Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File:                     95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier:          pkVZUgttifbONh8GWf00wPdNLWyv6VW4lFhJON9uXRs=
Subject key identifier:   EA:6B:C7:EF:AC:6B:1D:A4:79:6F:CB:8A:3F:DF:A1:0D:A1:BC:67:41
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer:       /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial:       0196C193D0E9926E61AC84E8D7916C77E58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number:          06E1
Signing time:             Sun 11 May 2025 23:00:11 +0000
Manifest this update:     Sun 11 May 2025 23:00:11 +0000
Manifest next update:     Mon 12 May 2025 23:00:11 +0000
Files and hashes:         1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: X6GShK0EV1Ru9Jd54Lk83mmRY76SJqPZcv7iG5IaAyw=)
                          2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:93:d0:e9:92:6e:61:ac:84:e8:d7:91:6c:77:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
        Validity
            Not Before: May 11 23:00:11 2025 GMT
            Not After : May 12 23:00:11 2025 GMT
        Subject: CN=ea6bc7efac6b1da4796fcb8a3fdfa10da1bc6741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:91:96:27:13:e4:39:00:6a:83:fc:41:31:
                    83:60:bf:6b:a9:e8:7c:c1:04:db:59:59:57:b9:29:
                    ca:03:8b:42:b3:43:a7:64:2c:a2:ac:de:34:8f:cd:
                    e0:bc:c2:cc:f8:54:40:46:b3:91:48:6a:76:31:91:
                    4c:b6:90:f9:01:66:db:e5:cf:7f:d3:a3:66:c2:67:
                    c1:67:5c:2f:10:44:30:13:99:e9:37:02:f1:44:0e:
                    9f:31:71:44:f8:b3:11:bf:c0:f4:fc:a1:75:a4:d1:
                    62:db:10:b4:a2:a8:f5:fa:63:68:bc:4d:a1:30:d2:
                    6b:1a:e4:62:96:4d:cf:59:09:0a:c3:ea:89:b8:a5:
                    4b:37:58:98:98:1b:38:aa:42:72:c3:b3:c2:f8:d9:
                    ec:92:20:2e:e8:64:f2:84:a1:b4:ee:55:98:98:2a:
                    19:b2:60:d0:b3:48:d2:0d:1b:9a:5e:97:ae:4c:20:
                    12:84:58:af:1b:b2:06:ad:e7:f5:67:eb:e9:83:b5:
                    1c:e0:84:ef:79:ca:ad:d7:58:d0:28:be:80:92:71:
                    21:63:30:b8:c1:3d:2e:86:85:38:b3:21:7a:e7:4b:
                    7f:1e:a4:47:7b:ca:46:b2:93:75:d7:6b:3e:09:4b:
                    d7:34:ad:99:74:24:d1:16:15:b6:76:42:68:12:87:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6B:C7:EF:AC:6B:1D:A4:79:6F:CB:8A:3F:DF:A1:0D:A1:BC:67:41
            X509v3 Authority Key Identifier:
                keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7f:7e:77:de:de:ed:4a:4a:c0:12:ae:1a:46:14:8e:af:fb:
         1a:46:5c:6f:0e:76:b4:5f:51:4d:7a:1c:f4:7e:f9:41:df:52:
         6f:ee:70:32:c5:e5:40:8d:d3:07:f3:a3:21:b2:08:36:bc:d8:
         94:10:5e:1a:aa:de:43:6b:65:70:15:34:b9:29:3f:fc:e7:a4:
         aa:80:d9:73:03:e9:e7:10:3d:3d:e6:62:20:d7:61:fc:3e:91:
         cc:11:51:ea:b7:55:db:21:85:a9:bf:27:d2:14:a8:de:4c:6f:
         30:16:fb:24:74:92:5a:8b:4a:37:3f:ed:b1:69:69:50:73:c8:
         32:be:60:47:0f:8b:2a:fd:af:73:a0:f7:6d:bb:02:ac:53:e2:
         7b:c0:66:cf:d2:2e:3f:3d:0c:81:8e:e6:23:40:fe:fa:b8:1e:
         7e:a8:54:c4:37:47:e8:fb:12:31:90:e8:7b:90:3d:ee:eb:31:
         53:b0:05:e4:e0:32:5c:6e:4b:65:b6:02:b4:f6:14:4e:44:15:
         d0:1d:92:a0:b3:5e:93:67:49:4c:d4:9d:82:e0:b5:25:ef:2b:
         0e:bd:b2:24:95:2e:1d:df:76:e8:da:8c:c3:38:c8:31:d9:a1:
         cc:3c:42:0c:25:19:a5:43:1f:6a:6c:1a:81:c2:e4:dd:b3:b6:
         e0:7c:0b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBk9Dpkm5hrITo15Fsd+WMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjUwNTExMjMwMDExWhcNMjUwNTEyMjMwMDExWjAzMTEwLwYDVQQD
EyhlYTZiYzdlZmFjNmIxZGE0Nzk2ZmNiOGEzZmRmYTEwZGExYmM2NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW2RlicT5DkAaoP8QTGDYL9rqeh8
wQTbWVlXuSnKA4tCs0OnZCyirN40j83gvMLM+FRARrORSGp2MZFMtpD5AWbb5c9/
06NmwmfBZ1wvEEQwE5npNwLxRA6fMXFE+LMRv8D0/KF1pNFi2xC0oqj1+mNovE2h
MNJrGuRilk3PWQkKw+qJuKVLN1iYmBs4qkJyw7PC+NnskiAu6GTyhKG07lWYmCoZ
smDQs0jSDRuaXpeuTCAShFivG7IGref1Z+vpg7Uc4ITvecqt11jQKL6AknEhYzC4
wT0uhoU4syF650t/HqRHe8pGspN112s+CUvXNK2ZdCTRFhW2dkJoEoeScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOprx++sax2keW/Lij/foQ2hvGdBMB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp39+d97e
7UpKwBKuGkYUjq/7GkZcbw52tF9RTXoc9H75Qd9Sb+5wMsXlQI3TB/OjIbIINrzY
lBBeGqreQ2tlcBU0uSk//OekqoDZcwPp5xA9PeZiINdh/D6RzBFR6rdV2yGFqb8n
0hSo3kxvMBb7JHSSWotKNz/tsWlpUHPIMr5gRw+LKv2vc6D3bbsCrFPie8Bmz9Iu
Pz0MgY7mI0D++rgefqhUxDdH6PsSMZDoe5A97usxU7AF5OAyXG5LZbYCtPYUTkQV
0B2SoLNek2dJTNSdguC1Je8rDr2yJJUuHd926NqMwzjIMdmhzDxCDCUZpUMfamwa
gcLk3bO24HwL7w==
-----END CERTIFICATE-----
Generated at Mon May 12 07:43:49 2025 by rpki-client