Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File:                     S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier:          sVWSFzddPq0cyl9CdiWUGdTQqke0lcpjpTGTLh54cWw=
Subject key identifier:   69:2E:F2:74:17:FF:78:36:61:32:81:C4:60:5A:0F:74:F4:AA:CC:AC
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer:       /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial:       0197B7EA8C4253839D34034DF310303FB1A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number:          128E
Signing time:             Sat 28 Jun 2025 19:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:31 +0000
Files and hashes:         1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: gdL096lJHKRJBjDysz27j/ixMZLj2XmFPUD3TcKxy6I=)
                          2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:8c:42:53:83:9d:34:03:4d:f3:10:30:3f:b1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
        Validity
            Not Before: Jun 28 19:01:31 2025 GMT
            Not After : Jun 29 19:01:31 2025 GMT
        Subject: CN=692ef27417ff7836613281c4605a0f74f4aaccac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:b6:b6:66:fb:b5:13:c2:c4:60:71:75:14:
                    4e:cf:9e:ba:a4:b7:1f:ae:80:df:17:11:87:e9:30:
                    9a:3a:7f:f6:01:c4:13:a6:47:a9:f7:99:3a:b4:dc:
                    ae:6f:9e:88:c1:87:25:3d:1d:3e:88:85:6b:3b:22:
                    28:a0:95:4f:56:44:ed:ab:eb:59:98:e9:de:26:f2:
                    6b:fd:e1:5e:04:27:04:40:2f:0f:db:91:5b:3a:cb:
                    35:d2:f1:e3:17:f8:c1:4c:d8:af:af:e9:21:e4:5f:
                    8f:84:c7:aa:8f:7c:4f:a7:83:80:94:a8:fe:49:e2:
                    c6:0e:f7:87:1c:4c:91:52:ed:e6:ac:d8:e4:21:48:
                    8a:dd:13:73:f5:54:4b:bd:80:82:ac:16:72:52:05:
                    52:55:4a:bd:1b:e7:67:23:8f:e1:ca:ca:b9:64:85:
                    f8:c0:97:a2:cb:a4:80:c9:2f:9a:f0:f0:d9:5c:9c:
                    05:51:9d:18:18:8c:09:fc:5e:22:07:d9:dd:76:dd:
                    05:d7:07:fd:0f:07:6c:bc:0a:6b:fb:31:97:e7:8c:
                    e3:81:d6:71:5b:e4:e4:c3:d8:06:cd:06:b2:10:36:
                    3d:8d:49:d1:78:ec:ed:33:8d:73:08:86:0f:b5:eb:
                    82:39:2d:d5:b4:c2:88:5c:97:d2:ba:fc:d2:51:75:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2E:F2:74:17:FF:78:36:61:32:81:C4:60:5A:0F:74:F4:AA:CC:AC
            X509v3 Authority Key Identifier:
                keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:59:da:aa:24:a7:ff:64:fb:d6:f8:24:f1:b1:8b:28:6d:80:
         19:26:ce:fe:16:1b:0d:79:f1:97:33:4e:37:98:f5:d9:6b:9d:
         d1:5b:11:f9:40:de:8d:50:ac:ba:c7:e9:35:cd:9f:ab:d2:1c:
         5b:52:a0:33:fd:15:45:51:eb:2c:08:34:7c:41:95:89:9b:bb:
         07:04:cf:71:16:04:af:1d:cb:01:13:74:1d:35:18:fb:45:76:
         d1:a4:4e:29:e5:00:0b:4a:df:55:a6:9b:e5:5f:68:6f:83:ac:
         fe:35:57:0b:ea:76:ea:cb:8f:f4:02:01:04:8d:10:11:61:ff:
         1f:94:06:f7:0b:f9:a8:ee:be:40:93:a2:46:d4:74:af:a6:5a:
         0c:3e:8c:e5:10:58:a4:26:49:8b:be:90:de:b1:36:54:a8:1a:
         ca:ba:e0:0f:be:a1:19:b3:ee:05:0f:17:af:e7:25:82:18:c9:
         ce:fc:04:00:db:fe:f8:2a:3a:5d:15:9f:59:6b:02:12:5d:d2:
         aa:da:af:81:e6:51:c0:58:c5:8f:2d:a1:db:49:53:e0:38:2b:
         f0:2b:5d:97:06:00:61:db:05:30:3a:72:47:22:98:53:08:2f:
         cc:ec:10:2b:f1:b4:52:d0:5b:c4:5b:01:e6:54:d9:20:0d:48:
         ab:93:3a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oxCU4OdNANN8xAwP7GpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTEyOThhMjE1ZTVlNGI3ZDFlMDVhODVmYmM1OTFjMzg5
ZjlkZGQwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
Eyg2OTJlZjI3NDE3ZmY3ODM2NjEzMjgxYzQ2MDVhMGY3NGY0YWFjY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthC2tmb7tRPCxGBxdRROz566pLcf
roDfFxGH6TCaOn/2AcQTpkep95k6tNyub56IwYclPR0+iIVrOyIooJVPVkTtq+tZ
mOneJvJr/eFeBCcEQC8P25FbOss10vHjF/jBTNivr+kh5F+PhMeqj3xPp4OAlKj+
SeLGDveHHEyRUu3mrNjkIUiK3RNz9VRLvYCCrBZyUgVSVUq9G+dnI4/hysq5ZIX4
wJeiy6SAyS+a8PDZXJwFUZ0YGIwJ/F4iB9nddt0F1wf9DwdsvApr+zGX54zjgdZx
W+Tkw9gGzQayEDY9jUnReOztM41zCIYPteuCOS3VtMKIXJfSuvzSUXVkTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGku8nQX/3g2YTKBxGBaD3T0qsysMB8GA1UdIwQY
MBaAFEvhKYohXl5LfR4FqF+8WRw4n53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQt
YWFkNjE2MzlkOWQ2LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQtYWFkNjE2MzlkOWQ2
LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVnaqiSn
/2T71vgk8bGLKG2AGSbO/hYbDXnxlzNON5j12Wud0VsR+UDejVCsusfpNc2fq9Ic
W1KgM/0VRVHrLAg0fEGViZu7BwTPcRYErx3LARN0HTUY+0V20aROKeUAC0rfVaab
5V9ob4Os/jVXC+p26suP9AIBBI0QEWH/H5QG9wv5qO6+QJOiRtR0r6ZaDD6M5RBY
pCZJi76Q3rE2VKgayrrgD76hGbPuBQ8Xr+clghjJzvwEANv++Co6XRWfWWsCEl3S
qtqvgeZRwFjFjy2h20lT4Dgr8CtdlwYAYdsFMDpyRyKYUwgvzOwQK/G0UtBbxFsB
5lTZIA1Iq5M6FQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:53 2025 by rpki-client