Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          uAkEAREPbESztTVhxMKTRtYRpmfbBKwkxs+evZi2Om0=
Subject key identifier:   EF:E2:39:B4:4B:FD:5F:3C:B4:E9:FF:61:0B:68:F7:5D:CE:08:D3:E5
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       0197B7EA4616D22551F30D7F805CB276CAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          0D4F
Signing time:             Sat 28 Jun 2025 19:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:13 +0000
Files and hashes:         1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
                          2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: PniACz2BTlOHI3PWXjlDO5kkUIjm4Sj5aBsjPgpyE3g=)
                          3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
                          4: kgsIk8ju0wKKr0nkwVgHsRJydGg.roa (hash: 22cjkPvdduHGA9XlrCi4AiJihfCCZjAqzu2Hbki4taU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:46:16:d2:25:51:f3:0d:7f:80:5c:b2:76:ca:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Jun 28 19:01:13 2025 GMT
            Not After : Jun 29 19:01:13 2025 GMT
        Subject: CN=efe239b44bfd5f3cb4e9ff610b68f75dce08d3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:7d:d9:52:7b:e8:5f:b8:41:ff:a2:ca:07:
                    c2:e9:bd:1a:4b:14:6b:cb:0b:ab:9e:bf:58:5d:ab:
                    98:a0:24:f5:bf:2f:2b:29:af:62:50:8b:e1:b9:23:
                    e9:12:a5:fb:de:da:9d:e6:ef:37:06:9b:b2:d1:cd:
                    6d:81:80:59:91:3a:10:31:7c:9f:28:83:5a:81:05:
                    68:23:d4:4d:5f:f6:4b:57:ce:b7:13:9b:65:e1:f1:
                    84:15:9f:42:db:49:e4:55:fe:d1:ff:ed:25:d9:05:
                    97:bf:8c:1a:87:cc:f5:e9:0b:ce:d3:a9:be:d8:56:
                    b7:98:2e:10:d9:52:b5:5d:42:52:b7:8d:13:36:5e:
                    9a:53:8e:11:98:ce:9a:30:f9:dc:f1:9c:2b:b7:a1:
                    30:c0:ee:e0:ba:18:c6:39:96:14:09:99:59:80:4a:
                    05:c1:0f:73:7b:0e:51:5f:5d:e3:51:d4:fe:b0:c5:
                    53:65:50:e3:3d:dc:c7:59:0e:ee:31:45:c0:d4:d4:
                    62:94:f6:f1:05:30:d6:89:1d:96:7a:a8:f5:f2:c2:
                    2b:46:99:56:18:5d:60:3b:2e:39:39:82:d2:34:9e:
                    b8:74:af:b5:e8:0a:95:98:13:84:c2:bc:11:2e:91:
                    45:be:f1:37:1d:f8:5c:5b:54:6e:3e:20:13:8e:fb:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:39:B4:4B:FD:5F:3C:B4:E9:FF:61:0B:68:F7:5D:CE:08:D3:E5
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:e3:96:d6:ed:5a:e9:78:bb:27:05:ec:90:84:56:f4:aa:
         c5:d6:a9:af:81:0b:24:06:ab:17:7d:44:35:1f:e8:40:5f:b9:
         7d:8f:b5:2f:92:45:3d:b9:ea:06:14:9c:cc:4e:5e:78:83:c3:
         5f:35:96:95:1a:ce:c5:8f:10:b2:81:88:2d:89:45:38:44:2e:
         3c:08:82:50:64:08:0d:9f:42:e0:f6:9f:c3:a8:84:67:de:2d:
         2f:9a:45:42:4e:35:23:51:94:18:29:13:58:5d:b1:b1:9a:0b:
         35:09:37:57:6e:42:c0:dd:1a:07:9e:f6:4b:72:f8:4c:57:32:
         4b:f2:b7:28:75:57:cb:da:c2:58:9e:b8:88:96:7d:d5:f5:5f:
         01:1a:c2:81:85:ae:80:c9:ec:41:7c:93:73:f8:08:53:40:1c:
         24:1c:e7:16:5b:3d:22:04:87:0a:1a:43:1a:de:de:98:ea:50:
         17:1c:97:01:e9:06:ec:c7:20:d6:62:30:50:71:98:06:b5:5d:
         68:12:f8:df:bc:67:04:ac:ab:4c:77:3c:2f:2c:f5:05:6c:ed:
         33:93:c3:7e:53:74:74:9f:ec:4d:26:c3:03:33:95:e4:19:85:
         8a:59:d1:7f:1c:c2:14:5a:bd:29:2c:12:de:da:f8:5e:04:74:
         23:19:4b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36kYW0iVR8w1/gFyydsrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGRkNGM5ZGMyM2ZhYzM1NTc0ZmNlMmI0Mjk0Mzk4YWRk
ODUyMWMwHhcNMjUwNjI4MTkwMTEzWhcNMjUwNjI5MTkwMTEzWjAzMTEwLwYDVQQD
EyhlZmUyMzliNDRiZmQ1ZjNjYjRlOWZmNjEwYjY4Zjc1ZGNlMDhkM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4d92VJ76F+4Qf+iygfC6b0aSxRr
ywurnr9YXauYoCT1vy8rKa9iUIvhuSPpEqX73tqd5u83Bpuy0c1tgYBZkToQMXyf
KINagQVoI9RNX/ZLV863E5tl4fGEFZ9C20nkVf7R/+0l2QWXv4wah8z16QvO06m+
2Fa3mC4Q2VK1XUJSt40TNl6aU44RmM6aMPnc8Zwrt6EwwO7guhjGOZYUCZlZgEoF
wQ9zew5RX13jUdT+sMVTZVDjPdzHWQ7uMUXA1NRilPbxBTDWiR2Weqj18sIrRplW
GF1gOy45OYLSNJ64dK+16AqVmBOEwrwRLpFFvvE3HfhcW1RuPiATjvvb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/iObRL/V88tOn/YQto913OCNPlMB8GA1UdIwQY
MBaAFBXd1MncI/rDVXT84rQpQ5it2FIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEt
Y2IzY2QwNDA0YWI1LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEtY2IzY2QwNDA0YWI1
LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRrjltbt
Wul4uycF7JCEVvSqxdapr4ELJAarF31ENR/oQF+5fY+1L5JFPbnqBhSczE5eeIPD
XzWWlRrOxY8QsoGILYlFOEQuPAiCUGQIDZ9C4Pafw6iEZ94tL5pFQk41I1GUGCkT
WF2xsZoLNQk3V25CwN0aB572S3L4TFcyS/K3KHVXy9rCWJ64iJZ91fVfARrCgYWu
gMnsQXyTc/gIU0AcJBznFls9IgSHChpDGt7emOpQFxyXAekG7Mcg1mIwUHGYBrVd
aBL437xnBKyrTHc8Lyz1BWztM5PDflN0dJ/sTSbDAzOV5BmFilnRfxzCFFq9KSwS
3tr4XgR0IxlLuA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:10 2025 by rpki-client