Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          n8qQYoGfdIAjgFYApS3myDPhm3zWYDUY/quYtdifKk0=
Subject key identifier:   2E:56:D5:D7:AE:37:5D:DD:5E:F5:84:20:5C:C2:7E:A5:6D:2E:42:9C
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       0197B6A1940A3910C64E1B3F3A2266802106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 13:02:11 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:11 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:11 +0000
Files and hashes:         1: GMzP4FK3BWd73BtB1rspDBtNJAI.roa (hash: RDWj3PKIvnG4Znaa0y/vyFyoiglGm7aIo1wXj8w5Ol8=)
                          2: TrApzRwO46U5cvWOoWRmtJkH50k.roa (hash: jn6OnmEsOzdilDL0UdqQEgfGfw7WKVGdZ+IBRjWfYTM=)
                          3: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (hash: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=)
                          4: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: jzrk4TDsbAQH8GAqJzEgNrtjyRrAqn6/xMNIUzaKNa4=)
                          5: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (hash: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:94:0a:39:10:c6:4e:1b:3f:3a:22:66:80:21:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Jun 28 13:02:11 2025 GMT
            Not After : Jun 29 13:02:11 2025 GMT
        Subject: CN=2e56d5d7ae375ddd5ef584205cc27ea56d2e429c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:15:8b:8a:46:5e:ae:c4:43:c2:7c:77:60:
                    9c:35:07:32:9f:26:ec:6d:a1:08:b9:c2:4c:97:b1:
                    5b:e5:c5:56:30:30:3b:52:34:77:b3:59:19:42:b9:
                    24:7c:d9:fd:13:dd:9a:f6:b0:13:b5:e8:70:88:63:
                    aa:c6:44:57:ca:13:d5:b9:eb:70:20:9d:e9:d2:b4:
                    86:3f:82:ca:f8:80:31:bc:a5:72:cf:8c:96:d7:72:
                    64:05:9c:b5:d0:6c:88:84:69:80:48:84:9a:1e:0a:
                    e5:a3:bf:86:fa:39:ec:74:95:c1:6f:86:a9:ad:26:
                    f4:9b:48:8c:5a:c8:c3:5a:82:51:6a:c1:0f:7b:dc:
                    e2:a7:72:49:17:dc:3c:19:dc:ed:e2:2c:b5:4a:a5:
                    dd:3d:70:e1:f9:7b:be:d4:49:2a:d8:c8:67:9e:fb:
                    b9:33:02:16:fa:82:7e:32:7b:aa:d1:6e:3a:ad:77:
                    d5:d5:79:cc:91:e9:61:c6:4b:5f:27:39:7c:db:75:
                    75:79:d0:36:09:03:fe:f9:da:4d:d9:75:64:d5:6a:
                    0b:9d:95:80:d0:93:47:81:2e:40:f1:0f:ed:ef:dc:
                    ce:35:aa:8e:72:10:6d:f1:13:ca:da:44:0b:2d:50:
                    6e:b6:2f:27:5b:ec:d0:c5:82:2a:93:5e:b2:be:21:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:D5:D7:AE:37:5D:DD:5E:F5:84:20:5C:C2:7E:A5:6D:2E:42:9C
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:38:d5:8c:5b:6b:67:5a:8e:37:0a:20:58:4d:b8:50:d6:bb:
         3a:b4:cb:da:1a:f2:08:3b:b5:72:44:99:fe:8c:fd:38:d9:40:
         26:ee:87:ea:9a:c9:d9:d6:39:1e:20:3e:97:78:19:83:b1:2b:
         89:c4:cb:af:d4:7a:5e:7a:a6:42:f2:57:2c:72:ea:11:fa:c5:
         06:f9:f9:04:9a:1e:0c:c9:53:b9:f9:de:ae:fe:5f:d0:e6:52:
         3c:37:0d:dc:ce:3d:59:d7:8e:cf:fd:ed:c1:0d:da:6c:58:0f:
         97:b3:03:04:61:aa:07:c8:2e:23:75:84:98:09:b0:a6:1e:e5:
         f2:5b:aa:c5:df:f2:97:ed:05:d9:54:2f:cf:b2:b4:3a:f8:8a:
         89:74:74:32:f8:49:28:2d:39:8c:3d:ea:37:7e:46:d6:31:22:
         4a:bb:c1:d3:94:c4:d9:09:ee:ca:67:78:83:44:b0:86:e4:2e:
         cc:e9:67:ff:dc:ad:e4:1f:fa:ca:c8:e1:f0:b3:62:aa:27:bb:
         54:04:9e:ca:e6:c8:fc:4b:f7:49:2b:96:cd:f9:23:17:a7:9e:
         98:97:27:73:e9:35:49:81:8c:bf:b1:ad:a2:cb:94:ac:f5:c1:
         02:c3:13:b2:0d:a7:e9:9a:78:bf:19:b0:a6:b5:5f:4c:47:ff:
         3c:6a:02:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZQKORDGThs/OiJmgCEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl
MGQxM2IwHhcNMjUwNjI4MTMwMjExWhcNMjUwNjI5MTMwMjExWjAzMTEwLwYDVQQD
EygyZTU2ZDVkN2FlMzc1ZGRkNWVmNTg0MjA1Y2MyN2VhNTZkMmU0MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLMVi4pGXq7EQ8J8d2CcNQcynybs
baEIucJMl7Fb5cVWMDA7UjR3s1kZQrkkfNn9E92a9rATtehwiGOqxkRXyhPVuetw
IJ3p0rSGP4LK+IAxvKVyz4yW13JkBZy10GyIhGmASISaHgrlo7+G+jnsdJXBb4ap
rSb0m0iMWsjDWoJRasEPe9zip3JJF9w8Gdzt4iy1SqXdPXDh+Xu+1Ekq2Mhnnvu5
MwIW+oJ+Mnuq0W46rXfV1XnMkelhxktfJzl823V1edA2CQP++dpN2XVk1WoLnZWA
0JNHgS5A8Q/t79zONaqOchBt8RPK2kQLLVButi8nW+zQxYIqk16yviEuNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5W1deuN13dXvWEIFzCfqVtLkKcMB8GA1UdIwQY
MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et
ZjNjMWE5YTExZDczLzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz
LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTjVjFtr
Z1qONwogWE24UNa7OrTL2hryCDu1ckSZ/oz9ONlAJu6H6prJ2dY5HiA+l3gZg7Er
icTLr9R6XnqmQvJXLHLqEfrFBvn5BJoeDMlTufnerv5f0OZSPDcN3M49WdeOz/3t
wQ3abFgPl7MDBGGqB8guI3WEmAmwph7l8luqxd/yl+0F2VQvz7K0OviKiXR0MvhJ
KC05jD3qN35G1jEiSrvB05TE2Qnuymd4g0SwhuQuzOln/9yt5B/6ysjh8LNiqie7
VASeyubI/Ev3SSuWzfkjF6eemJcnc+k1SYGMv7GtosuUrPXBAsMTsg2n6Zp4vxmw
prVfTEf/PGoCOw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:26 2025 by rpki-client