Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          dPWTgWk+lZOr/Z0uzm6dUkLsAeOKRMwzeR9MlisgJxg=
Subject key identifier:   7A:5D:79:72:9E:B9:BE:27:C6:3E:E1:2F:39:4B:87:9E:EB:21:9E:60
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       01976D3E2960B251F7547A442124A41347DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          124B
Signing time:             Sat 14 Jun 2025 07:01:19 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:19 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:19 +0000
Files and hashes:         1: BXtbJRTGPhW1VlCQ66qjiZWhbAM.roa (hash: 9OVGLVBb4qleVwsOx0lriWprWo/Ar1aDDscASTXyLXo=)
                          2: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: FOuu1OASyP5+RJlMhRq3fwunT/L/e9nLwrhUTOTHeEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:29:60:b2:51:f7:54:7a:44:21:24:a4:13:47:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Jun 14 07:01:19 2025 GMT
            Not After : Jun 15 07:01:19 2025 GMT
        Subject: CN=7a5d79729eb9be27c63ee12f394b879eeb219e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:d3:c6:75:08:11:76:6d:9d:40:fc:b9:fa:
                    c2:e3:8f:b3:b3:94:82:ed:71:c6:81:ec:13:bc:81:
                    e9:ae:21:4c:4f:24:78:74:ce:be:d5:c0:c6:f6:b8:
                    ae:31:7d:a4:0a:b9:19:7a:07:a5:d9:8b:29:83:b2:
                    26:e1:5b:93:c7:ee:bc:15:1f:46:60:96:a9:b5:eb:
                    ec:66:83:46:c1:4c:8b:e6:42:43:9f:35:89:db:c3:
                    91:b3:2c:aa:d7:38:b9:0c:14:d7:a5:8d:35:6b:8b:
                    52:09:6d:d3:e7:68:6d:b4:5f:d4:98:20:55:0b:39:
                    3c:71:8e:4d:7c:67:bf:ef:a6:81:66:07:0a:e0:ed:
                    6e:0e:7c:0f:55:a8:79:79:e4:f6:94:48:e1:97:6f:
                    e8:48:6e:96:93:16:d4:12:55:96:ac:03:8a:15:5f:
                    e1:45:56:a2:1a:a4:37:e3:45:61:06:00:7d:71:65:
                    92:a0:7f:51:a8:c5:f8:00:29:c3:47:6e:61:2f:14:
                    30:07:38:2b:30:a0:e3:e3:54:4c:06:cc:1c:9c:99:
                    80:ba:1a:5e:af:10:ab:ec:bf:fa:ca:df:c2:43:1d:
                    3d:f0:d5:b2:49:10:e4:2a:44:36:64:92:1f:ff:ec:
                    1e:38:31:5e:85:ef:ab:79:f5:7a:29:e4:2e:e8:e4:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5D:79:72:9E:B9:BE:27:C6:3E:E1:2F:39:4B:87:9E:EB:21:9E:60
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:84:18:13:02:54:55:b0:d4:07:ba:3e:6d:88:9d:26:27:
         cb:c0:e2:3f:b8:78:b3:26:2d:7b:32:b7:69:82:e5:a5:a4:ee:
         57:f4:93:2a:08:b5:9f:9a:5c:4a:f9:a1:3b:cd:d9:2a:a8:79:
         33:56:c7:0c:db:ea:14:32:d2:cf:19:b0:48:55:07:52:98:c1:
         6c:14:d9:51:d2:ab:c6:e9:b5:ad:64:0d:44:49:a5:da:6a:4c:
         cf:d6:3b:19:29:f2:14:8d:cd:86:8a:db:36:10:15:7d:5f:08:
         7e:33:c7:5f:91:f0:b7:1e:01:84:4e:78:d1:f4:71:52:bd:29:
         01:8a:55:de:84:1c:73:14:b5:81:16:3b:aa:91:b0:e4:c7:2e:
         ca:6e:bf:04:eb:c4:7f:9b:1e:42:73:e0:09:71:17:87:9b:81:
         51:12:52:67:8d:28:12:c3:c3:6d:89:f1:90:60:87:cd:a8:8c:
         0f:c2:f8:8c:ea:ca:47:91:e9:dd:3e:e5:a8:0b:69:a4:de:01:
         6d:2d:09:fd:74:a2:86:3c:34:92:48:aa:b1:68:ae:ac:35:ae:
         c2:97:52:d6:94:22:3e:8d:87:0e:eb:c2:0a:47:c8:af:16:fe:
         fe:ca:55:b7:59:03:2e:26:94:36:77:5f:3a:7a:c1:7c:37:0d:
         71:f6:43:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPilgslH3VHpEISSkE0fdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTY0MDQyYjZlNzI4OGE0ODVkYjI3MGM1NTEzMjliODAy
ZmQ4YzQwHhcNMjUwNjE0MDcwMTE5WhcNMjUwNjE1MDcwMTE5WjAzMTEwLwYDVQQD
Eyg3YTVkNzk3MjllYjliZTI3YzYzZWUxMmYzOTRiODc5ZWViMjE5ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8TTxnUIEXZtnUD8ufrC44+zs5SC
7XHGgewTvIHpriFMTyR4dM6+1cDG9riuMX2kCrkZegel2Yspg7Im4VuTx+68FR9G
YJaptevsZoNGwUyL5kJDnzWJ28ORsyyq1zi5DBTXpY01a4tSCW3T52httF/UmCBV
Czk8cY5NfGe/76aBZgcK4O1uDnwPVah5eeT2lEjhl2/oSG6WkxbUElWWrAOKFV/h
RVaiGqQ340VhBgB9cWWSoH9RqMX4ACnDR25hLxQwBzgrMKDj41RMBswcnJmAuhpe
rxCr7L/6yt/CQx098NWySRDkKkQ2ZJIf/+weODFehe+refV6KeQu6ORefQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpdeXKeub4nxj7hLzlLh57rIZ5gMB8GA1UdIwQY
MBaAFBLmQEK25yiKSF2ycMVRMpuAL9jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZTM1ZjUtOTdkMy00MzUxLTliYjAt
ZmNiMzZkODEyNTRhLzEvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZTM1ZjUtOTdkMy00MzUxLTliYjAtZmNiMzZkODEyNTRh
LzEvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1+EGBMC
VFWw1Ae6Pm2InSYny8DiP7h4syYtezK3aYLlpaTuV/STKgi1n5pcSvmhO83ZKqh5
M1bHDNvqFDLSzxmwSFUHUpjBbBTZUdKrxum1rWQNREml2mpMz9Y7GSnyFI3Nhorb
NhAVfV8IfjPHX5Hwtx4BhE540fRxUr0pAYpV3oQccxS1gRY7qpGw5Mcuym6/BOvE
f5seQnPgCXEXh5uBURJSZ40oEsPDbYnxkGCHzaiMD8L4jOrKR5Hp3T7lqAtppN4B
bS0J/XSihjw0kkiqsWiurDWuwpdS1pQiPo2HDuvCCkfIrxb+/spVt1kDLiaUNndf
OnrBfDcNcfZDLw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:51 2025 by rpki-client