Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File:                     tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier:          CbCfaweTEDbUt2kJ21yh499MFOtlC3zhp+Dz+zTzBis=
Subject key identifier:   4A:98:F1:5A:38:D6:E0:91:16:69:AE:F1:97:D9:8C:EB:00:9F:AC:F2
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer:       /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial:       019769CE6BFC370B79E63601F3434A288784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number:          1197
Signing time:             Fri 13 Jun 2025 15:00:24 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:24 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:24 +0000
Files and hashes:         1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
                          2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: +PdYyA1mOglcTn4oUxc7dnxXPJj64KRYmYUx0b1CbHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:6b:fc:37:0b:79:e6:36:01:f3:43:4a:28:87:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
        Validity
            Not Before: Jun 13 15:00:24 2025 GMT
            Not After : Jun 14 15:00:24 2025 GMT
        Subject: CN=4a98f15a38d6e0911669aef197d98ceb009facf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:d7:06:12:7e:da:f1:6b:d5:32:47:3d:af:
                    a4:f7:9f:fc:15:47:04:04:62:6f:14:04:1a:49:29:
                    20:78:14:72:30:7d:bd:70:13:d4:f8:7a:3e:56:56:
                    8f:79:ed:2f:01:bc:f4:70:20:2d:0f:e2:cd:31:8a:
                    a1:77:58:fa:21:78:1f:e4:a6:14:ab:60:42:a3:6b:
                    f5:e5:80:e0:74:18:5d:48:9e:8a:c8:58:09:77:b7:
                    c5:ee:c8:45:f2:7b:98:e1:da:b3:3c:1f:65:36:f0:
                    f1:75:c7:d6:f7:0b:c4:37:bc:17:97:54:14:a4:f7:
                    00:63:51:f0:c3:0e:1f:e0:2e:01:d2:f8:c5:c1:6c:
                    d0:b0:56:5a:7c:6a:7f:3c:7a:33:3f:a1:ac:fd:cd:
                    2b:55:13:02:2c:c5:bd:94:50:c4:e8:52:b5:8e:5b:
                    cc:6d:df:ae:b9:26:0d:8e:9b:a2:bf:b5:d7:56:79:
                    05:44:88:65:dd:9a:d0:3d:bb:4a:9f:30:e2:00:07:
                    0f:19:70:1e:92:8b:4a:88:bc:72:6c:e9:0c:b6:1b:
                    ba:14:d2:af:f1:65:05:1e:26:63:8c:7d:28:94:52:
                    f7:d7:e7:16:70:34:72:2f:0b:5e:73:02:30:d3:96:
                    dc:2f:1a:f2:5c:65:9d:87:4c:86:c8:37:fc:f3:a6:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:98:F1:5A:38:D6:E0:91:16:69:AE:F1:97:D9:8C:EB:00:9F:AC:F2
            X509v3 Authority Key Identifier:
                keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:57:f8:5b:4a:d7:23:fe:17:06:ea:ad:0c:00:90:03:e6:43:
         82:65:41:cd:fd:a5:25:c4:d5:f1:1d:28:be:cb:54:e8:54:2a:
         f7:b3:5a:dd:c0:69:3e:1d:c6:6b:49:0c:ac:9b:54:55:9d:a9:
         b8:50:11:d2:3e:a0:a9:bd:67:1b:31:f8:fe:30:16:a7:d0:a6:
         3d:68:9e:52:7a:da:64:02:ea:39:e0:18:f9:55:06:c9:4d:21:
         c6:19:d9:95:be:67:21:18:fd:e4:d7:86:28:0e:44:37:f3:c5:
         d1:f8:34:fd:c3:c1:35:b6:d4:ea:9c:18:e3:b6:8d:b2:46:62:
         73:72:73:0d:f3:c7:0f:56:db:be:18:20:b9:cf:1c:5e:f4:9f:
         3c:b8:33:73:af:82:16:01:d8:94:81:70:dc:7e:c5:1b:ce:f0:
         c0:b7:86:f1:c5:07:20:56:2c:7d:8c:6e:21:8b:48:a1:f7:30:
         ce:3b:a3:8f:5c:61:c2:ec:c8:99:99:26:d7:9f:4a:f3:0d:03:
         fe:44:66:53:7a:ed:d8:22:fa:44:b1:f7:5e:ad:c0:e6:af:53:
         1f:ad:6b:d3:9c:20:10:c6:f5:c0:8c:fd:1b:e5:70:11:58:82:
         38:66:16:f5:4a:f9:55:78:6f:90:d7:9a:2d:1b:3b:49:41:fc:
         67:17:68:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzmv8Nwt55jYB80NKKIeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj
NjcwNzMwHhcNMjUwNjEzMTUwMDI0WhcNMjUwNjE0MTUwMDI0WjAzMTEwLwYDVQQD
Eyg0YTk4ZjE1YTM4ZDZlMDkxMTY2OWFlZjE5N2Q5OGNlYjAwOWZhY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi/XBhJ+2vFr1TJHPa+k95/8FUcE
BGJvFAQaSSkgeBRyMH29cBPU+Ho+VlaPee0vAbz0cCAtD+LNMYqhd1j6IXgf5KYU
q2BCo2v15YDgdBhdSJ6KyFgJd7fF7shF8nuY4dqzPB9lNvDxdcfW9wvEN7wXl1QU
pPcAY1Hwww4f4C4B0vjFwWzQsFZafGp/PHozP6Gs/c0rVRMCLMW9lFDE6FK1jlvM
bd+uuSYNjpuiv7XXVnkFRIhl3ZrQPbtKnzDiAAcPGXAekotKiLxybOkMthu6FNKv
8WUFHiZjjH0olFL31+cWcDRyLwtecwIw05bcLxryXGWdh0yGyDf886aFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqY8Vo41uCRFmmu8ZfZjOsAn6zyMB8GA1UdIwQY
MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt
Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl
LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVf4W0rX
I/4XBuqtDACQA+ZDgmVBzf2lJcTV8R0ovstU6FQq97Na3cBpPh3Ga0kMrJtUVZ2p
uFAR0j6gqb1nGzH4/jAWp9CmPWieUnraZALqOeAY+VUGyU0hxhnZlb5nIRj95NeG
KA5EN/PF0fg0/cPBNbbU6pwY47aNskZic3JzDfPHD1bbvhgguc8cXvSfPLgzc6+C
FgHYlIFw3H7FG87wwLeG8cUHIFYsfYxuIYtIofcwzjujj1xhwuzImZkm159K8w0D
/kRmU3rt2CL6RLH3Xq3A5q9TH61r05wgEMb1wIz9G+VwEViCOGYW9Ur5VXhvkNea
LRs7SUH8Zxdoxw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:18 2025 by rpki-client