Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier:          IAr6Sr5SkIgIC5xGgw/s5w/Hdl2h+Q5R6CdqxFoYRWo=
Subject key identifier:   B9:B8:65:A0:F1:93:6D:66:FC:6B:B9:D5:35:EA:83:F1:77:9A:4C:BB
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer:       /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial:       0197B6A2528BC1094185F07EB8DEA8224A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:03:00 +0000
Manifest this update:     Sat 28 Jun 2025 13:03:00 +0000
Manifest next update:     Sun 29 Jun 2025 13:03:00 +0000
Files and hashes:         1: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: yDZB3AZGEWDFzQILCzqddfOyQS1oZrHeZcdAFPO5DQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:52:8b:c1:09:41:85:f0:7e:b8:de:a8:22:4a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Validity
            Not Before: Jun 28 13:03:00 2025 GMT
            Not After : Jun 29 13:03:00 2025 GMT
        Subject: CN=b9b865a0f1936d66fc6bb9d535ea83f1779a4cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:06:77:4e:61:48:b7:35:aa:d5:7b:12:b8:
                    68:28:4d:a4:88:d4:22:3f:cf:48:61:22:ad:12:3e:
                    40:a4:77:e7:3f:9f:9e:9d:79:99:54:67:df:d3:0f:
                    fe:04:a1:b0:f1:36:7d:22:26:98:5b:84:f2:82:f7:
                    5f:49:ac:d8:df:99:01:25:16:05:51:95:16:4b:fb:
                    1d:70:a5:c8:b1:a3:5c:3c:c0:24:16:eb:96:7c:f9:
                    e2:ec:f2:53:d3:d7:27:bd:33:ab:1d:7f:2c:1f:15:
                    a7:6b:1c:2d:37:a9:60:99:01:96:c0:fd:3d:d4:44:
                    e2:9b:4a:4f:7c:b8:9b:1a:2d:73:f5:21:b6:53:8b:
                    58:8f:1f:3f:e0:a9:60:ea:d3:49:d6:c8:9f:5d:fe:
                    54:f5:f2:5f:d2:79:14:47:ee:08:24:12:78:6b:54:
                    b0:d6:81:bb:17:55:3f:2c:97:f0:c5:65:bb:6b:07:
                    ae:b0:2f:d6:02:50:46:be:df:8c:a3:52:33:f0:7e:
                    5a:67:a1:8b:0a:bd:c8:4f:a1:1d:fd:b6:26:8f:24:
                    e8:68:1a:41:13:29:11:16:0b:86:2f:d8:5e:4f:c1:
                    ca:56:d8:8d:7f:df:4b:5e:20:33:f8:d8:6f:2a:6d:
                    12:ba:c7:ab:58:47:c5:84:c2:d2:c9:a6:4e:8b:8a:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:65:A0:F1:93:6D:66:FC:6B:B9:D5:35:EA:83:F1:77:9A:4C:BB
            X509v3 Authority Key Identifier:
                keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:c0:37:a0:ed:80:38:64:cb:96:00:5d:15:f3:1b:b2:05:
         5d:61:d0:85:94:42:55:e3:a2:dd:cd:a2:be:04:8e:9d:fe:1b:
         59:f7:70:8e:51:2e:29:22:fd:35:98:d6:86:65:32:73:a5:94:
         3b:8a:71:b2:d8:82:f9:21:65:9d:a8:2a:7c:59:dd:3b:85:0b:
         ac:99:cd:6a:ee:15:a8:a1:5f:21:4f:f6:22:fa:c4:ba:fb:2f:
         fa:7f:37:45:c0:cd:44:b1:5b:5e:12:a2:cc:4c:c0:76:4b:85:
         9b:17:ee:96:bf:38:bc:cb:31:5d:af:5a:66:ef:e2:68:63:a0:
         b6:79:ee:d0:77:7b:f2:92:6a:c1:b1:a2:b7:78:4e:25:04:90:
         ce:23:b8:fa:e3:fe:be:15:08:c2:a3:d1:b8:52:4b:57:8e:25:
         0c:8d:01:97:34:47:83:e6:ae:b6:fc:ab:80:a6:07:0d:cb:a6:
         85:fc:21:8e:08:90:1c:6d:15:3e:e1:a5:50:b1:18:4b:0a:57:
         83:8a:92:c5:79:d0:12:94:b6:56:e9:f6:b9:5f:33:ea:1c:11:
         31:f6:6f:2c:f2:41:0e:e3:0a:09:3e:ed:ee:f3:f7:bb:ba:a1:
         ea:65:b5:40:4b:e9:1a:a4:da:00:8a:00:75:fc:45:34:8a:33:
         21:05:6f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2olKLwQlBhfB+uN6oIkpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTM1OTY0ZGExNzAzOGUyM2QzYTQ4OTA5YTEzYTI1ZmIw
ZTU4ZWIwHhcNMjUwNjI4MTMwMzAwWhcNMjUwNjI5MTMwMzAwWjAzMTEwLwYDVQQD
EyhiOWI4NjVhMGYxOTM2ZDY2ZmM2YmI5ZDUzNWVhODNmMTc3OWE0Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicEGd05hSLc1qtV7ErhoKE2kiNQi
P89IYSKtEj5ApHfnP5+enXmZVGff0w/+BKGw8TZ9IiaYW4TygvdfSazY35kBJRYF
UZUWS/sdcKXIsaNcPMAkFuuWfPni7PJT09cnvTOrHX8sHxWnaxwtN6lgmQGWwP09
1ETim0pPfLibGi1z9SG2U4tYjx8/4Klg6tNJ1sifXf5U9fJf0nkUR+4IJBJ4a1Sw
1oG7F1U/LJfwxWW7aweusC/WAlBGvt+Mo1Iz8H5aZ6GLCr3IT6Ed/bYmjyToaBpB
EykRFguGL9heT8HKVtiNf99LXiAz+NhvKm0SuserWEfFhMLSyaZOi4rqJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm4ZaDxk21m/Gu51TXqg/F3mky7MB8GA1UdIwQY
MBaAFHmTWWTaFwOOI9OkiQmhOiX7DljrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEt
OWZlNDljYzRkZjJhLzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9lODFkMDEtMTY3Yi00NTI4LWIzYWEtOWZlNDljYzRkZjJh
LzEvZVpOWlpOb1hBNDRqMDZTSkNhRTZKZnNPV09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNLAN6Dt
gDhky5YAXRXzG7IFXWHQhZRCVeOi3c2ivgSOnf4bWfdwjlEuKSL9NZjWhmUyc6WU
O4pxstiC+SFlnagqfFndO4ULrJnNau4VqKFfIU/2IvrEuvsv+n83RcDNRLFbXhKi
zEzAdkuFmxfulr84vMsxXa9aZu/iaGOgtnnu0Hd78pJqwbGit3hOJQSQziO4+uP+
vhUIwqPRuFJLV44lDI0BlzRHg+autvyrgKYHDcumhfwhjgiQHG0VPuGlULEYSwpX
g4qSxXnQEpS2Vun2uV8z6hwRMfZvLPJBDuMKCT7t7vP3u7qh6mW1QEvpGqTaAIoA
dfxFNIozIQVvEA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:35 2025 by rpki-client