Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File:                     cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier:          jPIRz03aYsawsAc5apFWwSrQIgB9WzjplbMTGy/z/Rc=
Subject key identifier:   07:8A:2D:60:6B:97:4B:13:B5:FB:30:60:00:F1:C4:59:32:B3:18:B0
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer:       /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial:       0197B7EA9281290C6A698472387F65646F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 19:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:32 +0000
Files and hashes:         1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: pMlpJW8zaFPWkDyuX9oammIprgNVDgnYRxn1aOnA+/0=)
                          2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:92:81:29:0c:6a:69:84:72:38:7f:65:64:6f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
        Validity
            Not Before: Jun 28 19:01:32 2025 GMT
            Not After : Jun 29 19:01:32 2025 GMT
        Subject: CN=078a2d606b974b13b5fb306000f1c45932b318b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:cf:d1:3d:3c:9c:59:5d:50:c9:a1:89:75:
                    2a:51:1a:41:17:56:5c:6f:d0:0e:be:72:41:a9:d7:
                    5b:00:44:8b:37:84:6c:c3:4d:a1:4b:6c:a6:8c:37:
                    91:ab:26:21:a5:1a:ca:75:0c:ec:65:12:1b:e1:36:
                    4d:d4:b2:8b:53:f3:96:6a:eb:30:98:d8:b8:64:c6:
                    b5:4b:73:b0:6d:78:04:fb:a0:99:8a:1a:73:9d:d9:
                    32:c9:4d:f8:97:1d:5c:aa:0c:04:cd:3e:b9:a8:0d:
                    b2:10:05:f2:a1:8c:e2:e3:7f:79:a7:1a:d0:5a:cb:
                    45:65:ae:cc:29:2e:d2:ad:22:06:96:af:3b:58:d0:
                    97:b5:07:e8:55:92:af:c2:59:c3:ea:0b:73:c7:3e:
                    ab:3b:df:fe:7e:dc:f6:9a:f7:d3:29:eb:41:a3:c5:
                    65:dc:4b:7f:44:86:9f:ef:b0:f0:2d:9a:31:89:bd:
                    33:22:62:9e:f7:bb:55:eb:ea:ed:ff:a4:37:33:7d:
                    ed:82:3b:a2:c7:3b:83:2c:31:27:ec:07:da:ae:3d:
                    c2:f0:c0:f7:7c:0a:48:35:bd:0d:b8:bb:a2:36:c3:
                    bd:31:93:d4:a1:c8:d5:eb:f6:f9:9b:e4:14:84:62:
                    a4:4c:b9:1f:ce:b6:7e:5b:b1:97:36:c0:0b:ed:5d:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:2D:60:6B:97:4B:13:B5:FB:30:60:00:F1:C4:59:32:B3:18:B0
            X509v3 Authority Key Identifier:
                keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:31:58:d2:5c:ab:8b:bb:fb:cf:89:1d:2b:2f:b1:bc:92:33:
         86:9b:57:9a:b2:52:30:5b:19:f9:1d:a6:cf:d0:cb:2f:46:2c:
         14:8f:c0:63:e5:53:ba:5e:64:1c:25:9a:29:78:e3:36:7d:b5:
         28:01:b6:d2:8c:9a:ec:c6:60:98:74:59:f4:98:cf:ca:b8:61:
         f4:95:a0:e3:75:b2:71:7c:d0:5b:fe:26:f7:c3:23:b4:67:3c:
         fe:2b:f6:96:21:f3:b5:c9:65:d5:d7:de:09:b7:cd:64:d4:5b:
         f9:19:e9:1d:aa:bf:66:a3:ff:80:0d:71:50:ac:f0:58:bd:1c:
         df:7f:b7:33:d7:b1:d6:74:ff:cd:b5:e5:47:c5:ab:92:8f:2d:
         43:ed:62:2d:16:95:ca:fe:77:9b:35:3e:1e:21:1f:ac:9b:0d:
         95:58:bb:03:1e:60:a9:61:ab:f1:e4:cc:32:c5:0f:56:bf:9a:
         fc:96:a3:ee:28:cc:28:2f:00:b6:ba:36:57:49:03:de:1d:6c:
         62:a8:68:5d:23:92:71:6c:7f:db:78:63:4e:94:c4:31:80:64:
         d7:2e:5d:27:dc:66:06:c8:2d:3d:c6:24:04:ec:26:98:b9:a2:
         66:ad:a9:55:fb:78:7d:b1:0d:d9:f8:13:2b:5c:17:c4:ed:a4:
         cc:15:5a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36pKBKQxqaYRyOH9lZG9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy
OTcyMmUwHhcNMjUwNjI4MTkwMTMyWhcNMjUwNjI5MTkwMTMyWjAzMTEwLwYDVQQD
EygwNzhhMmQ2MDZiOTc0YjEzYjVmYjMwNjAwMGYxYzQ1OTMyYjMxOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKfP0T08nFldUMmhiXUqURpBF1Zc
b9AOvnJBqddbAESLN4Rsw02hS2ymjDeRqyYhpRrKdQzsZRIb4TZN1LKLU/OWausw
mNi4ZMa1S3OwbXgE+6CZihpzndkyyU34lx1cqgwEzT65qA2yEAXyoYzi4395pxrQ
WstFZa7MKS7SrSIGlq87WNCXtQfoVZKvwlnD6gtzxz6rO9/+ftz2mvfTKetBo8Vl
3Et/RIaf77DwLZoxib0zImKe97tV6+rt/6Q3M33tgjuixzuDLDEn7Afarj3C8MD3
fApINb0NuLuiNsO9MZPUocjV6/b5m+QUhGKkTLkfzrZ+W7GXNsAL7V0xPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeKLWBrl0sTtfswYADxxFkysxiwMB8GA1UdIwQY
MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt
YTQwOWUyMmEyNDNlLzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl
LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDFY0lyr
i7v7z4kdKy+xvJIzhptXmrJSMFsZ+R2mz9DLL0YsFI/AY+VTul5kHCWaKXjjNn21
KAG20oya7MZgmHRZ9JjPyrhh9JWg43WycXzQW/4m98MjtGc8/iv2liHztcll1dfe
CbfNZNRb+RnpHaq/ZqP/gA1xUKzwWL0c33+3M9ex1nT/zbXlR8Wrko8tQ+1iLRaV
yv53mzU+HiEfrJsNlVi7Ax5gqWGr8eTMMsUPVr+a/Jaj7ijMKC8Atro2V0kD3h1s
YqhoXSOScWx/23hjTpTEMYBk1y5dJ9xmBsgtPcYkBOwmmLmiZq2pVft4fbEN2fgT
K1wXxO2kzBVanQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:31 2025 by rpki-client