Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          EEZ98haYdEQ0VyBLFKmWktFwifEiWMkI4OwageT31kQ=
Subject key identifier:   09:F5:F3:80:D1:39:A7:EB:CC:E2:19:D7:75:42:79:40:12:10:71:21
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       01977E67F006CF439DA587B4248DE925DF7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          0F03
Signing time:             Tue 17 Jun 2025 15:00:30 +0000
Manifest this update:     Tue 17 Jun 2025 15:00:30 +0000
Manifest next update:     Wed 18 Jun 2025 15:00:30 +0000
Files and hashes:         1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=)
                          2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: mwS5M8aNnOcYXNP1Po3GxdpzrJWgPoLFbU8csnLeUho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:67:f0:06:cf:43:9d:a5:87:b4:24:8d:e9:25:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Jun 17 15:00:30 2025 GMT
            Not After : Jun 18 15:00:30 2025 GMT
        Subject: CN=09f5f380d139a7ebcce219d77542794012107121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:3a:89:86:dc:e3:45:82:82:0d:6c:10:fa:
                    94:22:18:2e:6e:ec:7d:6c:91:07:9e:5d:34:c0:24:
                    69:fe:2e:d3:3b:aa:6e:1f:01:6e:bc:62:8a:aa:5f:
                    3b:43:f5:a7:09:ee:dd:b1:f8:1f:01:cf:f7:d7:60:
                    60:70:37:ea:9e:57:85:ba:fb:6d:57:2c:16:43:7d:
                    3e:54:bc:8f:be:af:01:0f:8a:06:f6:12:56:81:9b:
                    f5:1c:f2:df:0f:83:5c:25:39:ab:56:d8:7e:97:9e:
                    6c:48:8d:b3:0f:49:d3:c4:0e:5f:eb:3f:88:41:84:
                    93:52:da:52:3f:f1:2a:5d:7f:07:fe:c3:59:03:a5:
                    bb:a4:0f:0f:ee:79:05:65:89:fd:31:68:da:f7:a5:
                    ef:99:32:02:2b:ce:a8:68:bb:62:5d:fe:e9:7b:32:
                    ea:86:de:28:99:40:94:43:f7:fc:5d:a6:5c:48:fc:
                    28:b8:8e:5c:91:8d:b5:34:56:9e:21:13:10:c5:71:
                    e6:a7:ad:b5:61:01:ce:35:4c:be:ba:37:78:85:99:
                    21:4f:36:bc:f9:ab:97:c6:28:49:ba:a3:bf:31:17:
                    2d:98:cd:b1:fa:0e:fd:a5:74:14:de:4d:e8:92:fe:
                    0c:a1:c4:fc:36:b7:a8:07:1a:74:1b:d4:dc:6a:f0:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:F3:80:D1:39:A7:EB:CC:E2:19:D7:75:42:79:40:12:10:71:21
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:f9:76:bc:49:36:8c:7d:3a:e5:d9:fe:3d:e8:ad:cb:c6:
         85:5a:e3:57:7b:de:ed:41:d6:d5:60:2a:2c:b8:d4:8d:d6:94:
         f1:8c:c3:57:44:20:7a:28:7f:3d:06:c0:d7:21:3e:ca:f7:ba:
         e6:17:a4:ae:0e:df:53:7b:78:a6:6b:72:9a:49:8f:ba:69:87:
         08:9b:ba:c1:98:69:66:ee:fe:ec:63:5c:a9:b6:38:78:d5:6c:
         d1:29:85:11:ff:04:10:be:3a:9c:55:27:24:82:17:46:51:a9:
         2e:a0:1f:62:12:90:f8:08:54:3f:a8:81:0d:84:c3:dc:2f:78:
         e8:e2:10:99:fd:49:3e:87:0b:5e:d2:3a:b4:92:72:c4:97:b4:
         7f:54:20:a9:14:ea:a1:5c:bb:6a:89:37:25:8e:cb:a3:29:5e:
         24:65:6f:59:3f:78:fc:76:b2:66:93:0f:b1:d9:a8:de:53:02:
         6e:99:b7:79:d3:a2:b0:9c:16:8d:12:14:5a:47:ef:55:fc:fe:
         36:09:72:27:43:c1:b1:7a:2a:f5:e5:26:be:db:b4:59:9a:14:
         1d:23:2c:ed:1d:29:2d:2b:1a:8b:32:18:ce:d1:35:00:59:65:
         10:a1:e6:75:93:8d:7f:91:f3:ca:91:07:a2:eb:65:fa:d1:ac:
         3f:a4:60:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+Z/AGz0OdpYe0JI3pJd97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj
M2RjMGIwHhcNMjUwNjE3MTUwMDMwWhcNMjUwNjE4MTUwMDMwWjAzMTEwLwYDVQQD
EygwOWY1ZjM4MGQxMzlhN2ViY2NlMjE5ZDc3NTQyNzk0MDEyMTA3MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AA6iYbc40WCgg1sEPqUIhgubux9
bJEHnl00wCRp/i7TO6puHwFuvGKKql87Q/WnCe7dsfgfAc/312BgcDfqnleFuvtt
VywWQ30+VLyPvq8BD4oG9hJWgZv1HPLfD4NcJTmrVth+l55sSI2zD0nTxA5f6z+I
QYSTUtpSP/EqXX8H/sNZA6W7pA8P7nkFZYn9MWja96XvmTICK86oaLtiXf7pezLq
ht4omUCUQ/f8XaZcSPwouI5ckY21NFaeIRMQxXHmp621YQHONUy+ujd4hZkhTza8
+auXxihJuqO/MRctmM2x+g79pXQU3k3okv4MocT8NreoBxp0G9TcavCGPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn184DROafrzOIZ13VCeUASEHEhMB8GA1UdIwQY
MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt
M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1
LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4f5drxJ
Nox9OuXZ/j3orcvGhVrjV3ve7UHW1WAqLLjUjdaU8YzDV0Qgeih/PQbA1yE+yve6
5hekrg7fU3t4pmtymkmPummHCJu6wZhpZu7+7GNcqbY4eNVs0SmFEf8EEL46nFUn
JIIXRlGpLqAfYhKQ+AhUP6iBDYTD3C946OIQmf1JPocLXtI6tJJyxJe0f1QgqRTq
oVy7aok3JY7LoyleJGVvWT94/HayZpMPsdmo3lMCbpm3edOisJwWjRIUWkfvVfz+
NglyJ0PBsXoq9eUmvtu0WZoUHSMs7R0pLSsaizIYztE1AFllEKHmdZONf5HzypEH
outl+tGsP6Rg8g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:47:19 2025 by rpki-client