Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File:                     Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier:          DKx9YmU5oycf46S/T/D5n1powss6lN+wpZzl4IJrSRQ=
Subject key identifier:   C9:45:B1:71:B7:3D:8A:BD:DE:26:A2:71:5E:32:BA:96:F1:11:CE:48
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer:       /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial:       0197B6A199C26CABCE9657D579B261BE8726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number:          1305
Signing time:             Sat 28 Jun 2025 13:02:13 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:13 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:13 +0000
Files and hashes:         1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: 1zPd4H0fZMqpuU82W4xi3teWtq4eX8dvXkwXgkEiTjI=)
                          2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:99:c2:6c:ab:ce:96:57:d5:79:b2:61:be:87:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
        Validity
            Not Before: Jun 28 13:02:13 2025 GMT
            Not After : Jun 29 13:02:13 2025 GMT
        Subject: CN=c945b171b73d8abdde26a2715e32ba96f111ce48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:df:fa:fc:95:95:41:2e:4e:c2:a1:a0:52:
                    79:30:57:24:05:1b:d1:15:52:2a:42:38:3e:f0:48:
                    e1:73:76:f8:d1:3c:12:55:5e:49:d7:67:49:64:1f:
                    0c:07:1f:cb:9f:92:a9:61:78:56:da:35:53:12:53:
                    e5:84:9d:96:e4:06:07:27:3d:8f:9b:88:0d:20:93:
                    10:de:ee:eb:e9:84:f0:e9:7f:39:a9:73:65:36:b5:
                    af:49:83:40:b6:5d:2a:bc:6f:19:b6:68:22:0f:b0:
                    9b:d8:c0:59:34:72:00:c6:85:16:89:11:cc:7f:97:
                    fa:f4:c5:d0:77:b4:db:6b:3c:e2:3a:7d:4d:29:1c:
                    30:bf:6e:96:a4:88:02:fa:dc:1d:8d:97:0d:31:54:
                    a6:3f:75:32:95:dd:e6:0f:9c:c5:8c:98:44:fb:fe:
                    ad:83:bd:c5:6e:63:94:a3:92:30:6c:3a:ad:22:26:
                    ba:57:96:92:58:c4:39:11:4b:e5:12:05:92:50:92:
                    ac:48:fd:06:6a:2f:68:3a:d2:93:ba:64:62:ec:e9:
                    c2:38:50:67:a4:bf:0b:8a:6b:69:8d:65:c9:cb:b1:
                    68:92:37:80:e1:21:7c:b6:f2:dc:2b:fb:00:63:25:
                    fa:d4:6d:ad:76:69:dc:1c:fe:bf:cc:99:6f:74:ae:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:B1:71:B7:3D:8A:BD:DE:26:A2:71:5E:32:BA:96:F1:11:CE:48
            X509v3 Authority Key Identifier:
                keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:90:be:d1:3b:22:88:23:8a:3f:6f:b5:1f:e8:3e:50:db:
         ee:b2:1a:39:2e:da:27:93:18:8d:17:73:8a:97:8a:ac:af:10:
         e2:1c:1c:a7:7f:b4:65:b1:28:e4:7a:bf:80:56:bd:49:ef:bd:
         21:b5:99:ed:5f:96:6f:1a:2a:4e:e4:ed:5f:7a:fd:6b:bb:7e:
         ae:17:2c:0e:44:9d:2a:08:70:c3:3a:e9:a5:e2:ea:a3:18:db:
         60:0b:68:31:a3:87:2b:70:14:a8:71:b5:eb:37:84:06:de:55:
         f6:50:07:4b:73:22:8e:0e:2b:42:c4:38:b4:9b:ba:78:47:e9:
         18:fd:c1:ed:48:1b:fb:c3:97:7d:26:dc:f4:d3:6b:74:c4:1f:
         df:ab:be:df:30:9e:ad:a0:7e:98:fb:03:91:12:cc:9b:38:32:
         dc:b5:61:db:b2:ab:30:b5:32:77:33:28:db:4d:c6:3d:79:c8:
         13:2f:f3:58:a6:a0:f8:54:96:f7:9e:93:a4:23:61:0b:9a:94:
         97:e6:e9:86:10:f2:14:41:f4:ff:0c:b6:c4:83:55:ae:3d:3e:
         32:10:60:f7:8c:d0:3d:ae:33:72:3c:36:eb:73:53:9a:f3:05:
         da:d7:91:d2:4e:fa:1d:bd:36:c3:d8:f4:3c:dd:86:4a:2f:41:
         2a:b2:23:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZnCbKvOllfVebJhvocmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm
YzAzYmUwHhcNMjUwNjI4MTMwMjEzWhcNMjUwNjI5MTMwMjEzWjAzMTEwLwYDVQQD
EyhjOTQ1YjE3MWI3M2Q4YWJkZGUyNmEyNzE1ZTMyYmE5NmYxMTFjZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaXf+vyVlUEuTsKhoFJ5MFckBRvR
FVIqQjg+8Ejhc3b40TwSVV5J12dJZB8MBx/Ln5KpYXhW2jVTElPlhJ2W5AYHJz2P
m4gNIJMQ3u7r6YTw6X85qXNlNrWvSYNAtl0qvG8ZtmgiD7Cb2MBZNHIAxoUWiRHM
f5f69MXQd7TbazziOn1NKRwwv26WpIgC+twdjZcNMVSmP3Uyld3mD5zFjJhE+/6t
g73FbmOUo5IwbDqtIia6V5aSWMQ5EUvlEgWSUJKsSP0Gai9oOtKTumRi7OnCOFBn
pL8LimtpjWXJy7FokjeA4SF8tvLcK/sAYyX61G2tdmncHP6/zJlvdK7grwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlFsXG3PYq93iaicV4yupbxEc5IMB8GA1UdIwQY
MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt
NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj
LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJ2QvtE7
Iogjij9vtR/oPlDb7rIaOS7aJ5MYjRdzipeKrK8Q4hwcp3+0ZbEo5Hq/gFa9Se+9
IbWZ7V+WbxoqTuTtX3r9a7t+rhcsDkSdKghwwzrppeLqoxjbYAtoMaOHK3AUqHG1
6zeEBt5V9lAHS3Mijg4rQsQ4tJu6eEfpGP3B7Ugb+8OXfSbc9NNrdMQf36u+3zCe
raB+mPsDkRLMmzgy3LVh27KrMLUydzMo203GPXnIEy/zWKag+FSW956TpCNhC5qU
l+bphhDyFEH0/wy2xINVrj0+MhBg94zQPa4zcjw263NTmvMF2teR0k76Hb02w9j0
PN2GSi9BKrIjWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:30 2025 by rpki-client