Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
File:                     eN7biYi8i7Gl-eVfQXJrZURsJew.mft (raw, json)
Hash identifier:          +g3SHyzXA8yZCuBMPYjgZw2fxKjf/eWODJ/ytsvvusE=
Subject key identifier:   21:84:62:19:24:68:10:CB:CB:35:91:96:DD:FA:FE:54:11:C4:6B:7F
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Certificate issuer:       /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial:       0197CACC066364C8B815DC3A4DA93F90CEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
Manifest number:          0D39
Signing time:             Wed 02 Jul 2025 11:00:57 +0000
Manifest this update:     Wed 02 Jul 2025 11:00:57 +0000
Manifest next update:     Thu 03 Jul 2025 11:00:57 +0000
Files and hashes:         1: 4Fu6FN-8k4OplfwUDllrEVsayHs.roa (hash: qUKP8ZgE6fag+umLTQiKLSLQSA6JYp73xHBNizQefag=)
                          2: eN7biYi8i7Gl-eVfQXJrZURsJew.crl (hash: KHHaa4MpqMLyLGILsP62zz790kD+3LEBO0vzsN2ZJnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:cc:06:63:64:c8:b8:15:dc:3a:4d:a9:3f:90:ce:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
        Validity
            Not Before: Jul  2 11:00:57 2025 GMT
            Not After : Jul  3 11:00:57 2025 GMT
        Subject: CN=21846219246810cbcb359196ddfafe5411c46b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:04:dc:b1:ff:b0:41:85:13:11:12:8a:d5:
                    12:d5:fe:ab:c0:b7:a6:13:09:2f:af:06:08:ce:15:
                    fd:96:c0:47:42:d1:1d:bb:2b:e3:cb:cd:ef:61:28:
                    5c:68:76:d6:55:b8:a0:07:c3:55:7d:0b:35:30:55:
                    c5:3d:28:48:f2:ed:23:b9:2b:4d:94:f4:9b:ec:a7:
                    e0:7a:93:45:0d:b4:f4:22:e3:aa:c7:49:eb:b1:08:
                    c9:66:a8:63:16:c9:22:69:17:ba:e8:35:2f:d0:42:
                    74:c7:b5:c3:1f:20:c7:19:c9:22:73:52:7b:1b:eb:
                    fb:68:6c:37:80:23:9a:1a:2b:50:78:b1:01:2e:a4:
                    cb:b3:ce:e1:60:8e:25:7d:68:23:13:64:87:f1:6a:
                    3f:76:0a:bf:5a:ac:64:ef:cc:a9:71:03:ba:78:99:
                    b9:34:92:a9:d5:c2:83:1d:4c:c7:2f:13:d3:25:7e:
                    a4:d0:65:36:2f:81:c2:08:8f:3b:b0:bc:2f:0f:b4:
                    75:6e:16:77:37:11:2f:39:52:50:34:17:67:62:24:
                    d7:fe:2f:3e:5f:a1:cb:1c:d1:bf:ce:b6:13:cb:71:
                    4f:95:cb:2b:94:09:65:22:c8:0e:d9:23:48:fd:54:
                    12:93:fd:86:d1:b6:8c:0f:ca:93:e1:88:fa:d9:27:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:62:19:24:68:10:CB:CB:35:91:96:DD:FA:FE:54:11:C4:6B:7F
            X509v3 Authority Key Identifier:
                keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8b:bd:d1:07:36:6b:cb:33:15:56:44:94:87:94:c1:65:c2:
         c5:5c:bc:c7:6e:d2:b1:74:4b:6e:be:12:74:4e:a6:51:d1:13:
         fe:1b:b2:27:05:2c:4e:19:4e:dd:e2:4b:f4:6c:57:5c:2c:72:
         ef:0e:29:b6:e4:96:9e:d1:b2:d8:4b:e4:38:b4:76:88:46:5f:
         2e:8c:84:e4:e4:61:12:bf:f7:47:c9:81:a5:63:0e:de:9d:53:
         7f:47:3d:9c:6b:38:ec:19:cf:10:a7:2d:c0:1a:df:c9:1b:4d:
         b0:58:69:e5:fa:0c:a3:d4:f9:13:ac:63:55:ed:91:95:bf:7f:
         76:bd:23:49:d6:27:a9:82:d2:f2:50:a7:46:a7:e5:93:6d:a1:
         a7:ff:9b:61:f0:88:04:65:7d:87:37:6e:d4:65:08:ae:7a:c1:
         2b:ef:d0:b5:3a:c7:00:90:c0:9e:a2:23:36:e8:3e:53:2c:f2:
         5c:80:3a:c9:10:16:ed:96:a4:ee:81:79:a4:e3:b7:32:7d:4a:
         9f:dc:52:84:dd:1e:94:f5:aa:88:a2:40:61:e7:e3:84:c0:74:
         ea:10:87:32:8f:70:b3:02:23:13:e0:44:4a:16:6b:41:13:4e:
         91:6c:c1:cf:94:65:97:68:15:f5:5a:80:f1:5d:8a:f0:de:e2:
         ea:1e:1b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKzAZjZMi4Fdw6Tak/kM7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZGVkYjg5ODhiYzhiYjFhNWY5ZTU1ZjQxNzI2YjY1NDQ2
YzI1ZWMwHhcNMjUwNzAyMTEwMDU3WhcNMjUwNzAzMTEwMDU3WjAzMTEwLwYDVQQD
EygyMTg0NjIxOTI0NjgxMGNiY2IzNTkxOTZkZGZhZmU1NDExYzQ2YjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnME3LH/sEGFExESitUS1f6rwLem
EwkvrwYIzhX9lsBHQtEduyvjy83vYShcaHbWVbigB8NVfQs1MFXFPShI8u0juStN
lPSb7KfgepNFDbT0IuOqx0nrsQjJZqhjFskiaRe66DUv0EJ0x7XDHyDHGckic1J7
G+v7aGw3gCOaGitQeLEBLqTLs87hYI4lfWgjE2SH8Wo/dgq/Wqxk78ypcQO6eJm5
NJKp1cKDHUzHLxPTJX6k0GU2L4HCCI87sLwvD7R1bhZ3NxEvOVJQNBdnYiTX/i8+
X6HLHNG/zrYTy3FPlcsrlAllIsgO2SNI/VQSk/2G0baMD8qT4Yj62SdWCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGEYhkkaBDLyzWRlt36/lQRxGt/MB8GA1UdIwQY
MBaAFHje24mIvIuxpfnlX0Fya2VEbCXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODFhNGMtZDYzMS00MzExLTliZDUt
YTYyNTRkZjUyNmMxLzEvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODFhNGMtZDYzMS00MzExLTliZDUtYTYyNTRkZjUyNmMx
LzEvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlou90Qc2
a8szFVZElIeUwWXCxVy8x27SsXRLbr4SdE6mUdET/huyJwUsThlO3eJL9GxXXCxy
7w4ptuSWntGy2EvkOLR2iEZfLoyE5ORhEr/3R8mBpWMO3p1Tf0c9nGs47BnPEKct
wBrfyRtNsFhp5foMo9T5E6xjVe2Rlb9/dr0jSdYnqYLS8lCnRqflk22hp/+bYfCI
BGV9hzdu1GUIrnrBK+/QtTrHAJDAnqIjNug+UyzyXIA6yRAW7Zak7oF5pOO3Mn1K
n9xShN0elPWqiKJAYefjhMB06hCHMo9wswIjE+BEShZrQRNOkWzBz5Rll2gV9VqA
8V2K8N7i6h4bpQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:54:11 2025 by rpki-client