Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          8pfvR4FGvVicAmhW4GDniW5Ahf6Bi29vm57Y5P0KbpM=
Subject key identifier:   4A:38:60:5C:C0:6B:68:8D:21:18:59:76:AB:50:6E:D9:19:8C:F3:F3
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       0197B70EE9F14E2EA582CC23B5C424A861CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          0EE6
Signing time:             Sat 28 Jun 2025 15:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:37 +0000
Files and hashes:         1: 1KCeM_saj2EHwCtmvYUyod5fQVk.roa (hash: Pv9o3ZWxmDIYTSHQUpAENmb1SekUnxD3+SSuHyFLNIk=)
                          2: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: 9bk9+YVgZJakejOZ655Xda3u2XxLUwUeHMSOvbOG1p4=)
                          3: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=)
                          4: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=)
                          5: s67wfBYN4Keq-XcZ3aP-wu5Usu8.roa (hash: iepRGsTeT7EybANIxB57/7dp/YbwlG1MHY+mia+/CQ8=)
                          6: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:e9:f1:4e:2e:a5:82:cc:23:b5:c4:24:a8:61:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Jun 28 15:01:37 2025 GMT
            Not After : Jun 29 15:01:37 2025 GMT
        Subject: CN=4a38605cc06b688d21185976ab506ed9198cf3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:30:5a:49:06:14:f6:02:14:3d:53:79:92:
                    18:3d:39:4f:c5:a8:99:7b:55:16:86:0f:b7:f6:21:
                    be:53:2d:36:10:f3:d7:1c:f2:a4:93:79:93:9a:ca:
                    57:72:11:a0:76:88:14:19:4e:a4:75:da:c4:46:66:
                    e1:2c:f3:30:0e:a5:bd:81:34:9e:ac:be:9e:db:eb:
                    52:6a:b7:f3:5c:8f:90:dc:12:0d:aa:13:9e:b2:d1:
                    d3:d1:d3:2b:68:57:f8:0e:2f:98:4c:48:6e:7c:93:
                    26:9f:7e:c9:59:18:d7:7c:b1:f5:4b:84:8f:e1:3b:
                    72:b2:03:63:71:df:d9:49:b9:fa:f9:a2:04:9c:14:
                    5a:48:29:3e:c5:9c:d4:73:d7:f8:0e:ca:3a:cf:5f:
                    98:54:04:f3:56:d5:70:81:fb:47:4d:65:44:e7:b5:
                    fd:4b:2b:8f:15:e1:ab:0e:c9:c2:0a:5e:a0:92:b5:
                    0d:8f:43:54:71:17:cb:68:1b:8c:c5:21:66:98:46:
                    7a:59:3e:92:14:ab:89:9d:3e:ca:34:c3:6d:e9:6b:
                    cf:17:ba:d3:de:16:5a:7e:d8:55:36:a4:68:fd:22:
                    41:a7:97:34:ab:ca:c4:fc:4b:72:c7:b1:2e:09:16:
                    3d:15:ab:17:ce:1d:ba:ab:ab:34:31:d9:75:75:e7:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:38:60:5C:C0:6B:68:8D:21:18:59:76:AB:50:6E:D9:19:8C:F3:F3
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b4:61:77:b4:41:99:81:11:f2:65:f8:71:4d:78:b1:a8:c1:
         c9:32:f6:12:0b:10:03:f8:e3:18:bb:18:09:2d:b6:c2:98:01:
         1e:d3:a5:2b:ef:0d:47:32:fc:89:63:58:8b:70:d2:71:f3:b1:
         8e:14:ad:8d:71:04:d8:b9:68:08:01:0e:81:76:31:e8:ee:fc:
         25:cf:34:54:7b:ce:26:cd:83:52:a1:1f:42:fe:2c:44:8d:bc:
         73:3b:82:ec:b9:64:b7:b9:ca:ca:93:4e:3c:97:f7:fd:7b:ce:
         4b:68:2b:13:8f:b0:5f:3a:81:dd:2e:b2:ad:1e:87:b3:a5:4f:
         e6:1b:d0:ba:1e:9b:2b:18:4b:79:90:b3:45:6b:6c:60:9c:a7:
         42:8f:59:3d:8a:13:03:3e:c6:1c:02:64:93:03:ec:64:59:12:
         ed:e4:2d:92:cb:66:5c:4f:ca:9f:a3:79:30:6c:2d:12:69:b2:
         94:34:37:f6:5f:74:dd:14:46:bd:5d:fc:a6:45:04:85:b9:2e:
         3d:e5:3f:e7:3c:41:4f:cd:65:4f:e9:4a:07:54:ad:3b:4c:76:
         80:31:bd:fa:50:e7:ed:12:bf:a5:d3:0a:40:49:05:1b:8a:01:
         97:8c:89:33:07:33:34:e9:d1:09:c3:3a:ae:73:ee:17:65:61:
         fd:ab:56:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DunxTi6lgswjtcQkqGHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3
ZWIxNjkwHhcNMjUwNjI4MTUwMTM3WhcNMjUwNjI5MTUwMTM3WjAzMTEwLwYDVQQD
Eyg0YTM4NjA1Y2MwNmI2ODhkMjExODU5NzZhYjUwNmVkOTE5OGNmM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCUwWkkGFPYCFD1TeZIYPTlPxaiZ
e1UWhg+39iG+Uy02EPPXHPKkk3mTmspXchGgdogUGU6kddrERmbhLPMwDqW9gTSe
rL6e2+tSarfzXI+Q3BINqhOestHT0dMraFf4Di+YTEhufJMmn37JWRjXfLH1S4SP
4TtysgNjcd/ZSbn6+aIEnBRaSCk+xZzUc9f4Dso6z1+YVATzVtVwgftHTWVE57X9
SyuPFeGrDsnCCl6gkrUNj0NUcRfLaBuMxSFmmEZ6WT6SFKuJnT7KNMNt6WvPF7rT
3hZafthVNqRo/SJBp5c0q8rE/Etyx7EuCRY9FasXzh26q6s0Mdl1deewlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo4YFzAa2iNIRhZdqtQbtkZjPPzMB8GA1UdIwQY
MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt
MjhjYjNiYmYwNWFlLzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl
LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrRhd7RB
mYER8mX4cU14sajByTL2EgsQA/jjGLsYCS22wpgBHtOlK+8NRzL8iWNYi3DScfOx
jhStjXEE2LloCAEOgXYx6O78Jc80VHvOJs2DUqEfQv4sRI28czuC7Llkt7nKypNO
PJf3/XvOS2grE4+wXzqB3S6yrR6Hs6VP5hvQuh6bKxhLeZCzRWtsYJynQo9ZPYoT
Az7GHAJkkwPsZFkS7eQtkstmXE/Kn6N5MGwtEmmylDQ39l903RRGvV38pkUEhbku
PeU/5zxBT81lT+lKB1StO0x2gDG9+lDn7RK/pdMKQEkFG4oBl4yJMwczNOnRCcM6
rnPuF2Vh/atWwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:18 2025 by rpki-client