Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
File:                     diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json)
Hash identifier:          msvvVUFUooxvaG+bLXji8Owqi6LDgPwuuIwJd5Vtspw=
Subject key identifier:   3E:23:35:00:D5:B7:22:C7:E3:9F:93:EC:10:3A:32:B1:80:F0:A5:19
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Certificate issuer:       /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial:       0197CCBAC69C76D9782B86227867327CA8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
Manifest number:          0A2B
Signing time:             Wed 02 Jul 2025 20:01:21 +0000
Manifest this update:     Wed 02 Jul 2025 20:01:21 +0000
Manifest next update:     Thu 03 Jul 2025 20:01:21 +0000
Files and hashes:         1: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: gqP+i5i9ZhZ/vTJeogk8Feqhh35iJyA0Y0d4eZDs/zE=)
                          2: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (hash: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:ba:c6:9c:76:d9:78:2b:86:22:78:67:32:7c:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
        Validity
            Not Before: Jul  2 20:01:21 2025 GMT
            Not After : Jul  3 20:01:21 2025 GMT
        Subject: CN=3e233500d5b722c7e39f93ec103a32b180f0a519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:8d:e3:48:4e:f8:50:9e:7b:2b:a0:65:39:
                    b5:64:16:8c:5e:ac:45:d7:7e:9d:10:b1:b5:b3:24:
                    03:bd:20:0d:7e:1f:f6:7e:b2:5f:63:b9:35:e8:8a:
                    0b:2d:fc:ae:a1:92:ac:73:d3:65:63:07:6b:3a:38:
                    93:70:46:7a:65:78:ab:4d:17:85:e0:c5:84:89:28:
                    a2:88:41:7b:98:9b:f5:fc:5a:f3:e0:79:56:74:9a:
                    cd:7d:bf:be:70:b9:ee:a4:19:af:ff:d7:27:2c:57:
                    4a:8f:04:ce:81:b3:29:df:93:0b:90:25:7c:fe:f0:
                    7c:92:a7:1d:cf:ef:f2:09:cc:12:0a:a9:0a:42:de:
                    e1:43:a0:9d:f1:d7:aa:dc:af:69:1f:94:b1:3f:f6:
                    30:8d:8d:88:3d:d1:3c:3a:57:5c:24:07:c8:04:e7:
                    fb:d6:5f:d1:de:d4:1a:f3:bd:ae:3d:89:9d:a9:86:
                    87:a1:56:4e:75:7a:40:8d:e7:f9:10:d4:3f:ba:19:
                    bf:5d:c5:28:ad:1e:00:bd:64:19:ae:45:29:a4:8d:
                    e9:51:8a:02:c1:54:5c:80:81:d6:b0:58:7a:b9:10:
                    ce:4e:42:cd:9d:87:30:b5:e7:d1:60:67:f4:43:a9:
                    1e:f9:75:32:0b:ea:cf:21:cb:9a:75:a2:19:3d:b0:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:35:00:D5:B7:22:C7:E3:9F:93:EC:10:3A:32:B1:80:F0:A5:19
            X509v3 Authority Key Identifier:
                keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:a7:44:11:1e:8d:2b:b6:04:fb:c7:1e:02:dd:68:2b:65:
         87:0b:bf:c0:4f:91:f6:cd:6d:1a:fd:ea:d4:1b:20:cc:9f:88:
         67:7c:3b:ec:b7:30:79:10:2b:e7:84:57:91:ee:41:ff:bb:9d:
         c2:7c:05:5b:47:48:19:22:65:8f:57:bb:1e:73:47:fa:01:ad:
         8d:44:22:4a:80:c4:f5:55:51:a9:08:ae:a3:c8:04:f1:f4:2e:
         c5:60:a8:0f:ea:47:5c:89:b2:01:a6:4c:c1:01:a5:3d:f0:25:
         a1:6d:30:5e:e5:63:eb:a9:fe:00:4e:4f:a1:3d:34:7c:5c:3a:
         70:27:78:b1:d7:fa:e7:3f:15:3e:d0:18:8f:85:f0:39:3f:27:
         85:29:60:5d:47:44:3e:52:b6:68:b1:82:04:b6:50:80:5f:14:
         4c:4d:7a:e1:92:ed:ad:43:35:a0:29:a6:48:1d:a0:33:3a:52:
         0a:db:0c:15:6c:0c:f3:cc:a1:af:b3:ba:ee:ed:96:99:99:8d:
         be:26:c9:95:9a:fb:98:76:30:81:d1:f1:02:31:2a:9b:3b:ab:
         bd:38:bd:69:ad:92:98:57:07:eb:49:aa:32:bf:ea:40:c4:dd:
         05:09:d6:44:e0:3d:53:d0:d1:0a:29:29:89:86:9d:9b:80:c5:
         c2:9f:81:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMusacdtl4K4YieGcyfKjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjIzOGEzM2M1NTBjYzVkZjAyNDRmM2ZjNmUzZGJkOTFl
NGMzOWUwHhcNMjUwNzAyMjAwMTIxWhcNMjUwNzAzMjAwMTIxWjAzMTEwLwYDVQQD
EygzZTIzMzUwMGQ1YjcyMmM3ZTM5ZjkzZWMxMDNhMzJiMTgwZjBhNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxKN40hO+FCeeyugZTm1ZBaMXqxF
136dELG1syQDvSANfh/2frJfY7k16IoLLfyuoZKsc9NlYwdrOjiTcEZ6ZXirTReF
4MWEiSiiiEF7mJv1/Frz4HlWdJrNfb++cLnupBmv/9cnLFdKjwTOgbMp35MLkCV8
/vB8kqcdz+/yCcwSCqkKQt7hQ6Cd8deq3K9pH5SxP/YwjY2IPdE8OldcJAfIBOf7
1l/R3tQa872uPYmdqYaHoVZOdXpAjef5ENQ/uhm/XcUorR4AvWQZrkUppI3pUYoC
wVRcgIHWsFh6uRDOTkLNnYcwtefRYGf0Q6ke+XUyC+rPIcuadaIZPbBEFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4jNQDVtyLH45+T7BA6MrGA8KUZMB8GA1UdIwQY
MBaAFHYiOKM8VQzF3wJE8/xuPb2R5MOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2Qt
MWIxZmM3OWQwNTUxLzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2QtMWIxZmM3OWQwNTUx
LzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKqnRBEe
jSu2BPvHHgLdaCtlhwu/wE+R9s1tGv3q1BsgzJ+IZ3w77LcweRAr54RXke5B/7ud
wnwFW0dIGSJlj1e7HnNH+gGtjUQiSoDE9VVRqQiuo8gE8fQuxWCoD+pHXImyAaZM
wQGlPfAloW0wXuVj66n+AE5PoT00fFw6cCd4sdf65z8VPtAYj4XwOT8nhSlgXUdE
PlK2aLGCBLZQgF8UTE164ZLtrUM1oCmmSB2gMzpSCtsMFWwM88yhr7O67u2WmZmN
vibJlZr7mHYwgdHxAjEqmzurvTi9aa2SmFcH60mqMr/qQMTdBQnWROA9U9DRCikp
iYadm4DFwp+BsA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:57:36 2025 by rpki-client