Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          TEYMgNRL157cyoXvLseEr///N7AiRGVohAFnpPph3l0=
Subject key identifier:   B7:CF:3A:70:37:52:F0:51:E1:6E:79:AE:69:E2:95:C3:66:26:07:86
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       0197752E01A6CEE6319F493C1072843ACBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0704
Signing time:             Sun 15 Jun 2025 20:00:38 +0000
Manifest this update:     Sun 15 Jun 2025 20:00:38 +0000
Manifest next update:     Mon 16 Jun 2025 20:00:38 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: k6wFVBkq49sXIyyEUP1SxXnXEfDOYiJu6qAAg3AHH3o=)
                          2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:2e:01:a6:ce:e6:31:9f:49:3c:10:72:84:3a:cb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Jun 15 20:00:38 2025 GMT
            Not After : Jun 16 20:00:38 2025 GMT
        Subject: CN=b7cf3a703752f051e16e79ae69e295c366260786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:52:a2:41:0f:80:f7:99:39:8a:cd:97:4f:
                    7a:91:fe:c1:15:a3:f4:df:6d:5d:b1:f7:a6:0d:e7:
                    cd:35:a6:7b:7d:54:b1:48:c7:16:06:ec:ad:3c:25:
                    6f:54:d8:32:83:b7:89:64:ff:a6:1d:96:0e:7a:7b:
                    0e:8b:52:f8:68:a9:cd:8a:b1:ee:7a:23:a7:21:c0:
                    5d:fb:f0:95:93:c8:12:96:34:36:8c:ff:b3:2f:c3:
                    a2:50:90:6f:a1:15:84:5e:db:5e:91:20:e6:cc:02:
                    e7:b4:13:0c:1b:1b:21:8d:28:4f:4e:0e:3e:3e:e9:
                    1d:f0:e7:cc:6f:9c:82:73:0b:86:ef:e5:ed:a9:c2:
                    ea:5e:ff:ad:a3:9c:db:4d:2a:1d:b1:2c:14:e5:c5:
                    9a:d8:53:8f:49:b8:6b:7a:bd:5c:07:16:80:b5:36:
                    17:03:7d:8a:83:78:ab:02:74:d7:c5:78:2f:13:0f:
                    cc:8f:75:31:57:e5:33:31:83:7f:81:c5:db:30:a7:
                    3b:f4:71:4b:7c:c2:41:7a:1d:04:94:6b:bb:b3:68:
                    57:98:87:66:da:41:db:78:9f:dd:70:59:7d:24:66:
                    7e:ff:3a:69:ae:f9:9d:9e:f0:ad:cd:3b:f1:f9:59:
                    7a:96:c5:7b:d0:58:f0:a2:35:75:b3:73:72:8d:32:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CF:3A:70:37:52:F0:51:E1:6E:79:AE:69:E2:95:C3:66:26:07:86
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:25:12:df:bb:2a:a8:c1:90:ff:d5:f9:35:0d:88:f4:88:
         04:27:96:52:98:a4:44:aa:5e:f7:ee:45:fd:59:02:4a:22:0c:
         fb:15:d2:84:ce:cf:d7:88:c0:d2:d4:75:46:1e:41:1e:d9:97:
         b5:83:ea:b0:39:88:37:c3:2b:49:fe:01:e8:35:0a:0d:77:dc:
         7e:a9:e7:1a:82:d0:42:06:f2:ed:ca:39:47:0d:7e:4e:dd:a0:
         23:a9:b8:40:c2:f9:65:44:4c:c4:10:63:e0:dc:b2:0b:66:3a:
         66:fd:cb:fa:27:63:e0:f6:1f:67:45:2a:8b:5d:7d:77:24:d6:
         0b:6c:df:03:5c:a3:c3:2a:6c:e0:5d:bc:df:c2:b9:01:8c:52:
         f2:94:3c:b2:a4:42:37:33:07:4e:43:fe:07:b6:da:74:ff:9e:
         3f:0d:4c:d3:24:5e:02:e8:3b:96:13:34:f9:79:5c:86:b6:b6:
         cd:c6:19:ae:f9:a6:c3:4c:67:1d:2c:dc:e7:41:14:33:aa:c7:
         06:9f:60:64:03:a7:a0:61:69:db:97:11:16:1e:77:67:1d:c0:
         27:a4:0e:ff:14:2b:ca:e4:d3:17:c6:ed:9d:3a:71:4e:20:9f:
         3c:3f:ec:2b:a9:a9:79:cf:ec:6e:21:13:da:34:06:3c:c9:92:
         64:48:8f:c1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZd1LgGmzuYxn0k8EHKEOsvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjUwNjE1MjAwMDM4WhcNMjUwNjE2MjAwMDM4WjAzMTEwLwYDVQQD
EyhiN2NmM2E3MDM3NTJmMDUxZTE2ZTc5YWU2OWUyOTVjMzY2MjYwNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznlSokEPgPeZOYrNl096kf7BFaP0
321dsfemDefNNaZ7fVSxSMcWBuytPCVvVNgyg7eJZP+mHZYOensOi1L4aKnNirHu
eiOnIcBd+/CVk8gSljQ2jP+zL8OiUJBvoRWEXttekSDmzALntBMMGxshjShPTg4+
Pukd8OfMb5yCcwuG7+XtqcLqXv+to5zbTSodsSwU5cWa2FOPSbhrer1cBxaAtTYX
A32Kg3irAnTXxXgvEw/Mj3UxV+UzMYN/gcXbMKc79HFLfMJBeh0ElGu7s2hXmIdm
2kHbeJ/dcFl9JGZ+/zpprvmdnvCtzTvx+Vl6lsV70FjwojV1s3NyjTLuhwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLfPOnA3UvBR4W55rmnilcNmJgeGMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5Yl
Et+7KqjBkP/V+TUNiPSIBCeWUpikRKpe9+5F/VkCSiIM+xXShM7P14jA0tR1Rh5B
HtmXtYPqsDmIN8MrSf4B6DUKDXfcfqnnGoLQQgby7co5Rw1+Tt2gI6m4QML5ZURM
xBBj4NyyC2Y6Zv3L+idj4PYfZ0Uqi119dyTWC2zfA1yjwyps4F2838K5AYxS8pQ8
sqRCNzMHTkP+B7badP+ePw1M0yReAug7lhM0+Xlchra2zcYZrvmmw0xnHSzc50EU
M6rHBp9gZAOnoGFp25cRFh53Zx3AJ6QO/xQryuTTF8btnTpxTiCfPD/sK6mpec/s
biET2jQGPMmSZEiPwQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:39:38 2025 by rpki-client