Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          hdV951W+hvRzPofBSohbUL6/xd0laJwEQjAlM6w4NBE=
Subject key identifier:   F2:D3:73:1C:5F:F1:F1:9A:8A:AE:31:86:EA:60:CB:6E:86:4C:19:5C
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       0197B77C58A107F74D1C492506367D151CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0C39
Signing time:             Sat 28 Jun 2025 17:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:09 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: Nixn/opJl/FBxk9QKWXjdlFmOoTXoK4Hx3ZjGx3NXz4=)
                          2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:58:a1:07:f7:4d:1c:49:25:06:36:7d:15:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Jun 28 17:01:09 2025 GMT
            Not After : Jun 29 17:01:09 2025 GMT
        Subject: CN=f2d3731c5ff1f19a8aae3186ea60cb6e864c195c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:ad:2e:5f:5d:65:eb:d1:4f:71:93:31:2c:
                    48:2c:0f:61:93:ca:33:e3:8b:3f:bd:0a:22:85:c9:
                    bf:38:0f:c9:b6:a5:e8:46:77:62:e8:7a:e5:f1:b4:
                    17:b5:3f:3f:af:1d:61:ef:4b:e0:f3:bb:1d:fe:0e:
                    db:45:fe:af:ef:80:e9:8c:39:36:f8:16:0f:c2:dc:
                    ef:62:ff:7c:a4:ad:79:b0:bf:c8:17:37:29:9c:37:
                    3c:54:7e:e0:9b:68:a3:a7:df:c6:a9:ca:7d:58:40:
                    ee:06:95:93:fd:2e:dc:81:39:b3:47:7b:e9:9c:ea:
                    55:fb:b6:7e:fd:eb:dc:87:84:2e:0b:57:6a:bb:34:
                    fa:9a:f0:b3:40:4d:b0:5a:eb:57:50:9f:1d:9a:00:
                    db:da:ce:cf:f8:c6:77:f2:2d:82:8c:46:48:20:9e:
                    09:c8:96:b3:69:65:ca:28:1d:f1:23:72:73:b4:35:
                    20:4a:b9:5e:67:66:94:59:ed:58:be:d1:22:b8:4e:
                    49:db:b7:e8:72:3b:11:b9:ac:9f:61:e6:87:e6:ac:
                    56:59:3c:2e:66:f2:7a:98:07:78:e6:d6:00:1b:ac:
                    52:e6:92:eb:b1:1a:e5:7c:81:54:71:c7:55:f2:17:
                    c0:b6:12:5c:9a:a1:10:20:42:fe:7d:1c:c2:f7:f3:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:73:1C:5F:F1:F1:9A:8A:AE:31:86:EA:60:CB:6E:86:4C:19:5C
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:36:c4:6f:d0:49:b3:56:ab:f2:9b:50:9a:ef:e1:97:9d:d3:
         f8:4e:ef:e3:64:b8:30:0f:66:7c:f5:df:e5:a2:6f:b8:24:b8:
         55:40:3d:ba:a9:a3:20:8c:ba:30:28:e0:c7:b9:91:54:f6:f0:
         dd:7c:88:28:af:d4:7f:02:e2:5e:20:f8:7c:18:ee:da:27:c8:
         24:8e:ac:1e:a4:a4:bb:d3:80:4b:a9:9d:d8:e4:3c:96:e3:b0:
         1f:aa:9d:b0:95:dd:95:b4:82:52:0f:5f:2a:da:af:08:02:7c:
         23:99:df:6b:d2:6e:d2:d4:ad:1a:43:84:b4:5e:1e:6b:82:2f:
         46:fb:67:4c:06:f4:70:59:0f:d7:6c:2f:47:e9:6a:d4:3b:b1:
         7b:48:27:4f:36:c3:78:86:fa:c8:09:84:d9:79:18:ce:2c:95:
         d0:a8:e4:05:f6:dc:83:47:1f:60:c6:da:22:a7:5c:62:25:23:
         4d:a5:8b:f5:2f:57:41:eb:d7:bd:31:a3:e4:94:9f:7e:9a:78:
         f0:c0:2e:96:e7:bf:c6:a6:dc:ba:c1:87:f8:f6:0d:9a:9e:05:
         7a:c7:2c:93:8c:cc:a5:d6:63:e2:89:5d:f0:81:b2:41:dd:52:
         17:1c:2b:25:74:ab:74:14:c9:f1:74:3b:f5:c4:f5:11:4e:42:
         79:5d:28:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFihB/dNHEklBjZ9FRyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDljY2VmZjRhNDhhM2RhYjAyNDA2N2UxNzYwZGJmNTg2
NTBmZGEwHhcNMjUwNjI4MTcwMTA5WhcNMjUwNjI5MTcwMTA5WjAzMTEwLwYDVQQD
EyhmMmQzNzMxYzVmZjFmMTlhOGFhZTMxODZlYTYwY2I2ZTg2NGMxOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOutLl9dZevRT3GTMSxILA9hk8oz
44s/vQoihcm/OA/JtqXoRndi6Hrl8bQXtT8/rx1h70vg87sd/g7bRf6v74DpjDk2
+BYPwtzvYv98pK15sL/IFzcpnDc8VH7gm2ijp9/Gqcp9WEDuBpWT/S7cgTmzR3vp
nOpV+7Z+/evch4QuC1dquzT6mvCzQE2wWutXUJ8dmgDb2s7P+MZ38i2CjEZIIJ4J
yJazaWXKKB3xI3JztDUgSrleZ2aUWe1YvtEiuE5J27focjsRuayfYeaH5qxWWTwu
ZvJ6mAd45tYAG6xS5pLrsRrlfIFUccdV8hfAthJcmqEQIEL+fRzC9/OIoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLTcxxf8fGaiq4xhupgy26GTBlcMB8GA1UdIwQY
MBaAFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUt
ZDJhZTJjMzM2MzI4LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUtZDJhZTJjMzM2MzI4
LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTbEb9BJ
s1ar8ptQmu/hl53T+E7v42S4MA9mfPXf5aJvuCS4VUA9uqmjIIy6MCjgx7mRVPbw
3XyIKK/UfwLiXiD4fBju2ifIJI6sHqSku9OAS6md2OQ8luOwH6qdsJXdlbSCUg9f
KtqvCAJ8I5nfa9Ju0tStGkOEtF4ea4IvRvtnTAb0cFkP12wvR+lq1Duxe0gnTzbD
eIb6yAmE2XkYziyV0KjkBfbcg0cfYMbaIqdcYiUjTaWL9S9XQevXvTGj5JSffpp4
8MAulue/xqbcusGH+PYNmp4Fescsk4zMpdZj4old8IGyQd1SFxwrJXSrdBTJ8XQ7
9cT1EU5CeV0oZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:48 2025 by rpki-client