Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
File:                     EynNPuL-EmqCyipYyH7Vg4_ir1c.mft (raw, json)
Hash identifier:          XETMuc420Sv6A0KEZ3aRW0Jx+5BO5dNmSftI2pFhoeo=
Subject key identifier:   D9:13:9E:4D:C7:A4:DE:DE:92:D3:88:02:08:93:4F:9D:D8:CF:81:AE
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Certificate issuer:       /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial:       0197B63284C2A6F1E54D38B0977683C9F6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
Manifest number:          1199
Signing time:             Sat 28 Jun 2025 11:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:53 +0000
Files and hashes:         1: EynNPuL-EmqCyipYyH7Vg4_ir1c.crl (hash: GvFXVGrcWnvckT21g/YdqAWrshgT0wgAN995lr9UW48=)
                          2: xRuQVNxBS_3Mgbe42rndbMsNass.roa (hash: A1raJrfsn9sVKt/kmB4hYgZNVWgJqoDFFUH8LA8mWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:84:c2:a6:f1:e5:4d:38:b0:97:76:83:c9:f6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
        Validity
            Not Before: Jun 28 11:00:53 2025 GMT
            Not After : Jun 29 11:00:53 2025 GMT
        Subject: CN=d9139e4dc7a4dede92d3880208934f9dd8cf81ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:7c:00:5a:a4:67:79:bd:89:a9:a6:8d:1d:
                    00:eb:d3:33:a6:f1:15:75:b8:00:14:e2:a8:bf:0f:
                    ee:3d:f9:3f:92:66:fc:70:e0:cd:68:bf:b7:d1:89:
                    37:09:6b:bd:c9:f4:50:b9:6b:1a:21:5f:ac:f1:7a:
                    51:1b:16:d3:9f:82:dd:b9:b6:79:b2:67:ff:f6:b8:
                    d2:b2:5b:3d:8a:a7:30:0a:45:39:03:a7:c2:9c:89:
                    fb:d3:ea:5c:09:ab:63:14:a9:e0:46:29:5a:a5:1f:
                    1f:a8:bd:b9:1f:f6:df:a3:0e:c1:be:e7:36:33:a5:
                    e6:96:59:89:8a:96:bc:18:2c:14:d9:89:62:26:84:
                    7d:9a:2d:a6:4d:37:fe:3b:a5:a5:bc:38:35:ce:8b:
                    ef:45:3c:ac:7d:02:ea:f1:c9:c0:4c:1d:14:9b:2c:
                    ea:e2:ff:73:f2:1a:58:26:00:90:61:a5:35:ed:c9:
                    1b:63:ff:58:b3:ae:ac:4f:18:d8:9c:21:af:12:10:
                    4a:2b:2f:59:de:1d:af:b3:d4:9a:68:59:61:f4:5b:
                    d0:fc:b6:52:e4:2a:23:85:21:68:1a:1f:1e:27:79:
                    fe:6a:c8:6a:87:53:a0:43:69:1b:a1:39:0f:28:a8:
                    e0:99:cd:4c:7d:a6:ef:95:1b:4c:d8:07:c1:cd:f2:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:13:9E:4D:C7:A4:DE:DE:92:D3:88:02:08:93:4F:9D:D8:CF:81:AE
            X509v3 Authority Key Identifier:
                keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:a8:1e:1c:a7:54:f7:ee:c6:f4:1d:0f:97:27:d0:09:7e:
         2c:42:8c:91:9b:99:0d:ac:69:08:bf:df:de:b3:45:8e:2b:54:
         0e:49:c5:34:a4:fd:ae:5b:36:0c:98:7c:f9:0d:3e:35:ea:54:
         55:4b:de:78:3f:06:72:46:11:ef:20:2e:24:1e:b6:72:bf:d9:
         23:be:c9:cf:86:9d:a1:e7:ac:7c:40:88:26:ea:99:60:16:5f:
         88:8d:ce:4c:a8:48:15:b1:f9:d7:a2:1a:c7:1c:68:1f:d2:05:
         65:b8:88:9d:74:66:31:cb:99:58:7e:d4:2a:f1:4b:f6:8f:43:
         9e:44:5d:f1:b8:a9:a7:0f:17:8c:07:7e:73:3d:3e:98:bf:71:
         f2:c0:20:c3:78:23:21:a3:65:db:c9:22:39:00:9a:c3:76:eb:
         82:1b:7b:f8:16:04:34:2b:94:70:4f:56:4d:16:88:4d:e0:cc:
         e8:0f:4d:48:f5:54:c1:15:50:fd:65:ef:40:94:f7:4b:4e:ab:
         cf:a5:4a:c1:e9:d7:3c:d0:aa:c9:2d:07:2a:38:66:33:8a:5b:
         36:31:81:ea:e8:ec:0a:ab:ef:24:ef:b4:68:94:ae:23:cb:fd:
         26:d4:54:3a:9c:8c:b3:e5:6b:70:8b:a0:a5:69:f2:1f:87:e1:
         fd:c0:15:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MoTCpvHlTTiwl3aDyfasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjljZDNlZTJmZTEyNmE4MmNhMmE1OGM4N2VkNTgzOGZl
MmFmNTcwHhcNMjUwNjI4MTEwMDUzWhcNMjUwNjI5MTEwMDUzWjAzMTEwLwYDVQQD
EyhkOTEzOWU0ZGM3YTRkZWRlOTJkMzg4MDIwODkzNGY5ZGQ4Y2Y4MWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbl8AFqkZ3m9iammjR0A69MzpvEV
dbgAFOKovw/uPfk/kmb8cODNaL+30Yk3CWu9yfRQuWsaIV+s8XpRGxbTn4LdubZ5
smf/9rjSsls9iqcwCkU5A6fCnIn70+pcCatjFKngRilapR8fqL25H/bfow7Bvuc2
M6XmllmJipa8GCwU2YliJoR9mi2mTTf+O6WlvDg1zovvRTysfQLq8cnATB0Umyzq
4v9z8hpYJgCQYaU17ckbY/9Ys66sTxjYnCGvEhBKKy9Z3h2vs9SaaFlh9FvQ/LZS
5CojhSFoGh8eJ3n+ashqh1OgQ2kboTkPKKjgmc1MfabvlRtM2AfBzfIQpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkTnk3HpN7ektOIAgiTT53Yz4GuMB8GA1UdIwQY
MBaAFBMpzT7i/hJqgsoqWMh+1YOP4q9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXluTlB1TC1FbXFDeWlwWXlIN1ZnNF9pcjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hZjU4YjYtOWU4Zi00MDZlLWFjMWMt
MmZjMDMwYTYwY2VhLzEvRXluTlB1TC1FbXFDeWlwWXlIN1ZnNF9pcjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hZjU4YjYtOWU4Zi00MDZlLWFjMWMtMmZjMDMwYTYwY2Vh
LzEvRXluTlB1TC1FbXFDeWlwWXlIN1ZnNF9pcjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsKoHhyn
VPfuxvQdD5cn0Al+LEKMkZuZDaxpCL/f3rNFjitUDknFNKT9rls2DJh8+Q0+NepU
VUveeD8GckYR7yAuJB62cr/ZI77Jz4adoeesfECIJuqZYBZfiI3OTKhIFbH516Ia
xxxoH9IFZbiInXRmMcuZWH7UKvFL9o9DnkRd8bippw8XjAd+cz0+mL9x8sAgw3gj
IaNl28kiOQCaw3brght7+BYENCuUcE9WTRaITeDM6A9NSPVUwRVQ/WXvQJT3S06r
z6VKwenXPNCqyS0HKjhmM4pbNjGB6ujsCqvvJO+0aJSuI8v9JtRUOpyMs+VrcIug
pWnyH4fh/cAV6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:51 2025 by rpki-client