Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File:                     1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier:          wvL+vWBHTMebCiWc1GhLeAj/u34scnyAe5XTFEEmDXo=
Subject key identifier:   4E:8E:28:B5:D9:BF:76:8E:BE:09:6B:01:35:C5:02:7F:C2:58:9E:F8
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer:       /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial:       0197B6A21B77D903300530110E2534F6E382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number:          0E4E
Signing time:             Sat 28 Jun 2025 13:02:46 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:46 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:46 +0000
Files and hashes:         1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: rhdF3sfooI16+4vXHjGj8djO9zPtDup0ZtmMCZgvptM=)
                          2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:1b:77:d9:03:30:05:30:11:0e:25:34:f6:e3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
        Validity
            Not Before: Jun 28 13:02:46 2025 GMT
            Not After : Jun 29 13:02:46 2025 GMT
        Subject: CN=4e8e28b5d9bf768ebe096b0135c5027fc2589ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:94:46:45:cb:a3:42:ca:1b:9b:8a:0d:25:
                    30:ea:9a:8a:ac:61:e4:d0:c5:5e:56:3f:3a:75:5c:
                    1c:d1:2a:59:55:4e:8f:0e:cd:f4:85:46:96:03:30:
                    8e:6d:c8:10:28:c9:79:84:4f:76:9a:1a:c6:4e:13:
                    19:26:dc:cb:42:fc:86:88:7a:ba:a3:1a:ad:5d:86:
                    67:ec:ba:14:d8:2b:b4:07:c8:31:b2:2a:a4:d3:98:
                    ba:cd:43:13:93:9e:6c:d9:57:58:49:38:6b:a2:aa:
                    7c:9b:da:f2:af:92:dd:7f:28:42:8a:2a:ee:da:50:
                    b0:27:d8:85:60:98:6d:80:0e:a3:7c:db:64:ad:53:
                    b5:89:f9:26:04:5b:4d:cd:19:95:a9:05:fe:58:3a:
                    f6:2d:60:d4:8e:3f:13:af:c1:f0:25:ce:45:8c:6a:
                    27:41:05:94:25:70:90:ed:8f:68:3d:8d:0d:e8:4c:
                    90:16:49:ca:a5:4a:fc:0f:9d:a2:fb:2e:ed:76:2b:
                    d4:5e:90:68:72:6d:77:9b:eb:38:d6:18:49:a8:e1:
                    02:89:32:c5:05:a7:6e:dd:be:c0:a4:dc:8c:58:a2:
                    30:26:86:71:74:61:d9:ed:c5:19:03:f0:06:91:f9:
                    c5:8b:a4:e9:08:02:98:a1:52:6d:0b:66:72:85:03:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:28:B5:D9:BF:76:8E:BE:09:6B:01:35:C5:02:7F:C2:58:9E:F8
            X509v3 Authority Key Identifier:
                keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:7f:f3:b9:5d:1b:fd:f3:73:69:34:f7:d8:79:28:03:2e:
         17:59:ee:9d:3d:f5:a8:d3:66:f9:9f:51:e5:2c:d6:1c:9a:2d:
         8a:1d:b7:ef:1f:5d:ad:7b:2e:bb:36:72:80:d7:58:31:6e:bb:
         c5:13:ba:70:ba:c4:bf:ce:1f:fd:17:72:a1:e0:59:19:f2:81:
         c3:c9:7b:60:0d:72:b8:bd:66:65:06:2d:67:a7:da:73:76:a6:
         da:dc:33:9d:f4:ac:92:95:23:1b:28:16:f2:e0:e6:fb:41:82:
         ec:4d:2a:25:bc:e1:db:19:a9:79:79:dd:a3:7f:29:e6:ae:71:
         28:97:2d:5e:19:f1:28:05:29:0a:8f:98:aa:8c:42:77:37:98:
         41:f9:b8:ed:30:87:e7:4b:77:be:64:25:24:72:c1:68:2e:12:
         33:4d:6e:1c:aa:d7:f5:fd:fc:fb:a8:0b:f3:8b:54:e3:48:3e:
         d7:65:98:b5:8c:af:f7:21:bd:ac:df:43:80:9a:62:f2:1a:cd:
         a4:c8:97:63:39:51:cd:b0:0d:41:3b:fa:68:9d:17:5d:4e:8c:
         7d:39:c4:3f:5a:c8:b3:0a:c2:f5:1d:b5:8a:e3:f5:c6:c3:29:
         7b:2a:4f:bf:21:2e:57:00:0f:85:49:49:e6:11:0b:c4:27:6f:
         99:10:df:e9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe2oht32QMwBTARDiU09uOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1
ZjZjZTAwHhcNMjUwNjI4MTMwMjQ2WhcNMjUwNjI5MTMwMjQ2WjAzMTEwLwYDVQQD
Eyg0ZThlMjhiNWQ5YmY3NjhlYmUwOTZiMDEzNWM1MDI3ZmMyNTg5ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K6URkXLo0LKG5uKDSUw6pqKrGHk
0MVeVj86dVwc0SpZVU6PDs30hUaWAzCObcgQKMl5hE92mhrGThMZJtzLQvyGiHq6
oxqtXYZn7LoU2Cu0B8gxsiqk05i6zUMTk55s2VdYSThroqp8m9ryr5LdfyhCiiru
2lCwJ9iFYJhtgA6jfNtkrVO1ifkmBFtNzRmVqQX+WDr2LWDUjj8Tr8HwJc5FjGon
QQWUJXCQ7Y9oPY0N6EyQFknKpUr8D52i+y7tdivUXpBocm13m+s41hhJqOECiTLF
Badu3b7ApNyMWKIwJoZxdGHZ7cUZA/AGkfnFi6TpCAKYoVJtC2ZyhQOlFwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE6OKLXZv3aOvglrATXFAn/CWJ74MB8GA1UdIwQY
MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3
LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1
YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzp/
87ldG/3zc2k099h5KAMuF1nunT31qNNm+Z9R5SzWHJotih237x9drXsuuzZygNdY
MW67xRO6cLrEv84f/RdyoeBZGfKBw8l7YA1yuL1mZQYtZ6fac3am2twznfSskpUj
GygW8uDm+0GC7E0qJbzh2xmpeXndo38p5q5xKJctXhnxKAUpCo+YqoxCdzeYQfm4
7TCH50t3vmQlJHLBaC4SM01uHKrX9f38+6gL84tU40g+12WYtYyv9yG9rN9DgJpi
8hrNpMiXYzlRzbANQTv6aJ0XXU6MfTnEP1rIswrC9R21iuP1xsMpeypPvyEuVwAP
hUlJ5hELxCdvmRDf6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:54 2025 by rpki-client