Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          Ltz5KYI0hg1aTVF2wKq5NZNvjkxiyvAicrgleOC8XeA=
Subject key identifier:   59:62:07:D7:A1:82:57:31:DD:42:91:D2:8F:0E:6E:BF:83:00:59:0C
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       0197B8214FF468E69BB947F20C507866C268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          0841
Signing time:             Sat 28 Jun 2025 20:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:20 +0000
Files and hashes:         1: 3wIhCEw3GWmZT7mdirKx25Pph28.roa (hash: r+Bw53VwkmYw54+5M14miJP/kk33s3+eanOkc4CeEtQ=)
                          2: E4m1CzQ-EuF3Hc5mHM5f6mPC5eQ.roa (hash: gowTRbLyNdf/42ayzy0sQQZU9KBkEVzXjFvCn/3IDtc=)
                          3: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: OlP+pGTwAMVRKBKC786LkQFqbbuag7GY9w5Wk9Gngow=)
                          4: rjR8lGZevB88cWBoZrBIto3MeHA.roa (hash: rMHaEQRl7caXSgxty5dwGL/wlOcGLl25XAlQeBFASec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:4f:f4:68:e6:9b:b9:47:f2:0c:50:78:66:c2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Jun 28 20:01:20 2025 GMT
            Not After : Jun 29 20:01:20 2025 GMT
        Subject: CN=596207d7a1825731dd4291d28f0e6ebf8300590c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:ca:31:5d:d9:63:10:c9:c9:e0:e6:1b:f9:
                    bc:a3:15:15:aa:ec:2d:6e:4f:e6:dc:66:5b:dd:94:
                    fc:73:e0:ac:51:5a:5d:b1:75:1b:38:77:b7:57:14:
                    1f:1c:c7:d4:52:c4:f5:61:6c:10:05:97:c9:03:8f:
                    20:94:2f:2c:cf:69:cd:78:cf:e9:ac:6c:01:4c:43:
                    16:52:9f:bc:d1:6d:35:6c:b0:74:68:c7:e2:ff:8e:
                    e0:2c:75:b0:dd:dd:d7:bf:6e:ad:88:3f:94:fc:7c:
                    0f:d3:86:58:fc:e6:df:b4:cc:ce:18:08:25:2d:46:
                    b7:3d:94:d0:83:8e:38:08:9b:07:18:64:70:ef:eb:
                    90:fa:e4:90:3e:52:7e:89:e1:db:47:5c:6e:62:d9:
                    36:c5:95:aa:39:06:c5:65:00:22:f0:cc:c3:a0:32:
                    b4:d5:fa:8e:de:5e:b0:e3:12:b1:05:aa:a1:f2:bb:
                    75:72:db:a3:dc:37:82:bb:f0:f5:7e:13:ae:c5:8a:
                    12:1b:b9:37:35:bd:2e:43:3a:99:8f:02:b9:9f:31:
                    45:ec:66:84:63:ca:b9:5f:0e:e1:6f:85:55:e2:2d:
                    4a:7a:ee:aa:46:9d:ce:d9:2a:d1:87:eb:19:89:3a:
                    9a:41:1d:57:eb:02:17:29:45:08:04:5d:87:a1:44:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:07:D7:A1:82:57:31:DD:42:91:D2:8F:0E:6E:BF:83:00:59:0C
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:e5:25:a3:fd:c8:32:d3:ba:16:d6:7f:b5:f6:18:77:8a:
         b0:49:de:06:db:85:4a:f7:0e:34:19:0c:9b:44:f1:d5:83:f3:
         ef:d8:30:f0:ae:79:40:31:34:13:15:53:d3:1e:1d:0c:b7:50:
         25:9b:13:b1:8e:8e:bc:80:c8:b9:9b:a3:06:ac:b7:af:a0:c4:
         b2:fb:6f:73:80:2e:dc:f7:0d:19:19:60:32:d4:b0:de:46:71:
         41:6c:ce:40:4f:7a:4b:29:e0:f7:c5:51:9a:b7:79:85:e9:3c:
         b8:89:14:57:a6:a1:54:3a:27:7a:f4:81:73:15:c5:1d:da:e2:
         e7:98:32:16:8e:ce:6f:10:4d:c4:fd:72:9a:c8:c0:1e:e8:84:
         27:1c:56:36:6c:06:3e:2a:83:df:54:9b:bf:19:4c:91:9d:96:
         7d:1c:16:1c:11:7f:e9:a3:79:e5:37:f0:b1:d2:f4:c9:76:1b:
         6f:c6:cf:15:f9:6f:2a:b2:93:73:7f:1c:5b:09:50:92:84:b5:
         36:97:15:ab:09:2f:0c:a0:bd:da:08:29:2f:f9:67:3f:ba:80:
         e3:42:df:81:d2:05:b5:f6:59:fb:b2:5b:b7:11:4e:ba:df:17:
         a7:97:f2:4f:f5:f6:2d:e9:36:78:e3:49:08:e7:83:16:75:d8:
         f1:7f:e8:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IU/0aOabuUfyDFB4ZsJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjUwNjI4MjAwMTIwWhcNMjUwNjI5MjAwMTIwWjAzMTEwLwYDVQQD
Eyg1OTYyMDdkN2ExODI1NzMxZGQ0MjkxZDI4ZjBlNmViZjgzMDA1OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAbKMV3ZYxDJyeDmG/m8oxUVquwt
bk/m3GZb3ZT8c+CsUVpdsXUbOHe3VxQfHMfUUsT1YWwQBZfJA48glC8sz2nNeM/p
rGwBTEMWUp+80W01bLB0aMfi/47gLHWw3d3Xv26tiD+U/HwP04ZY/ObftMzOGAgl
LUa3PZTQg444CJsHGGRw7+uQ+uSQPlJ+ieHbR1xuYtk2xZWqOQbFZQAi8MzDoDK0
1fqO3l6w4xKxBaqh8rt1ctuj3DeCu/D1fhOuxYoSG7k3Nb0uQzqZjwK5nzFF7GaE
Y8q5Xw7hb4VV4i1Keu6qRp3O2SrRh+sZiTqaQR1X6wIXKUUIBF2HoUQ28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFliB9ehglcx3UKR0o8Obr+DAFkMMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+flJaP9
yDLTuhbWf7X2GHeKsEneBtuFSvcONBkMm0Tx1YPz79gw8K55QDE0ExVT0x4dDLdQ
JZsTsY6OvIDIuZujBqy3r6DEsvtvc4Au3PcNGRlgMtSw3kZxQWzOQE96Syng98VR
mrd5hek8uIkUV6ahVDonevSBcxXFHdri55gyFo7ObxBNxP1ymsjAHuiEJxxWNmwG
PiqD31SbvxlMkZ2WfRwWHBF/6aN55TfwsdL0yXYbb8bPFflvKrKTc38cWwlQkoS1
NpcVqwkvDKC92ggpL/lnP7qA40LfgdIFtfZZ+7JbtxFOut8Xp5fyT/X2Lek2eONJ
COeDFnXY8X/oeA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:06 2025 by rpki-client