Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          PqLQMUaXkBsR31hJs7t9/uvGZrd2b2N4tFaBCDWDYJQ=
Subject key identifier:   FD:1C:B2:39:4E:AD:28:46:00:A6:87:5D:39:54:59:C7:ED:4B:2E:B8
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       0197B6A08FE5ED450B3C4A0BE93C3256C962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:05 +0000
Files and hashes:         1: 842mFfTvhpMCx5O_VlnhbyC5DPc.roa (hash: Y0uuEcHUMVeKlkZHSWT3ejEG3c8HH3MwGXKgGUvrUyI=)
                          2: W8WjY9YYv8iljwDY45MThfbAk84.roa (hash: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: 5bZrhBklGmQb6J7fx3fYx9XWKZSW2qpW/KtjXBsnqNA=)
                          4: vkWj2nsjhackefLzTv92x4E_mxA.roa (hash: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=)
                          5: zHyi0zO0aepoCj3YfwkO2CsuHDk.roa (hash: 64jkIZP0sVFKnl22gW7SzeQyLPkea22pOG/lfDbS5eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:8f:e5:ed:45:0b:3c:4a:0b:e9:3c:32:56:c9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Jun 28 13:01:05 2025 GMT
            Not After : Jun 29 13:01:05 2025 GMT
        Subject: CN=fd1cb2394ead284600a6875d395459c7ed4b2eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:70:f1:e6:47:e2:a8:7e:ce:d9:32:f2:61:
                    49:7d:f1:81:03:c0:db:55:7c:5a:5f:92:41:9d:58:
                    eb:3f:3f:21:67:96:b2:52:87:88:d7:be:f4:ce:1e:
                    f5:4f:8d:a0:0e:96:a9:b4:ab:a2:75:39:bf:ff:28:
                    72:e8:a1:8c:fe:0f:f6:57:0d:36:c4:e6:fc:28:a7:
                    12:92:b0:ec:3b:2b:3b:f1:70:97:1d:99:d0:04:4d:
                    24:01:da:33:e8:f3:18:b7:83:28:04:c9:ce:ad:1a:
                    31:cb:12:f0:17:a0:12:b8:ad:5c:03:92:ba:70:91:
                    5b:e0:b1:8e:13:b4:2a:8a:57:4b:44:32:99:d7:b7:
                    b8:ea:6c:32:05:e9:65:be:c4:8e:c8:2e:33:c5:3d:
                    50:f7:02:03:34:83:0f:eb:1b:06:58:1c:67:0d:9f:
                    69:48:d8:a8:42:37:58:6f:2e:9a:50:82:83:75:8f:
                    de:52:29:1e:75:35:6b:6d:45:5f:ba:69:db:2b:ac:
                    e8:80:b3:b4:db:7a:f9:77:a2:32:89:d4:0c:5a:be:
                    ee:51:ad:08:e6:8c:79:20:e5:ba:c9:c2:01:19:ca:
                    af:a8:72:e7:0c:f6:ba:05:ba:66:b5:80:7f:c0:23:
                    ae:27:83:10:df:1f:02:39:b4:47:38:ea:7b:08:d1:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:B2:39:4E:AD:28:46:00:A6:87:5D:39:54:59:C7:ED:4B:2E:B8
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:b1:4a:d6:28:2a:c7:17:6b:ea:bd:84:11:a2:12:16:aa:
         ac:78:5b:08:2c:fe:a0:ba:cc:88:e6:31:a2:2a:7e:98:0e:57:
         a5:15:3f:db:e5:bc:f0:47:f8:58:ff:6a:6c:dc:40:f6:f7:5e:
         b8:19:69:bf:06:df:fe:3c:68:f8:bc:3f:0f:45:3a:5f:94:92:
         f3:ed:4a:a3:fd:7a:42:f8:5f:7c:25:70:07:ef:12:70:b1:4a:
         e6:40:4b:1d:4f:97:65:34:29:c5:b9:c0:80:2a:46:f7:6e:22:
         89:ba:8b:1d:6f:26:63:5e:a7:87:8c:8b:5e:76:27:6f:25:42:
         96:95:ee:77:36:d7:82:bf:fd:c8:a8:67:a0:60:e4:a2:f1:7f:
         42:b4:70:ad:28:2f:3f:79:95:f5:36:ba:83:76:a9:ae:0c:20:
         bc:a9:f8:d4:a6:c5:8a:64:3a:d3:83:76:46:f8:5c:c8:c0:06:
         55:50:fa:df:ed:d1:e3:a3:14:6d:03:d4:6d:64:5e:f5:cd:26:
         25:0f:84:2d:6a:4d:10:f4:34:1c:45:b4:3e:5c:0d:de:eb:41:
         4b:76:e9:9d:3d:44:cf:51:15:90:27:ee:18:ed:cd:22:ae:8a:
         5a:ec:35:f8:80:ad:1d:46:65:ee:6d:6c:dc:3f:b5:34:81:04:
         9a:d6:0f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oI/l7UULPEoL6TwyVsliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3
NTU1YTUwHhcNMjUwNjI4MTMwMTA1WhcNMjUwNjI5MTMwMTA1WjAzMTEwLwYDVQQD
EyhmZDFjYjIzOTRlYWQyODQ2MDBhNjg3NWQzOTU0NTljN2VkNGIyZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkpw8eZH4qh+ztky8mFJffGBA8Db
VXxaX5JBnVjrPz8hZ5ayUoeI1770zh71T42gDpaptKuidTm//yhy6KGM/g/2Vw02
xOb8KKcSkrDsOys78XCXHZnQBE0kAdoz6PMYt4MoBMnOrRoxyxLwF6ASuK1cA5K6
cJFb4LGOE7QqildLRDKZ17e46mwyBellvsSOyC4zxT1Q9wIDNIMP6xsGWBxnDZ9p
SNioQjdYby6aUIKDdY/eUikedTVrbUVfumnbK6zogLO023r5d6IyidQMWr7uUa0I
5ox5IOW6ycIBGcqvqHLnDPa6BbpmtYB/wCOuJ4MQ3x8CObRHOOp7CNFgbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0csjlOrShGAKaHXTlUWcftSy64MB8GA1UdIwQY
MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct
Y2EwNDc0YWRmMzczLzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz
LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0uxStYo
KscXa+q9hBGiEhaqrHhbCCz+oLrMiOYxoip+mA5XpRU/2+W88Ef4WP9qbNxA9vde
uBlpvwbf/jxo+Lw/D0U6X5SS8+1Ko/16QvhffCVwB+8ScLFK5kBLHU+XZTQpxbnA
gCpG924iibqLHW8mY16nh4yLXnYnbyVClpXudzbXgr/9yKhnoGDkovF/QrRwrSgv
P3mV9Ta6g3aprgwgvKn41KbFimQ604N2RvhcyMAGVVD63+3R46MUbQPUbWRe9c0m
JQ+ELWpNEPQ0HEW0PlwN3utBS3bpnT1Ez1EVkCfuGO3NIq6KWuw1+ICtHUZl7m1s
3D+1NIEEmtYPBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:05 2025 by rpki-client