Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          yLU/LDP3NE4fEEp30Zai4poZFCKGHwCqjelG79G+/ag=
Subject key identifier:   79:E7:37:EF:E5:23:01:2B:0B:D5:91:0D:46:38:81:4A:40:97:7E:5C
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       0197B7B303EBEDAFE1AFF34F18FDB595F336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0853
Signing time:             Sat 28 Jun 2025 18:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:51 +0000
Files and hashes:         1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: /0jPP3Lwpk4nLutCxuxoceCH2ct5S1+/V2qhTvr/0vI=)
                          3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
                          4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:03:eb:ed:af:e1:af:f3:4f:18:fd:b5:95:f3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Jun 28 18:00:51 2025 GMT
            Not After : Jun 29 18:00:51 2025 GMT
        Subject: CN=79e737efe523012b0bd5910d4638814a40977e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:d6:37:13:12:5f:e7:1f:4b:7c:4e:4b:b8:
                    77:6a:31:ba:cc:e6:e3:58:0a:29:2c:5c:22:bf:56:
                    98:20:35:0e:c2:69:19:1d:19:64:7b:19:a4:1e:f3:
                    22:d9:69:d5:a4:30:16:e8:7f:c2:3f:32:4d:0e:16:
                    9b:fb:db:69:f2:ba:89:5b:23:57:a8:ed:0e:b1:ae:
                    80:5c:49:0c:3d:d5:a8:c9:04:49:1b:b0:f5:de:51:
                    cc:31:4e:1d:78:49:46:f6:6c:fe:4b:d6:0b:13:04:
                    cc:b5:14:8a:df:89:11:8c:7b:a4:a6:be:bb:84:04:
                    28:cd:18:1c:c1:e5:26:41:19:21:70:a6:9a:f5:5e:
                    f7:d8:36:5f:04:2e:c6:7f:88:8d:52:07:e2:1b:bf:
                    1b:8d:2e:ec:af:67:be:97:30:35:d1:0a:11:66:58:
                    47:de:91:29:73:b7:87:1a:b4:83:90:ee:92:18:06:
                    b5:5c:a0:90:f4:4d:e8:24:cc:15:26:99:8e:14:e2:
                    6f:cb:d0:2e:e0:1e:b8:1c:cf:9b:38:c3:6c:40:b8:
                    7b:ed:64:52:28:62:27:53:28:69:01:b6:7b:53:fc:
                    ba:fc:6e:2d:8e:9d:60:f1:b6:b0:b6:8a:04:70:bb:
                    dc:68:74:9f:0b:25:b7:fa:5b:57:f9:88:6c:d3:05:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E7:37:EF:E5:23:01:2B:0B:D5:91:0D:46:38:81:4A:40:97:7E:5C
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:c3:32:31:b7:0f:dd:da:8e:87:3e:95:ab:aa:df:ae:b0:
         26:ad:32:e6:0d:0f:ca:2a:81:ee:9b:11:e8:24:5a:f2:88:5b:
         b1:53:32:76:89:3a:99:73:24:c2:39:4d:e5:00:7f:3f:10:57:
         04:61:fc:6a:bc:f5:b1:c1:2a:9d:b1:bd:40:a1:7d:c0:45:77:
         ba:ad:f6:41:31:5a:dd:34:a9:32:bb:d3:d8:62:86:39:ce:80:
         a8:b3:3b:18:a8:12:fc:a1:0b:28:ee:ea:fa:2c:62:a4:ba:ab:
         56:01:89:d8:c9:8f:48:94:9d:5e:2c:ba:4c:36:ca:a9:eb:53:
         af:bb:ba:14:b8:a5:38:78:30:69:ae:9d:a0:8f:f3:5c:a8:bd:
         04:a3:50:24:4f:c9:76:e2:66:16:50:ca:cf:f1:50:27:61:93:
         d3:42:78:94:a8:d9:71:63:f0:dd:24:2c:e2:cb:18:e4:4d:3a:
         da:2e:d3:12:69:3c:b6:0d:d9:70:a5:64:44:60:23:3b:1c:6a:
         4e:22:3a:22:51:29:8d:84:13:5e:3b:c5:f0:17:9f:f7:06:0f:
         64:15:d9:06:9c:a7:12:d0:42:16:78:5b:27:b5:cb:a2:7d:7e:
         8a:b6:bc:45:26:4e:2c:cb:92:41:9b:36:99:c7:8e:4c:16:d2:
         c8:48:65:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swPr7a/hr/NPGP21lfM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjUwNjI4MTgwMDUxWhcNMjUwNjI5MTgwMDUxWjAzMTEwLwYDVQQD
Eyg3OWU3MzdlZmU1MjMwMTJiMGJkNTkxMGQ0NjM4ODE0YTQwOTc3ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxrWNxMSX+cfS3xOS7h3ajG6zObj
WAopLFwiv1aYIDUOwmkZHRlkexmkHvMi2WnVpDAW6H/CPzJNDhab+9tp8rqJWyNX
qO0Osa6AXEkMPdWoyQRJG7D13lHMMU4deElG9mz+S9YLEwTMtRSK34kRjHukpr67
hAQozRgcweUmQRkhcKaa9V732DZfBC7Gf4iNUgfiG78bjS7sr2e+lzA10QoRZlhH
3pEpc7eHGrSDkO6SGAa1XKCQ9E3oJMwVJpmOFOJvy9Au4B64HM+bOMNsQLh77WRS
KGInUyhpAbZ7U/y6/G4tjp1g8bawtooEcLvcaHSfCyW3+ltX+Yhs0wWCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnnN+/lIwErC9WRDUY4gUpAl35cMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefrDMjG3
D93ajoc+lauq366wJq0y5g0PyiqB7psR6CRa8ohbsVMydok6mXMkwjlN5QB/PxBX
BGH8arz1scEqnbG9QKF9wEV3uq32QTFa3TSpMrvT2GKGOc6AqLM7GKgS/KELKO7q
+ixipLqrVgGJ2MmPSJSdXiy6TDbKqetTr7u6FLilOHgwaa6doI/zXKi9BKNQJE/J
duJmFlDKz/FQJ2GT00J4lKjZcWPw3SQs4ssY5E062i7TEmk8tg3ZcKVkRGAjOxxq
TiI6IlEpjYQTXjvF8Bef9wYPZBXZBpynEtBCFnhbJ7XLon1+ira8RSZOLMuSQZs2
mceOTBbSyEhlnw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:58 2025 by rpki-client