Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File:                     Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier:          GrDlYqyPfHmYGD/g8IQ3BmKdy08sc6rVWIQuCoVJ8X0=
Subject key identifier:   38:4A:B3:82:5E:54:76:92:B1:10:EE:CC:2C:DF:0C:1C:C2:7E:EA:CD
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer:       /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial:       0197B7B32D565995B113BBB540E83EEF4AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number:          06CD
Signing time:             Sat 28 Jun 2025 18:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:02 +0000
Files and hashes:         1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: dsp1+O9xOpUhZCtD+NCp5l//syq2u8vg5zq/IT4iMr0=)
                          2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:2d:56:59:95:b1:13:bb:b5:40:e8:3e:ef:4a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
        Validity
            Not Before: Jun 28 18:01:02 2025 GMT
            Not After : Jun 29 18:01:02 2025 GMT
        Subject: CN=384ab3825e547692b110eecc2cdf0c1cc27eeacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:9d:16:5e:f3:25:de:5b:ea:22:09:ce:68:
                    01:34:dc:f9:2d:08:43:b3:e8:a5:ff:59:95:87:42:
                    2a:ec:24:68:37:4f:ab:de:78:d5:74:d3:ca:bf:a7:
                    b1:2c:ed:dd:b8:e4:d2:89:55:6b:15:55:5f:4d:6d:
                    68:9f:62:9e:61:64:8b:d2:64:b9:e5:af:9a:2b:e5:
                    c3:08:5c:51:3c:3f:49:11:92:3c:8e:bf:84:d6:c0:
                    e1:d3:40:de:ea:c9:30:18:3a:ed:e9:c4:e5:d1:1b:
                    09:fa:59:d8:1c:00:95:1e:23:b4:8a:5c:25:3c:ef:
                    7c:65:ab:f5:a1:9a:4a:9d:b4:03:07:48:04:83:86:
                    ed:3d:3b:98:10:b3:c1:b7:ca:86:d7:c9:cf:1c:01:
                    20:30:a8:f1:46:47:42:ea:44:7d:fb:97:c2:38:5d:
                    90:e0:55:50:a9:12:d3:c7:1d:6e:79:58:b6:68:9c:
                    be:74:57:20:22:58:bc:e6:2c:48:cd:14:3e:b5:59:
                    91:32:8c:1c:ad:59:a1:9f:19:54:9b:06:b9:e3:c2:
                    6a:8d:39:53:c2:97:02:3b:9c:d2:e7:cb:0c:b5:5a:
                    6c:d9:db:5f:4c:c3:68:79:39:83:7e:d3:34:a7:6b:
                    85:e3:68:a8:67:33:40:da:fb:bf:ea:74:4e:15:c3:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:B3:82:5E:54:76:92:B1:10:EE:CC:2C:DF:0C:1C:C2:7E:EA:CD
            X509v3 Authority Key Identifier:
                keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:26:bd:d4:a3:52:b6:22:33:45:cb:83:d2:72:3c:88:1c:
         30:fd:48:76:8e:5f:f9:4d:d6:b9:9a:57:32:39:19:c3:e8:e3:
         d0:1e:d3:ab:6f:ac:e6:cd:5e:9a:e2:45:5a:7c:67:a1:fb:3b:
         3b:b2:23:6b:f5:08:8e:42:32:98:a3:3e:f5:38:0d:30:54:b6:
         b1:85:bd:a2:b7:64:c5:46:0e:4d:35:61:ca:78:da:07:c7:33:
         17:ff:34:10:90:a3:ac:98:d0:c4:50:59:31:f9:a9:fa:d2:11:
         83:76:81:60:17:67:26:f1:e8:2b:5d:d5:53:fc:c1:ca:ab:06:
         f5:30:8c:59:d0:57:e9:23:f4:0c:57:ea:16:05:ca:3f:8c:72:
         8a:38:d5:22:30:b2:db:6f:f7:fd:62:4f:bf:ac:36:b5:00:2f:
         43:32:0e:17:9a:e6:9c:a1:60:53:ad:d1:b9:fd:4d:39:ad:fe:
         6c:94:f1:db:cd:d5:d0:c8:dd:c6:3f:a4:c1:dd:77:88:9c:20:
         de:a8:a9:9b:f9:c0:75:67:57:b7:fe:81:c0:9e:8c:bf:5a:f2:
         dd:f8:cf:64:85:d5:49:78:21:a5:b7:91:ab:3c:14:51:5b:83:
         5b:73:80:df:89:81:95:4c:90:0d:f1:36:49:70:90:63:44:46:
         cb:e2:cf:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sy1WWZWxE7u1QOg+70qmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZGZkY2E3M2NkNjRkNzVlNjU2ZGQwYTNhNDQyN2VkNjE5
ODJhM2QwHhcNMjUwNjI4MTgwMTAyWhcNMjUwNjI5MTgwMTAyWjAzMTEwLwYDVQQD
EygzODRhYjM4MjVlNTQ3NjkyYjExMGVlY2MyY2RmMGMxY2MyN2VlYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxmdFl7zJd5b6iIJzmgBNNz5LQhD
s+il/1mVh0Iq7CRoN0+r3njVdNPKv6exLO3duOTSiVVrFVVfTW1on2KeYWSL0mS5
5a+aK+XDCFxRPD9JEZI8jr+E1sDh00De6skwGDrt6cTl0RsJ+lnYHACVHiO0ilwl
PO98Zav1oZpKnbQDB0gEg4btPTuYELPBt8qG18nPHAEgMKjxRkdC6kR9+5fCOF2Q
4FVQqRLTxx1ueVi2aJy+dFcgIli85ixIzRQ+tVmRMowcrVmhnxlUmwa548JqjTlT
wpcCO5zS58sMtVps2dtfTMNoeTmDftM0p2uF42ioZzNA2vu/6nROFcMYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhKs4JeVHaSsRDuzCzfDBzCfurNMB8GA1UdIwQY
MBaAFC3f3Kc81k115lbdCjpEJ+1hmCo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEt
MDhmMTdjNDEwNzY1LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEtMDhmMTdjNDEwNzY1
LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKEmvdSj
UrYiM0XLg9JyPIgcMP1Ido5f+U3WuZpXMjkZw+jj0B7Tq2+s5s1emuJFWnxnofs7
O7Ija/UIjkIymKM+9TgNMFS2sYW9ordkxUYOTTVhynjaB8czF/80EJCjrJjQxFBZ
Mfmp+tIRg3aBYBdnJvHoK13VU/zByqsG9TCMWdBX6SP0DFfqFgXKP4xyijjVIjCy
22/3/WJPv6w2tQAvQzIOF5rmnKFgU63Ruf1NOa3+bJTx283V0Mjdxj+kwd13iJwg
3qipm/nAdWdXt/6BwJ6Mv1ry3fjPZIXVSXghpbeRqzwUUVuDW3OA34mBlUyQDfE2
SXCQY0RGy+LPcg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:26 2025 by rpki-client