Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
File:                     7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json)
Hash identifier:          n/qCOAlqzM5vdQ6aPNgNLEatQb3JwN5xzYsNUw3Fqrg=
Subject key identifier:   5F:F6:4C:AB:37:FF:CC:30:C1:89:17:DF:8F:2C:2B:2E:82:EC:59:F1
Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Certificate issuer:       /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Certificate serial:       01976F62F72AA9BD369E3D4DD9443A240074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
Manifest number:          57
Signing time:             Sat 14 Jun 2025 17:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:46 +0000
Files and hashes:         1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: b92tHalxyqV/SXsS0E4GNbQx2XZB5ogfrSClJRnTITc=)
                          2: tFhiLjE_x6ntaURfWA3IYuyQkY8.roa (hash: ro3HfbcTzO9HdiyA8mU/a+hvQqF1uykWHi+tS+T8Jt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:f7:2a:a9:bd:36:9e:3d:4d:d9:44:3a:24:00:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
        Validity
            Not Before: Jun 14 17:00:46 2025 GMT
            Not After : Jun 15 17:00:46 2025 GMT
        Subject: CN=5ff64cab37ffcc30c18917df8f2c2b2e82ec59f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:06:fc:b3:2e:04:4c:83:d4:44:1a:d8:2a:91:
                    dd:8a:2e:46:f5:51:63:e4:c1:8e:75:4f:a3:4a:5c:
                    3a:a4:a6:d8:9c:5c:4c:de:14:2d:e9:16:24:ff:5a:
                    8d:b7:bf:64:ad:33:36:59:b0:de:db:c5:0a:64:b1:
                    4d:b1:89:fd:f8:67:b4:35:22:c0:18:2c:15:76:80:
                    7a:36:41:fa:a7:ae:02:24:ff:11:b0:6b:b8:b2:ac:
                    64:ef:fd:76:51:fa:9d:b3:76:bf:7c:35:a5:d4:91:
                    d7:3b:ed:3e:ea:01:8b:46:d7:7d:fe:6d:78:be:85:
                    88:f2:cb:ee:20:65:0d:72:e9:54:4c:20:3d:06:e7:
                    b8:f9:48:95:91:e4:18:94:6e:b9:35:12:85:cb:29:
                    a3:9f:d0:45:da:be:36:66:f7:f1:d0:9a:2e:89:44:
                    91:00:eb:6c:f1:c0:96:90:47:14:8b:41:8c:d9:a2:
                    f4:ac:5d:62:bd:36:e7:3d:57:0c:5e:2b:47:54:b3:
                    2b:ae:e0:12:1e:2c:5b:9b:3f:39:cd:3b:82:43:72:
                    52:68:0f:50:79:4a:36:63:bc:46:88:2c:21:f8:5f:
                    0f:6f:3c:44:7b:07:e9:10:dd:73:c2:c0:a8:b7:96:
                    53:e6:91:2e:4d:2a:ca:60:10:a3:4c:c2:ac:1b:ea:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:4C:AB:37:FF:CC:30:C1:89:17:DF:8F:2C:2B:2E:82:EC:59:F1
            X509v3 Authority Key Identifier:
                keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fe:21:a0:af:11:1a:92:ff:0a:a7:2f:4d:5d:68:81:e0:f6:
         e2:24:05:65:11:0e:aa:f2:08:89:60:40:11:83:02:3e:aa:09:
         a6:56:28:96:75:8f:43:c2:6d:c2:d7:c2:7b:3f:2c:9b:4f:18:
         97:15:2b:4d:fe:94:8d:4a:36:54:b0:d0:3f:b7:8a:5b:27:46:
         76:2c:90:b6:11:81:b3:aa:15:e4:70:c3:6e:20:45:27:c4:f1:
         d2:75:b9:11:e5:7c:36:1d:e3:25:b9:13:67:5c:26:2c:70:23:
         57:b2:3f:19:c3:5f:f7:c8:26:7e:6d:c1:0b:4e:68:8d:37:db:
         26:09:a7:1d:7b:ab:2c:58:e4:d8:ce:37:ab:a2:93:2c:c8:53:
         dc:63:16:68:6c:0d:a1:15:ae:ed:33:e1:10:d4:7f:8b:e3:20:
         ef:c1:df:88:e2:c0:21:47:79:e9:63:68:46:7c:1c:40:e5:e3:
         9e:99:d5:a2:7e:f5:28:40:0e:61:e6:16:58:09:81:9f:e9:0e:
         c7:9c:94:b5:9a:0a:d1:20:1a:69:0d:22:08:35:60:d0:03:54:
         7f:6a:0f:b1:f9:52:a2:c3:2b:89:83:2d:bc:14:c1:7c:e5:30:
         75:c5:41:a7:81:8a:79:51:a8:36:72:55:de:91:bb:21:c8:8e:
         e7:6f:71:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYvcqqb02nj1N2UQ6JAB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDk5ZDc0MWNmN2E2ODhmZmMyYzk3NjgxM2RiN2M1MWVi
YzQ3NDkwHhcNMjUwNjE0MTcwMDQ2WhcNMjUwNjE1MTcwMDQ2WjAzMTEwLwYDVQQD
Eyg1ZmY2NGNhYjM3ZmZjYzMwYzE4OTE3ZGY4ZjJjMmIyZTgyZWM1OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ab8sy4ETIPURBrYKpHdii5G9VFj
5MGOdU+jSlw6pKbYnFxM3hQt6RYk/1qNt79krTM2WbDe28UKZLFNsYn9+Ge0NSLA
GCwVdoB6NkH6p64CJP8RsGu4sqxk7/12Ufqds3a/fDWl1JHXO+0+6gGLRtd9/m14
voWI8svuIGUNculUTCA9Bue4+UiVkeQYlG65NRKFyymjn9BF2r42Zvfx0JouiUSR
AOts8cCWkEcUi0GM2aL0rF1ivTbnPVcMXitHVLMrruASHixbmz85zTuCQ3JSaA9Q
eUo2Y7xGiCwh+F8PbzxEewfpEN1zwsCot5ZT5pEuTSrKYBCjTMKsG+o1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/2TKs3/8wwwYkX348sKy6C7FnxMB8GA1UdIwQY
MBaAFO5JnXQc96aI/8LJdoE9t8UevEdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjct
YTY3MzJkY2QxMzk4LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjctYTY3MzJkY2QxMzk4
LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf4hoK8R
GpL/CqcvTV1ogeD24iQFZREOqvIIiWBAEYMCPqoJplYolnWPQ8JtwtfCez8sm08Y
lxUrTf6UjUo2VLDQP7eKWydGdiyQthGBs6oV5HDDbiBFJ8Tx0nW5EeV8Nh3jJbkT
Z1wmLHAjV7I/GcNf98gmfm3BC05ojTfbJgmnHXurLFjk2M43q6KTLMhT3GMWaGwN
oRWu7TPhENR/i+Mg78HfiOLAIUd56WNoRnwcQOXjnpnVon71KEAOYeYWWAmBn+kO
x5yUtZoK0SAaaQ0iCDVg0ANUf2oPsflSosMriYMtvBTBfOUwdcVBp4GKeVGoNnJV
3pG7IciO529xOg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:59 2025 by rpki-client