Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File:                     dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier:          UkDNnoJi2BdzlLMOYhgUEVV+B/aZdFMPUm3AOZOh2U0=
Subject key identifier:   3F:45:0C:53:51:FF:82:3B:F8:3A:1C:D7:ED:93:BE:BE:B5:D3:28:59
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer:       /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial:       0197BB8FEE69FAC39B6B178EFD907C0A01CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number:          0669
Signing time:             Sun 29 Jun 2025 12:01:01 +0000
Manifest this update:     Sun 29 Jun 2025 12:01:01 +0000
Manifest next update:     Mon 30 Jun 2025 12:01:01 +0000
Files and hashes:         1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: 2pIhwt2JJ8PWnD3qKQzq3uLX2FcbrkfUU7ujiaeMALs=)
                          2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:8f:ee:69:fa:c3:9b:6b:17:8e:fd:90:7c:0a:01:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
        Validity
            Not Before: Jun 29 12:01:01 2025 GMT
            Not After : Jun 30 12:01:01 2025 GMT
        Subject: CN=3f450c5351ff823bf83a1cd7ed93bebeb5d32859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:0a:8b:ab:fa:f9:b8:17:a2:d8:84:46:85:
                    d2:80:dc:8b:96:df:a9:a0:a8:6f:f3:4e:5d:80:cc:
                    49:de:84:98:15:a6:a6:37:08:6a:b8:fd:c8:81:8d:
                    24:e9:c7:21:5f:05:42:ef:ca:37:df:e0:9f:1e:ba:
                    9b:3a:e2:fb:ce:46:1b:3a:0b:ca:e5:fe:f1:53:21:
                    56:09:f0:42:78:3b:e9:2c:65:37:b6:d8:ba:ae:65:
                    2c:fc:64:2c:96:49:b0:cf:ac:b8:90:d9:98:7b:28:
                    a3:78:34:57:9a:d9:c8:4d:73:b2:d8:c3:66:e0:f1:
                    c4:c2:57:58:05:80:7c:b6:b5:47:a8:6e:9a:ce:0b:
                    6d:2f:b4:73:c8:8f:13:f8:e6:cb:b0:b7:2c:5f:70:
                    d0:d4:23:41:d9:90:b0:77:82:59:87:4e:cd:b9:ba:
                    fa:1e:cf:2d:71:69:78:82:1d:ea:d5:9f:9c:b8:27:
                    79:40:fc:f7:3d:d7:82:57:57:b8:93:6d:72:d4:38:
                    9c:3c:63:73:34:de:e8:f6:ae:0a:cf:2a:f1:e8:10:
                    95:b8:8c:00:8b:51:3e:34:58:16:cc:37:51:49:1f:
                    00:79:00:b7:8c:b2:73:0f:08:dc:b2:af:4c:6e:44:
                    52:19:b5:68:12:75:1a:c8:7f:46:99:2b:53:28:c5:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:45:0C:53:51:FF:82:3B:F8:3A:1C:D7:ED:93:BE:BE:B5:D3:28:59
            X509v3 Authority Key Identifier:
                keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4a:ba:39:38:22:4d:de:1d:3c:36:9a:00:f5:40:1c:a2:7f:
         0f:30:c5:bd:bd:a5:49:ef:06:90:51:39:6c:82:6f:e7:06:f3:
         9d:5c:b9:91:95:fb:0a:6b:bb:ee:5b:35:44:f5:2c:42:56:36:
         47:89:b5:90:63:e8:c8:68:39:bf:68:42:f0:5a:4d:89:0a:4d:
         2f:98:9d:2d:c0:97:f4:eb:d1:4c:30:17:1c:cf:f0:8b:ef:12:
         6f:91:94:fe:be:e0:ee:cb:47:3b:23:ec:b7:10:e7:f9:34:6d:
         7c:b2:5a:5f:7c:5f:3f:d0:a9:46:37:d1:2f:06:b2:72:d2:2f:
         11:8d:c1:4f:e9:17:a6:5d:1f:35:15:21:8b:df:cc:ad:38:a0:
         8f:0d:fe:c4:a4:4a:e7:c9:9d:73:32:6e:bc:59:46:c5:cb:bd:
         1d:3d:bd:4b:e7:c4:c7:47:c6:26:7a:ea:3a:8c:f0:e1:b1:62:
         a3:ac:8c:87:64:7d:ec:1f:80:0a:d8:98:8d:0a:7b:35:40:8d:
         06:78:17:89:02:6d:46:17:e7:54:58:4c:c6:05:78:13:e7:8c:
         2e:a1:05:95:9b:68:13:8a:69:1a:7d:68:b6:e0:08:c4:91:5b:
         00:26:e6:ec:f5:bf:da:25:38:33:4a:3b:b9:60:19:11:b7:b0:
         6b:16:18:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7j+5p+sObaxeO/ZB8CgHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx
YmIyNTkwHhcNMjUwNjI5MTIwMTAxWhcNMjUwNjMwMTIwMTAxWjAzMTEwLwYDVQQD
EygzZjQ1MGM1MzUxZmY4MjNiZjgzYTFjZDdlZDkzYmViZWI1ZDMyODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYsKi6v6+bgXotiERoXSgNyLlt+p
oKhv805dgMxJ3oSYFaamNwhquP3IgY0k6cchXwVC78o33+CfHrqbOuL7zkYbOgvK
5f7xUyFWCfBCeDvpLGU3tti6rmUs/GQslkmwz6y4kNmYeyijeDRXmtnITXOy2MNm
4PHEwldYBYB8trVHqG6azgttL7RzyI8T+ObLsLcsX3DQ1CNB2ZCwd4JZh07Nubr6
Hs8tcWl4gh3q1Z+cuCd5QPz3PdeCV1e4k21y1DicPGNzNN7o9q4Kzyrx6BCVuIwA
i1E+NFgWzDdRSR8AeQC3jLJzDwjcsq9MbkRSGbVoEnUayH9GmStTKMX/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9FDFNR/4I7+Doc1+2Tvr610yhZMB8GA1UdIwQY
MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt
MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk
LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0q6OTgi
Td4dPDaaAPVAHKJ/DzDFvb2lSe8GkFE5bIJv5wbznVy5kZX7Cmu77ls1RPUsQlY2
R4m1kGPoyGg5v2hC8FpNiQpNL5idLcCX9OvRTDAXHM/wi+8Sb5GU/r7g7stHOyPs
txDn+TRtfLJaX3xfP9CpRjfRLwayctIvEY3BT+kXpl0fNRUhi9/MrTigjw3+xKRK
58mdczJuvFlGxcu9HT29S+fEx0fGJnrqOozw4bFio6yMh2R97B+ACtiYjQp7NUCN
BngXiQJtRhfnVFhMxgV4E+eMLqEFlZtoE4ppGn1otuAIxJFbACbm7PW/2iU4M0o7
uWAZEbewaxYYLQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:52 2025 by rpki-client