Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          Z1KtDcZ5luG0jJn9zq59CenSd6SbOkJ9qmBy6FtAZfE=
Subject key identifier:   AB:32:E6:74:01:4C:54:DD:F2:20:1E:73:F6:91:F2:16:A6:8A:C7:1C
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       0197B7EA83861639ADBAFE6E7051A5CA3D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          15D2
Signing time:             Sat 28 Jun 2025 19:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:28 +0000
Files and hashes:         1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: IyPjcv1LsMBS6ngA8dt1hunQsKkhFcdPfPUAOwp0DI8=)
                          2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
                          3: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
                          4: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
                          5: ibV6SVEOzYK-uCJ2IJP7n2XGoFE.roa (hash: 367ZTo8bU7FXxL+j4Dkgjzx4iuXuZnPhTMCWZPMb+Q4=)
                          6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
                          7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:83:86:16:39:ad:ba:fe:6e:70:51:a5:ca:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jun 28 19:01:28 2025 GMT
            Not After : Jun 29 19:01:28 2025 GMT
        Subject: CN=ab32e674014c54ddf2201e73f691f216a68ac71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:1c:56:1a:ea:cc:0f:ac:b5:4f:01:91:fa:
                    40:6d:b7:87:9e:36:fd:03:b0:33:b4:73:5e:b1:6b:
                    5b:6f:2b:24:79:04:1e:27:03:72:a6:bf:73:39:e3:
                    7f:80:7b:2d:82:08:cd:2a:3f:54:cd:51:02:9e:0e:
                    f9:cb:77:1a:e2:e4:ec:c1:f8:2e:d1:ca:06:13:7b:
                    cf:3c:74:c2:19:14:76:3c:c2:38:95:8c:d4:ef:40:
                    e8:b8:01:f0:81:ea:f1:bf:0b:b9:fd:ad:86:46:f1:
                    81:57:ae:4e:7a:de:fb:f4:90:c8:50:2a:eb:6f:af:
                    1c:30:e2:c1:60:69:64:64:ea:23:99:d3:43:9d:b6:
                    6a:ab:2d:f4:ca:9b:ec:7e:c8:34:81:83:af:9c:1a:
                    fc:c3:fe:03:a0:24:e2:f4:cc:f9:9e:39:73:70:1f:
                    90:b1:24:2d:73:fe:37:9c:48:26:b5:bd:0a:fe:06:
                    83:3f:b8:3b:47:ec:ca:7b:87:fd:1d:0b:0a:8e:19:
                    e3:d1:57:ab:ac:7f:72:23:da:9f:53:0c:00:cb:33:
                    9d:e8:15:2d:0f:a2:93:e1:d9:ed:1d:01:18:ed:3f:
                    7e:47:90:97:cc:03:9f:00:8c:7f:6a:17:59:ce:af:
                    70:ac:e5:d2:d7:f5:93:64:3a:7f:b9:1c:57:43:9b:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:E6:74:01:4C:54:DD:F2:20:1E:73:F6:91:F2:16:A6:8A:C7:1C
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:43:e9:b9:b5:d1:2c:3b:af:66:f8:21:5b:fb:4e:5d:cd:
         85:68:e6:c0:5e:ff:91:3e:5a:56:a1:02:68:27:e5:75:36:a1:
         5f:ab:b6:7a:79:c6:ae:21:01:c7:0b:4f:71:d9:82:c6:e3:1a:
         3c:7b:d0:43:a1:32:e6:15:e1:14:81:dd:31:c3:34:fd:53:21:
         9c:73:51:7c:12:f3:8e:82:8e:dd:4b:bd:78:48:54:67:94:c5:
         df:92:da:4e:fa:8e:ce:90:b8:a7:5d:b9:86:a9:75:2e:04:86:
         a5:6d:a9:ba:90:6d:97:d2:4c:1a:de:14:5f:da:4a:04:3e:07:
         13:15:5a:aa:af:86:2c:1a:98:c5:d0:9c:72:d2:62:25:3f:4a:
         79:cd:ea:0d:78:8b:7f:7c:ef:27:25:c7:54:c1:81:00:99:01:
         e0:12:6f:76:29:c7:d4:4d:ff:83:a7:95:c0:f4:73:2d:1d:e5:
         e3:2d:a3:a2:07:17:a2:a7:24:9d:50:1a:f9:cf:a5:78:64:c7:
         1a:a8:e4:14:16:a2:21:85:46:33:f4:00:d0:48:67:da:17:71:
         ac:bc:83:28:a3:28:a2:be:16:de:c2:3e:88:12:cd:d7:d4:99:
         af:85:6d:53:a3:6d:58:74:89:76:be:4c:fe:62:1a:4a:cb:c6:
         85:ab:e2:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oOGFjmtuv5ucFGlyj0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjUwNjI4MTkwMTI4WhcNMjUwNjI5MTkwMTI4WjAzMTEwLwYDVQQD
EyhhYjMyZTY3NDAxNGM1NGRkZjIyMDFlNzNmNjkxZjIxNmE2OGFjNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp4cVhrqzA+stU8BkfpAbbeHnjb9
A7AztHNesWtbbyskeQQeJwNypr9zOeN/gHstggjNKj9UzVECng75y3ca4uTswfgu
0coGE3vPPHTCGRR2PMI4lYzU70DouAHwgerxvwu5/a2GRvGBV65Oet779JDIUCrr
b68cMOLBYGlkZOojmdNDnbZqqy30ypvsfsg0gYOvnBr8w/4DoCTi9Mz5njlzcB+Q
sSQtc/43nEgmtb0K/gaDP7g7R+zKe4f9HQsKjhnj0VerrH9yI9qfUwwAyzOd6BUt
D6KT4dntHQEY7T9+R5CXzAOfAIx/ahdZzq9wrOXS1/WTZDp/uRxXQ5vEuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsy5nQBTFTd8iAec/aR8hamisccMB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuhD6bm1
0Sw7r2b4IVv7Tl3NhWjmwF7/kT5aVqECaCfldTahX6u2ennGriEBxwtPcdmCxuMa
PHvQQ6Ey5hXhFIHdMcM0/VMhnHNRfBLzjoKO3Uu9eEhUZ5TF35LaTvqOzpC4p125
hql1LgSGpW2pupBtl9JMGt4UX9pKBD4HExVaqq+GLBqYxdCcctJiJT9Kec3qDXiL
f3zvJyXHVMGBAJkB4BJvdinH1E3/g6eVwPRzLR3l4y2jogcXoqcknVAa+c+leGTH
GqjkFBaiIYVGM/QA0Ehn2hdxrLyDKKMoor4W3sI+iBLN19SZr4VtU6NtWHSJdr5M
/mIaSsvGhavixQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:57 2025 by rpki-client