Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File:                     4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier:          WhKvT+uay6TAQrhZ7AZPRISePS1KY1qkEwhp1z2ToZk=
Subject key identifier:   10:EC:A2:CD:6D:6C:27:C4:34:29:D9:F7:0E:B6:0A:4B:E6:F7:65:91
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       0197B6D77346E6463503F8513F2161318AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number:          0CA6
Signing time:             Sat 28 Jun 2025 14:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:02 +0000
Files and hashes:         1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: V3x8R4EB6rWO/5J3QR0OcuFX46s9a0B3QY2jrSBvZe0=)
                          2: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=)
                          3: ImgvJz4_mDjqxdrfNbxhGYCKGu0.roa (hash: /y4sZGaV5lW/RKRkRNk7SmLLY+Y8ezjiodQM42Rpemo=)
                          4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=)
                          5: peVRzfk7a5kMcnIN5l0vfDJAjV4.roa (hash: BZZQzoUGU3SVXNptLeHk5DArDqOJYETbuht6S7O+La0=)
                          6: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:73:46:e6:46:35:03:f8:51:3f:21:61:31:8a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Jun 28 14:01:02 2025 GMT
            Not After : Jun 29 14:01:02 2025 GMT
        Subject: CN=10eca2cd6d6c27c43429d9f70eb60a4be6f76591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:45:fa:d6:85:a7:3e:d3:d6:3b:2e:eb:3e:
                    2f:39:1d:d5:c4:14:e3:23:51:c6:a0:45:d6:39:7f:
                    95:65:47:8d:7d:6c:b6:21:e1:b3:34:87:e1:86:c1:
                    4c:67:7e:1c:34:cf:97:46:c1:30:e9:a3:6c:b6:be:
                    5f:f5:e6:70:29:bb:1d:07:e5:1b:b1:01:ad:dd:87:
                    5f:28:02:88:45:b4:4b:e7:0f:81:b5:6f:6b:e3:ef:
                    0e:34:28:72:2d:d9:aa:b9:09:6c:7b:fd:06:a2:8d:
                    db:16:25:00:df:e9:e2:b4:99:4e:62:6e:8a:8b:23:
                    cd:64:65:b8:ca:24:7d:81:54:90:17:76:66:5e:41:
                    fa:9b:4f:6e:e5:59:5a:5f:c7:c0:b7:66:9f:67:7d:
                    84:d7:b1:73:e2:88:99:e2:ce:14:82:05:96:f4:b6:
                    aa:dd:02:59:4b:a0:25:6b:a7:08:27:90:61:c9:36:
                    c5:15:d3:4b:c5:27:4a:c0:89:8f:10:60:ef:80:75:
                    e4:d8:e6:fe:fc:64:92:fd:b9:c1:fa:26:b4:b4:d9:
                    59:69:0e:73:6a:4f:ce:c8:01:4e:7b:d0:f6:ed:3a:
                    98:a8:09:49:ff:3b:ad:bd:12:26:4f:d9:d8:05:eb:
                    5f:7b:1c:60:ff:0a:eb:98:0f:df:7b:ac:37:cf:65:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:A2:CD:6D:6C:27:C4:34:29:D9:F7:0E:B6:0A:4B:E6:F7:65:91
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:68:23:2c:53:01:08:30:5d:3b:58:b0:52:09:c2:fa:d6:26:
         ce:de:ed:1a:be:4c:fe:b0:5a:e5:07:4e:86:ca:ad:7c:2b:c6:
         8e:13:96:13:8a:16:bd:82:3f:7c:37:4e:bd:a6:93:0c:9f:ea:
         fb:31:d3:c9:8d:1b:77:fa:cb:0f:73:5f:2b:b0:e6:cc:1c:24:
         2d:5c:98:b6:72:1a:e8:1d:09:8e:c4:cf:44:97:01:66:c3:70:
         76:1d:21:4b:85:3c:fc:ad:eb:50:50:00:08:3e:87:62:a2:a1:
         c9:84:6f:90:09:e7:29:f6:15:fd:aa:98:1c:fd:3d:c1:2a:40:
         1b:8b:35:0d:e5:a5:5c:83:24:0e:18:76:63:d2:ba:1e:f4:f1:
         11:ef:78:05:15:38:3c:60:f4:27:15:22:0f:25:2c:b6:a7:c1:
         de:39:22:e4:0b:b1:14:b5:6f:34:92:f4:f7:2c:b5:ee:89:01:
         2f:02:d0:26:bd:7c:72:e5:20:d2:16:5b:c5:61:cf:70:26:d0:
         04:34:82:eb:91:95:4c:46:24:0a:c3:0e:a5:d2:8b:ad:72:8f:
         55:b8:ea:72:42:54:18:ab:40:9f:18:d7:cb:36:19:6d:80:09:
         aa:2b:a9:3e:dd:48:3a:65:71:ad:86:88:92:8e:26:9f:51:10:
         90:45:44:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe213NG5kY1A/hRPyFhMYrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2
ZWM2ZTYwHhcNMjUwNjI4MTQwMTAyWhcNMjUwNjI5MTQwMTAyWjAzMTEwLwYDVQQD
EygxMGVjYTJjZDZkNmMyN2M0MzQyOWQ5ZjcwZWI2MGE0YmU2Zjc2NTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IhF+taFpz7T1jsu6z4vOR3VxBTj
I1HGoEXWOX+VZUeNfWy2IeGzNIfhhsFMZ34cNM+XRsEw6aNstr5f9eZwKbsdB+Ub
sQGt3YdfKAKIRbRL5w+BtW9r4+8ONChyLdmquQlse/0Goo3bFiUA3+nitJlOYm6K
iyPNZGW4yiR9gVSQF3ZmXkH6m09u5VlaX8fAt2afZ32E17Fz4oiZ4s4UggWW9Laq
3QJZS6Ala6cIJ5BhyTbFFdNLxSdKwImPEGDvgHXk2Ob+/GSS/bnB+ia0tNlZaQ5z
ak/OyAFOe9D27TqYqAlJ/zutvRImT9nYBetfexxg/wrrmA/fe6w3z2XBQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDsos1tbCfENCnZ9w62Ckvm92WRMB8GA1UdIwQY
MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt
OTE2NGUzNTJhODNjLzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj
LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGgjLFMB
CDBdO1iwUgnC+tYmzt7tGr5M/rBa5QdOhsqtfCvGjhOWE4oWvYI/fDdOvaaTDJ/q
+zHTyY0bd/rLD3NfK7DmzBwkLVyYtnIa6B0JjsTPRJcBZsNwdh0hS4U8/K3rUFAA
CD6HYqKhyYRvkAnnKfYV/aqYHP09wSpAG4s1DeWlXIMkDhh2Y9K6HvTxEe94BRU4
PGD0JxUiDyUstqfB3jki5AuxFLVvNJL09yy17okBLwLQJr18cuUg0hZbxWHPcCbQ
BDSC65GVTEYkCsMOpdKLrXKPVbjqckJUGKtAnxjXyzYZbYAJqiupPt1IOmVxrYaI
ko4mn1EQkEVEcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:13 2025 by rpki-client