Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          IdHGnhGxqQZRxwFf6pKWhES40DNCxmBZWjxx+f4w+u0=
Subject key identifier:   5E:F0:BD:57:12:83:0E:A3:E4:8B:B4:9E:8F:6B:53:ED:0C:4C:A7:E6
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       0197B745BB67633EE3888BA7DF8467C6C421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          1248
Signing time:             Sat 28 Jun 2025 16:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:29 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: nopwP/oX6mWaQ08rySTPZQeFCC1YzI/Gb5tS9RBOCo4=)
                          2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:bb:67:63:3e:e3:88:8b:a7:df:84:67:c6:c4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: Jun 28 16:01:29 2025 GMT
            Not After : Jun 29 16:01:29 2025 GMT
        Subject: CN=5ef0bd5712830ea3e48bb49e8f6b53ed0c4ca7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:98:49:13:da:40:e0:a0:ae:76:f9:b8:8c:
                    79:14:9e:ff:4d:1b:50:77:3f:da:0b:3e:aa:4e:01:
                    b9:cb:07:cc:b3:d3:72:ce:05:6d:d8:13:f4:b1:4f:
                    d0:21:25:c7:5c:d5:fa:53:b2:de:2b:d5:8b:0a:64:
                    e0:37:28:4c:49:0a:93:3c:12:f7:41:81:6b:5f:84:
                    ce:19:ac:35:bc:6b:c0:6c:28:3b:c9:b0:19:fb:6c:
                    df:b5:30:b3:8c:c7:d2:29:03:b9:e2:e3:cc:86:b0:
                    31:f3:81:77:32:78:22:1e:dc:1b:65:c4:42:dc:e3:
                    cb:3a:be:f7:e2:89:2d:56:03:5d:3a:95:79:e3:2f:
                    51:2b:7e:43:a6:73:4c:6e:9c:da:c8:96:49:fb:ba:
                    6e:74:1e:f6:f3:d3:26:3a:0d:3b:39:13:36:d5:02:
                    45:ef:09:57:cb:a1:8b:f4:e8:bc:91:06:f8:3b:e7:
                    e8:7b:17:1e:3e:5e:5e:ff:c0:9a:50:fd:7e:ed:f8:
                    75:44:86:b5:3d:5c:d1:fb:8f:d4:49:f7:c9:14:7f:
                    96:19:ee:61:4f:66:c8:9e:4f:8c:01:33:cc:4b:29:
                    6b:5a:a5:bd:f1:02:ff:15:44:fb:cb:f2:e8:7d:a9:
                    91:0f:e6:b5:54:b4:09:e5:53:f3:fb:b4:c1:c2:4b:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F0:BD:57:12:83:0E:A3:E4:8B:B4:9E:8F:6B:53:ED:0C:4C:A7:E6
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:54:a3:cd:20:3d:09:e7:85:75:8f:a9:68:a7:e9:66:1f:60:
         48:9c:51:8d:07:3c:c2:6d:c2:8b:a7:4b:40:79:0a:34:2e:fe:
         c0:4b:18:c8:81:51:f1:e5:d9:3e:b4:30:fe:cc:be:c7:e6:91:
         af:78:a7:ee:74:34:e4:4c:66:f3:24:e2:81:86:ea:01:4b:e5:
         bf:f4:81:88:c0:10:ee:b6:1a:00:6e:33:d8:1a:44:11:14:25:
         53:b1:3f:db:80:36:62:50:6e:18:2b:d1:aa:42:75:5e:28:f1:
         9b:e9:65:70:20:fc:23:75:f7:ed:90:07:dd:3c:68:71:51:de:
         89:45:eb:5d:24:76:df:b6:83:e2:8e:c0:b6:13:82:7e:8f:03:
         8a:ed:6c:4f:13:99:49:2a:99:89:cd:a1:aa:cd:30:fa:33:17:
         81:6b:b5:4f:66:55:91:03:b5:ab:b3:79:2d:88:86:62:11:ee:
         b4:fb:e4:f1:1a:73:af:c3:cb:18:cd:31:1f:32:d0:84:8e:17:
         80:b2:77:41:7d:ee:c4:45:00:92:db:01:fa:32:2e:86:cd:91:
         33:95:8a:67:79:08:9d:15:ff:dc:a7:8f:4a:fa:6f:de:69:17:
         e9:cb:c0:c3:37:30:a2:81:8f:86:8b:c1:5b:4c:11:1b:d5:8a:
         1a:e3:fe:ae
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3RbtnYz7jiIun34RnxsQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTAwNTNiNjhhNDM5OGZkNTJmMDdhZmRkNmFkMzEwOWZk
ZWQ0YjQwHhcNMjUwNjI4MTYwMTI5WhcNMjUwNjI5MTYwMTI5WjAzMTEwLwYDVQQD
Eyg1ZWYwYmQ1NzEyODMwZWEzZTQ4YmI0OWU4ZjZiNTNlZDBjNGNhN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eqYSRPaQOCgrnb5uIx5FJ7/TRtQ
dz/aCz6qTgG5ywfMs9NyzgVt2BP0sU/QISXHXNX6U7LeK9WLCmTgNyhMSQqTPBL3
QYFrX4TOGaw1vGvAbCg7ybAZ+2zftTCzjMfSKQO54uPMhrAx84F3MngiHtwbZcRC
3OPLOr734oktVgNdOpV54y9RK35DpnNMbpzayJZJ+7pudB7289MmOg07ORM21QJF
7wlXy6GL9Oi8kQb4O+foexcePl5e/8CaUP1+7fh1RIa1PVzR+4/USffJFH+WGe5h
T2bInk+MATPMSylrWqW98QL/FUT7y/LofamRD+a1VLQJ5VPz+7TBwku9ywIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF7wvVcSgw6j5Iu0no9rU+0MTKfmMB8GA1UdIwQY
MBaAFPugBTtopDmP1S8Hr91q0xCf3tS0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02QUZPMmlrT1lfVkx3ZXYzV3JURUpfZTFMUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDEx
LTk4MDU4MTAwYTY0OC8xLzEtNkFGTzJpa09ZX1ZMd2V2M1dyVEVKX2UxTFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UxLzczMzE3NC1lZGQ2LTRiNDItYjAxMS05ODA1ODEwMGE2
NDgvMS8xLTZBRk8yaWtPWV9WTHdldjNXclRFSl9lMUxRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVSj
zSA9CeeFdY+paKfpZh9gSJxRjQc8wm3Ci6dLQHkKNC7+wEsYyIFR8eXZPrQw/sy+
x+aRr3in7nQ05Exm8yTigYbqAUvlv/SBiMAQ7rYaAG4z2BpEERQlU7E/24A2YlBu
GCvRqkJ1Xijxm+llcCD8I3X37ZAH3TxocVHeiUXrXSR237aD4o7AthOCfo8Diu1s
TxOZSSqZic2hqs0w+jMXgWu1T2ZVkQO1q7N5LYiGYhHutPvk8Rpzr8PLGM0xHzLQ
hI4XgLJ3QX3uxEUAktsB+jIuhs2RM5WKZ3kInRX/3KePSvpv3mkX6cvAwzcwooGP
hovBW0wRG9WKGuP+rg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:22 2025 by rpki-client