Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          j28KK3B4ZAXYiQbwpCABSEVd0AK7PYwXtujOisWokEU=
Subject key identifier:   D2:0F:F7:72:A3:96:B8:FF:2E:A9:B9:AF:2A:D5:F0:D1:30:42:9C:C3
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       01976E190F51AF472370B592D55D52055B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0C13
Signing time:             Sat 14 Jun 2025 11:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:25 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: HSW1WsaV0nQxLTxobdG5CY1nXI5j0T8XC+deYahU+sw=)
                          2: HN5Ai7UYMPmItHMFu1UIru4_irQ.roa (hash: uhP51xaan/wVcnPelAPmsRFjLXlTf1vXwd1upBi15zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:0f:51:af:47:23:70:b5:92:d5:5d:52:05:5b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Jun 14 11:00:25 2025 GMT
            Not After : Jun 15 11:00:25 2025 GMT
        Subject: CN=d20ff772a396b8ff2ea9b9af2ad5f0d130429cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:f3:13:03:76:e5:41:e8:78:c2:4b:5b:d6:
                    19:20:b0:ed:2f:d4:cc:68:dd:e0:5a:3b:0f:a4:27:
                    f0:f5:e3:c3:01:e4:4f:51:69:02:3a:7d:f7:8b:d8:
                    43:cd:3a:b3:de:75:dd:cc:63:e2:68:bd:b9:ae:29:
                    8d:e1:20:20:92:64:d9:61:b7:21:c2:ad:ab:f9:d0:
                    99:55:85:f4:29:e7:1a:43:ae:b2:6f:23:9a:b8:8e:
                    29:4e:dc:66:13:c4:6f:aa:f4:63:fe:d8:6a:2c:c9:
                    5a:72:05:b6:07:01:ce:8d:bb:27:ed:b4:50:5f:31:
                    ac:9d:c1:3f:24:0a:ac:67:7f:cb:53:50:dd:88:54:
                    85:bd:2a:bb:27:00:79:e3:a0:52:11:fc:7b:10:ae:
                    c9:42:4f:8c:c4:24:95:fc:3d:ef:b7:8e:1f:46:8f:
                    74:d4:3e:95:a8:c7:a3:11:4b:06:75:19:38:c3:87:
                    ff:68:a4:d8:87:5c:7e:44:c6:4b:85:20:38:5d:f3:
                    83:1e:b1:c1:7f:30:f3:ba:8a:cd:c3:cc:bf:c0:22:
                    48:33:03:1d:e2:61:2a:49:ab:c5:c1:8f:22:09:29:
                    ad:25:87:e2:c6:c5:d3:13:f6:87:d7:af:8a:6e:6b:
                    c5:ac:f4:24:5f:29:05:01:12:07:1b:52:4d:80:04:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0F:F7:72:A3:96:B8:FF:2E:A9:B9:AF:2A:D5:F0:D1:30:42:9C:C3
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:15:30:f8:9b:08:78:1f:5a:61:65:fb:e7:47:ab:22:51:
         b9:6f:b9:47:a9:63:e8:e1:bd:2a:18:8e:97:0e:75:f3:2f:c8:
         ab:4f:d3:27:28:81:f0:2d:80:c9:34:08:f1:ad:e7:a1:71:dc:
         5b:5e:98:a0:b5:cb:e8:a1:c2:7b:7f:63:71:59:ea:f2:62:19:
         fb:fb:b3:c4:4f:2c:fa:61:92:79:10:2b:0c:24:7f:27:5d:6d:
         c4:1c:4c:26:60:92:88:93:ac:68:a2:bc:f5:9a:10:eb:f9:34:
         9b:c5:4f:33:0b:93:aa:f5:32:cc:95:32:37:08:44:e6:65:12:
         c0:95:70:df:75:4e:f7:98:82:4a:0d:f8:3a:bd:e5:f2:1d:5b:
         20:10:0a:11:3e:84:ca:9d:e5:03:fd:a0:89:8c:7a:87:e4:bc:
         3b:22:3c:01:1b:b5:d9:f9:e6:3c:47:af:47:fe:60:2a:0b:a4:
         f5:20:2d:8f:f1:24:b7:d9:96:bf:a6:a6:a2:bc:17:6b:df:7f:
         31:ce:51:f1:2a:50:ed:98:e7:64:42:77:bc:de:f5:fd:27:e2:
         a4:93:e5:36:d6:72:22:a3:b5:0d:88:c1:08:6e:3e:01:89:52:
         6c:2a:66:42:81:03:bf:fc:26:c9:62:4e:bb:3e:82:bb:bb:ac:
         ac:e7:60:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduGQ9Rr0cjcLWS1V1SBVucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDljY2VmZjRhNDhhM2RhYjAyNDA2N2UxNzYwZGJmNTg2
NTBmZGEwHhcNMjUwNjE0MTEwMDI1WhcNMjUwNjE1MTEwMDI1WjAzMTEwLwYDVQQD
EyhkMjBmZjc3MmEzOTZiOGZmMmVhOWI5YWYyYWQ1ZjBkMTMwNDI5Y2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDbzEwN25UHoeMJLW9YZILDtL9TM
aN3gWjsPpCfw9ePDAeRPUWkCOn33i9hDzTqz3nXdzGPiaL25rimN4SAgkmTZYbch
wq2r+dCZVYX0KecaQ66ybyOauI4pTtxmE8RvqvRj/thqLMlacgW2BwHOjbsn7bRQ
XzGsncE/JAqsZ3/LU1DdiFSFvSq7JwB546BSEfx7EK7JQk+MxCSV/D3vt44fRo90
1D6VqMejEUsGdRk4w4f/aKTYh1x+RMZLhSA4XfODHrHBfzDzuorNw8y/wCJIMwMd
4mEqSavFwY8iCSmtJYfixsXTE/aH16+KbmvFrPQkXykFARIHG1JNgASs6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIP93Kjlrj/Lqm5ryrV8NEwQpzDMB8GA1UdIwQY
MBaAFBNJzO/0pIo9qwJAZ+F2Db9YZQ/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUt
ZDJhZTJjMzM2MzI4LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMzA2ZDAtNGEyMC00YmNmLTg0OGUtZDJhZTJjMzM2MzI4
LzEvRTBuTTdfU2tpajJyQWtCbjRYWU52MWhsRDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+0VMPib
CHgfWmFl++dHqyJRuW+5R6lj6OG9KhiOlw518y/Iq0/TJyiB8C2AyTQI8a3noXHc
W16YoLXL6KHCe39jcVnq8mIZ+/uzxE8s+mGSeRArDCR/J11txBxMJmCSiJOsaKK8
9ZoQ6/k0m8VPMwuTqvUyzJUyNwhE5mUSwJVw33VO95iCSg34Or3l8h1bIBAKET6E
yp3lA/2giYx6h+S8OyI8ARu12fnmPEevR/5gKguk9SAtj/Ekt9mWv6amorwXa99/
Mc5R8SpQ7ZjnZEJ3vN71/SfipJPlNtZyIqO1DYjBCG4+AYlSbCpmQoEDv/wmyWJO
uz6Cu7usrOdgRw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:20 2025 by rpki-client