Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File:                     ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier:          WlyUYQnVr4hSABjMzk9dYz5+sUgrNMdtqSPu+wkn0ro=
Subject key identifier:   57:A8:CB:14:65:EE:F7:8A:E3:A5:23:62:76:66:75:03:D0:B7:76:03
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer:       /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial:       0197B9D9291A3DAC6F3DDD2DA07BBA159B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number:          15BF
Signing time:             Sun 29 Jun 2025 04:01:46 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:46 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:46 +0000
Files and hashes:         1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
                          2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: kZes+/vL2TtSNqMdMomULggDciek76kTIq9unCWPjWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d9:29:1a:3d:ac:6f:3d:dd:2d:a0:7b:ba:15:9b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
        Validity
            Not Before: Jun 29 04:01:46 2025 GMT
            Not After : Jun 30 04:01:46 2025 GMT
        Subject: CN=57a8cb1465eef78ae3a5236276667503d0b77603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:d6:0a:0c:23:06:ed:6a:d3:72:06:2a:89:
                    c3:c2:44:65:da:08:62:8d:cf:c3:91:48:e6:b4:59:
                    5a:da:8b:61:0b:0f:af:7b:ea:de:24:01:1d:a6:d2:
                    85:61:e8:5c:5a:35:9e:28:02:7f:0a:07:cd:e6:42:
                    4d:cb:31:ad:c1:bc:f8:c8:82:f6:a1:85:c0:1c:b3:
                    a2:d6:5a:67:dc:59:0e:41:f0:ab:f0:41:d5:1d:49:
                    7e:35:a3:c9:53:e3:64:f5:41:e5:65:aa:6d:db:28:
                    ca:d7:e6:4b:9d:51:fd:ff:d2:08:a0:dd:16:87:0f:
                    7e:47:86:57:f8:56:bf:e7:b4:96:89:59:5e:86:9a:
                    b9:05:2a:80:cb:93:2c:a7:be:93:e1:96:1b:4f:87:
                    7e:5b:9c:e4:f6:d4:da:61:48:c5:0b:7a:b9:95:ac:
                    6c:f1:00:8d:75:86:a1:50:7c:d3:4b:58:5d:3d:ac:
                    87:bf:a4:93:8b:2b:26:89:ea:4a:73:eb:43:b8:22:
                    b5:1d:09:c2:e1:2c:17:72:fa:1c:f2:79:03:34:45:
                    be:52:bb:0e:71:b6:fd:69:c8:8b:33:2c:ad:c8:4c:
                    83:3c:66:49:e9:58:a6:ee:ed:58:bd:20:51:e5:f8:
                    3b:90:f7:31:d8:b1:65:70:b8:a3:20:48:1c:d3:11:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:CB:14:65:EE:F7:8A:E3:A5:23:62:76:66:75:03:D0:B7:76:03
            X509v3 Authority Key Identifier:
                keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a9:34:f8:39:9a:80:30:2d:2c:a5:41:a9:d6:32:6f:65:fe:
         87:9a:95:92:e9:e6:77:15:35:e7:55:00:e1:b5:48:d4:cf:d1:
         aa:75:69:3a:48:9a:54:ad:09:34:51:20:b5:61:5b:47:41:79:
         02:fe:86:08:ed:8f:6b:5e:0b:2b:f5:b2:6f:a8:43:9a:57:26:
         7a:9f:ae:56:28:4b:82:96:1a:38:d5:9e:0f:0f:7d:7d:b9:9e:
         27:51:d9:3f:e7:3d:01:56:1d:d7:7e:5f:ca:02:23:79:c3:62:
         ab:e4:bc:ad:09:8a:0e:e1:b5:23:92:b4:7a:6b:7b:54:c1:b4:
         3c:7e:c6:07:f8:1c:b9:8a:2d:96:3a:1c:e1:dd:4a:40:40:df:
         68:8f:ae:d1:d1:5c:b2:54:ea:3b:1e:87:15:d4:7c:81:e0:b7:
         78:77:3e:1e:ce:23:d3:51:a9:8c:88:e8:d1:c6:67:aa:e5:3d:
         88:71:50:5e:f1:61:5c:5d:99:11:96:41:d8:62:d5:ed:4f:0e:
         0f:32:b3:d3:c2:c3:aa:31:d7:63:ed:ca:c4:b3:9a:f3:94:a3:
         20:8f:69:0b:c5:02:fb:10:ae:c3:6d:23:00:a2:ca:67:4a:c1:
         97:b3:2a:11:50:9c:43:f0:e6:41:a2:fc:5f:ad:bd:de:84:b6:
         75:6a:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:31 2025 by rpki-client