Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File:                     7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier:          qXUt+A4IFnRt6hogoHABgo3a2Yxi2gmNBKQggaDp1fk=
Subject key identifier:   F4:40:D3:F1:43:F7:52:2C:A7:3B:AB:FD:B4:DA:57:18:34:4B:04:FF
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer:       /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial:       01977B30C55D46D311A13D9D06F92336F762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number:          05DA
Signing time:             Tue 17 Jun 2025 00:01:23 +0000
Manifest this update:     Tue 17 Jun 2025 00:01:23 +0000
Manifest next update:     Wed 18 Jun 2025 00:01:23 +0000
Files and hashes:         1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: u9pUluEk62zesuibWe0sYgrzspeqEV4J5uksQlXBogE=)
                          2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:30:c5:5d:46:d3:11:a1:3d:9d:06:f9:23:36:f7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
        Validity
            Not Before: Jun 17 00:01:23 2025 GMT
            Not After : Jun 18 00:01:23 2025 GMT
        Subject: CN=f440d3f143f7522ca73babfdb4da5718344b04ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:11:15:9b:7c:55:88:69:ae:5b:74:5a:8a:
                    c4:10:cc:d8:c1:32:54:6a:1c:d8:1c:97:25:50:b9:
                    57:74:31:ce:71:2f:97:1f:61:e3:97:3e:4e:28:f9:
                    eb:c7:72:54:fe:93:a6:59:99:f4:ac:29:c1:ba:b2:
                    cb:dc:ce:7f:98:93:9d:8d:42:02:f5:01:3b:66:bf:
                    8a:5e:60:36:d5:a4:11:c4:3c:1a:ca:62:bd:8a:16:
                    c1:2d:37:67:4a:e2:33:9e:26:39:52:de:b5:ba:89:
                    e9:63:b0:00:06:c6:9a:68:6f:44:0a:4a:28:4f:1c:
                    23:18:9b:9b:2f:51:72:e5:ba:12:8d:9d:e7:7f:1f:
                    03:49:e0:d0:37:5b:93:dc:46:59:ae:8c:68:d5:35:
                    ff:4f:78:9e:a8:c4:81:7c:5e:f2:81:46:24:ec:f1:
                    53:3a:97:e2:44:c9:23:2c:61:1b:91:c5:f9:35:a9:
                    ca:e3:23:e5:b0:6d:e5:36:60:5f:5f:e0:a8:0c:10:
                    d6:f9:40:46:69:af:f7:a9:8d:df:24:40:2c:98:a3:
                    d9:de:24:9b:90:10:27:13:85:22:74:4a:1c:3c:1e:
                    c3:e0:1f:06:46:03:46:b0:a7:6b:2c:17:a9:a6:91:
                    02:b1:82:7f:88:fa:f8:b6:88:a9:86:89:cd:76:fe:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:40:D3:F1:43:F7:52:2C:A7:3B:AB:FD:B4:DA:57:18:34:4B:04:FF
            X509v3 Authority Key Identifier:
                keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:da:24:2c:43:51:9d:b8:fd:c7:61:7d:93:10:93:13:bd:
         1f:17:27:6d:4e:9b:88:07:9a:08:1a:76:ef:a2:1f:c8:73:50:
         9c:f9:cd:71:d7:72:73:81:d8:f8:0e:80:5a:8c:e7:a8:07:f6:
         4d:25:50:e3:74:9f:52:4d:32:e8:a4:45:f5:3f:e7:03:b7:dc:
         5d:cf:43:76:df:c3:74:cb:33:2a:33:71:b2:5f:5c:fb:32:80:
         c4:2a:00:11:51:33:75:7e:df:c9:d3:ed:4b:59:33:41:a9:32:
         fd:bd:ac:28:af:be:12:e5:4f:e6:4c:29:8d:67:bf:64:bf:4e:
         f9:b5:bb:e4:42:f8:a8:4d:ad:3a:56:16:8e:97:1a:c4:f9:c5:
         6c:98:0f:97:7e:7c:bb:39:03:28:52:80:57:73:4c:49:bc:a8:
         77:27:ae:81:a2:67:b6:fa:a2:cf:40:57:7c:86:0a:9c:91:55:
         64:d7:82:6e:f4:c6:c5:bb:ba:cd:29:85:61:bb:f5:6b:29:45:
         8a:ec:39:cf:e2:fc:85:71:b7:4c:e0:85:d0:e8:fa:09:37:34:
         cd:20:16:fb:18:06:fc:66:0a:0f:be:13:b7:f9:2e:e9:af:9a:
         38:37:52:34:24:05:59:4c:5d:4d:34:87:40:16:2c:33:e1:6e:
         45:06:ce:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7MMVdRtMRoT2dBvkjNvdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTMzNTk4YmIxMDU0MjExNDY4MWVhODZhMzVkZjE2OTgz
MWNmMDMwHhcNMjUwNjE3MDAwMTIzWhcNMjUwNjE4MDAwMTIzWjAzMTEwLwYDVQQD
EyhmNDQwZDNmMTQzZjc1MjJjYTczYmFiZmRiNGRhNTcxODM0NGIwNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLkRFZt8VYhprlt0WorEEMzYwTJU
ahzYHJclULlXdDHOcS+XH2Hjlz5OKPnrx3JU/pOmWZn0rCnBurLL3M5/mJOdjUIC
9QE7Zr+KXmA21aQRxDwaymK9ihbBLTdnSuIzniY5Ut61uonpY7AABsaaaG9ECkoo
TxwjGJubL1Fy5boSjZ3nfx8DSeDQN1uT3EZZroxo1TX/T3ieqMSBfF7ygUYk7PFT
OpfiRMkjLGEbkcX5NanK4yPlsG3lNmBfX+CoDBDW+UBGaa/3qY3fJEAsmKPZ3iSb
kBAnE4UidEocPB7D4B8GRgNGsKdrLBepppECsYJ/iPr4toiphonNdv4VsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRA0/FD91Ispzur/bTaVxg0SwT/MB8GA1UdIwQY
MBaAFO8TNZi7EFQhFGgeqGo13xaYMc8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYt
ZjRjN2E3OTI1OTc1LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NWI5ZTMtNWZhNi00NTM0LTkxYWYtZjRjN2E3OTI1OTc1
LzEvN3hNMW1Mc1FWQ0VVYUI2b2FqWGZGcGd4endNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzXaJCxD
UZ24/cdhfZMQkxO9HxcnbU6biAeaCBp276IfyHNQnPnNcddyc4HY+A6AWoznqAf2
TSVQ43SfUk0y6KRF9T/nA7fcXc9Ddt/DdMszKjNxsl9c+zKAxCoAEVEzdX7fydPt
S1kzQaky/b2sKK++EuVP5kwpjWe/ZL9O+bW75EL4qE2tOlYWjpcaxPnFbJgPl358
uzkDKFKAV3NMSbyodyeugaJntvqiz0BXfIYKnJFVZNeCbvTGxbu6zSmFYbv1aylF
iuw5z+L8hXG3TOCF0Oj6CTc0zSAW+xgG/GYKD74Tt/ku6a+aODdSNCQFWUxdTTSH
QBYsM+FuRQbO4g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:18:24 2025 by rpki-client