Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File:                     nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier:          kD7vdmI6a7ODQnfw2DsWzW3WK1Ki+tAfhlrrrA2ZrB4=
Subject key identifier:   EA:20:EA:01:1F:0A:1C:4A:D3:C2:BB:CB:CE:12:D4:F2:BC:4E:35:45
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer:       /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial:       01976CCFCB9C1071EA848E8328D9F485D175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number:          1369
Signing time:             Sat 14 Jun 2025 05:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:46 +0000
Files and hashes:         1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
                          2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: enWGi7FbhsO77hf1OS9mVwFvye5fa57F3jpSaSBV2f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:cb:9c:10:71:ea:84:8e:83:28:d9:f4:85:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
        Validity
            Not Before: Jun 14 05:00:46 2025 GMT
            Not After : Jun 15 05:00:46 2025 GMT
        Subject: CN=ea20ea011f0a1c4ad3c2bbcbce12d4f2bc4e3545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:85:d0:a3:30:e8:5e:1c:b9:7a:76:96:58:
                    00:42:cb:a2:d9:6a:07:e5:7f:8c:11:2e:2f:2a:4c:
                    f0:61:26:57:56:da:fd:d1:0d:33:48:ea:f8:de:3b:
                    82:92:e7:b4:e2:18:45:19:f8:40:cf:1c:bc:7a:85:
                    12:4c:e7:04:7c:17:51:4e:9e:f7:4a:27:81:1b:bf:
                    c3:c7:3b:84:11:59:34:f0:62:16:51:43:cd:4c:4c:
                    7d:56:9f:b3:1c:a0:c3:53:46:f5:e3:b2:8b:a1:7f:
                    bf:bf:43:ef:b3:4a:90:35:b6:44:75:3b:1b:d9:8b:
                    d5:d8:35:8f:38:d7:81:55:4d:7d:5d:40:03:a1:fc:
                    eb:2b:a5:f1:d9:bf:62:95:ac:4a:5a:14:00:30:68:
                    44:4c:ef:6c:54:06:5b:2e:85:7a:78:8d:70:7c:b5:
                    da:7c:8c:92:e3:dd:d2:a5:d1:a4:e0:14:e2:ea:ad:
                    6e:08:e3:f0:be:f0:ad:6a:d8:60:35:eb:c8:54:26:
                    d9:3c:43:ec:3d:65:63:f1:fd:5a:b2:35:8d:63:82:
                    33:be:1f:ec:b7:93:68:1d:e1:a9:40:03:80:d2:8b:
                    e0:e1:69:b3:3b:3f:7f:78:30:2d:84:43:d6:dd:cf:
                    c4:8c:0e:3e:46:ae:e8:4c:ac:eb:c6:c5:b9:45:02:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:20:EA:01:1F:0A:1C:4A:D3:C2:BB:CB:CE:12:D4:F2:BC:4E:35:45
            X509v3 Authority Key Identifier:
                keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:90:55:83:5d:c0:5e:3f:56:42:b6:6c:b2:08:4e:f7:3f:
         0c:38:5e:d3:3d:01:07:fd:28:3d:27:69:1d:03:02:39:e8:9f:
         37:e9:8d:4a:eb:e1:db:45:73:ac:de:70:19:f4:9d:98:15:8f:
         5d:86:f0:58:24:cf:01:0b:1d:ce:74:7e:5a:5f:3d:67:cf:10:
         a8:fd:cd:b4:f5:9b:53:5d:14:5b:72:34:bb:c3:0d:88:55:14:
         43:19:72:e7:69:0c:b3:77:8f:8c:fa:e9:c8:77:2b:f2:bf:86:
         09:40:4e:cf:30:82:b6:75:7c:5e:8b:6d:ba:d2:f9:3b:47:ef:
         2d:2c:6e:98:6b:6a:b2:02:2c:fa:41:ea:11:07:f1:af:f9:d5:
         37:c0:44:96:b2:f3:0e:f3:2e:e0:bd:b4:f6:8e:08:16:be:3b:
         d2:25:b0:21:16:59:7d:a3:1e:ca:3c:53:96:98:2f:c8:aa:ba:
         f8:ce:9e:c1:b0:9e:c1:4c:57:3f:73:ed:f7:cf:46:3a:ac:9e:
         45:5b:07:c7:71:7a:29:fc:cc:d5:a4:de:df:72:0d:fc:b8:fa:
         f5:90:2a:07:73:aa:8b:bc:79:07:29:b8:ae:ea:52:bc:46:84:
         61:6e:81:ec:85:16:44:df:05:d5:b4:5a:c0:72:b3:1e:bc:e8:
         44:8e:23:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz8ucEHHqhI6DKNn0hdF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj
ZGIwNGQwHhcNMjUwNjE0MDUwMDQ2WhcNMjUwNjE1MDUwMDQ2WjAzMTEwLwYDVQQD
EyhlYTIwZWEwMTFmMGExYzRhZDNjMmJiY2JjZTEyZDRmMmJjNGUzNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivOF0KMw6F4cuXp2llgAQsui2WoH
5X+MES4vKkzwYSZXVtr90Q0zSOr43juCkue04hhFGfhAzxy8eoUSTOcEfBdRTp73
SieBG7/DxzuEEVk08GIWUUPNTEx9Vp+zHKDDU0b147KLoX+/v0Pvs0qQNbZEdTsb
2YvV2DWPONeBVU19XUADofzrK6Xx2b9ilaxKWhQAMGhETO9sVAZbLoV6eI1wfLXa
fIyS493SpdGk4BTi6q1uCOPwvvCtathgNevIVCbZPEPsPWVj8f1asjWNY4Izvh/s
t5NoHeGpQAOA0ovg4WmzOz9/eDAthEPW3c/EjA4+Rq7oTKzrxsW5RQKPLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOog6gEfChxK08K7y84S1PK8TjVFMB8GA1UdIwQY
MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt
OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0
LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZyQVYNd
wF4/VkK2bLIITvc/DDhe0z0BB/0oPSdpHQMCOeifN+mNSuvh20VzrN5wGfSdmBWP
XYbwWCTPAQsdznR+Wl89Z88QqP3NtPWbU10UW3I0u8MNiFUUQxly52kMs3ePjPrp
yHcr8r+GCUBOzzCCtnV8XottutL5O0fvLSxumGtqsgIs+kHqEQfxr/nVN8BElrLz
DvMu4L209o4IFr470iWwIRZZfaMeyjxTlpgvyKq6+M6ewbCewUxXP3Pt989GOqye
RVsHx3F6KfzM1aTe33IN/Lj69ZAqB3Oqi7x5Bym4rupSvEaEYW6B7IUWRN8F1bRa
wHKzHrzoRI4jrw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:46 2025 by rpki-client