Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File:                     uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier:          nT2sAZTuz0n8S0sd3UZpwgiB1tF2XFUVZRmVh+/DAvM=
Subject key identifier:   EC:A1:DE:A8:C8:29:1B:69:4F:1B:F2:04:AF:90:93:1C:6D:13:B8:F5
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer:       /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial:       01976E8778B96A74CD31ECDCE3EA29B8EA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number:          1047
Signing time:             Sat 14 Jun 2025 13:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 13:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 13:01:01 +0000
Files and hashes:         1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
                          2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: qkU36Oru95VhZc6TEgk5ClvoyuBtNZGEktQDHq7/4UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:78:b9:6a:74:cd:31:ec:dc:e3:ea:29:b8:ea:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
        Validity
            Not Before: Jun 14 13:01:01 2025 GMT
            Not After : Jun 15 13:01:01 2025 GMT
        Subject: CN=eca1dea8c8291b694f1bf204af90931c6d13b8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:6a:75:60:13:0e:c9:8e:59:37:dd:e4:c1:
                    53:7d:37:28:e9:5c:ef:50:7b:a5:82:d3:93:2c:bb:
                    84:ee:2a:80:7a:28:86:f1:0a:d7:4c:58:38:de:89:
                    27:c0:7d:f5:af:d9:d9:03:32:a1:1b:7f:55:bf:a6:
                    5a:63:48:d5:a2:ee:fb:e9:7e:dd:a2:83:8c:15:de:
                    1e:3d:d9:ed:93:9d:22:37:c6:5c:96:21:29:08:2e:
                    36:3c:34:9a:da:4d:11:e8:44:4a:f7:b6:a6:6b:7d:
                    34:ed:e5:b3:fe:07:bc:ff:cf:36:70:b1:17:42:f5:
                    13:99:45:32:27:8e:fb:4f:7f:3e:5a:4f:2d:fb:10:
                    da:50:7a:d8:8c:83:b6:89:0c:f4:73:7d:c6:4c:de:
                    f3:b5:74:d8:ee:bb:ea:30:b6:52:cd:4d:8b:cb:4e:
                    d5:2a:2a:ab:54:76:8a:bd:08:fe:85:29:0c:3b:e9:
                    95:69:43:45:ea:52:9e:7e:d0:26:58:83:f5:46:91:
                    8b:3b:6f:b2:bf:27:62:88:de:7d:21:bd:d1:7b:bd:
                    f0:01:c2:e6:bb:55:3e:07:61:3a:8a:b2:70:6f:62:
                    94:24:7e:20:c4:86:d0:91:26:3d:0b:a9:7b:40:57:
                    a9:db:a8:39:20:d8:3c:e5:7e:09:db:b4:96:c2:3c:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:DE:A8:C8:29:1B:69:4F:1B:F2:04:AF:90:93:1C:6D:13:B8:F5
            X509v3 Authority Key Identifier:
                keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:df:d8:09:9d:06:2a:32:1f:6b:cc:fe:cb:ab:9c:f7:d1:52:
         82:75:f2:4c:d1:e0:1e:82:45:8c:24:82:63:31:a6:fe:e4:64:
         3d:d1:aa:b2:a4:59:68:ac:5b:e8:36:6a:ae:65:65:10:e1:30:
         0a:86:13:7d:e0:3a:68:4d:be:46:ca:60:f2:1f:fc:78:d3:7a:
         d2:78:75:55:ef:4a:cc:64:83:ab:b5:03:78:d3:83:50:44:b8:
         4b:8c:37:d9:d6:30:ca:79:96:6b:43:0c:f8:a3:90:88:03:42:
         dc:d3:fe:1a:eb:e8:0d:c4:35:32:90:8a:18:1c:a4:b8:df:ce:
         32:ca:32:34:bd:33:1b:4f:51:db:e6:0d:8d:49:7f:95:94:9f:
         3a:2c:aa:1c:9f:96:61:78:0f:9e:56:d0:b8:38:21:74:2e:cf:
         79:79:0c:b3:d1:ee:37:7b:6d:dc:25:f6:ad:d0:85:ce:d6:fb:
         98:70:69:c0:18:df:32:27:f6:14:56:bf:62:cf:75:73:7f:8e:
         27:56:df:0c:0b:57:6e:bd:a9:5b:c1:28:2f:6b:84:51:c2:15:
         90:cb:24:62:48:93:7f:55:c8:9c:c6:8f:95:0a:6a:0a:68:b1:
         6a:49:2f:cf:a6:10:3b:8f:c4:59:d8:fa:50:46:29:92:8f:ab:
         4f:21:5f:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh3i5anTNMezc4+opuOqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTllOTYxMjJmMjgzODE1YzFhNTZmZWNjMzQ5NDQ3YTI4
ODljZDkwHhcNMjUwNjE0MTMwMTAxWhcNMjUwNjE1MTMwMTAxWjAzMTEwLwYDVQQD
EyhlY2ExZGVhOGM4MjkxYjY5NGYxYmYyMDRhZjkwOTMxYzZkMTNiOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs1qdWATDsmOWTfd5MFTfTco6Vzv
UHulgtOTLLuE7iqAeiiG8QrXTFg43oknwH31r9nZAzKhG39Vv6ZaY0jVou776X7d
ooOMFd4ePdntk50iN8ZcliEpCC42PDSa2k0R6ERK97ama3007eWz/ge8/882cLEX
QvUTmUUyJ477T38+Wk8t+xDaUHrYjIO2iQz0c33GTN7ztXTY7rvqMLZSzU2Ly07V
KiqrVHaKvQj+hSkMO+mVaUNF6lKeftAmWIP1RpGLO2+yvydiiN59Ib3Re73wAcLm
u1U+B2E6irJwb2KUJH4gxIbQkSY9C6l7QFep26g5INg85X4J27SWwjxQRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyh3qjIKRtpTxvyBK+QkxxtE7j1MB8GA1UdIwQY
MBaAFLkZ6WEi8oOBXBpW/sw0lEeiiJzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3Mzgt
NWNlYzM2ZmY4ZTczLzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3MzgtNWNlYzM2ZmY4ZTcz
LzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd/YCZ0G
KjIfa8z+y6uc99FSgnXyTNHgHoJFjCSCYzGm/uRkPdGqsqRZaKxb6DZqrmVlEOEw
CoYTfeA6aE2+Rspg8h/8eNN60nh1Ve9KzGSDq7UDeNODUES4S4w32dYwynmWa0MM
+KOQiANC3NP+GuvoDcQ1MpCKGBykuN/OMsoyNL0zG09R2+YNjUl/lZSfOiyqHJ+W
YXgPnlbQuDghdC7PeXkMs9HuN3tt3CX2rdCFztb7mHBpwBjfMif2FFa/Ys91c3+O
J1bfDAtXbr2pW8EoL2uEUcIVkMskYkiTf1XInMaPlQpqCmixakkvz6YQO4/EWdj6
UEYpko+rTyFfFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:51:57 2025 by rpki-client