Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          JTA70tOpj0t0mSymYXeHpw0qZlYQtbUkkQSayl99DUI=
Subject key identifier:   E6:6D:69:12:CB:57:7E:B5:56:F6:5D:AF:C0:D7:95:E3:70:0F:4B:E9
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       0197B7EA7F3306E95B1E2126D5685E6AE518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          0C64
Signing time:             Sat 28 Jun 2025 19:01:27 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:27 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:27 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: aFVaEt22K5YbuEKxjvDanvkROkp2sSNi+MpvRpED8/I=)
                          2: DmQguxgVyJ_d0tpi3KUPtRcdGUQ.roa (hash: OiuAWrEvvfbOYm4huTJvJrvDJABO3FsTpYDNXs6sb+s=)
                          3: aI06tjVZeZrIS1TA5LHHtgH2TfE.roa (hash: LKF1KEnQy5/5rD4HRU7tZBGEwLV0sJ0zLyAcVF0BY1c=)
                          4: gCOrJJaf7HO535LCuEoI7vxf65A.roa (hash: 7Nbxw9zLeIaRzeX3DJv4MIaTHvVYcSTc1CbOKxR59lQ=)
                          5: k6eyynVladw6I8I9j1dsAe95OA8.roa (hash: A0AAtMX//zpiq0We38ivcj7YmnJWOeaOBnQnV51DCG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:7f:33:06:e9:5b:1e:21:26:d5:68:5e:6a:e5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Jun 28 19:01:27 2025 GMT
            Not After : Jun 29 19:01:27 2025 GMT
        Subject: CN=e66d6912cb577eb556f65dafc0d795e3700f4be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:93:48:5d:80:43:33:c8:f1:c6:20:7d:27:
                    b2:b8:41:08:93:75:e3:88:ec:11:8c:f6:07:c6:00:
                    9b:f1:c1:56:1b:02:60:ea:95:39:2b:ad:ba:e3:3a:
                    d5:b6:a2:d0:0f:05:37:2f:1c:ba:c1:3f:c4:2b:82:
                    3b:60:78:f6:b5:cc:85:9b:e9:fe:95:1e:04:05:ff:
                    34:61:fc:90:25:e5:2b:14:72:ca:44:62:41:5b:f7:
                    37:7f:66:f1:38:46:5c:b3:b9:5b:d7:45:e4:3d:ab:
                    1b:31:f7:9a:8f:d2:27:01:2e:ba:2f:ee:0d:59:5a:
                    77:56:f0:80:ab:99:92:1c:3b:54:4d:9a:58:28:ea:
                    9a:af:61:b0:21:43:76:1b:93:51:76:e6:08:89:8d:
                    22:b0:75:f3:9d:7f:b8:2e:64:9f:d9:97:85:15:bb:
                    b0:0f:97:57:ac:4e:d8:c5:58:03:df:12:ac:c8:31:
                    aa:23:17:f3:85:3b:30:18:60:d7:72:6f:40:c9:b3:
                    e6:27:6f:2f:20:1a:46:82:a0:86:14:c9:f0:55:32:
                    83:d4:f4:25:6e:f7:02:e7:e2:48:ce:e1:e7:02:08:
                    4a:c0:3c:61:f2:1c:f8:4a:48:b5:61:68:b8:8f:e1:
                    00:f6:e5:e3:ac:be:97:10:4d:ed:ef:00:7b:8f:ff:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6D:69:12:CB:57:7E:B5:56:F6:5D:AF:C0:D7:95:E3:70:0F:4B:E9
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:fd:33:cb:a6:2c:d9:1a:5a:9b:00:81:cc:20:7a:81:46:
         a2:2a:62:38:ed:2f:f6:cf:bd:2a:40:91:03:f5:e1:a3:3f:4a:
         b3:0f:27:d8:57:f2:33:f2:62:e9:30:64:0d:03:d8:4b:e9:2a:
         30:2c:13:1c:3f:d3:74:d5:ca:3d:00:51:43:60:d1:61:4b:84:
         97:c5:cb:05:d3:2e:a9:a4:78:a0:79:18:d6:c5:01:f9:5b:44:
         ab:1c:2a:8d:2e:38:1c:43:09:05:4e:31:ae:8b:ce:ec:6b:3d:
         e1:0f:fb:89:c8:be:db:22:52:7a:8b:a6:40:12:9e:4b:d3:85:
         de:69:08:3a:e5:96:09:68:2e:38:1b:58:9f:c2:4e:61:e1:0e:
         b5:f0:b2:f7:92:b5:94:17:73:55:7d:9d:31:de:95:3a:83:a8:
         05:c7:50:8f:f7:76:3b:1e:79:c8:5e:b4:20:cb:d3:4a:2b:b1:
         05:5a:f9:b5:49:42:de:32:85:8b:8d:f4:47:6e:cf:9c:51:b2:
         7d:9e:04:9c:2d:8d:6d:e0:a2:dd:7d:21:a1:09:d3:0d:63:12:
         d3:2a:f9:6e:95:b0:ae:a1:cc:19:9f:bb:5c:a1:79:6e:a4:6e:
         c3:fb:00:33:79:c9:e6:5d:07:ba:98:b4:ab:4c:60:24:46:bb:
         06:9f:3b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36n8zBulbHiEm1WheauUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNjFhMjkyMjIzYWQ5YWViYzhhZDgyYzJhNTY0NzVmYmQ5
N2E4MzQwHhcNMjUwNjI4MTkwMTI3WhcNMjUwNjI5MTkwMTI3WjAzMTEwLwYDVQQD
EyhlNjZkNjkxMmNiNTc3ZWI1NTZmNjVkYWZjMGQ3OTVlMzcwMGY0YmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPWTSF2AQzPI8cYgfSeyuEEIk3Xj
iOwRjPYHxgCb8cFWGwJg6pU5K6264zrVtqLQDwU3Lxy6wT/EK4I7YHj2tcyFm+n+
lR4EBf80YfyQJeUrFHLKRGJBW/c3f2bxOEZcs7lb10XkPasbMfeaj9InAS66L+4N
WVp3VvCAq5mSHDtUTZpYKOqar2GwIUN2G5NRduYIiY0isHXznX+4LmSf2ZeFFbuw
D5dXrE7YxVgD3xKsyDGqIxfzhTswGGDXcm9AybPmJ28vIBpGgqCGFMnwVTKD1PQl
bvcC5+JIzuHnAghKwDxh8hz4Ski1YWi4j+EA9uXjrL6XEE3t7wB7j/+mIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZtaRLLV361VvZdr8DXleNwD0vpMB8GA1UdIwQY
MBaAFN9hopIiOtmuvIrYLCpWR1+9l6g0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYt
NDE0ODdmNGQ0MTcxLzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iN2Q4NzUtYjEyYy00ZWQ4LWI4MGYtNDE0ODdmNGQ0MTcx
LzEvMzJHaWtpSTYyYTY4aXRnc0tsWkhYNzJYcURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXH9M8um
LNkaWpsAgcwgeoFGoipiOO0v9s+9KkCRA/Xhoz9Ksw8n2FfyM/Ji6TBkDQPYS+kq
MCwTHD/TdNXKPQBRQ2DRYUuEl8XLBdMuqaR4oHkY1sUB+VtEqxwqjS44HEMJBU4x
rovO7Gs94Q/7ici+2yJSeoumQBKeS9OF3mkIOuWWCWguOBtYn8JOYeEOtfCy95K1
lBdzVX2dMd6VOoOoBcdQj/d2Ox55yF60IMvTSiuxBVr5tUlC3jKFi430R27PnFGy
fZ4EnC2NbeCi3X0hoQnTDWMS0yr5bpWwrqHMGZ+7XKF5bqRuw/sAM3nJ5l0Hupi0
q0xgJEa7Bp87cw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:06 2025 by rpki-client