4:75:dd:a5:6d:47:d4:e5:a6:24:2f:e0:90:95:cf:
                    eb:7e:8d:53:b0:ce:07:d9:a8:77:5d:51:08:74:cb:
                    79:b5:8b:65:14:ab:77:2c:2f:81:8b:ca:b9:b9:4d:
                    4a:74:ed:81:7d:89:ef:31:72:41:61:82:17:b0:24:
                    61:bb:ce:ab:1a:f2:36:a8:16:5a:c3:e3:b1:65:09:
                    0a:ab:09:48:8d:c9:ec:9f:9a:d8:76:e3:17:e9:2c:
                    d3:4b:bc:6a:23:d8:5f:1d:ad:8a:24:64:4b:45:09:
                    55:0c:5f:4e:4d:8b:76:46:a7:9e:57:56:56:09:fc:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0F:9E:D4:E8:A5:44:5D:F4:D2:08:43:3C:31:B1:44:72:A3:72:92
            X509v3 Authority Key Identifier:
                keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:b0:1d:20:03:70:0b:5e:99:3a:a6:cd:3b:84:d8:8d:c8:
         4f:e3:5b:7a:76:2f:5b:9c:88:5e:a3:eb:96:22:e9:5e:de:75:
         30:bb:a6:d7:b4:ce:43:d7:90:2d:25:84:13:ff:9e:aa:9b:ea:
         58:b9:7c:3e:4e:78:4a:f5:2a:29:c1:3f:58:96:20:2e:68:32:
         e7:b9:39:be:d5:cd:9e:bc:e2:3e:26:67:19:b3:59:83:72:bc:
         4d:82:71:9f:29:73:6c:9c:b3:72:d5:4a:a4:c5:c8:73:36:88:
         f3:eb:c8:7e:51:3d:7d:9d:ab:03:e0:dc:1f:74:b5:3c:1f:5d:
         c6:3b:b6:f2:d7:4b:e4:a1:85:29:0b:07:06:b8:8c:a9:e2:25:
         a9:2d:b4:9d:32:74:c3:95:42:9b:05:eb:f9:1e:29:e8:a0:90:
         bd:57:9e:0d:7f:91:3f:e2:35:e3:80:78:ed:34:19:49:87:79:
         06:a2:ee:a5:a2:c5:e6:ec:92:17:77:f2:57:a3:6d:d1:55:a5:
         80:e1:72:e3:10:5c:67:bf:a9:06:72:12:34:64:d8:74:7f:1a:
         96:7a:50:71:2d:75:3f:43:71:69:16:f5:41:06:43:e2:85:ba:
         23:72:03:87:e7:94:00:ea:3a:2f:8d:b6:38:91:6e:0a:05:2a:
         f8:0c:b9:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xiZHqY4TReLERF1Au90MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy
MDE4NTUwHhcNMjUwNjI4MjMwMTIyWhcNMjUwNjI5MjMwMTIyWjAzMTEwLwYDVQQD
EyhhZjBmOWVkNGU4YTU0NDVkZjRkMjA4NDMzYzMxYjE0NDcyYTM3MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTK4uAMdnoqQY8MV6m8GVTIlBtET
55LmwEEj7c9aLJYmWC7jtoXzoH3LQ1JS3c2C7eBAjLKEDx77xj/CGAyHC63Lu0W0
PqAuV/W0oNhRDGvtl1hn5UIeMbgvwdV0oR960sNSQB/O6nkBXdWKEI4eS9Qs//s9
PZvYL06pKHRpRes8rc0YA/v0dd2lbUfU5aYkL+CQlc/rfo1TsM4H2ah3XVEIdMt5
tYtlFKt3LC+Bi8q5uU1KdO2BfYnvMXJBYYIXsCRhu86rGvI2qBZaw+OxZQkKqwlI
jcnsn5rYduMX6SzTS7xqI9hfHa2KJGRLRQlVDF9OTYt2RqeeV1ZWCfxwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8PntTopURd9NIIQzwxsURyo3KSMB8GA1UdIwQY
MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt
ZTRhODZiMGZmZDJlLzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl
LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTGwHSAD
cAtemTqmzTuE2I3IT+NbenYvW5yIXqPrliLpXt51MLum17TOQ9eQLSWEE/+eqpvq
WLl8Pk54SvUqKcE/WJYgLmgy57k5vtXNnrziPiZnGbNZg3K8TYJxnylzbJyzctVK
pMXIczaI8+vIflE9fZ2rA+DcH3S1PB9dxju28tdL5KGFKQsHBriMqeIlqS20nTJ0
w5VCmwXr+R4p6KCQvVeeDX+RP+I144B47TQZSYd5BqLupaLF5uySF3fyV6Nt0VWl
gOFy4xBcZ7+pBnISNGTYdH8alnpQcS11P0NxaRb1QQZD4oW6I3IDh+eUAOo6L422
OJFuCgUq+Ay54Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:05 2025 by rpki-client