Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          W0OGnzgCP0Mxfq1cs7Dex/Ya0ESDRGnSiJEdWfwxtH4=
Subject key identifier:   1C:B2:40:BC:D4:BB:7F:4A:C8:76:83:97:93:87:A2:8E:25:A8:E7:DD
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       0197B6D76C4BE1F5C1C7FAF4CD8A2B92F102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 14:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:00 +0000
Files and hashes:         1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: RwZ5WPQLUSKDjEj20gUqAtUPAN0/pvT2usKKTbTopt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:6c:4b:e1:f5:c1:c7:fa:f4:cd:8a:2b:92:f1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Jun 28 14:01:00 2025 GMT
            Not After : Jun 29 14:01:00 2025 GMT
        Subject: CN=1cb240bcd4bb7f4ac87683979387a28e25a8e7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:c2:8d:c8:d5:b4:e5:21:42:04:c4:74:70:
                    ce:02:1d:4b:b1:f2:3e:b8:1c:00:ab:da:98:1c:32:
                    0d:5a:da:ca:e4:10:ee:1d:89:40:49:ec:eb:ca:a1:
                    78:ac:c7:67:06:fc:3f:82:7a:9e:98:17:2f:4c:d4:
                    a2:39:08:af:a9:a8:d8:fc:59:65:01:5e:09:b2:60:
                    fb:01:57:10:79:1b:1a:03:25:6b:e8:63:c1:2a:ed:
                    b9:d8:f5:9c:a4:35:36:7e:f9:52:3c:a7:2b:60:6a:
                    a8:c9:db:b0:76:7c:58:4d:07:f1:7d:86:ec:23:bd:
                    6b:cc:f5:53:dc:66:b8:5e:39:8e:8b:fa:f7:12:af:
                    61:83:e1:0b:a7:24:59:77:c6:45:01:4c:8b:59:25:
                    5c:8a:e4:84:c1:f7:38:1b:79:3f:08:33:12:0c:95:
                    a6:73:78:cc:d4:e5:8b:c5:fe:ac:c1:ed:8c:84:1e:
                    ff:f5:63:73:d7:2a:be:93:c8:9c:8c:fa:03:46:29:
                    cf:e7:28:cd:11:d6:55:75:b2:30:88:6d:e6:45:8f:
                    b7:ba:66:57:05:e8:c5:c7:88:a0:41:1a:40:d1:be:
                    d3:10:bc:3c:42:21:ce:e2:9d:94:a8:77:87:e0:8b:
                    3a:6b:dc:2b:18:4b:f3:ea:76:df:60:3a:de:ae:63:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:40:BC:D4:BB:7F:4A:C8:76:83:97:93:87:A2:8E:25:A8:E7:DD
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:c1:3f:cc:c2:e0:1f:d5:aa:da:2f:eb:48:bb:6a:fb:55:
         69:63:d4:a4:15:97:b7:80:2a:76:9f:63:76:f0:07:b1:20:3b:
         68:00:c9:32:53:b9:33:57:79:c7:8a:10:8f:4b:89:a2:42:b4:
         95:5c:e9:3e:a6:8f:e0:9e:9b:cc:7e:a2:5d:0a:d0:b2:78:6a:
         2f:de:01:ee:bf:99:ea:54:2b:23:c7:60:64:3c:f1:a6:f0:13:
         e5:bf:73:ef:83:c8:3a:44:ec:22:24:4f:4d:75:47:70:50:19:
         ec:bb:af:4a:e9:db:54:4f:3e:bb:fc:c0:43:1d:71:78:2a:4b:
         69:ae:eb:d2:c9:b5:20:f8:dd:92:9d:84:e1:bc:c0:86:89:ab:
         c7:2e:53:62:b6:b9:aa:aa:ce:e6:67:0a:9e:a3:3b:60:c3:4a:
         ca:ef:fc:6b:10:f8:1e:c9:17:62:6f:0a:6c:7e:ea:16:51:b3:
         05:86:bd:ae:69:44:b4:89:95:3b:19:e2:44:35:8e:eb:d6:bc:
         b3:61:74:af:05:63:a7:ac:f3:cf:1a:40:3a:79:8d:84:d2:f1:
         90:07:fa:8e:da:9a:38:5c:10:a9:7e:41:a8:16:9a:b8:40:7e:
         86:01:1a:27:67:67:3d:ae:e0:45:ef:58:d8:ee:1e:53:98:f2:
         59:f9:21:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212xL4fXBx/r0zYorkvECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjUwNjI4MTQwMTAwWhcNMjUwNjI5MTQwMTAwWjAzMTEwLwYDVQQD
EygxY2IyNDBiY2Q0YmI3ZjRhYzg3NjgzOTc5Mzg3YTI4ZTI1YThlN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvPCjcjVtOUhQgTEdHDOAh1LsfI+
uBwAq9qYHDINWtrK5BDuHYlASezryqF4rMdnBvw/gnqemBcvTNSiOQivqajY/Fll
AV4JsmD7AVcQeRsaAyVr6GPBKu252PWcpDU2fvlSPKcrYGqoyduwdnxYTQfxfYbs
I71rzPVT3Ga4XjmOi/r3Eq9hg+ELpyRZd8ZFAUyLWSVciuSEwfc4G3k/CDMSDJWm
c3jM1OWLxf6swe2MhB7/9WNz1yq+k8icjPoDRinP5yjNEdZVdbIwiG3mRY+3umZX
BejFx4igQRpA0b7TELw8QiHO4p2UqHeH4Is6a9wrGEvz6nbfYDrermO6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByyQLzUu39KyHaDl5OHoo4lqOfdMB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMLBP8zC
4B/Vqtov60i7avtVaWPUpBWXt4Aqdp9jdvAHsSA7aADJMlO5M1d5x4oQj0uJokK0
lVzpPqaP4J6bzH6iXQrQsnhqL94B7r+Z6lQrI8dgZDzxpvAT5b9z74PIOkTsIiRP
TXVHcFAZ7LuvSunbVE8+u/zAQx1xeCpLaa7r0sm1IPjdkp2E4bzAhomrxy5TYra5
qqrO5mcKnqM7YMNKyu/8axD4HskXYm8KbH7qFlGzBYa9rmlEtImVOxniRDWO69a8
s2F0rwVjp6zzzxpAOnmNhNLxkAf6jtqaOFwQqX5BqBaauEB+hgEaJ2dnPa7gRe9Y
2O4eU5jyWfkh3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:42 2025 by rpki-client