Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          dxKNQavfVq7/3llATsBM1EfR9QCI/XTys6XNEUPgx7M=
Subject key identifier:   0E:AE:AD:A8:D5:67:70:4D:3E:1E:DA:86:2B:3C:53:F9:61:AF:17:77
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       0197B77C690191ABC5E39B03273981EAE231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          0481
Signing time:             Sat 28 Jun 2025 17:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:13 +0000
Files and hashes:         1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=)
                          2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: lmlkxlosm/FHG0QEheVjiCTIbvV6/931lhQxo3u4laE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:69:01:91:ab:c5:e3:9b:03:27:39:81:ea:e2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Jun 28 17:01:13 2025 GMT
            Not After : Jun 29 17:01:13 2025 GMT
        Subject: CN=0eaeada8d567704d3e1eda862b3c53f961af1777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:36:c0:88:6e:a0:f1:e4:64:6b:59:6b:83:
                    9d:7e:bb:e5:df:1e:aa:2e:e4:20:3f:e8:db:53:9c:
                    13:bb:39:fa:eb:63:34:13:dc:71:b6:08:6d:e8:46:
                    86:6e:1f:0b:d4:32:ed:c9:d9:2e:b8:ac:8b:83:45:
                    4b:c9:37:65:0f:ee:c4:4b:e7:35:51:bd:b1:de:7c:
                    6f:76:83:ca:c5:7b:55:56:33:25:09:3d:44:73:ea:
                    1d:31:00:6e:d6:b3:a6:a9:1c:fb:74:40:71:d5:30:
                    13:c0:0c:e2:ad:13:56:4e:b4:c9:3f:be:d9:b0:96:
                    7e:b1:b7:01:12:d1:90:7e:e3:83:43:5e:5e:bb:10:
                    62:d7:f4:57:68:85:6e:d2:54:76:a1:ba:31:1c:57:
                    94:ce:cc:f7:aa:f1:72:1f:fd:1c:fd:8d:3d:bf:8a:
                    95:0e:4b:9d:79:66:3b:c7:55:64:4f:e6:45:ee:09:
                    1d:97:f1:97:8b:fd:51:27:95:6e:d4:e4:a1:67:c6:
                    e2:f5:9f:0f:29:fe:45:ec:55:f2:9e:f0:31:e1:bb:
                    9c:70:bb:48:89:57:6d:81:3d:69:e0:01:dc:5b:6b:
                    8b:db:9f:4d:a7:7a:e2:81:c0:93:84:46:57:35:85:
                    bb:9a:79:50:98:c1:65:56:ef:98:6d:7d:d6:9b:7e:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:AD:A8:D5:67:70:4D:3E:1E:DA:86:2B:3C:53:F9:61:AF:17:77
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:9c:56:11:c2:8d:71:d6:77:a4:80:f3:88:41:71:30:78:
         f5:bb:44:61:e2:7d:72:09:84:cf:3d:e2:8d:10:7c:42:c2:fd:
         f5:7f:57:21:41:4b:74:e9:c8:9d:cb:3f:97:9a:84:4e:62:d0:
         8b:a5:cf:44:40:fe:b7:5b:b2:39:a0:42:a0:5e:8a:0c:ab:18:
         e3:26:79:d0:de:34:3d:1f:60:c3:ee:b4:6f:a6:a6:5b:78:33:
         51:56:98:7b:12:95:be:59:19:97:1b:52:00:a7:f7:31:e6:3e:
         e3:56:88:4e:48:1d:df:14:29:ef:a5:97:93:f8:49:21:77:c2:
         19:c7:ea:70:65:75:dd:8c:80:5e:d1:8d:86:eb:94:32:a5:60:
         27:0f:fe:29:97:73:9c:7d:96:22:4b:f8:36:f3:13:84:c4:34:
         58:2f:99:48:f9:c9:6b:a8:76:26:33:2d:d4:b4:1c:77:7d:79:
         15:dc:9b:12:bd:39:55:77:9c:8a:b8:ed:14:03:21:56:58:da:
         a5:af:03:f8:b0:67:3c:a4:60:a8:e7:e6:66:16:47:60:72:1a:
         f2:f7:81:d0:26:0f:c8:d2:7d:44:95:82:c4:b5:bb:f1:2a:50:
         3b:62:39:7b:d0:50:5c:d9:7c:35:d2:25:c8:44:c0:49:2b:9e:
         b4:a5:ae:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGkBkavF45sDJzmB6uIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWE2MWQ3Y2MyYzI3OGE3YzRiY2ZiYzIxMzdiMzk0YTIy
NjU0YWQwHhcNMjUwNjI4MTcwMTEzWhcNMjUwNjI5MTcwMTEzWjAzMTEwLwYDVQQD
EygwZWFlYWRhOGQ1Njc3MDRkM2UxZWRhODYyYjNjNTNmOTYxYWYxNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFo2wIhuoPHkZGtZa4Odfrvl3x6q
LuQgP+jbU5wTuzn662M0E9xxtght6EaGbh8L1DLtydkuuKyLg0VLyTdlD+7ES+c1
Ub2x3nxvdoPKxXtVVjMlCT1Ec+odMQBu1rOmqRz7dEBx1TATwAzirRNWTrTJP77Z
sJZ+sbcBEtGQfuODQ15euxBi1/RXaIVu0lR2oboxHFeUzsz3qvFyH/0c/Y09v4qV
DkudeWY7x1VkT+ZF7gkdl/GXi/1RJ5Vu1OShZ8bi9Z8PKf5F7FXynvAx4buccLtI
iVdtgT1p4AHcW2uL259Np3rigcCThEZXNYW7mnlQmMFlVu+YbX3Wm35J8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6urajVZ3BNPh7ahis8U/lhrxd3MB8GA1UdIwQY
MBaAFEfqYdfMLCeKfEvPvCE3s5SiJlStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xMTVjNDQtYmM0YS00ZTI0LWJmMzgt
OGM3MjYwOWYyZjAyLzEvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xMTVjNDQtYmM0YS00ZTI0LWJmMzgtOGM3MjYwOWYyZjAy
LzEvUi1waDE4d3NKNHA4UzgtOElUZXpsS0ltVkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW2cVhHC
jXHWd6SA84hBcTB49btEYeJ9cgmEzz3ijRB8QsL99X9XIUFLdOnIncs/l5qETmLQ
i6XPRED+t1uyOaBCoF6KDKsY4yZ50N40PR9gw+60b6amW3gzUVaYexKVvlkZlxtS
AKf3MeY+41aITkgd3xQp76WXk/hJIXfCGcfqcGV13YyAXtGNhuuUMqVgJw/+KZdz
nH2WIkv4NvMThMQ0WC+ZSPnJa6h2JjMt1LQcd315FdybEr05VXecirjtFAMhVlja
pa8D+LBnPKRgqOfmZhZHYHIa8veB0CYPyNJ9RJWCxLW78SpQO2I5e9BQXNl8NdIl
yETASSuetKWuZw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:20 2025 by rpki-client