Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
File:                     ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft (raw, json)
Hash identifier:          CcQp+lFGQab15Bxj8gO6c+smhXAXFYufPSlTF2qSATY=
Subject key identifier:   67:35:ED:E2:CD:DB:CB:E9:76:42:67:57:5F:F1:51:96:3D:EF:AB:08
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Certificate issuer:       /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial:       019768F2CBE9402C7F6DD1D0B9916BB18188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
Manifest number:          42
Signing time:             Fri 13 Jun 2025 11:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:31 +0000
Files and hashes:         1: ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl (hash: F9kHYAoN17m7ZfdxAFfn0LAKcOzqawO1TvfGhY2Lkd8=)
                          2: ml7ptFelR5O2ljd6S7JCFvTls6E.roa (hash: cO+LDJdHBbZdrBcqhhT12vaNmyrU4QVcTJjXWjJFtzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:cb:e9:40:2c:7f:6d:d1:d0:b9:91:6b:b1:81:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
        Validity
            Not Before: Jun 13 11:00:31 2025 GMT
            Not After : Jun 14 11:00:31 2025 GMT
        Subject: CN=6735ede2cddbcbe9764267575ff151963defab08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:63:26:d3:2a:77:b6:40:45:15:49:e5:14:
                    af:35:c9:57:5c:61:68:e6:05:4d:53:98:cd:4a:bd:
                    88:7f:09:88:2d:81:ab:89:83:77:9e:78:a7:c0:5a:
                    0b:04:bf:ed:5d:b3:94:6a:a8:16:2a:e0:7e:8a:f3:
                    2a:5c:17:d1:ed:7d:1d:cd:47:96:47:85:ae:63:c5:
                    6b:81:6b:c3:e0:70:cc:bc:6a:be:75:eb:2b:88:3d:
                    79:d3:99:7c:10:52:dd:b8:83:ef:43:b4:2f:34:30:
                    16:69:95:40:b1:8a:06:34:7d:45:b2:02:ac:0d:53:
                    c2:30:af:e9:16:fd:ea:81:20:e2:4c:03:91:33:75:
                    87:b8:6e:67:f8:ab:e1:43:1f:15:ae:a0:90:f8:bb:
                    0c:fd:fb:cb:7d:24:2e:36:4e:73:72:7f:a1:58:99:
                    68:d3:8b:c2:d4:ba:c1:8b:69:95:b2:cf:21:b3:00:
                    5b:66:4c:33:c3:17:1d:c3:30:0d:22:40:f2:7a:7e:
                    44:bf:4a:f0:02:2c:cb:46:b8:ea:c4:34:25:f5:6e:
                    2f:1e:fe:77:40:65:90:6e:f7:77:84:bd:1b:9a:15:
                    4c:34:b9:c6:92:e3:4c:55:30:f2:44:d2:c7:1b:02:
                    cf:2b:4f:22:8c:56:9e:54:4b:07:3d:5f:f6:4d:5a:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:35:ED:E2:CD:DB:CB:E9:76:42:67:57:5F:F1:51:96:3D:EF:AB:08
            X509v3 Authority Key Identifier:
                keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2d:12:4f:1f:c9:fc:17:af:5d:b9:b0:d6:f7:06:79:7c:b7:
         9d:bb:01:dc:62:53:3c:0c:3d:37:de:3d:e0:d2:19:f6:3c:ed:
         6c:94:54:ef:a0:bd:7d:80:70:66:f9:20:50:9e:85:2f:94:a1:
         bb:11:57:c3:2a:f0:a1:42:19:ba:d8:a6:4c:01:c4:64:37:b2:
         26:38:59:30:ad:04:81:bc:38:0e:38:0b:ae:14:44:6a:bb:75:
         98:80:d5:86:57:b0:31:8c:5d:68:cf:7d:49:64:eb:d1:72:a4:
         b1:20:d9:00:7f:82:76:a0:53:57:b9:0a:4b:53:b7:e6:7b:10:
         57:8e:bf:5e:d7:85:67:b1:98:b2:b4:6c:3c:51:80:75:79:93:
         cf:d3:93:31:c7:9a:8d:ba:ee:3a:d4:e3:5d:0f:a4:74:b9:96:
         3a:ec:56:eb:05:e6:d8:7c:e2:58:a5:94:1a:a9:f3:41:1a:f5:
         bb:52:b1:0c:ea:f6:89:a6:53:cf:2c:da:1b:3d:79:43:7b:0c:
         eb:d5:65:fd:2e:f6:af:cf:7e:b3:1c:f6:49:4e:d1:f1:fd:7f:
         3e:53:67:14:37:b6:43:2a:65:b8:34:f8:3e:77:c7:35:95:10:
         79:e0:60:91:a9:d6:1a:72:ee:c9:44:8d:77:98:c2:2e:75:cb:
         3b:cf:03:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8svpQCx/bdHQuZFrsYGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhM2Y4OTcxMTc1OTlmZTgzOWE5OTQwZTgxYTE3ODgyNDRj
YWFkMDYwHhcNMjUwNjEzMTEwMDMxWhcNMjUwNjE0MTEwMDMxWjAzMTEwLwYDVQQD
Eyg2NzM1ZWRlMmNkZGJjYmU5NzY0MjY3NTc1ZmYxNTE5NjNkZWZhYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FNjJtMqd7ZARRVJ5RSvNclXXGFo
5gVNU5jNSr2IfwmILYGriYN3nninwFoLBL/tXbOUaqgWKuB+ivMqXBfR7X0dzUeW
R4WuY8VrgWvD4HDMvGq+desriD1505l8EFLduIPvQ7QvNDAWaZVAsYoGNH1FsgKs
DVPCMK/pFv3qgSDiTAORM3WHuG5n+KvhQx8VrqCQ+LsM/fvLfSQuNk5zcn+hWJlo
04vC1LrBi2mVss8hswBbZkwzwxcdwzANIkDyen5Ev0rwAizLRrjqxDQl9W4vHv53
QGWQbvd3hL0bmhVMNLnGkuNMVTDyRNLHGwLPK08ijFaeVEsHPV/2TVokCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc17eLN28vpdkJnV1/xUZY976sIMB8GA1UdIwQY
MBaAFHo/iXEXWZ/oOamUDoGheIJEyq0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDIt
YjJhZmVhNmQwNmFiLzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wNzg5NjAtM2MzYS00MGU0LTkzNDItYjJhZmVhNmQwNmFi
LzEvZWotSmNSZFpuLWc1cVpRT2dhRjRna1RLclFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy0STx/J
/BevXbmw1vcGeXy3nbsB3GJTPAw9N9494NIZ9jztbJRU76C9fYBwZvkgUJ6FL5Sh
uxFXwyrwoUIZutimTAHEZDeyJjhZMK0Egbw4DjgLrhREart1mIDVhlewMYxdaM99
SWTr0XKksSDZAH+CdqBTV7kKS1O35nsQV46/XteFZ7GYsrRsPFGAdXmTz9OTMcea
jbruOtTjXQ+kdLmWOuxW6wXm2HziWKWUGqnzQRr1u1KxDOr2iaZTzyzaGz15Q3sM
69Vl/S72r89+sxz2SU7R8f1/PlNnFDe2QypluDT4PnfHNZUQeeBgkanWGnLuyUSN
d5jCLnXLO88DlQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:15:00 2025 by rpki-client