Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          KQEwr4id0c87y6a71zF960XwTGvjiBoculB1NynFazA=
Subject key identifier:   3E:81:8C:C0:A5:CE:84:CF:B3:37:3F:07:D2:0B:71:E3:FC:FD:02:FB
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       0197B7EA827F304FEF9FAB855CA6D60382DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          15EC
Signing time:             Sat 28 Jun 2025 19:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:28 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: RIslTDrA/mHbo16phiThiYAo2DNYYU4xKgTUWdwEnws=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:82:7f:30:4f:ef:9f:ab:85:5c:a6:d6:03:82:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Jun 28 19:01:28 2025 GMT
            Not After : Jun 29 19:01:28 2025 GMT
        Subject: CN=3e818cc0a5ce84cfb3373f07d20b71e3fcfd02fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:62:c4:33:04:63:60:5a:f7:0f:2e:d2:d1:
                    1e:50:b4:3b:d7:0f:63:74:7c:49:56:24:94:39:50:
                    24:02:60:70:27:dd:a2:6f:76:58:53:a5:42:af:12:
                    8f:2a:a7:1a:89:a5:14:80:cc:26:aa:df:aa:2e:e1:
                    b6:ad:f6:f6:e8:a6:f2:51:93:d1:43:2c:fe:72:72:
                    9d:13:64:a2:af:01:05:70:0b:ef:86:04:2c:2d:ca:
                    de:4c:02:2f:d3:98:fe:fd:e8:37:e0:c8:dc:a3:2d:
                    8d:e6:16:f1:b7:f5:d4:1a:17:41:42:71:2f:9b:1d:
                    63:70:da:b6:45:c1:d4:d9:6d:6e:81:fe:5c:68:d2:
                    eb:22:d3:68:73:25:12:fb:ad:57:8d:57:c6:15:31:
                    9e:d5:a0:90:45:6d:ef:f5:aa:f4:f2:0a:bf:54:6d:
                    e9:73:a6:dd:d2:cb:0e:d3:c1:61:9f:b5:06:f7:19:
                    c7:46:99:53:15:50:25:90:d7:c1:22:15:f8:1d:ed:
                    f9:c6:ee:c9:36:6c:c3:f2:80:cd:e4:9b:a8:51:26:
                    cc:3b:fb:42:ff:69:01:c4:0c:5c:e1:a1:cd:26:2d:
                    e2:26:a8:18:76:96:5e:07:f6:90:e6:21:bd:29:87:
                    40:42:87:b0:c1:1c:86:f7:79:d3:11:48:56:e4:8a:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:81:8C:C0:A5:CE:84:CF:B3:37:3F:07:D2:0B:71:E3:FC:FD:02:FB
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:14:0c:c1:65:bf:b7:e8:59:1f:5e:f1:94:83:c2:44:7f:
         48:9a:f0:94:88:36:06:27:25:d3:20:b4:d4:b5:0b:0f:c4:57:
         16:32:7a:15:d6:80:1d:c5:82:d1:73:4a:22:d2:8a:33:30:ad:
         17:be:8d:3d:51:23:a4:41:c8:60:1c:6c:41:4e:da:54:25:7f:
         6e:12:7b:06:1d:bb:b3:0a:86:11:95:b1:f0:40:98:9d:4a:93:
         d9:fc:60:fc:00:62:cf:06:0e:7c:2e:27:f3:cf:e6:e5:4d:cc:
         af:81:5d:9c:27:d6:a8:6d:ec:af:8c:24:fd:81:b4:98:b4:b3:
         07:18:71:71:bf:01:57:d8:05:1d:e4:f5:5b:20:49:c1:49:f8:
         ef:07:0a:76:4d:9f:b1:25:50:b9:58:43:ba:84:bf:a9:07:ed:
         9b:97:a8:83:81:45:93:ca:ec:50:a5:1b:24:6a:16:29:90:cc:
         a6:f6:36:4e:f0:f6:c7:af:f0:c2:0e:f6:c6:3a:fd:a0:1b:89:
         05:6e:79:ac:26:9c:92:86:e8:e3:b3:b5:4d:fe:25:64:33:67:
         44:c0:dd:e1:75:6e:0f:2b:a2:e0:13:37:41:2e:aa:30:29:c5:
         eb:ab:80:1e:aa:09:04:27:42:96:b1:f3:ec:b2:15:7d:cc:ba:
         d8:85:c2:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oJ/ME/vn6uFXKbWA4LbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjUwNjI4MTkwMTI4WhcNMjUwNjI5MTkwMTI4WjAzMTEwLwYDVQQD
EygzZTgxOGNjMGE1Y2U4NGNmYjMzNzNmMDdkMjBiNzFlM2ZjZmQwMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eJixDMEY2Ba9w8u0tEeULQ71w9j
dHxJViSUOVAkAmBwJ92ib3ZYU6VCrxKPKqcaiaUUgMwmqt+qLuG2rfb26KbyUZPR
Qyz+cnKdE2SirwEFcAvvhgQsLcreTAIv05j+/eg34Mjcoy2N5hbxt/XUGhdBQnEv
mx1jcNq2RcHU2W1ugf5caNLrItNocyUS+61XjVfGFTGe1aCQRW3v9ar08gq/VG3p
c6bd0ssO08Fhn7UG9xnHRplTFVAlkNfBIhX4He35xu7JNmzD8oDN5JuoUSbMO/tC
/2kBxAxc4aHNJi3iJqgYdpZeB/aQ5iG9KYdAQoewwRyG93nTEUhW5IoV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6BjMClzoTPszc/B9ILceP8/QL7MB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbb4UDMFl
v7foWR9e8ZSDwkR/SJrwlIg2Bicl0yC01LULD8RXFjJ6FdaAHcWC0XNKItKKMzCt
F76NPVEjpEHIYBxsQU7aVCV/bhJ7Bh27swqGEZWx8ECYnUqT2fxg/ABizwYOfC4n
88/m5U3Mr4FdnCfWqG3sr4wk/YG0mLSzBxhxcb8BV9gFHeT1WyBJwUn47wcKdk2f
sSVQuVhDuoS/qQftm5eog4FFk8rsUKUbJGoWKZDMpvY2TvD2x6/wwg72xjr9oBuJ
BW55rCackobo47O1Tf4lZDNnRMDd4XVuDyui4BM3QS6qMCnF66uAHqoJBCdClrHz
7LIVfcy62IXC1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:44 2025 by rpki-client