Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
File:                     a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json)
Hash identifier:          9Dmyd//Y9VGgu3bHxOcUDej3iN2u8/I2ykAi9yyXbpw=
Subject key identifier:   34:AD:32:AB:CF:0B:48:C2:5B:64:DF:69:06:B6:ED:2B:A1:EB:26:43
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Certificate issuer:       /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial:       0197B70E718B39D3EE45D660141367F8EAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
Manifest number:          0C05
Signing time:             Sat 28 Jun 2025 15:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:06 +0000
Files and hashes:         1: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (hash: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=)
                          2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: ak2sQdfCx3vNgKjbJudwZctUFZ4+8vUgI0r/KFDf+Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:71:8b:39:d3:ee:45:d6:60:14:13:67:f8:ea:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
        Validity
            Not Before: Jun 28 15:01:06 2025 GMT
            Not After : Jun 29 15:01:06 2025 GMT
        Subject: CN=34ad32abcf0b48c25b64df6906b6ed2ba1eb2643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:18:b9:b2:89:7e:35:42:49:f5:a0:a3:d1:9c:
                    b1:91:dd:89:15:23:fe:c9:7a:40:3b:7f:90:2a:a8:
                    ed:9e:db:4b:92:4f:5d:15:fe:33:5c:10:59:ff:91:
                    f0:aa:89:be:81:99:19:9e:c6:cc:5a:bc:a8:b6:79:
                    45:a1:1d:91:57:37:c1:d1:1c:00:cb:a7:da:ff:7e:
                    4e:49:94:e1:25:59:b0:6a:f0:af:68:fe:ab:cf:46:
                    e6:cd:78:e9:ac:51:19:68:bd:46:f6:3a:f2:9b:b7:
                    23:43:5b:b1:c3:15:e8:8a:86:9c:19:73:e5:b4:ce:
                    5b:18:e4:cb:39:b5:e1:09:d0:8b:74:cd:8e:16:12:
                    2f:8f:cd:38:76:71:6f:b8:06:9a:f3:08:96:f6:56:
                    6c:74:ba:d8:46:2e:72:e5:56:2c:18:4f:37:e8:a6:
                    8b:f9:dd:0d:85:dc:ac:e9:9e:69:ef:b8:c0:a8:b9:
                    66:06:59:b0:79:d4:33:5c:21:9e:2f:fe:68:26:05:
                    4c:f5:e0:fd:52:85:83:4a:78:0d:12:c3:15:d8:1d:
                    70:99:76:41:24:4e:f6:cb:f9:32:75:44:a2:ea:ad:
                    d6:1d:77:ff:38:14:63:c7:af:65:3b:e1:27:4b:8c:
                    0a:a7:fe:35:84:67:f4:2b:94:28:4d:47:54:0d:7d:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AD:32:AB:CF:0B:48:C2:5B:64:DF:69:06:B6:ED:2B:A1:EB:26:43
            X509v3 Authority Key Identifier:
                keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:e0:60:e7:58:50:20:9f:97:99:30:f6:c7:bf:6d:2d:7f:
         37:a1:cc:7a:88:fe:dc:ee:ac:e9:b3:cd:4a:99:f0:17:69:a1:
         6d:75:48:ff:56:23:c9:00:81:c0:40:57:aa:4a:7e:61:4d:6c:
         f8:65:38:c4:25:36:da:dd:46:28:49:dc:5a:32:39:f2:24:1a:
         c2:e8:33:7c:44:0e:db:47:94:40:5f:de:14:80:2e:ed:6f:53:
         a1:65:cc:7d:35:50:14:ae:48:bd:cc:98:d2:42:13:ec:43:f2:
         eb:04:9c:b8:e4:c3:bb:2a:02:01:84:66:0e:20:43:8a:83:4c:
         5b:6e:0b:59:1d:da:a1:dd:89:20:e0:b6:70:43:70:2c:35:02:
         d3:a3:42:20:1a:3e:0c:28:42:3f:3f:7c:7a:71:e8:91:5b:9b:
         d9:61:46:11:20:2e:d5:4c:d8:2a:8b:d6:3b:d2:59:a2:83:3a:
         f3:f1:1f:2b:31:2e:48:ab:8a:16:5e:dd:3e:99:44:95:1f:ca:
         be:93:1a:87:e0:10:01:36:4c:f5:2a:91:d1:eb:9f:12:b8:f1:
         c8:2b:6c:f9:33:88:7f:37:7c:a0:9a:03:f2:9e:90:46:fd:85:
         41:f6:c1:61:31:0e:22:ed:4a:da:55:00:99:e1:a6:6d:a8:75:
         28:5b:3c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnGLOdPuRdZgFBNn+OrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODc3ZjA4MmZmNWZlZjRiMDdjZjhmN2MwZjcxMzM0YmM4
Yjg0ODIwHhcNMjUwNjI4MTUwMTA2WhcNMjUwNjI5MTUwMTA2WjAzMTEwLwYDVQQD
EygzNGFkMzJhYmNmMGI0OGMyNWI2NGRmNjkwNmI2ZWQyYmExZWIyNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xi5sol+NUJJ9aCj0Zyxkd2JFSP+
yXpAO3+QKqjtnttLkk9dFf4zXBBZ/5Hwqom+gZkZnsbMWryotnlFoR2RVzfB0RwA
y6fa/35OSZThJVmwavCvaP6rz0bmzXjprFEZaL1G9jrym7cjQ1uxwxXoioacGXPl
tM5bGOTLObXhCdCLdM2OFhIvj804dnFvuAaa8wiW9lZsdLrYRi5y5VYsGE836KaL
+d0Nhdys6Z5p77jAqLlmBlmwedQzXCGeL/5oJgVM9eD9UoWDSngNEsMV2B1wmXZB
JE72y/kydUSi6q3WHXf/OBRjx69lO+EnS4wKp/41hGf0K5QoTUdUDX3enwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDStMqvPC0jCW2TfaQa27Suh6yZDMB8GA1UdIwQY
MBaAFGuHfwgv9f70sHz498D3EzS8i4SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTIt
NzMxNGU2OTRiYWM5LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTItNzMxNGU2OTRiYWM5
LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACvgYOdY
UCCfl5kw9se/bS1/N6HMeoj+3O6s6bPNSpnwF2mhbXVI/1YjyQCBwEBXqkp+YU1s
+GU4xCU22t1GKEncWjI58iQawugzfEQO20eUQF/eFIAu7W9ToWXMfTVQFK5IvcyY
0kIT7EPy6wScuOTDuyoCAYRmDiBDioNMW24LWR3aod2JIOC2cENwLDUC06NCIBo+
DChCPz98enHokVub2WFGESAu1UzYKovWO9JZooM68/EfKzEuSKuKFl7dPplElR/K
vpMah+AQATZM9SqR0eufErjxyCts+TOIfzd8oJoD8p6QRv2FQfbBYTEOIu1K2lUA
meGmbah1KFs8AQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:19 2025 by rpki-client