Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          pDoDvElyP5bKEZCAISkjVTI05D/qAbN7ngShNdBQCAc=
Subject key identifier:   F4:FC:5F:CD:C5:52:A0:99:3A:81:55:69:A8:A0:DF:78:22:6F:5C:03
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       0197B6D76F1F90E37F4335F763FCBE03CE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 14:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:01 +0000
Files and hashes:         1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
                          2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: Z1zb3h1rPNyukpkpuVxnufkjmdGNPiPU2yDwKmBw0p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:6f:1f:90:e3:7f:43:35:f7:63:fc:be:03:ce:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: Jun 28 14:01:01 2025 GMT
            Not After : Jun 29 14:01:01 2025 GMT
        Subject: CN=f4fc5fcdc552a0993a815569a8a0df78226f5c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:90:88:47:53:31:59:ce:9e:9e:9d:4b:6c:
                    48:33:36:83:01:1a:88:7b:d4:83:ae:89:6b:70:b5:
                    18:3c:53:12:2a:14:e0:c9:7f:76:fc:8b:43:ac:a2:
                    d9:61:b4:3e:d5:91:26:71:ec:62:4e:b5:94:e1:f8:
                    de:a1:bf:16:6c:0a:a1:04:1d:3d:1a:df:0d:17:11:
                    a0:3a:b4:52:88:51:3f:cf:4f:56:e2:be:b8:3c:1b:
                    21:29:25:3f:89:b9:1b:f8:ce:bb:81:a7:35:43:dd:
                    ed:f4:82:b2:12:02:34:cc:ee:ab:b4:68:29:b9:ac:
                    63:4a:f4:50:76:32:1e:4b:36:26:ab:ce:b1:d1:26:
                    79:6c:d1:01:77:13:03:f8:95:a7:db:0c:f6:ce:db:
                    d7:bf:a4:7d:60:2b:5b:80:e2:20:73:e1:56:8d:f2:
                    ea:21:2b:3a:11:a2:25:c4:1d:99:37:34:d2:ff:5f:
                    64:d2:51:22:57:b3:f6:28:78:a1:1f:16:f2:a3:0d:
                    10:93:ba:f4:cc:a4:50:72:72:bf:4d:3f:31:5e:49:
                    1b:ac:b1:aa:05:f0:3c:8a:24:98:21:bf:d1:10:50:
                    a6:1c:ac:35:6e:7a:80:ec:f4:23:21:65:28:0a:7d:
                    a7:ea:c6:b5:7f:37:fb:94:a9:77:e9:f8:62:60:85:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FC:5F:CD:C5:52:A0:99:3A:81:55:69:A8:A0:DF:78:22:6F:5C:03
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:14:71:35:d7:63:58:c5:b4:98:f2:bb:b6:c8:7b:79:ff:
         48:7b:2b:00:c5:ee:83:d9:fd:0a:0f:e9:71:5d:ba:98:41:58:
         47:a1:fd:d1:62:ac:f6:a9:6d:55:b0:2e:6e:6f:51:6f:bf:77:
         de:93:72:f7:75:24:4e:a4:80:64:5d:71:7c:b8:b6:73:78:22:
         d5:8d:66:69:53:ec:7e:5d:35:0a:6b:61:9b:1f:fa:9d:dd:a1:
         bc:d6:20:99:46:99:18:fb:0e:e6:96:d8:95:f6:d4:68:1f:b5:
         69:87:f2:d9:62:69:d8:3e:2d:a9:c4:d6:23:63:d2:fd:af:ff:
         cc:12:d9:2b:38:52:2e:7f:73:6c:ee:21:e3:1f:c8:b6:8e:b1:
         23:00:3d:cf:17:0d:70:f8:56:0a:63:18:95:90:8f:6e:47:54:
         41:0d:b8:d3:09:b6:f1:3b:fc:af:a1:46:9b:7e:fd:0e:3d:33:
         ae:10:db:8d:3d:14:bb:1a:94:66:77:31:30:dd:ec:6a:70:78:
         c9:6c:a3:29:ec:b5:74:09:85:2a:b3:9b:d2:d1:77:3b:1d:9a:
         e8:7a:a3:c6:28:fb:91:61:3d:a0:11:43:8d:7e:14:88:3d:31:
         b2:0b:dc:05:fa:ab:64:03:f8:a7:94:14:05:ca:19:0a:88:35:
         5b:e8:db:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2128fkON/QzX3Y/y+A84lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1
NWZiNDMwHhcNMjUwNjI4MTQwMTAxWhcNMjUwNjI5MTQwMTAxWjAzMTEwLwYDVQQD
EyhmNGZjNWZjZGM1NTJhMDk5M2E4MTU1NjlhOGEwZGY3ODIyNmY1YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0maQiEdTMVnOnp6dS2xIMzaDARqI
e9SDrolrcLUYPFMSKhTgyX92/ItDrKLZYbQ+1ZEmcexiTrWU4fjeob8WbAqhBB09
Gt8NFxGgOrRSiFE/z09W4r64PBshKSU/ibkb+M67gac1Q93t9IKyEgI0zO6rtGgp
uaxjSvRQdjIeSzYmq86x0SZ5bNEBdxMD+JWn2wz2ztvXv6R9YCtbgOIgc+FWjfLq
ISs6EaIlxB2ZNzTS/19k0lEiV7P2KHihHxbyow0Qk7r0zKRQcnK/TT8xXkkbrLGq
BfA8iiSYIb/REFCmHKw1bnqA7PQjIWUoCn2n6sa1fzf7lKl36fhiYIXThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPT8X83FUqCZOoFVaaig33gib1wDMB8GA1UdIwQY
MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt
Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi
LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/8UcTXX
Y1jFtJjyu7bIe3n/SHsrAMXug9n9Cg/pcV26mEFYR6H90WKs9qltVbAubm9Rb793
3pNy93UkTqSAZF1xfLi2c3gi1Y1maVPsfl01Cmthmx/6nd2hvNYgmUaZGPsO5pbY
lfbUaB+1aYfy2WJp2D4tqcTWI2PS/a//zBLZKzhSLn9zbO4h4x/Ito6xIwA9zxcN
cPhWCmMYlZCPbkdUQQ240wm28Tv8r6FGm379Dj0zrhDbjT0UuxqUZncxMN3sanB4
yWyjKey1dAmFKrOb0tF3Ox2a6Hqjxij7kWE9oBFDjX4UiD0xsgvcBfqrZAP4p5QU
BcoZCog1W+jbaw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client