Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File:                     eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier:          Gm4fqwt5kVffjJYV4C2mwtcXAN2Kb1lhhZ4IFi9RF9A=
Subject key identifier:   3C:96:E2:EC:94:57:F9:F9:6D:E9:20:0B:B1:3A:17:F1:5F:A1:AE:8B
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer:       /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial:       0197C45C081E03903D4D48F4B711B0EFC003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number:          15BC
Signing time:             Tue 01 Jul 2025 05:00:55 +0000
Manifest this update:     Tue 01 Jul 2025 05:00:55 +0000
Manifest next update:     Wed 02 Jul 2025 05:00:55 +0000
Files and hashes:         1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=)
                          2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: 9o/KpEdCmwVrOY6REuWqbhH34oNMfyz7IzeQ45++2Qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:5c:08:1e:03:90:3d:4d:48:f4:b7:11:b0:ef:c0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
        Validity
            Not Before: Jul  1 05:00:55 2025 GMT
            Not After : Jul  2 05:00:55 2025 GMT
        Subject: CN=3c96e2ec9457f9f96de9200bb13a17f15fa1ae8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:33:6d:78:69:ff:cd:ff:fc:38:33:8a:24:
                    f7:b2:e3:e5:cb:3c:37:d8:aa:ad:b3:2d:4a:1d:29:
                    5f:4f:a3:01:a8:b2:2d:3d:6c:00:91:ff:32:86:89:
                    7d:95:65:fe:85:ed:19:05:a9:1e:c2:1c:e7:8c:fe:
                    bc:1a:22:37:60:87:57:e0:f4:95:fc:24:7d:91:ef:
                    a3:67:84:9a:75:cb:f9:66:d9:86:c2:65:87:41:e3:
                    5a:69:1e:53:19:94:be:68:ed:4e:ce:01:96:25:20:
                    f5:41:26:51:8c:bd:6d:80:75:a0:99:66:1a:4f:df:
                    0d:12:13:6b:c7:e5:3f:c8:e0:e5:fd:f0:db:11:b2:
                    6a:8f:11:73:dd:e4:94:97:c1:09:69:4e:8d:e6:c7:
                    3a:85:12:07:6a:3a:b8:b6:e3:1b:3e:9a:1e:f0:3a:
                    30:ca:13:86:e1:a5:b9:66:17:0e:f8:5f:5c:c7:52:
                    54:7d:98:58:d5:31:86:ff:b7:1d:78:f7:8c:7a:30:
                    8b:59:05:a0:1f:42:07:f4:4d:bd:10:4c:b7:be:0a:
                    57:9b:16:80:62:57:81:e8:51:d5:e8:86:6a:87:76:
                    9b:7c:cc:52:49:73:4c:cf:bc:2b:8e:04:de:26:c1:
                    36:0c:a7:a4:65:06:9c:fe:a4:1d:cc:d8:0d:0e:f0:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:96:E2:EC:94:57:F9:F9:6D:E9:20:0B:B1:3A:17:F1:5F:A1:AE:8B
            X509v3 Authority Key Identifier:
                keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:5f:af:0f:42:c6:ec:b8:70:19:18:50:4f:71:c0:78:9e:
         49:de:6f:78:2d:89:49:28:57:8d:6d:73:b1:b6:a4:73:2b:1d:
         b7:ad:1c:da:3e:87:55:6c:10:e8:8f:cd:59:4e:5e:18:83:d4:
         de:14:7d:9a:6c:2a:8f:05:28:4a:f8:a6:63:60:71:68:54:f0:
         99:81:5e:a0:6a:9f:78:c6:37:c4:ae:b8:51:df:b1:12:78:34:
         a9:ef:b8:6b:82:9b:92:b8:70:25:62:43:ee:e1:90:fc:1b:b7:
         9c:79:93:83:a2:43:e7:2d:07:48:f9:53:ac:31:ad:9c:fb:6b:
         bb:dd:20:fe:21:9d:29:83:e0:56:cd:de:f1:ca:67:8f:1e:d9:
         fd:38:7b:08:47:4b:cf:14:14:9b:41:52:e6:a0:7c:11:13:7d:
         67:f3:0e:bf:ac:45:b2:4d:e3:f7:56:3e:88:11:44:2f:c9:59:
         bc:4a:25:04:ee:ad:18:37:2f:ca:ac:8d:6f:87:a8:da:01:10:
         56:ee:2b:01:6c:24:4a:e4:15:88:0f:7f:43:65:32:2a:a7:3a:
         f4:66:d9:89:7c:a6:6f:57:19:5f:be:75:df:13:01:21:ef:79:
         a2:a5:a3:7a:79:4c:41:b3:e3:57:34:27:f2:8b:bb:61:79:4a:
         ee:64:dd:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXAgeA5A9TUj0txGw78ADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ODI4MDJjZTcxODMwNTkwYjI2YWJhOTk3MWUxMmY2YWUx
OGRjZWUwHhcNMjUwNzAxMDUwMDU1WhcNMjUwNzAyMDUwMDU1WjAzMTEwLwYDVQQD
EygzYzk2ZTJlYzk0NTdmOWY5NmRlOTIwMGJiMTNhMTdmMTVmYTFhZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xUzbXhp/83//DgziiT3suPlyzw3
2Kqtsy1KHSlfT6MBqLItPWwAkf8yhol9lWX+he0ZBakewhznjP68GiI3YIdX4PSV
/CR9ke+jZ4Sadcv5ZtmGwmWHQeNaaR5TGZS+aO1OzgGWJSD1QSZRjL1tgHWgmWYa
T98NEhNrx+U/yODl/fDbEbJqjxFz3eSUl8EJaU6N5sc6hRIHajq4tuMbPpoe8Dow
yhOG4aW5ZhcO+F9cx1JUfZhY1TGG/7cdePeMejCLWQWgH0IH9E29EEy3vgpXmxaA
YleB6FHV6IZqh3abfMxSSXNMz7wrjgTeJsE2DKekZQac/qQdzNgNDvBWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyW4uyUV/n5bekgC7E6F/Ffoa6LMB8GA1UdIwQY
MBaAFHmCgCznGDBZCyarqZceEvauGNzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUt
ZGNkZjI0NDE0OTg5LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUtZGNkZjI0NDE0OTg5
LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqh9frw9C
xuy4cBkYUE9xwHieSd5veC2JSShXjW1zsbakcysdt60c2j6HVWwQ6I/NWU5eGIPU
3hR9mmwqjwUoSvimY2BxaFTwmYFeoGqfeMY3xK64Ud+xEng0qe+4a4KbkrhwJWJD
7uGQ/Bu3nHmTg6JD5y0HSPlTrDGtnPtru90g/iGdKYPgVs3e8cpnjx7Z/Th7CEdL
zxQUm0FS5qB8ERN9Z/MOv6xFsk3j91Y+iBFEL8lZvEolBO6tGDcvyqyNb4eo2gEQ
Vu4rAWwkSuQViA9/Q2UyKqc69GbZiXymb1cZX7513xMBIe95oqWjenlMQbPjVzQn
8ou7YXlK7mTdkQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:13:39 2025 by rpki-client