Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          GNf5XO+Vi4BOgIkU8Qj6HMVTT/OWNlALReobXKYLIlg=
Subject key identifier:   3B:66:73:55:EC:93:B9:29:AD:CC:13:EB:F0:AB:8A:33:18:A0:77:CF
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       0197B6A07C4758732F6850DFCF1BC48AB64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          03FE
Signing time:             Sat 28 Jun 2025 13:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:00 +0000
Files and hashes:         1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: jayihwqgYwvaiajF8d9lZZhdsDtWhtob8+2KDBlCaKQ=)
                          2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:7c:47:58:73:2f:68:50:df:cf:1b:c4:8a:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Jun 28 13:01:00 2025 GMT
            Not After : Jun 29 13:01:00 2025 GMT
        Subject: CN=3b667355ec93b929adcc13ebf0ab8a3318a077cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:fc:cf:6f:6a:a4:97:2a:87:40:0f:de:0b:
                    63:52:be:27:25:a2:3f:ec:2d:d6:ad:40:23:aa:3d:
                    ea:50:8e:17:8e:8f:3f:79:79:8f:9c:a0:96:80:64:
                    1e:63:15:37:0f:6d:3b:c9:18:88:1d:a5:b7:88:2b:
                    12:9b:d5:eb:f3:63:31:d6:07:2f:78:ed:3c:18:7c:
                    36:0e:6e:ae:ff:8c:28:3e:d4:d6:64:11:e8:14:44:
                    36:b4:68:56:46:7b:f0:55:84:62:d3:1f:10:f1:dc:
                    b8:16:6e:c7:db:19:44:7c:b5:66:4a:e1:dc:d1:ee:
                    ee:5b:9a:0b:9d:ce:0d:95:f9:05:5a:14:63:c0:73:
                    e0:e1:c3:6b:06:e0:a3:d8:6f:4c:4f:ad:52:93:2c:
                    7b:63:63:9e:ca:48:19:ec:b8:08:cd:59:5e:00:2e:
                    67:f8:5f:5a:23:86:ff:3c:3a:36:d0:79:54:e3:32:
                    98:70:e8:d5:74:df:2b:68:ca:f8:fe:cb:ca:a7:88:
                    e8:4e:df:0f:73:77:e3:46:ca:15:34:46:5f:d1:f5:
                    57:fd:9a:d0:8b:f5:32:9b:c8:f2:ad:2a:77:dd:4c:
                    41:19:cc:c7:7d:bf:b1:43:0c:dd:8c:1c:e7:bb:ef:
                    2a:1b:0c:92:ca:1b:03:84:d7:1e:67:93:6d:4c:72:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:66:73:55:EC:93:B9:29:AD:CC:13:EB:F0:AB:8A:33:18:A0:77:CF
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1b:21:06:5e:9f:39:5e:d2:f1:8e:a3:8f:dc:1f:d7:3b:0b:
         b5:76:e2:47:b8:92:42:b7:06:92:43:34:f0:2e:a5:18:29:2f:
         5a:f4:01:22:2a:43:3c:85:d9:44:79:89:9c:28:50:bb:c1:df:
         c4:62:68:b3:c1:c6:36:42:78:bf:b1:c7:71:12:18:6e:59:c7:
         41:ff:9f:30:d0:a7:4e:b0:ac:63:ae:11:cd:af:8f:f9:ae:0e:
         dd:36:2a:ca:3b:c7:12:f6:b3:c0:d3:25:c5:26:ce:29:cb:81:
         a4:38:5f:b8:38:67:b4:21:a9:e8:bd:62:b9:2e:09:93:c6:36:
         90:cf:da:44:56:2b:cd:0b:f1:6f:7b:1a:86:2d:e1:8b:85:53:
         72:a3:98:9d:a8:78:2e:c9:d9:79:f8:d7:70:2a:e2:53:15:a1:
         c0:75:b2:e7:71:83:9b:7f:bf:ff:00:65:c8:d1:bf:5a:ad:2a:
         8a:d7:d5:c4:c1:a4:f6:0f:9d:5a:00:02:be:8f:b3:57:55:93:
         48:b1:c8:ef:1b:62:dd:24:e3:0b:89:ed:6e:d2:b4:b0:6a:49:
         d4:98:5c:a2:fd:0a:c7:28:de:a9:b2:2f:af:69:24:c3:8c:f8:
         08:51:38:ac:e7:f6:c9:14:e8:17:ee:f8:54:9d:50:fd:82:c8:
         84:29:6d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oHxHWHMvaFDfzxvEirZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRkNmMwNjE4YmJmZWZmMWE4NGM5NGZkNjQxODllMTg0
NWIxODgwHhcNMjUwNjI4MTMwMTAwWhcNMjUwNjI5MTMwMTAwWjAzMTEwLwYDVQQD
EygzYjY2NzM1NWVjOTNiOTI5YWRjYzEzZWJmMGFiOGEzMzE4YTA3N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztT8z29qpJcqh0AP3gtjUr4nJaI/
7C3WrUAjqj3qUI4Xjo8/eXmPnKCWgGQeYxU3D207yRiIHaW3iCsSm9Xr82Mx1gcv
eO08GHw2Dm6u/4woPtTWZBHoFEQ2tGhWRnvwVYRi0x8Q8dy4Fm7H2xlEfLVmSuHc
0e7uW5oLnc4NlfkFWhRjwHPg4cNrBuCj2G9MT61Skyx7Y2OeykgZ7LgIzVleAC5n
+F9aI4b/PDo20HlU4zKYcOjVdN8raMr4/svKp4joTt8Pc3fjRsoVNEZf0fVX/ZrQ
i/Uym8jyrSp33UxBGczHfb+xQwzdjBznu+8qGwySyhsDhNceZ5NtTHJQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtmc1Xsk7kprcwT6/CrijMYoHfPMB8GA1UdIwQY
MBaAFCGN1sBhi7/v8ahMlP1kGJ4YRbGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEt
OWJiNmJiMjgxZWE3LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEtOWJiNmJiMjgxZWE3
LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehshBl6f
OV7S8Y6jj9wf1zsLtXbiR7iSQrcGkkM08C6lGCkvWvQBIipDPIXZRHmJnChQu8Hf
xGJos8HGNkJ4v7HHcRIYblnHQf+fMNCnTrCsY64Rza+P+a4O3TYqyjvHEvazwNMl
xSbOKcuBpDhfuDhntCGp6L1iuS4Jk8Y2kM/aRFYrzQvxb3sahi3hi4VTcqOYnah4
LsnZefjXcCriUxWhwHWy53GDm3+//wBlyNG/Wq0qitfVxMGk9g+dWgACvo+zV1WT
SLHI7xti3STjC4ntbtK0sGpJ1Jhcov0KxyjeqbIvr2kkw4z4CFE4rOf2yRToF+74
VJ1Q/YLIhClt0A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:11 2025 by rpki-client