Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          TQlVVxd9keaAAf/fOiq3ii1ROdKV1bmhpcjUj2VaSl8=
Subject key identifier:   FF:53:95:D0:9A:41:F2:A1:5B:1F:12:2B:25:CC:66:EF:36:0C:DA:A5
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       0197C15AF758DDF563A93DE2E271E44107BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          04A1
Signing time:             Mon 30 Jun 2025 15:00:53 +0000
Manifest this update:     Mon 30 Jun 2025 15:00:53 +0000
Manifest next update:     Tue 01 Jul 2025 15:00:53 +0000
Files and hashes:         1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: FDqWGGc0zvrSFS2bqDjGcPUStuo+UrrouLez2cuZ314=)
                          2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:5a:f7:58:dd:f5:63:a9:3d:e2:e2:71:e4:41:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Jun 30 15:00:53 2025 GMT
            Not After : Jul  1 15:00:53 2025 GMT
        Subject: CN=ff5395d09a41f2a15b1f122b25cc66ef360cdaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:db:28:d3:c2:7b:30:17:ed:60:d8:50:f7:
                    d5:b8:4d:b8:92:29:9c:31:7d:51:6f:d8:5e:83:ba:
                    8a:3c:88:95:f7:eb:04:03:f6:31:12:bc:50:ef:28:
                    16:95:0b:49:0e:d0:8d:4d:40:fb:db:75:90:b4:95:
                    67:43:8a:b5:ed:6b:45:d3:f4:f7:2a:fd:ce:36:89:
                    18:8f:be:8f:f0:97:df:4d:19:09:7b:29:ae:55:41:
                    71:11:d9:42:a9:13:5e:b3:4a:9f:86:34:63:2c:18:
                    89:90:0b:95:3b:c3:f8:69:19:39:ae:c3:72:81:3a:
                    bc:e3:80:4e:84:e8:6a:48:00:74:45:51:e9:79:a5:
                    ab:de:3e:52:4d:34:ca:6a:68:ea:0c:3d:1e:e2:35:
                    c9:ef:24:c1:eb:6b:ab:41:51:9e:3c:46:fc:fe:7e:
                    43:a9:d8:17:ad:97:66:75:57:43:75:8d:3e:02:79:
                    96:0e:78:21:68:27:ad:cf:3d:76:dc:61:b0:e2:f9:
                    ae:12:ed:6e:03:ce:83:11:7c:d4:2b:0c:9c:6d:c1:
                    f7:d9:f0:15:8b:ca:7b:6f:1a:e5:5b:dd:fe:8a:1e:
                    ea:a7:75:12:a6:3b:7f:d0:65:83:ca:82:4a:65:b4:
                    a4:d2:47:28:16:c5:6d:a2:9b:ee:9d:ae:4e:f0:28:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:53:95:D0:9A:41:F2:A1:5B:1F:12:2B:25:CC:66:EF:36:0C:DA:A5
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:99:d5:6b:0e:32:3e:d8:a6:0d:17:9e:e3:59:e3:e6:bb:43:
         7e:f3:f8:6c:bf:36:af:21:88:a8:92:71:a4:86:a0:16:22:bc:
         dc:ee:7e:51:a7:53:f9:a8:e7:dd:3a:ac:5a:bf:f0:88:05:a9:
         c6:48:dc:13:de:64:bc:47:a0:bd:66:ae:57:e5:81:3a:10:e8:
         4e:43:a6:3a:88:71:e2:7f:ba:c5:25:1c:14:74:07:d6:69:d2:
         b8:d3:b6:30:b1:f0:6d:47:a0:02:c8:77:63:e2:8b:b8:6c:50:
         e5:66:dd:7c:cf:02:a9:b8:fc:03:02:11:f6:9b:8e:f9:6d:85:
         86:16:1d:60:31:b8:d8:f1:48:6f:2c:33:4e:54:6e:50:bf:76:
         17:e6:06:16:6b:15:f2:ad:71:ad:34:c7:e5:4d:4b:82:16:89:
         e7:72:41:98:69:56:21:f8:fa:f6:7d:b7:8d:6f:2e:8a:f6:d6:
         28:50:1d:ad:91:75:e6:61:4d:9e:bd:01:cd:60:d2:9b:2e:1a:
         d1:72:a7:d5:8e:ef:cc:98:f0:10:5c:05:dd:cf:ef:3a:89:0a:
         7c:da:57:4e:21:a2:c8:9f:5f:ba:d2:c7:cd:04:f1:44:44:e8:
         35:ea:e8:5f:23:2b:a2:37:49:7b:81:fe:c4:7d:cb:e4:9b:fc:
         e2:76:bf:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBWvdY3fVjqT3i4nHkQQe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjcxMTE1MDkxMGRjZDFiMWM3YWI1MzE0NDhiZDgzMjFm
YzFjMzYwHhcNMjUwNjMwMTUwMDUzWhcNMjUwNzAxMTUwMDUzWjAzMTEwLwYDVQQD
EyhmZjUzOTVkMDlhNDFmMmExNWIxZjEyMmIyNWNjNjZlZjM2MGNkYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhPbKNPCezAX7WDYUPfVuE24kimc
MX1Rb9heg7qKPIiV9+sEA/YxErxQ7ygWlQtJDtCNTUD723WQtJVnQ4q17WtF0/T3
Kv3ONokYj76P8JffTRkJeymuVUFxEdlCqRNes0qfhjRjLBiJkAuVO8P4aRk5rsNy
gTq844BOhOhqSAB0RVHpeaWr3j5STTTKamjqDD0e4jXJ7yTB62urQVGePEb8/n5D
qdgXrZdmdVdDdY0+AnmWDnghaCetzz123GGw4vmuEu1uA86DEXzUKwycbcH32fAV
i8p7bxrlW93+ih7qp3USpjt/0GWDyoJKZbSk0kcoFsVtopvuna5O8Ch6ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9TldCaQfKhWx8SKyXMZu82DNqlMB8GA1UdIwQY
MBaAFHsnERUJENzRscerUxRIvYMh/Bw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMt
YjdhOGI3YzEyZWVlLzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMtYjdhOGI3YzEyZWVl
LzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJnVaw4y
PtimDRee41nj5rtDfvP4bL82ryGIqJJxpIagFiK83O5+UadT+ajn3TqsWr/wiAWp
xkjcE95kvEegvWauV+WBOhDoTkOmOohx4n+6xSUcFHQH1mnSuNO2MLHwbUegAsh3
Y+KLuGxQ5WbdfM8Cqbj8AwIR9puO+W2FhhYdYDG42PFIbywzTlRuUL92F+YGFmsV
8q1xrTTH5U1LghaJ53JBmGlWIfj69n23jW8uivbWKFAdrZF15mFNnr0BzWDSmy4a
0XKn1Y7vzJjwEFwF3c/vOokKfNpXTiGiyJ9futLHzQTxREToNeroXyMrojdJe4H+
xH3L5Jv84na/hA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:57:20 2025 by rpki-client