Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File:                     cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier:          ZzVNDxXRXftl8ZG+7pHPlLA5smUzn20xjvuNWEC69gU=
Subject key identifier:   0B:3E:E7:03:81:1A:21:C3:BE:E0:1A:AB:53:8D:89:17:FF:64:37:82
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer:       /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial:       0197B96B2F6E39F3476DFEEF53F515341916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number:          110A
Signing time:             Sun 29 Jun 2025 02:01:38 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:38 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:38 +0000
Files and hashes:         1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: oxGXcoaXxN5s9KmZV2gcUJ+dJNxxZ46HTfUMAlAnhBg=)
                          2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:2f:6e:39:f3:47:6d:fe:ef:53:f5:15:34:19:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
        Validity
            Not Before: Jun 29 02:01:38 2025 GMT
            Not After : Jun 30 02:01:38 2025 GMT
        Subject: CN=0b3ee703811a21c3bee01aab538d8917ff643782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:d4:06:a9:f3:53:51:58:1d:3f:9a:ba:c1:
                    f7:d6:cb:6b:da:24:ac:38:42:82:2c:ae:c3:0f:9f:
                    03:2a:db:6a:89:94:e2:b8:01:31:93:b4:5c:80:95:
                    c7:9b:47:2e:cf:ec:6c:4b:43:e4:8b:b7:87:6e:9d:
                    53:35:05:a9:bb:26:7d:67:fb:26:73:98:3d:95:2a:
                    53:c3:8c:2d:43:2c:de:a4:9a:80:77:bb:60:1e:66:
                    48:0c:cb:96:bc:b2:4d:b1:33:41:ca:68:e5:17:ac:
                    98:39:4d:87:cc:94:2b:9c:3d:91:ca:e7:8a:37:d8:
                    c3:3c:c2:fe:1f:a2:6f:10:ae:f8:b3:3d:d3:f9:59:
                    cd:72:a1:8d:bf:ba:92:72:a5:d9:54:8f:73:ac:46:
                    46:ef:dd:2a:8a:a5:80:7b:a4:1a:ba:a0:09:11:85:
                    66:ce:b8:5c:0c:07:d1:05:d5:ab:51:b2:1f:2e:07:
                    98:ad:8e:bc:a6:d8:0e:c8:41:91:a8:6d:40:11:5b:
                    cb:c7:f2:e1:0b:bd:01:d0:88:90:25:7b:1a:df:e6:
                    35:de:c4:0e:48:91:35:36:82:e8:26:0a:7f:c6:15:
                    4f:19:a2:9e:19:90:cd:f1:60:23:84:a5:f5:4e:c7:
                    4c:cb:4c:e7:ce:ca:c2:7b:98:8d:a8:89:36:96:ce:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3E:E7:03:81:1A:21:C3:BE:E0:1A:AB:53:8D:89:17:FF:64:37:82
            X509v3 Authority Key Identifier:
                keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:45:19:4a:f3:a3:e4:69:e0:9b:af:91:de:eb:00:33:cb:
         18:01:52:12:9a:43:37:80:a2:65:64:68:02:0f:5c:f3:09:d9:
         c4:dd:dc:32:09:9b:da:74:1c:da:73:18:37:19:ad:51:9c:06:
         47:82:ea:35:4f:c3:6a:1a:df:9b:30:1c:0f:72:76:4b:91:14:
         dd:4d:60:b7:1f:9a:76:5d:06:ba:f3:af:9d:0c:54:b3:88:c7:
         67:6d:cb:70:6d:80:ea:d1:4e:2a:ac:27:6a:20:37:82:f5:ec:
         51:af:8a:dd:c7:22:e4:85:f2:a5:6c:72:c4:c2:26:c2:94:91:
         ec:a9:35:94:19:af:b0:d4:83:8c:ea:32:70:80:12:6c:f9:32:
         57:6d:75:c8:b0:4a:a5:4f:dc:5d:39:c0:08:42:88:21:8d:04:
         4c:a7:b4:ec:cb:0c:1f:90:9c:ac:8c:dc:62:a2:4a:5c:f7:cd:
         c1:56:81:33:e3:db:1e:64:bb:62:d2:23:b3:70:3a:44:e6:3e:
         3a:5c:4e:8b:19:e8:a7:07:2d:5c:90:7d:1f:ce:15:d0:ca:61:
         27:03:38:5c:8d:dd:9e:12:c5:63:d2:22:bd:e9:e6:fd:03:b2:
         46:07:92:c5:4a:c0:16:0c:a8:42:0b:2c:88:c5:58:e4:c5:54:
         f3:13:b3:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ay9uOfNHbf7vU/UVNBkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj
NTNiMDUwHhcNMjUwNjI5MDIwMTM4WhcNMjUwNjMwMDIwMTM4WjAzMTEwLwYDVQQD
EygwYjNlZTcwMzgxMWEyMWMzYmVlMDFhYWI1MzhkODkxN2ZmNjQzNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gTUBqnzU1FYHT+ausH31str2iSs
OEKCLK7DD58DKttqiZTiuAExk7RcgJXHm0cuz+xsS0Pki7eHbp1TNQWpuyZ9Z/sm
c5g9lSpTw4wtQyzepJqAd7tgHmZIDMuWvLJNsTNBymjlF6yYOU2HzJQrnD2RyueK
N9jDPML+H6JvEK74sz3T+VnNcqGNv7qScqXZVI9zrEZG790qiqWAe6QauqAJEYVm
zrhcDAfRBdWrUbIfLgeYrY68ptgOyEGRqG1AEVvLx/LhC70B0IiQJXsa3+Y13sQO
SJE1NoLoJgp/xhVPGaKeGZDN8WAjhKX1TsdMy0znzsrCe5iNqIk2ls4r1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs+5wOBGiHDvuAaq1ONiRf/ZDeCMB8GA1UdIwQY
MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt
NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy
LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp5FGUrz
o+Rp4Juvkd7rADPLGAFSEppDN4CiZWRoAg9c8wnZxN3cMgmb2nQc2nMYNxmtUZwG
R4LqNU/DahrfmzAcD3J2S5EU3U1gtx+adl0GuvOvnQxUs4jHZ23LcG2A6tFOKqwn
aiA3gvXsUa+K3cci5IXypWxyxMImwpSR7Kk1lBmvsNSDjOoycIASbPkyV211yLBK
pU/cXTnACEKIIY0ETKe07MsMH5CcrIzcYqJKXPfNwVaBM+PbHmS7YtIjs3A6ROY+
OlxOixnopwctXJB9H84V0MphJwM4XI3dnhLFY9Iivenm/QOyRgeSxUrAFgyoQgss
iMVY5MVU8xOzcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:40:07 2025 by rpki-client