Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File:                     ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier:          ja4YtY72+LfhYoFPptbkNnoclzLZe7msyis65a6idZM=
Subject key identifier:   9D:C9:6E:B3:8A:A7:57:C1:03:A2:EF:B8:75:E2:CE:66:D6:09:1D:78
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer:       /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial:       0196C3146715D993E2CBB29210429F46AE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number:          0ADA
Signing time:             Mon 12 May 2025 06:00:16 +0000
Manifest this update:     Mon 12 May 2025 06:00:16 +0000
Manifest next update:     Tue 13 May 2025 06:00:16 +0000
Files and hashes:         1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: gg85iOCUT8Aknq3LwbfRkwXcnW2Ah3MM5LP0fPZRE6M=)
                          2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
                          3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:14:67:15:d9:93:e2:cb:b2:92:10:42:9f:46:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
        Validity
            Not Before: May 12 06:00:16 2025 GMT
            Not After : May 13 06:00:16 2025 GMT
        Subject: CN=9dc96eb38aa757c103a2efb875e2ce66d6091d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:38:d0:3a:e1:ad:d9:db:cf:2f:2c:c8:2f:
                    7a:c2:99:98:7f:b6:05:b6:73:68:26:83:fb:0e:3c:
                    90:8f:d3:0e:0c:62:a9:ff:b0:3e:07:66:c9:0c:b2:
                    91:7a:80:90:54:60:60:03:84:28:fb:a8:3c:e0:ab:
                    09:d0:16:1e:97:df:07:de:da:1f:ce:3c:2c:8f:c4:
                    c4:f8:63:c2:48:d8:d7:9a:2f:b5:cb:3b:f5:8d:fc:
                    c8:b0:41:f9:79:10:a6:e5:63:ec:d9:cf:5c:81:ae:
                    a9:b3:de:5e:29:50:77:e0:cd:d5:45:4b:c2:17:41:
                    79:9c:78:38:a7:62:e3:cb:7c:a7:c0:5e:10:44:89:
                    2e:e2:f1:26:ce:39:2d:f8:28:f0:45:c3:09:e4:57:
                    63:1c:87:16:7b:bf:d1:7e:0e:0f:ae:6b:71:59:46:
                    26:58:ce:69:e3:d9:64:6a:51:5a:e0:f0:dd:94:4f:
                    4e:71:fa:7d:10:0d:3b:18:51:f1:f3:dc:61:a5:34:
                    63:83:a0:fc:c7:f5:01:58:fa:4d:98:d4:81:88:3f:
                    39:89:1f:28:e5:9d:8b:df:7b:60:d7:e8:3a:74:73:
                    78:a0:9e:41:7c:2a:6a:fe:5a:9a:85:87:e1:77:38:
                    e3:a5:c5:e7:d1:2b:4f:60:ea:0a:00:cb:a0:43:e4:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:6E:B3:8A:A7:57:C1:03:A2:EF:B8:75:E2:CE:66:D6:09:1D:78
            X509v3 Authority Key Identifier:
                keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f1:70:4f:a2:ee:32:f2:ac:63:3b:43:25:23:02:2c:7d:7f:
         b2:86:7c:d3:14:73:8c:06:76:14:65:49:e6:be:db:cb:1a:45:
         db:a8:f0:f2:13:10:12:17:c7:ba:5c:1d:d4:20:88:4f:53:38:
         19:06:33:2c:4d:63:a2:a1:e9:d0:1d:1b:90:63:17:b6:37:be:
         a9:34:a8:7a:be:6e:97:0d:9d:1a:10:ab:92:94:90:63:3f:ca:
         1b:c0:61:7c:8c:6a:48:ae:0d:ed:0e:ff:11:b0:86:39:54:04:
         54:78:60:9b:f4:b2:dc:6b:f2:8c:85:00:3d:c9:87:db:7b:97:
         ab:57:16:f4:c8:a3:89:68:92:7f:7e:c6:78:79:0f:41:f7:59:
         c5:a2:a5:3a:7f:62:70:9c:b2:f2:d5:4c:2a:40:08:ab:ae:1b:
         b2:da:73:12:8f:17:4e:f4:42:05:81:e4:78:8c:e4:25:b9:d4:
         72:e6:94:74:ff:09:16:d6:38:3b:84:ff:c9:db:dc:74:2e:d1:
         6f:8b:4b:6c:4a:e0:9b:18:b0:67:e3:89:4e:e8:7a:9b:75:6f:
         1f:60:22:c3:17:7b:d5:d8:74:76:f2:86:d9:57:ee:f1:6b:59:
         74:ce:d2:19:19:0f:54:cb:c9:3f:02:1e:ec:c7:3d:be:8c:d0:
         37:ba:7e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDFGcV2ZPiy7KSEEKfRq4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzYyZDc4MzI4NDY1OWRjMDRlZWRhZjhiOGE2ZmU2ZTkz
MGJkMjcwHhcNMjUwNTEyMDYwMDE2WhcNMjUwNTEzMDYwMDE2WjAzMTEwLwYDVQQD
Eyg5ZGM5NmViMzhhYTc1N2MxMDNhMmVmYjg3NWUyY2U2NmQ2MDkxZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc440Drhrdnbzy8syC96wpmYf7YF
tnNoJoP7DjyQj9MODGKp/7A+B2bJDLKReoCQVGBgA4Qo+6g84KsJ0BYel98H3tof
zjwsj8TE+GPCSNjXmi+1yzv1jfzIsEH5eRCm5WPs2c9cga6ps95eKVB34M3VRUvC
F0F5nHg4p2Ljy3ynwF4QRIku4vEmzjkt+CjwRcMJ5FdjHIcWe7/Rfg4PrmtxWUYm
WM5p49lkalFa4PDdlE9Ocfp9EA07GFHx89xhpTRjg6D8x/UBWPpNmNSBiD85iR8o
5Z2L33tg1+g6dHN4oJ5BfCpq/lqahYfhdzjjpcXn0StPYOoKAMugQ+RkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3JbrOKp1fBA6LvuHXizmbWCR14MB8GA1UdIwQY
MBaAFHo2LXgyhGWdwE7tr4uKb+bpML0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQt
ODY1MDMxZmEwYmY3LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQtODY1MDMxZmEwYmY3
LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvFwT6Lu
MvKsYztDJSMCLH1/soZ80xRzjAZ2FGVJ5r7byxpF26jw8hMQEhfHulwd1CCIT1M4
GQYzLE1joqHp0B0bkGMXtje+qTSoer5ulw2dGhCrkpSQYz/KG8BhfIxqSK4N7Q7/
EbCGOVQEVHhgm/Sy3GvyjIUAPcmH23uXq1cW9MijiWiSf37GeHkPQfdZxaKlOn9i
cJyy8tVMKkAIq64bstpzEo8XTvRCBYHkeIzkJbnUcuaUdP8JFtY4O4T/ydvcdC7R
b4tLbErgmxiwZ+OJTuh6m3VvH2Aiwxd71dh0dvKG2Vfu8WtZdM7SGRkPVMvJPwIe
7Mc9vozQN7p+WQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:50:53 2025 by rpki-client