Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          KYulwTFWFy2Yj3do5PKH88BZgx/2yOyKoKeN3Li1B5E=
Subject key identifier:   22:61:35:81:BC:9F:63:6C:8A:59:69:F5:D5:59:F9:46:F3:A2:0F:33
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       01976D06C0AC7A5EF8ECA0175C4360AC1D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          11B2
Signing time:             Sat 14 Jun 2025 06:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:48 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: DnfKRBcl1X7zo0HV2a2t+D0mkfxgXv8YZJJ+a23R3kw=)
                          3: 9F7dZYjOPi3rs5NLZXUfov8PBWU.roa (hash: j/9WP0wPl17yaC72aPiHSbkKMZUDz6oycbmdGLPUu6A=)
                          4: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          5: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
                          6: jt3uxkc0nzbTvWbsX7a361YE_o0.roa (hash: DdTJIeWIH2giv5XExuVH/S2lYFHAruTpFnXLNoUPjwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:c0:ac:7a:5e:f8:ec:a0:17:5c:43:60:ac:1d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Jun 14 06:00:48 2025 GMT
            Not After : Jun 15 06:00:48 2025 GMT
        Subject: CN=22613581bc9f636c8a5969f5d559f946f3a20f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:ea:6a:97:13:91:9a:43:c3:1f:0c:62:a3:
                    fd:11:98:7e:0c:64:4f:b9:fe:1d:15:01:13:70:c3:
                    42:4f:ae:54:eb:f4:50:2c:5f:5a:0d:af:31:7d:77:
                    6f:3b:6b:35:6c:b8:67:1e:ec:6d:e8:22:94:de:c8:
                    16:1b:1f:1d:d4:c5:78:96:b4:77:1b:92:2b:98:f8:
                    71:bf:78:0e:0e:11:59:d2:ed:9e:06:38:99:75:8b:
                    59:30:9e:2c:19:39:e8:82:de:eb:08:fe:10:51:f8:
                    86:82:c8:f8:13:dc:e7:c4:4e:e4:aa:48:a0:04:44:
                    03:e2:90:05:d3:83:c2:7b:31:2e:86:5a:b7:c2:27:
                    75:95:b0:9a:7c:25:58:be:16:43:3c:c3:73:22:60:
                    6c:c5:f7:18:9a:3b:80:23:6e:37:76:f9:15:48:a9:
                    3b:c0:ba:af:44:b4:1c:3d:4a:16:0b:8a:cf:09:4c:
                    c5:11:46:76:82:81:5d:94:bd:96:c5:98:cc:1e:7d:
                    88:5e:f2:75:fa:f1:01:84:ab:90:13:ac:1f:b0:6c:
                    c0:d6:41:70:3f:0e:29:0e:a5:09:92:04:14:4f:34:
                    03:2f:66:61:31:fe:b9:1d:20:97:e1:28:f7:04:fe:
                    a8:97:7c:0d:bf:d5:f9:60:d6:cf:83:8c:17:19:86:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:61:35:81:BC:9F:63:6C:8A:59:69:F5:D5:59:F9:46:F3:A2:0F:33
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:fe:d7:75:60:4a:d7:ba:50:0e:0a:31:25:18:3e:c6:3d:
         2c:fa:22:8a:6c:e2:83:d1:3d:5d:dc:6e:e5:a3:1e:02:72:31:
         29:5f:56:78:8f:cd:26:f3:fd:39:30:5f:82:42:bc:fe:3b:0c:
         74:11:17:03:fd:92:f2:08:e4:a3:6e:44:c3:4d:38:ca:9b:96:
         64:bb:37:cb:22:c0:c6:6d:97:84:90:15:84:93:f2:68:bd:12:
         73:f9:1f:b1:e1:d1:dd:ea:4a:69:e7:8b:52:b1:e0:8b:c8:28:
         b9:47:fe:b0:10:a3:38:f1:56:a9:ca:bb:eb:de:16:ce:17:aa:
         65:4d:6c:3a:40:e2:26:1c:27:ac:82:c4:71:c3:47:6c:df:09:
         6a:50:af:aa:19:50:20:6f:30:85:b2:eb:7d:ac:3a:05:dc:95:
         53:69:af:82:f7:ee:79:a3:5a:3f:52:06:7b:4b:f5:1e:4b:f9:
         80:75:8f:73:ab:9f:59:60:52:5b:a3:aa:5a:e0:0c:56:c5:c5:
         e0:48:1e:67:ba:60:0f:45:cd:f9:2c:80:88:da:d8:d9:cf:ae:
         e8:73:7e:1f:27:3d:65:bc:d8:a9:7e:eb:d1:47:af:2f:5d:2e:
         d4:ea:fa:6b:0f:40:89:b4:09:54:d3:89:64:cb:ff:d1:ae:1b:
         fb:45:71:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBsCsel747KAXXENgrB2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0
NzhjYjEwHhcNMjUwNjE0MDYwMDQ4WhcNMjUwNjE1MDYwMDQ4WjAzMTEwLwYDVQQD
EygyMjYxMzU4MWJjOWY2MzZjOGE1OTY5ZjVkNTU5Zjk0NmYzYTIwZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0PqapcTkZpDwx8MYqP9EZh+DGRP
uf4dFQETcMNCT65U6/RQLF9aDa8xfXdvO2s1bLhnHuxt6CKU3sgWGx8d1MV4lrR3
G5IrmPhxv3gODhFZ0u2eBjiZdYtZMJ4sGTnogt7rCP4QUfiGgsj4E9znxE7kqkig
BEQD4pAF04PCezEuhlq3wid1lbCafCVYvhZDPMNzImBsxfcYmjuAI243dvkVSKk7
wLqvRLQcPUoWC4rPCUzFEUZ2goFdlL2WxZjMHn2IXvJ1+vEBhKuQE6wfsGzA1kFw
Pw4pDqUJkgQUTzQDL2ZhMf65HSCX4Sj3BP6ol3wNv9X5YNbPg4wXGYaGXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJhNYG8n2Nsillp9dVZ+Ubzog8zMB8GA1UdIwQY
MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt
YTM4YjY3OTVmYjI0LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0
LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8X+13Vg
Ste6UA4KMSUYPsY9LPoiimzig9E9Xdxu5aMeAnIxKV9WeI/NJvP9OTBfgkK8/jsM
dBEXA/2S8gjko25Ew004ypuWZLs3yyLAxm2XhJAVhJPyaL0Sc/kfseHR3epKaeeL
UrHgi8gouUf+sBCjOPFWqcq7694WzheqZU1sOkDiJhwnrILEccNHbN8JalCvqhlQ
IG8whbLrfaw6BdyVU2mvgvfueaNaP1IGe0v1Hkv5gHWPc6ufWWBSW6OqWuAMVsXF
4EgeZ7pgD0XN+SyAiNrY2c+u6HN+Hyc9ZbzYqX7r0UevL10u1Or6aw9AibQJVNOJ
ZMv/0a4b+0VxZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:39 2025 by rpki-client