Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          L95Cryn1MyyjM/qznFaendWea+9oyoxaGsxf8VX82mw=
Subject key identifier:   3D:19:24:93:AF:A9:DA:98:43:EF:8E:51:76:8A:36:13:D2:42:A6:81
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       01978357D50F15EF039EE160F0446150CCF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0BC0
Signing time:             Wed 18 Jun 2025 14:01:00 +0000
Manifest this update:     Wed 18 Jun 2025 14:01:00 +0000
Manifest next update:     Thu 19 Jun 2025 14:01:00 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: eRfdKJ0UWaGmGZ0q/UMprZrGmG7I3iU0Gu6xoj6BO80=)
                          2: CCavKhP7AEj7Vk_SGWe1jvcCRyg.roa (hash: ErCh+iOQog12EmBkEQOKm5CnYVqmDx85/Bq5syDjRtk=)
                          3: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (hash: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=)
                          4: hNzhsJdSXiT8XXk4l8WcnUMry00.roa (hash: y9TrG3MRhc+YaHxz1FlPh4FWDR2QP4R98mul7cPcOWM=)
                          5: sJD4QxX177UEmI36HO3Czbd6lZo.roa (hash: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:d5:0f:15:ef:03:9e:e1:60:f0:44:61:50:cc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Jun 18 14:01:00 2025 GMT
            Not After : Jun 19 14:01:00 2025 GMT
        Subject: CN=3d192493afa9da9843ef8e51768a3613d242a681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:d0:60:34:5d:01:16:2c:da:41:57:4f:b9:
                    c1:a8:fb:9e:10:72:16:39:ad:64:77:0c:86:ba:5b:
                    01:f4:bb:75:bd:a5:de:79:7b:96:f9:f0:b9:54:e1:
                    1e:70:62:31:b2:c5:11:e9:b6:2b:aa:f6:b2:3a:b5:
                    51:26:27:06:b6:78:67:eb:a0:18:05:72:2d:88:8b:
                    10:0f:60:21:54:56:7a:83:63:17:b9:7c:f6:4e:40:
                    21:05:2b:51:64:7a:c5:46:52:3b:df:b7:01:22:2e:
                    81:ac:c6:07:d9:b9:0a:e3:7b:dd:0d:50:84:a1:a1:
                    6a:24:08:29:09:50:6f:e4:5d:02:e7:dd:ab:2b:16:
                    2a:d5:8b:ec:3a:c1:84:59:00:f1:0b:5d:0e:cd:29:
                    7b:8b:b8:9e:e7:f5:06:4d:8d:60:9a:d3:e8:40:e3:
                    8f:63:04:74:6b:62:ef:9e:5c:89:74:f8:d8:40:24:
                    38:bb:af:f4:bc:7e:83:09:8b:6e:02:3b:a1:c5:cd:
                    84:3c:5b:a0:36:da:ed:b2:48:f7:4d:eb:af:f8:7d:
                    66:f8:72:b3:f9:1e:5a:9f:36:59:6a:cf:83:0d:59:
                    04:e1:9d:a8:03:4b:bf:03:a8:72:1d:ec:b6:ac:bb:
                    ca:2b:09:33:d6:17:e0:f4:f3:27:5c:23:dc:6d:0c:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:19:24:93:AF:A9:DA:98:43:EF:8E:51:76:8A:36:13:D2:42:A6:81
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2e:45:61:d4:4d:a0:91:80:03:17:bd:13:64:61:71:26:70:
         24:cb:57:e3:96:1a:45:74:b0:89:ef:ae:5a:0d:7e:53:f7:5a:
         de:9e:c6:b6:9e:4a:a3:58:6f:45:71:9f:96:bd:98:2f:69:47:
         e9:c3:d9:9f:15:f5:2b:ce:0e:a8:c8:12:50:74:9e:c1:e2:f3:
         e3:96:c7:64:e9:a6:b9:be:27:d4:83:eb:7e:ad:c3:76:7a:31:
         4a:ec:b7:02:9d:c8:df:34:39:44:c6:9d:4f:fd:20:9e:45:dd:
         bd:cc:28:15:1d:88:4f:f0:6d:65:ac:11:f4:9a:38:a7:68:79:
         e1:9a:83:84:ab:d6:0c:cb:a8:e6:a8:24:58:06:d4:5c:5c:a4:
         8b:cf:b3:80:63:71:b9:50:ed:b3:aa:3b:4f:c2:9d:00:81:0a:
         2e:51:37:5f:c1:03:ce:c5:b4:f0:14:d1:7c:4c:09:5d:3a:fa:
         6a:8d:eb:f0:c2:79:b4:40:7e:a9:bd:2b:48:37:07:57:38:fc:
         19:03:4e:16:3c:f1:ce:7c:9d:c8:5b:de:a3:c7:ee:aa:a1:b4:
         a3:ec:17:37:5b:bf:06:63:16:b6:dd:69:c9:a2:bd:42:e2:7f:
         01:7d:7a:60:00:bb:78:68:40:6b:57:9e:09:8e:df:66:01:4c:
         9a:9a:91:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDV9UPFe8DnuFg8ERhUMz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWFhOTI4NTBlYmZlNjQ4YWQzZDg5YWRkOGU3MzZlYzM2
NzVhMTEwHhcNMjUwNjE4MTQwMTAwWhcNMjUwNjE5MTQwMTAwWjAzMTEwLwYDVQQD
EygzZDE5MjQ5M2FmYTlkYTk4NDNlZjhlNTE3NjhhMzYxM2QyNDJhNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAranQYDRdARYs2kFXT7nBqPueEHIW
Oa1kdwyGulsB9Lt1vaXeeXuW+fC5VOEecGIxssUR6bYrqvayOrVRJicGtnhn66AY
BXItiIsQD2AhVFZ6g2MXuXz2TkAhBStRZHrFRlI737cBIi6BrMYH2bkK43vdDVCE
oaFqJAgpCVBv5F0C592rKxYq1YvsOsGEWQDxC10OzSl7i7ie5/UGTY1gmtPoQOOP
YwR0a2LvnlyJdPjYQCQ4u6/0vH6DCYtuAjuhxc2EPFugNtrtskj3Teuv+H1m+HKz
+R5anzZZas+DDVkE4Z2oA0u/A6hyHey2rLvKKwkz1hfg9PMnXCPcbQzkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0ZJJOvqdqYQ++OUXaKNhPSQqaBMB8GA1UdIwQY
MBaAFOEaqShQ6/5kitPYmt2Oc27DZ1oRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEt
MGY4OGQxNmUxYWZlLzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEtMGY4OGQxNmUxYWZl
LzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy5FYdRN
oJGAAxe9E2RhcSZwJMtX45YaRXSwie+uWg1+U/da3p7Gtp5Ko1hvRXGflr2YL2lH
6cPZnxX1K84OqMgSUHSeweLz45bHZOmmub4n1IPrfq3DdnoxSuy3Ap3I3zQ5RMad
T/0gnkXdvcwoFR2IT/BtZawR9Jo4p2h54ZqDhKvWDMuo5qgkWAbUXFyki8+zgGNx
uVDts6o7T8KdAIEKLlE3X8EDzsW08BTRfEwJXTr6ao3r8MJ5tEB+qb0rSDcHVzj8
GQNOFjzxznydyFveo8fuqqG0o+wXN1u/BmMWtt1pyaK9QuJ/AX16YAC7eGhAa1ee
CY7fZgFMmpqRWA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:52:39 2025 by rpki-client