Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File:                     7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier:          i9fvEIw1qr/2dhtjn5FeoJdJPgHiBjIWG/DXM0zAZ9Q=
Subject key identifier:   75:8A:DD:4A:0A:C4:CD:1E:D7:6B:75:5D:6E:85:34:B1:C6:EE:D8:64
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer:       /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial:       0197B70F2C454094326130C5A6734AF826B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number:          12FA
Signing time:             Sat 28 Jun 2025 15:01:54 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:54 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:54 +0000
Files and hashes:         1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: aXLAIQq/U5gkHFilsmRCG4ywFETbdZzYyaiqn91KZ/8=)
                          2: aCQkmSTzEflyT6Hwko3Tmkp5YgM.roa (hash: cY38nbBebmnJBkoepfEX2AZ8X9a8BlXKUlC0CLvNiCU=)
                          3: ot-4ava-H_JGfkFEE8IMfoH7D2U.roa (hash: 066ShywS1FpC299llP3evwqIgvXEIG2I1bIowA8MHvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:2c:45:40:94:32:61:30:c5:a6:73:4a:f8:26:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
        Validity
            Not Before: Jun 28 15:01:54 2025 GMT
            Not After : Jun 29 15:01:54 2025 GMT
        Subject: CN=758add4a0ac4cd1ed76b755d6e8534b1c6eed864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:6b:4c:d0:2e:0f:26:3f:a0:53:78:9c:62:
                    4c:c0:27:94:9a:12:52:62:92:cf:a4:01:15:a8:ab:
                    18:68:5e:05:a3:f6:64:4c:d6:8f:ee:6a:9a:55:b1:
                    a4:95:ae:28:dc:75:5b:06:07:1a:7f:0f:9e:73:72:
                    bf:11:30:ae:6a:88:41:80:17:92:53:10:6c:0c:b3:
                    05:a3:ea:65:29:7e:6a:57:6f:12:0f:08:4f:f4:2f:
                    28:2b:97:94:31:03:8c:33:73:2e:f4:d2:9b:df:65:
                    41:19:f2:6f:c4:47:b8:b8:b2:6b:41:64:0f:e1:f3:
                    37:1c:44:94:ce:6b:b0:0c:b2:c0:bc:f9:f3:1e:13:
                    1f:49:9b:4c:c3:48:30:74:2a:9b:56:36:75:55:c6:
                    a8:db:3a:10:a3:ec:6d:96:f4:7f:4b:b3:52:eb:85:
                    b4:12:90:f5:cf:e0:d7:e0:e0:ed:13:a4:a5:70:3a:
                    fc:d5:4e:57:d2:39:46:a6:84:c8:43:b5:13:51:b4:
                    86:7e:d7:41:ea:73:7e:17:be:8c:7b:36:92:ec:20:
                    1c:2e:7b:d8:81:c3:38:f0:1d:ff:1e:e4:cf:61:d4:
                    17:9a:71:14:a4:95:14:da:49:84:8a:db:89:17:b2:
                    4e:f6:2b:f6:e5:64:04:29:f1:a9:47:5a:9d:94:cf:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8A:DD:4A:0A:C4:CD:1E:D7:6B:75:5D:6E:85:34:B1:C6:EE:D8:64
            X509v3 Authority Key Identifier:
                keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:52:72:7d:71:e0:dd:92:e6:0b:57:22:fa:89:ff:5e:ef:
         ca:d0:fe:87:6e:8a:63:ae:da:72:d9:df:dc:87:9b:28:a9:29:
         bf:0c:76:0e:d2:0b:ae:e9:96:54:9c:7a:68:db:01:89:16:e9:
         79:c4:05:92:6b:55:31:ce:07:f7:84:64:42:27:c7:c2:72:18:
         4b:67:51:73:aa:83:05:d3:1a:6f:90:54:c9:3a:0b:49:9f:5d:
         2b:37:56:ec:0e:4c:f6:ab:01:aa:2f:6f:ee:ee:93:9d:dc:eb:
         74:d8:b8:c5:47:09:3f:d6:9c:23:dd:0c:d1:f7:7d:08:9c:50:
         13:59:2b:08:7c:24:30:fc:5a:90:95:37:e7:2b:71:de:55:58:
         9e:19:94:6f:44:6a:a6:de:a3:d3:34:99:46:4b:94:b0:4a:85:
         5d:54:04:1f:4f:f4:e5:07:f9:14:06:b7:51:1b:8d:8f:00:28:
         bd:70:49:7f:35:69:23:d1:cb:88:0a:3d:17:c5:7d:00:c5:c3:
         ce:0b:78:d7:e5:11:3e:a4:67:5b:5f:41:23:62:40:57:8c:0b:
         9a:85:00:61:b5:32:56:86:e1:83:de:ff:af:56:19:cb:c7:61:
         b6:b1:e7:44:b9:83:83:c1:e4:9b:a2:3d:01:70:ae:7c:28:00:
         09:fa:f3:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyxFQJQyYTDFpnNK+Ca3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZWUyNWE3OGE4MTZiZGUzNjJjNDBjODZlMzliOTQ3ZDBl
ZTJmZjMwHhcNMjUwNjI4MTUwMTU0WhcNMjUwNjI5MTUwMTU0WjAzMTEwLwYDVQQD
Eyg3NThhZGQ0YTBhYzRjZDFlZDc2Yjc1NWQ2ZTg1MzRiMWM2ZWVkODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp49rTNAuDyY/oFN4nGJMwCeUmhJS
YpLPpAEVqKsYaF4Fo/ZkTNaP7mqaVbGkla4o3HVbBgcafw+ec3K/ETCuaohBgBeS
UxBsDLMFo+plKX5qV28SDwhP9C8oK5eUMQOMM3Mu9NKb32VBGfJvxEe4uLJrQWQP
4fM3HESUzmuwDLLAvPnzHhMfSZtMw0gwdCqbVjZ1Vcao2zoQo+xtlvR/S7NS64W0
EpD1z+DX4ODtE6SlcDr81U5X0jlGpoTIQ7UTUbSGftdB6nN+F76MezaS7CAcLnvY
gcM48B3/HuTPYdQXmnEUpJUU2kmEituJF7JO9iv25WQEKfGpR1qdlM9REQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWK3UoKxM0e12t1XW6FNLHG7thkMB8GA1UdIwQY
MBaAFO3uJaeKgWveNixAyG45uUfQ7i/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYt
NTQzNDFjZDEzYTlkLzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYtNTQzNDFjZDEzYTlk
LzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhhScn1x
4N2S5gtXIvqJ/17vytD+h26KY67actnf3IebKKkpvwx2DtILrumWVJx6aNsBiRbp
ecQFkmtVMc4H94RkQifHwnIYS2dRc6qDBdMab5BUyToLSZ9dKzdW7A5M9qsBqi9v
7u6TndzrdNi4xUcJP9acI90M0fd9CJxQE1krCHwkMPxakJU35ytx3lVYnhmUb0Rq
pt6j0zSZRkuUsEqFXVQEH0/05Qf5FAa3URuNjwAovXBJfzVpI9HLiAo9F8V9AMXD
zgt41+URPqRnW19BI2JAV4wLmoUAYbUyVobhg97/r1YZy8dhtrHnRLmDg8Hkm6I9
AXCufCgACfrz+g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:40 2025 by rpki-client