Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File:                     o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier:          EiHB1yZMzraRXHCVo8F0VPwVri1mcn7LDiC6QUo56FE=
Subject key identifier:   66:42:AD:BD:5F:72:74:73:87:08:31:B5:21:85:02:1F:8E:8B:FC:26
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer:       /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial:       0197BB5911D43079734A61FEC7B6A2A4FA7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number:          1300
Signing time:             Sun 29 Jun 2025 11:01:05 +0000
Manifest this update:     Sun 29 Jun 2025 11:01:05 +0000
Manifest next update:     Mon 30 Jun 2025 11:01:05 +0000
Files and hashes:         1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
                          2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
                          3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: V4zIu7i6lGEns5JppjdvHsjeIsOEW++K8XbrTAS/0oo=)
                          4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:59:11:d4:30:79:73:4a:61:fe:c7:b6:a2:a4:fa:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
        Validity
            Not Before: Jun 29 11:01:05 2025 GMT
            Not After : Jun 30 11:01:05 2025 GMT
        Subject: CN=6642adbd5f727473870831b52185021f8e8bfc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:7f:fe:22:9d:4c:53:52:79:59:65:23:ba:
                    db:c3:32:13:b7:85:df:2f:20:7c:ba:f9:20:80:fd:
                    70:d9:95:bf:86:e4:48:2b:44:41:1c:6d:79:71:18:
                    02:81:67:39:08:b0:cd:e3:e3:cd:3d:9f:12:51:bb:
                    32:32:c8:fe:78:bd:10:e5:2c:d6:0d:b1:22:3d:dd:
                    25:39:f6:86:95:a5:90:72:a8:50:0b:6a:84:50:60:
                    b2:de:e2:2e:33:81:2a:48:05:70:46:0f:bf:61:44:
                    d7:49:8a:40:34:f2:55:80:fc:60:ca:5a:0c:dc:f5:
                    1e:51:0e:aa:f0:d3:0a:7d:84:29:83:45:ae:22:ec:
                    12:bd:cc:94:35:8c:d0:da:3d:01:09:65:b8:25:5a:
                    6e:9b:d3:48:aa:e5:57:ee:b1:02:ad:4a:87:89:8e:
                    a9:34:19:17:24:9b:9d:46:e6:c7:66:b2:10:62:44:
                    e2:9f:dd:77:b4:17:b0:d0:0c:7e:18:fb:20:c9:50:
                    42:71:66:33:7d:ce:71:91:45:17:4f:b8:e1:a9:d6:
                    26:b0:fd:6a:83:13:78:6d:2a:2a:f7:3e:1c:b3:ea:
                    1f:7c:83:76:93:1f:b8:cb:c5:db:7a:ce:5d:bb:1a:
                    66:da:99:bd:f8:26:bd:5b:a0:2c:36:9c:c6:52:2c:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:42:AD:BD:5F:72:74:73:87:08:31:B5:21:85:02:1F:8E:8B:FC:26
            X509v3 Authority Key Identifier:
                keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:16:ba:62:9e:1d:ab:45:b6:a7:51:29:05:40:5a:73:0f:
         38:50:67:ec:a0:68:d1:bb:64:c6:ae:10:5a:7b:5b:4a:a0:56:
         f9:bd:c7:82:7d:fc:92:97:17:d8:50:d6:03:2e:df:b2:ea:ad:
         04:c6:0d:5b:13:97:c1:a5:80:bd:54:be:51:20:ab:cb:f2:8d:
         9d:cc:23:24:cd:ed:bf:e5:41:04:8e:0b:18:fb:50:72:c6:c1:
         8e:fe:8d:d8:30:25:23:70:60:b7:b6:5f:27:4c:96:56:9f:54:
         89:4c:98:79:55:d3:7d:e1:60:f7:98:13:9a:24:79:b6:4d:55:
         9e:e5:eb:22:b4:4d:86:d3:ed:3f:29:0c:72:11:67:47:6a:ff:
         27:83:e3:a9:b5:13:c9:b1:5c:64:57:97:18:19:10:13:ba:cc:
         2a:70:78:fa:e0:dd:9c:7a:77:f8:96:06:26:27:d3:99:af:cf:
         1c:96:fe:37:73:34:cb:92:3a:0d:0f:12:ed:fa:9f:25:68:97:
         df:13:f9:ea:c8:13:96:a6:ad:7e:5c:58:ab:e0:ac:43:3c:21:
         57:98:cf:0e:a5:9d:54:27:68:11:cc:51:be:1b:55:3a:95:37:
         e2:92:cc:dd:d5:48:8d:a2:fa:61:c8:2c:6d:34:38:86:1b:98:
         1f:e4:d9:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7WRHUMHlzSmH+x7aipPp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjUwNjI5MTEwMTA1WhcNMjUwNjMwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg2NjQyYWRiZDVmNzI3NDczODcwODMxYjUyMTg1MDIxZjhlOGJmYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspx//iKdTFNSeVllI7rbwzITt4Xf
LyB8uvkggP1w2ZW/huRIK0RBHG15cRgCgWc5CLDN4+PNPZ8SUbsyMsj+eL0Q5SzW
DbEiPd0lOfaGlaWQcqhQC2qEUGCy3uIuM4EqSAVwRg+/YUTXSYpANPJVgPxgyloM
3PUeUQ6q8NMKfYQpg0WuIuwSvcyUNYzQ2j0BCWW4JVpum9NIquVX7rECrUqHiY6p
NBkXJJudRubHZrIQYkTin913tBew0Ax+GPsgyVBCcWYzfc5xkUUXT7jhqdYmsP1q
gxN4bSoq9z4cs+offIN2kx+4y8Xbes5duxpm2pm9+Ca9W6AsNpzGUixMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZCrb1fcnRzhwgxtSGFAh+Oi/wmMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSUWumKe
HatFtqdRKQVAWnMPOFBn7KBo0btkxq4QWntbSqBW+b3Hgn38kpcX2FDWAy7fsuqt
BMYNWxOXwaWAvVS+USCry/KNncwjJM3tv+VBBI4LGPtQcsbBjv6N2DAlI3Bgt7Zf
J0yWVp9UiUyYeVXTfeFg95gTmiR5tk1VnuXrIrRNhtPtPykMchFnR2r/J4PjqbUT
ybFcZFeXGBkQE7rMKnB4+uDdnHp3+JYGJifTma/PHJb+N3M0y5I6DQ8S7fqfJWiX
3xP56sgTlqatflxYq+CsQzwhV5jPDqWdVCdoEcxRvhtVOpU34pLM3dVIjaL6Ycgs
bTQ4hhuYH+TZbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:43:44 2025 by rpki-client