Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          nLX3urPemhNwdpPuQFYXotcdr15VDZmg/zoVPFpk+CE=
Subject key identifier:   DA:2F:BD:84:C0:4B:D2:BF:86:DF:C6:01:C5:14:E3:3B:F3:25:61:32
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       0196BE5CD56DC5AD6DAA2E67B3DB1A0ABA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          0F91
Signing time:             Sun 11 May 2025 08:01:17 +0000
Manifest this update:     Sun 11 May 2025 08:01:17 +0000
Manifest next update:     Mon 12 May 2025 08:01:17 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: zDYrloClr8hiuaEhJFsh4K5LKybd0x3c7Q2daPYTdUk=)
                          2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:d5:6d:c5:ad:6d:aa:2e:67:b3:db:1a:0a:ba:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: May 11 08:01:17 2025 GMT
            Not After : May 12 08:01:17 2025 GMT
        Subject: CN=da2fbd84c04bd2bf86dfc601c514e33bf3256132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:19:2d:95:a3:b0:85:c2:a1:57:8b:d4:d3:
                    04:f4:22:cd:b2:bf:e0:6c:cc:4f:16:46:27:41:3b:
                    ec:ac:27:f4:2c:49:e3:fc:c6:40:01:42:f5:d7:58:
                    61:61:9b:c8:93:6a:73:c1:e7:a7:d7:95:dd:b2:41:
                    fe:43:a8:38:c9:4d:f4:1e:40:f4:92:8d:74:2e:0d:
                    90:3c:4a:a5:27:d1:3f:c6:7c:40:0c:10:45:8e:98:
                    bf:51:a0:ee:ec:9e:1e:24:9b:0a:d6:c8:13:ff:ba:
                    80:4c:42:49:0c:a6:63:96:e2:ac:40:b9:65:9f:77:
                    12:3a:d1:a0:7d:c5:f8:d7:92:9a:0a:d7:a5:11:44:
                    00:98:fe:46:f0:38:9b:e7:54:9a:fa:9c:68:b0:e1:
                    d1:f9:eb:9a:c6:a2:60:72:9e:1a:24:0b:c4:fa:9c:
                    0a:a3:e6:77:93:11:15:cf:d3:82:65:b6:10:d7:94:
                    06:09:6b:07:90:1a:79:4a:3d:49:b0:6b:2c:5f:f4:
                    9a:e9:cd:2a:fc:48:b5:e8:17:c5:c6:ee:5d:b1:e2:
                    9e:8c:d9:cc:c2:fc:d2:45:b4:83:bf:c2:0e:23:e7:
                    d5:2d:35:73:cf:c6:b6:71:46:c1:c1:a6:7b:2b:97:
                    29:1d:d0:50:2f:dd:e0:e8:05:2c:f5:7c:56:81:2c:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:BD:84:C0:4B:D2:BF:86:DF:C6:01:C5:14:E3:3B:F3:25:61:32
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:4c:67:27:ea:d5:6f:26:aa:ba:a6:b7:32:ff:3d:c7:21:
         0d:c2:86:9c:78:fc:17:7c:7a:af:c0:d1:93:42:c6:dc:45:3d:
         68:58:1c:b7:47:8a:eb:b1:dc:c5:f5:65:79:da:72:4c:38:38:
         73:46:16:08:09:8b:a8:b5:7b:9f:2f:3a:5b:9e:0a:80:a4:97:
         1c:77:97:97:53:e7:25:1e:4b:25:07:83:77:e7:5d:c4:c4:27:
         52:b6:5e:e4:aa:ce:98:60:31:e7:f4:5b:44:3f:9f:d9:33:09:
         3b:65:d4:f5:ff:f3:e1:38:e8:5a:3c:ca:d1:cf:15:35:63:13:
         7f:03:c1:f4:f8:5f:c1:dd:a4:b6:f5:ee:ab:d8:13:cd:de:01:
         32:8d:96:df:d3:4d:77:c2:74:59:22:7f:40:92:7b:d6:1d:5b:
         bd:70:cd:a7:e6:92:42:70:c2:3a:85:9a:f3:1c:db:d7:e0:29:
         22:6f:15:48:9c:3d:f8:80:c3:01:75:58:76:e9:4c:07:bc:88:
         05:b0:82:a8:73:05:87:d4:70:40:ca:26:cc:53:71:72:0c:e5:
         f8:09:6a:fb:7f:f5:b0:3a:fc:70:56:20:1c:ae:ee:cf:14:7c:
         5d:a3:c8:a7:17:ce:8b:19:4c:7b:52:35:59:e3:c0:2c:83:9c:
         51:2d:4d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XNVtxa1tqi5ns9saCroVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWMxYTBlNjRlYTg0YjY5YTQwN2NmM2YyYTkyNTM4OGFi
NGVjYjQwHhcNMjUwNTExMDgwMTE3WhcNMjUwNTEyMDgwMTE3WjAzMTEwLwYDVQQD
EyhkYTJmYmQ4NGMwNGJkMmJmODZkZmM2MDFjNTE0ZTMzYmYzMjU2MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpoZLZWjsIXCoVeL1NME9CLNsr/g
bMxPFkYnQTvsrCf0LEnj/MZAAUL111hhYZvIk2pzween15XdskH+Q6g4yU30HkD0
ko10Lg2QPEqlJ9E/xnxADBBFjpi/UaDu7J4eJJsK1sgT/7qATEJJDKZjluKsQLll
n3cSOtGgfcX415KaCtelEUQAmP5G8Dib51Sa+pxosOHR+euaxqJgcp4aJAvE+pwK
o+Z3kxEVz9OCZbYQ15QGCWsHkBp5Sj1JsGssX/Sa6c0q/Ei16BfFxu5dseKejNnM
wvzSRbSDv8IOI+fVLTVzz8a2cUbBwaZ7K5cpHdBQL93g6AUs9XxWgSxI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNovvYTAS9K/ht/GAcUU4zvzJWEyMB8GA1UdIwQY
MBaAFBHsGg5k6oS2mkB88/KpJTiKtOy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDkt
ODMwMmVkODUwYzg3LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wY2Y3NDUtYTRkOC00MjNkLWEyZDktODMwMmVkODUwYzg3
LzEvRWV3YURtVHFoTGFhUUh6ejhxa2xPSXEwN0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOhMZyfq
1W8mqrqmtzL/PcchDcKGnHj8F3x6r8DRk0LG3EU9aFgct0eK67HcxfVledpyTDg4
c0YWCAmLqLV7ny86W54KgKSXHHeXl1PnJR5LJQeDd+ddxMQnUrZe5KrOmGAx5/Rb
RD+f2TMJO2XU9f/z4TjoWjzK0c8VNWMTfwPB9Phfwd2ktvXuq9gTzd4BMo2W39NN
d8J0WSJ/QJJ71h1bvXDNp+aSQnDCOoWa8xzb1+ApIm8VSJw9+IDDAXVYdulMB7yI
BbCCqHMFh9RwQMomzFNxcgzl+Alq+3/1sDr8cFYgHK7uzxR8XaPIpxfOixlMe1I1
WePALIOcUS1N0Q==
-----END CERTIFICATE-----
Generated at Sun May 11 15:20:22 2025 by rpki-client