Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          YvOoDjJUOodTPFWdr28KfIvxsfPz5ulLncf+pRaB0Mk=
Subject key identifier:   1B:F8:26:EA:48:05:C4:E1:14:D2:0C:2C:40:29:29:F9:F7:E8:CC:F9
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       0197B96A9F1865C5ED15A4B364D184042EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          1550
Signing time:             Sun 29 Jun 2025 02:01:01 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:01 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:01 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: TAXuFJLyklwyweEqIYrO5nF4wICzSDZE1uv5rU9sYk4=)
                          2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:9f:18:65:c5:ed:15:a4:b3:64:d1:84:04:2e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Jun 29 02:01:01 2025 GMT
            Not After : Jun 30 02:01:01 2025 GMT
        Subject: CN=1bf826ea4805c4e114d20c2c402929f9f7e8ccf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e5:11:28:36:89:1e:da:93:c7:23:d0:82:d6:
                    70:1d:50:82:e8:71:f5:73:0f:94:af:52:60:79:13:
                    7c:29:1d:ec:24:b6:ee:44:9c:ab:aa:81:2a:1e:3c:
                    c7:19:98:d4:fb:70:d5:70:d9:4d:67:07:45:70:2f:
                    9f:e9:ad:e1:2d:43:9e:f6:84:1f:55:49:27:84:5c:
                    bd:be:46:12:b8:c4:0d:02:47:14:8e:ce:9a:c9:14:
                    14:dd:48:46:3e:a9:2f:9a:8f:d6:3d:1a:f1:52:09:
                    8a:71:b5:0a:c5:7f:37:30:f7:fb:3e:20:b9:7e:43:
                    b0:1c:12:fd:3a:bf:5d:17:ca:9d:16:89:bd:0a:30:
                    fd:f3:de:07:6b:66:0b:a7:e3:8b:a4:0a:92:f1:f9:
                    8b:18:18:b9:ac:b1:52:c7:f3:fd:d0:01:f6:78:c0:
                    3a:3a:c5:84:16:72:b3:57:45:c6:32:02:8a:4e:75:
                    03:33:d2:b0:07:73:c7:04:b5:73:46:93:d4:6d:38:
                    10:d2:67:5a:ea:b3:1d:75:07:64:a3:f9:75:e7:5c:
                    a5:e6:ee:e5:3d:f1:9b:30:00:dd:c3:80:a5:b9:2c:
                    6b:c8:a7:af:0c:af:5c:59:be:1f:81:0e:19:be:96:
                    8b:50:d8:e2:c0:6c:7d:64:72:e4:3f:e9:98:77:2b:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:26:EA:48:05:C4:E1:14:D2:0C:2C:40:29:29:F9:F7:E8:CC:F9
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:29:e8:04:b4:be:93:e7:a2:58:15:1c:6d:e6:7b:55:29:
         8d:2b:62:1b:d8:2b:31:be:62:f6:a7:98:c0:16:23:3d:4e:90:
         6a:cc:cc:31:5a:bf:f1:54:b8:a2:82:3b:10:b4:b8:2f:f5:e7:
         2c:f5:c6:8c:e5:b0:6d:bf:00:bf:2c:9e:a5:c3:0e:cf:30:e8:
         b1:26:40:73:59:2e:89:3d:eb:93:a3:07:45:3e:02:f8:78:ae:
         2b:65:85:94:31:70:02:76:cb:48:95:48:bd:38:13:3a:e5:6c:
         8f:30:f1:dd:b0:e7:a0:b6:f1:a5:4b:e5:98:eb:11:57:5d:14:
         0f:8b:aa:28:05:7c:4b:ee:61:ff:85:55:79:0c:fb:d7:e6:27:
         84:0d:cd:1f:f1:10:d6:ed:3d:c5:c3:15:c5:3f:de:1d:f8:5c:
         cf:d1:8d:9d:a1:4b:7b:0e:59:9e:e2:54:b4:75:09:a9:1b:cc:
         70:44:24:af:d1:99:1c:06:26:34:fb:41:65:37:a1:02:4f:84:
         ec:7a:54:d3:2d:42:3b:cc:20:b5:01:6d:c3:b5:4e:c5:5f:73:
         79:19:ce:e4:bb:38:9b:33:a9:88:96:3d:90:7a:af:01:ac:5c:
         f1:99:9d:51:35:53:57:2d:cb:e6:76:90:36:66:90:72:b2:cf:
         84:2a:d9:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ap8YZcXtFaSzZNGEBC6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1
Y2ZjMWUwHhcNMjUwNjI5MDIwMTAxWhcNMjUwNjMwMDIwMTAxWjAzMTEwLwYDVQQD
EygxYmY4MjZlYTQ4MDVjNGUxMTRkMjBjMmM0MDI5MjlmOWY3ZThjY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuURKDaJHtqTxyPQgtZwHVCC6HH1
cw+Ur1JgeRN8KR3sJLbuRJyrqoEqHjzHGZjU+3DVcNlNZwdFcC+f6a3hLUOe9oQf
VUknhFy9vkYSuMQNAkcUjs6ayRQU3UhGPqkvmo/WPRrxUgmKcbUKxX83MPf7PiC5
fkOwHBL9Or9dF8qdFom9CjD9894Ha2YLp+OLpAqS8fmLGBi5rLFSx/P90AH2eMA6
OsWEFnKzV0XGMgKKTnUDM9KwB3PHBLVzRpPUbTgQ0mda6rMddQdko/l151yl5u7l
PfGbMADdw4CluSxryKevDK9cWb4fgQ4ZvpaLUNjiwGx9ZHLkP+mYdytg7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv4JupIBcThFNIMLEApKfn36Mz5MB8GA1UdIwQY
MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt
YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw
LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKcp6AS0
vpPnolgVHG3me1UpjStiG9grMb5i9qeYwBYjPU6QaszMMVq/8VS4ooI7ELS4L/Xn
LPXGjOWwbb8AvyyepcMOzzDosSZAc1kuiT3rk6MHRT4C+HiuK2WFlDFwAnbLSJVI
vTgTOuVsjzDx3bDnoLbxpUvlmOsRV10UD4uqKAV8S+5h/4VVeQz71+YnhA3NH/EQ
1u09xcMVxT/eHfhcz9GNnaFLew5ZnuJUtHUJqRvMcEQkr9GZHAYmNPtBZTehAk+E
7HpU0y1CO8wgtQFtw7VOxV9zeRnO5Ls4mzOpiJY9kHqvAaxc8ZmdUTVTVy3L5naQ
NmaQcrLPhCrZ3A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:00:23 2025 by rpki-client