Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File:                     EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier:          L9k3smdPdkAe26YQaZzh9wf8JMqxH2OBoPpfZEIMNGA=
Subject key identifier:   AE:F7:AB:63:07:97:AA:74:80:C1:B6:8C:B8:69:B3:6E:A5:29:03:1C
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer:       /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial:       0197B77BFB636C4DF28EF1481E32C68E077C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number:          1354
Signing time:             Sat 28 Jun 2025 17:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:45 +0000
Files and hashes:         1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
                          2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: Pcyk/KusY2F29lcagmEMX851VnWUi/3eruW16dUVF5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:fb:63:6c:4d:f2:8e:f1:48:1e:32:c6:8e:07:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
        Validity
            Not Before: Jun 28 17:00:45 2025 GMT
            Not After : Jun 29 17:00:45 2025 GMT
        Subject: CN=aef7ab630797aa7480c1b68cb869b36ea529031c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:e3:78:25:a5:d7:46:d0:28:d6:bf:18:9d:
                    bd:4f:3f:43:51:a9:cc:64:9c:b2:23:a0:03:b9:ff:
                    42:d9:90:ca:be:a8:8e:c3:e5:61:58:e1:9e:f9:34:
                    ba:23:0b:5c:f0:fc:db:40:77:1c:e4:9c:81:d8:9b:
                    80:3d:0b:9c:95:a8:82:81:06:86:fb:e4:4b:9e:f3:
                    3c:25:89:bf:6b:02:b8:0d:d5:1c:ad:cf:09:38:e0:
                    a4:bc:73:e6:07:f8:4e:1c:0b:57:92:e8:25:02:22:
                    e9:7f:e5:23:5d:e9:a9:82:36:4d:4f:8c:c2:eb:e1:
                    f9:29:1f:92:98:85:25:0f:f6:6c:a7:89:a4:9a:6a:
                    60:a9:b0:af:6f:58:8e:68:5c:1a:50:35:67:54:00:
                    0a:e0:cc:3e:9f:89:34:ec:50:3f:57:61:09:ef:15:
                    2d:b4:22:f3:39:ef:99:5d:ec:31:aa:76:d9:a4:03:
                    5d:a3:f5:b7:8a:14:70:78:22:3a:f8:98:58:ce:0c:
                    2a:37:41:64:66:b0:6a:f5:f1:1e:ee:e4:b7:18:d6:
                    c9:d5:ce:46:d5:ab:6d:7e:31:8d:98:d5:6a:24:b9:
                    ca:3b:f5:14:4b:33:cd:80:36:e5:b6:93:83:52:d7:
                    20:0d:6a:69:51:1d:ce:a9:97:61:56:79:4b:95:40:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F7:AB:63:07:97:AA:74:80:C1:B6:8C:B8:69:B3:6E:A5:29:03:1C
            X509v3 Authority Key Identifier:
                keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:83:13:01:61:fb:4c:5c:7b:1d:b9:35:e0:c6:55:b3:be:
         49:3b:5e:d2:20:9f:d1:f7:a6:ff:67:ae:de:e6:ce:52:7c:64:
         32:43:b5:76:ca:19:da:04:f4:18:1f:de:61:b8:c5:9f:6c:1e:
         d2:8d:0c:21:b0:32:aa:9e:38:45:01:fa:95:c0:7a:f6:4c:bb:
         40:cd:c2:2e:3d:91:28:aa:6a:5e:33:16:d4:cf:c2:da:22:0a:
         7a:38:7c:5e:34:2f:54:fe:aa:14:3b:94:03:d3:33:02:a8:f8:
         ac:8c:a9:8c:10:9b:2f:6d:f1:08:23:73:c9:d0:11:85:62:b7:
         d8:38:3e:20:f9:56:b3:95:70:bc:cd:53:7d:bf:1f:93:6a:1a:
         0a:28:ca:79:8d:89:73:20:22:2f:49:46:aa:e8:64:b4:2f:bb:
         8d:3c:04:13:41:da:02:38:9d:0f:0c:b0:20:38:c9:01:a3:52:
         05:26:2e:d7:eb:49:c5:db:a5:d5:99:23:c5:f7:23:ce:bb:4e:
         93:e0:ba:dd:fe:7c:7c:e3:b8:18:83:b3:e7:0a:1a:f0:3d:0d:
         68:2a:29:ec:15:a3:b4:b6:e4:36:c2:a9:48:ca:b2:c9:cf:f8:
         27:a1:49:7d:bf:b2:43:61:f9:53:a0:76:b7:be:2e:06:bd:44:
         a9:d0:0e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/tjbE3yjvFIHjLGjgd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYzc5ZThhMjdjZGU5OTExYmQ3ZGE2Mzg3M2M1Y2M1NThk
YmQ1MzEwHhcNMjUwNjI4MTcwMDQ1WhcNMjUwNjI5MTcwMDQ1WjAzMTEwLwYDVQQD
EyhhZWY3YWI2MzA3OTdhYTc0ODBjMWI2OGNiODY5YjM2ZWE1MjkwMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWbjeCWl10bQKNa/GJ29Tz9DUanM
ZJyyI6ADuf9C2ZDKvqiOw+VhWOGe+TS6Iwtc8PzbQHcc5JyB2JuAPQuclaiCgQaG
++RLnvM8JYm/awK4DdUcrc8JOOCkvHPmB/hOHAtXkuglAiLpf+UjXempgjZNT4zC
6+H5KR+SmIUlD/Zsp4mkmmpgqbCvb1iOaFwaUDVnVAAK4Mw+n4k07FA/V2EJ7xUt
tCLzOe+ZXewxqnbZpANdo/W3ihRweCI6+JhYzgwqN0FkZrBq9fEe7uS3GNbJ1c5G
1attfjGNmNVqJLnKO/UUSzPNgDbltpODUtcgDWppUR3OqZdhVnlLlUBWQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK73q2MHl6p0gMG2jLhps26lKQMcMB8GA1UdIwQY
MBaAFBHHnoonzemRG9faY4c8XMVY29UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmIt
Yjk5MzA1MTBkMGEwLzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmItYjk5MzA1MTBkMGEw
LzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM6DEwFh
+0xcex25NeDGVbO+STte0iCf0fem/2eu3ubOUnxkMkO1dsoZ2gT0GB/eYbjFn2we
0o0MIbAyqp44RQH6lcB69ky7QM3CLj2RKKpqXjMW1M/C2iIKejh8XjQvVP6qFDuU
A9MzAqj4rIypjBCbL23xCCNzydARhWK32Dg+IPlWs5VwvM1Tfb8fk2oaCijKeY2J
cyAiL0lGquhktC+7jTwEE0HaAjidDwywIDjJAaNSBSYu1+tJxdul1ZkjxfcjzrtO
k+C63f58fOO4GIOz5woa8D0NaCop7BWjtLbkNsKpSMqyyc/4J6FJfb+yQ2H5U6B2
t74uBr1EqdAOaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:24 2025 by rpki-client