Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          zoF3ebkkwG4iMfcm+2wIUkui9dvwa8zpNwDm+SGJ2OE=
Subject key identifier:   0F:09:92:96:0B:7B:A5:77:2F:A2:FD:41:32:60:3A:E1:7B:11:E8:5F
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       01977CB09CF0D8E5C36AAEE712424651EC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          0AB6
Signing time:             Tue 17 Jun 2025 07:00:38 +0000
Manifest this update:     Tue 17 Jun 2025 07:00:38 +0000
Manifest next update:     Wed 18 Jun 2025 07:00:38 +0000
Files and hashes:         1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
                          2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: 3ekjuz4bvEy1twV3146XnMsrQlFQxy9YRVUUzhlQOT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:b0:9c:f0:d8:e5:c3:6a:ae:e7:12:42:46:51:ec:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Jun 17 07:00:38 2025 GMT
            Not After : Jun 18 07:00:38 2025 GMT
        Subject: CN=0f0992960b7ba5772fa2fd4132603ae17b11e85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:36:2c:00:ae:1a:38:88:2e:13:79:17:85:
                    7c:aa:94:b8:35:43:28:b0:bc:1a:ca:d4:1b:8a:4f:
                    35:44:f7:75:26:a4:6f:e9:e6:e1:3b:dd:28:75:15:
                    e2:17:ac:f7:1e:a8:19:f3:a2:8f:ec:46:ff:09:9f:
                    e3:d1:86:b9:3f:ee:9c:ac:5b:db:5a:64:b9:90:c8:
                    89:bf:b7:b9:d8:9c:b5:a7:bb:f1:72:e3:a1:bc:df:
                    7b:b4:4e:2c:4e:12:2a:fb:35:a9:73:6a:d9:a7:be:
                    a1:d2:4e:a6:ae:9e:b3:57:cc:6c:6d:61:d3:d7:19:
                    8f:f0:31:71:0d:da:01:f6:6b:3a:c9:f9:f4:9f:22:
                    4b:27:a3:d9:2c:2e:a2:a8:05:1c:20:cc:c4:06:80:
                    86:70:7c:6d:69:db:f1:c5:e4:93:59:48:7d:95:b8:
                    b6:c4:cd:06:d4:44:7d:25:ac:e3:ed:9a:40:52:95:
                    50:73:64:e7:5e:44:b7:e6:a0:c5:88:28:53:39:9c:
                    50:23:d3:4e:b4:71:fd:29:7f:84:3d:1b:aa:c0:08:
                    e9:a7:9a:b0:8b:fd:26:c9:e2:85:2d:53:70:0d:9a:
                    fb:03:19:4d:e8:45:4e:f7:ae:94:70:92:a1:85:68:
                    2e:6a:11:9f:85:6a:64:77:37:64:7f:69:52:e9:bc:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:92:96:0B:7B:A5:77:2F:A2:FD:41:32:60:3A:E1:7B:11:E8:5F
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:54:a2:3a:12:61:b1:08:2c:05:c1:65:24:52:42:62:aa:d4:
         f7:c9:da:d4:89:dc:53:f4:2b:dc:da:d9:20:39:57:f0:26:7c:
         fd:b5:c7:0b:ad:d5:83:ee:03:bd:b2:b2:d5:6f:a8:7a:0c:d1:
         79:42:cd:c8:b1:13:05:9b:54:64:b3:50:c1:bd:ca:49:62:c9:
         87:39:48:44:6c:1f:bb:00:10:10:87:ee:a8:ca:0f:b4:33:f5:
         72:a5:4e:cb:3c:65:06:07:d9:bb:b1:c4:bb:27:f6:bd:35:95:
         c9:9a:74:b8:48:ba:d5:22:85:6a:90:d6:a8:ce:80:97:dd:f5:
         39:38:3e:22:72:90:46:60:07:16:46:39:56:5b:39:0e:87:79:
         da:07:c9:25:91:cb:d7:9d:6b:c3:d7:a6:99:99:28:94:d2:84:
         47:8b:bc:22:eb:6f:47:1c:8d:03:57:24:54:fc:70:7b:7a:9f:
         7f:cf:f4:4e:56:90:f9:f0:c5:bf:8f:1f:f0:e9:b0:c4:e9:c7:
         15:73:2c:66:6a:81:98:86:e9:b0:90:ac:b0:f5:cc:0c:6e:e6:
         a5:57:17:72:ca:f7:88:18:52:6c:f0:c3:3d:f1:81:4f:17:5f:
         0f:4e:8a:e7:03:47:0c:f5:09:6e:12:e1:e0:02:ba:3b:83:7b:
         09:43:ed:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8sJzw2OXDaq7nEkJGUewqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGI5ZjgwOTNkZDg4OWU0NzdjZWZhN2E3NTU2MzkyYTY2
YjM4NzAwHhcNMjUwNjE3MDcwMDM4WhcNMjUwNjE4MDcwMDM4WjAzMTEwLwYDVQQD
EygwZjA5OTI5NjBiN2JhNTc3MmZhMmZkNDEzMjYwM2FlMTdiMTFlODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt802LACuGjiILhN5F4V8qpS4NUMo
sLwaytQbik81RPd1JqRv6ebhO90odRXiF6z3HqgZ86KP7Eb/CZ/j0Ya5P+6crFvb
WmS5kMiJv7e52Jy1p7vxcuOhvN97tE4sThIq+zWpc2rZp76h0k6mrp6zV8xsbWHT
1xmP8DFxDdoB9ms6yfn0nyJLJ6PZLC6iqAUcIMzEBoCGcHxtadvxxeSTWUh9lbi2
xM0G1ER9Jazj7ZpAUpVQc2TnXkS35qDFiChTOZxQI9NOtHH9KX+EPRuqwAjpp5qw
i/0myeKFLVNwDZr7AxlN6EVO966UcJKhhWguahGfhWpkdzdkf2lS6bz+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8JkpYLe6V3L6L9QTJgOuF7EehfMB8GA1UdIwQY
MBaAFPRLn4CT3YieR3zvp6dVY5KmazhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgt
MTAzYjA0ODUyMDNiLzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgtMTAzYjA0ODUyMDNi
LzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFSiOhJh
sQgsBcFlJFJCYqrU98na1IncU/Qr3NrZIDlX8CZ8/bXHC63Vg+4DvbKy1W+oegzR
eULNyLETBZtUZLNQwb3KSWLJhzlIRGwfuwAQEIfuqMoPtDP1cqVOyzxlBgfZu7HE
uyf2vTWVyZp0uEi61SKFapDWqM6Al931OTg+InKQRmAHFkY5Vls5Dod52gfJJZHL
151rw9emmZkolNKER4u8IutvRxyNA1ckVPxwe3qff8/0TlaQ+fDFv48f8OmwxOnH
FXMsZmqBmIbpsJCssPXMDG7mpVcXcsr3iBhSbPDDPfGBTxdfD06K5wNHDPUJbhLh
4AK6O4N7CUPtYQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:15:38 2025 by rpki-client