Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          ZFNcz3d7Rexl1Wum7W5M50WXWFSw+oCAQZNbfFVNhdc=
Subject key identifier:   E0:EC:AA:80:99:60:B9:97:ED:E0:66:FB:1C:6E:0B:A1:DB:12:14:6C
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       01977AF92173B8C19B19C6C35D02EB93F221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          09A1
Signing time:             Mon 16 Jun 2025 23:00:36 +0000
Manifest this update:     Mon 16 Jun 2025 23:00:36 +0000
Manifest next update:     Tue 17 Jun 2025 23:00:36 +0000
Files and hashes:         1: 1-ZSGsCHMEIt-zdJlJw6apZX2Wrw.roa (hash: jSCF0+9de5r9THp7fXr99R1xtgUUcEM1y8WA8CvHwCI=)
                          2: DgOZwnFO8AhdHBgLmgcNwBsxDAc.roa (hash: h4KsWMGXdyj/8wNpX8sYIR4JqIdgBrnn4TPvXbnDMpw=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: 5kMEo35/0+398JiOWCPLLW5qb5xvxJxokKktfQ+JYWo=)
                          4: RR6pycHaTPsIe6GNf5JqSPKOd08.roa (hash: obNVdba5R47x54SSSjM+mOVGtvigMbqXtqMicMTi4UM=)
                          5: U9VsXfCDsGKpry_AQUbKGYz8tRI.roa (hash: SBzZHW/ujJ7yylMaWV4gG1R9SCvZEB29AnTHypdaXgY=)
                          6: m3gokZ3oqrQAkT9aNHEn43WdviM.roa (hash: MQtM6YjLXyL+j/Sfr97BhpgH5ErvjAr3xvEfcREF22c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:f9:21:73:b8:c1:9b:19:c6:c3:5d:02:eb:93:f2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Jun 16 23:00:36 2025 GMT
            Not After : Jun 17 23:00:36 2025 GMT
        Subject: CN=e0ecaa809960b997ede066fb1c6e0ba1db12146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:2e:ba:6b:1c:9e:8c:15:2f:1d:c6:44:34:
                    78:2a:2c:20:c9:d6:6f:44:7c:cf:44:4d:8d:6d:a5:
                    d4:15:77:d4:24:f1:d2:a3:10:78:38:d2:bb:89:8e:
                    24:27:cc:ac:b7:db:95:78:68:01:52:9f:5a:ba:61:
                    db:67:06:3b:d2:49:ad:0d:cb:5b:f0:ad:20:99:4c:
                    0d:5b:85:31:43:09:1b:8f:4f:96:ac:ff:a8:b1:e6:
                    1a:ad:0c:7c:9b:9d:25:5e:8b:20:87:86:10:ef:df:
                    95:73:7e:ed:9a:4f:f1:28:8f:75:b2:8a:61:8e:b9:
                    15:ba:54:b3:0c:b8:86:d2:93:81:4f:6b:14:bc:5c:
                    86:cd:4f:7c:12:f8:3d:f7:1a:7f:26:c2:2e:0a:75:
                    ec:bf:be:99:53:e9:e3:f6:1b:6f:04:b7:19:2a:e7:
                    99:41:d5:81:12:52:51:65:aa:ec:6f:4a:b2:7b:ce:
                    8c:90:bc:2d:59:fb:c3:83:a9:e1:91:b9:95:2e:96:
                    87:55:95:61:a3:b5:73:63:3e:a9:68:2b:58:91:cd:
                    96:8e:7e:ec:5c:da:25:a1:50:88:3a:96:16:4d:b3:
                    71:ea:21:d5:a5:c7:ba:cc:04:1f:5d:3c:fd:f1:de:
                    8f:76:08:77:90:d8:d2:85:46:9b:51:01:81:6c:73:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EC:AA:80:99:60:B9:97:ED:E0:66:FB:1C:6E:0B:A1:DB:12:14:6C
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:b5:8b:c4:8a:c7:d0:0f:ec:4f:1f:66:21:76:e1:1e:0e:
         ee:ad:cd:c8:23:e3:30:4e:d0:f7:1b:fb:e7:8a:86:d7:1b:ff:
         98:6f:86:68:ad:1b:58:52:fb:b8:66:fa:c6:f3:ac:62:4d:2f:
         f2:c6:13:7a:0c:8e:12:a4:56:9b:01:92:c6:9b:cc:43:27:65:
         fd:ba:02:8c:b5:7d:59:db:39:78:e3:e1:04:9e:45:8f:42:e1:
         9d:b8:fc:7b:04:6f:5b:90:d4:77:3b:85:33:77:ee:d9:60:f4:
         2c:ed:91:e2:46:26:d0:68:6e:c0:af:11:ad:59:1c:7d:eb:1a:
         df:6b:aa:a4:a5:fa:2f:3d:0a:33:c5:05:71:40:09:d6:db:bd:
         28:8f:44:d2:e6:1b:61:b0:d6:a7:90:26:d4:bf:54:ee:b3:21:
         b0:e3:6f:47:95:89:d1:23:3c:73:b7:a1:b7:ba:60:82:38:aa:
         f1:93:92:74:8b:c8:21:8f:68:4c:e6:5e:ea:e7:2f:6e:1c:86:
         a8:7a:7c:8f:58:db:0f:e5:56:f6:c6:c8:d3:60:fb:9c:00:c9:
         25:54:27:d0:9b:28:fe:42:d1:40:44:46:46:a0:b4:5f:dd:17:
         c4:47:bc:3d:09:b5:05:7e:9b:a9:04:b5:ac:75:8a:68:ba:c4:
         1d:d2:fb:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6+SFzuMGbGcbDXQLrk/IhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjUwNjE2MjMwMDM2WhcNMjUwNjE3MjMwMDM2WjAzMTEwLwYDVQQD
EyhlMGVjYWE4MDk5NjBiOTk3ZWRlMDY2ZmIxYzZlMGJhMWRiMTIxNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswEuumscnowVLx3GRDR4KiwgydZv
RHzPRE2NbaXUFXfUJPHSoxB4ONK7iY4kJ8yst9uVeGgBUp9aumHbZwY70kmtDctb
8K0gmUwNW4UxQwkbj0+WrP+oseYarQx8m50lXosgh4YQ79+Vc37tmk/xKI91soph
jrkVulSzDLiG0pOBT2sUvFyGzU98Evg99xp/JsIuCnXsv76ZU+nj9htvBLcZKueZ
QdWBElJRZarsb0qye86MkLwtWfvDg6nhkbmVLpaHVZVho7VzYz6paCtYkc2Wjn7s
XNoloVCIOpYWTbNx6iHVpce6zAQfXTz98d6Pdgh3kNjShUabUQGBbHPqVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODsqoCZYLmX7eBm+xxuC6HbEhRsMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+y1i8SK
x9AP7E8fZiF24R4O7q3NyCPjME7Q9xv754qG1xv/mG+GaK0bWFL7uGb6xvOsYk0v
8sYTegyOEqRWmwGSxpvMQydl/boCjLV9Wds5eOPhBJ5Fj0Lhnbj8ewRvW5DUdzuF
M3fu2WD0LO2R4kYm0GhuwK8RrVkcfesa32uqpKX6Lz0KM8UFcUAJ1tu9KI9E0uYb
YbDWp5Am1L9U7rMhsONvR5WJ0SM8c7eht7pggjiq8ZOSdIvIIY9oTOZe6ucvbhyG
qHp8j1jbD+VW9sbI02D7nADJJVQn0Jso/kLRQERGRqC0X90XxEe8PQm1BX6bqQS1
rHWKaLrEHdL7Eg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 08:44:59 2025 by rpki-client