Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File:                     PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier:          uq9Qw8JQZnC0HPAghIUN+9rqjMhKZRKWl9gjZ+8gA0Y=
Subject key identifier:   83:E6:D7:F2:6B:75:A3:A3:81:13:69:C3:20:FA:5F:37:87:88:D9:B1
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer:       /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial:       0197B6A1BC3DE51D79F3097C479A342E16FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:22 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:22 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:22 +0000
Files and hashes:         1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: wlDckrIH3Gx2fNE3ovkDUe+PFU9G3O0RV971F+vWNUU=)
                          2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:bc:3d:e5:1d:79:f3:09:7c:47:9a:34:2e:16:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
        Validity
            Not Before: Jun 28 13:02:22 2025 GMT
            Not After : Jun 29 13:02:22 2025 GMT
        Subject: CN=83e6d7f26b75a3a3811369c320fa5f378788d9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:10:79:9e:18:b0:ed:38:4d:a2:c9:49:89:
                    18:97:09:88:ac:d5:b2:f6:a4:5f:b7:57:69:03:7a:
                    22:49:10:af:12:3c:1d:c5:a0:c8:85:21:d2:ea:3f:
                    fc:a8:53:4f:59:66:1f:a2:eb:72:5b:eb:b5:b3:cf:
                    8c:09:3f:a6:22:ef:e1:6e:15:a1:bd:35:b6:b1:05:
                    0f:67:a1:6e:92:2a:97:2d:54:5f:92:c4:0d:ef:b8:
                    c5:4a:ab:24:21:42:70:58:f8:7c:63:bc:68:9a:6c:
                    a7:c3:26:9f:83:eb:be:ea:8e:66:27:cb:3a:f1:80:
                    ae:a0:64:92:4b:e1:7b:c6:0d:ac:36:c7:17:fb:1a:
                    8c:ac:6b:c4:56:6b:58:7d:54:0a:f4:83:74:7e:ff:
                    73:cb:1c:8d:d0:57:f3:6f:5c:79:14:c3:73:e0:80:
                    fb:ff:25:34:94:3b:81:44:d9:00:32:81:5d:09:ea:
                    90:0c:08:ae:01:67:4c:06:49:e3:5c:80:16:66:3f:
                    bf:99:65:ec:68:6b:fe:ca:e3:90:53:59:94:5b:87:
                    49:6c:18:28:78:b8:4d:28:bd:2e:26:56:a1:1a:4b:
                    a6:ab:8f:f8:ec:7c:f5:26:19:6c:20:7e:9f:8d:a9:
                    12:58:ac:fb:16:12:76:c5:d4:09:18:03:e8:55:3d:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:D7:F2:6B:75:A3:A3:81:13:69:C3:20:FA:5F:37:87:88:D9:B1
            X509v3 Authority Key Identifier:
                keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:82:30:65:7c:c4:9b:2b:ce:98:ce:59:db:b3:8c:a7:c5:
         59:1d:6a:42:96:08:5c:61:21:99:cf:62:43:0c:e8:34:c4:11:
         b9:1d:88:d6:3f:60:57:c4:f9:c5:3c:1a:69:af:fb:6d:29:8f:
         d8:e1:cc:02:54:bb:0b:6d:e6:b3:f8:fb:5a:01:5f:6c:12:ed:
         59:2c:f1:a3:7f:17:a2:0f:a8:38:c9:bd:27:eb:78:6f:21:e6:
         65:13:71:91:10:20:82:76:1e:57:71:32:95:57:1a:cd:75:3d:
         d3:a2:46:b5:1f:7b:d5:8f:b1:5e:69:b7:dc:0d:7c:c0:1f:9a:
         97:02:4e:96:2d:00:5c:ac:dc:fb:8e:1b:16:a6:a8:0f:34:fc:
         96:35:f9:7c:87:12:63:7d:69:b4:f6:6a:80:a0:a9:e4:82:99:
         9d:e0:f7:c4:11:6c:1e:39:00:53:fb:23:28:50:8d:64:7c:bf:
         b4:0a:28:85:47:5b:57:e9:91:7b:c6:09:29:e6:cd:e6:66:dd:
         d4:5b:ad:09:7f:80:6b:a0:1c:05:05:1c:68:35:2c:de:bd:7a:
         50:b0:07:09:48:61:11:5d:96:bb:64:a2:ed:75:50:4d:b3:71:
         58:d0:00:18:e0:3d:87:7c:c5:f6:7d:83:e4:c3:5e:df:25:c0:
         8d:ef:e7:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obw95R158wl8R5o0Lhb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjkxZjM2Y2ZmZTgwZWZlMGRmZjI2MTIzZjhmOTdjMTVk
OTc2M2MwHhcNMjUwNjI4MTMwMjIyWhcNMjUwNjI5MTMwMjIyWjAzMTEwLwYDVQQD
Eyg4M2U2ZDdmMjZiNzVhM2EzODExMzY5YzMyMGZhNWYzNzg3ODhkOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznwQeZ4YsO04TaLJSYkYlwmIrNWy
9qRft1dpA3oiSRCvEjwdxaDIhSHS6j/8qFNPWWYfoutyW+u1s8+MCT+mIu/hbhWh
vTW2sQUPZ6FukiqXLVRfksQN77jFSqskIUJwWPh8Y7xommynwyafg+u+6o5mJ8s6
8YCuoGSSS+F7xg2sNscX+xqMrGvEVmtYfVQK9IN0fv9zyxyN0Ffzb1x5FMNz4ID7
/yU0lDuBRNkAMoFdCeqQDAiuAWdMBknjXIAWZj+/mWXsaGv+yuOQU1mUW4dJbBgo
eLhNKL0uJlahGkumq4/47Hz1JhlsIH6fjakSWKz7FhJ2xdQJGAPoVT2O2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPm1/JrdaOjgRNpwyD6XzeHiNmxMB8GA1UdIwQY
MBaAFD65HzbP/oDv4N/yYSP4+XwV2XY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQt
NDI0YzIzZjUwZmYzLzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hYTY1NjUtNWQ5Ny00YTgwLTlhNWQtNDI0YzIzZjUwZmYz
LzEvUHJrZk5zXy1nT19nM19KaElfajVmQlhaZGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrmCMGV8
xJsrzpjOWduzjKfFWR1qQpYIXGEhmc9iQwzoNMQRuR2I1j9gV8T5xTwaaa/7bSmP
2OHMAlS7C23ms/j7WgFfbBLtWSzxo38Xog+oOMm9J+t4byHmZRNxkRAggnYeV3Ey
lVcazXU906JGtR971Y+xXmm33A18wB+alwJOli0AXKzc+44bFqaoDzT8ljX5fIcS
Y31ptPZqgKCp5IKZneD3xBFsHjkAU/sjKFCNZHy/tAoohUdbV+mRe8YJKebN5mbd
1FutCX+Aa6AcBQUcaDUs3r16ULAHCUhhEV2Wu2Si7XVQTbNxWNAAGOA9h3zF9n2D
5MNe3yXAje/niA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:43 2025 by rpki-client