Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          vqfwaoguuqM2eLAqg28xLNIVWox/+Q+vM712hE/tpF0=
Subject key identifier:   83:E3:28:01:1C:A2:4A:B4:AA:3D:81:43:50:B6:CA:B4:42:D8:3A:F8
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       01976E50762171C32642B7AC6CEB3AF51599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 12:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:56 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: O0ZVcHjqzYafzmVTqy3kKKDl4LZ6E1/GX09F1obQFc0=)
                          2: vKUcTQ_b7dBpqEmez96Lr0i9b1A.roa (hash: UuwLw2rmpbu5kNcfWDimRuCEf6TrVi3lxmTfdniazP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:76:21:71:c3:26:42:b7:ac:6c:eb:3a:f5:15:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Jun 14 12:00:56 2025 GMT
            Not After : Jun 15 12:00:56 2025 GMT
        Subject: CN=83e328011ca24ab4aa3d814350b6cab442d83af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:6c:86:1d:d9:a3:ec:00:af:ce:4e:0d:02:
                    b5:3e:d4:e2:bb:29:5b:05:38:e0:32:4f:b5:5f:45:
                    57:cd:7f:16:a0:f6:7d:51:a4:a0:72:9c:3f:3f:9b:
                    7d:6b:84:42:00:e8:68:99:e4:84:80:63:57:69:7a:
                    97:8a:1a:7e:9d:44:30:92:d8:18:24:86:47:35:18:
                    a3:32:2d:fb:2c:4a:04:d9:c9:1a:6d:89:e9:34:1f:
                    d1:19:41:1f:af:51:3f:64:00:dc:4e:ed:60:dc:fe:
                    0c:4b:68:99:d3:1d:92:61:13:87:84:c1:52:71:22:
                    6f:29:53:c5:83:28:9b:2a:b8:e6:27:09:66:9b:ab:
                    49:74:74:c2:2c:17:56:6b:d9:4c:77:94:50:e6:be:
                    47:6a:c7:12:98:55:6c:d1:f8:6d:f1:84:e7:93:b6:
                    11:89:31:97:93:e3:7d:d0:9a:17:8e:1d:41:3d:f9:
                    ba:a5:77:5d:a5:4e:cb:bd:9d:9e:b5:77:a7:df:9b:
                    1f:94:5c:5e:fe:da:a5:c1:7f:fe:42:c9:73:32:1a:
                    c2:4b:61:ae:3f:77:55:05:9c:69:b5:ea:0b:7c:99:
                    02:2b:fc:c6:b0:18:c8:73:d9:0c:da:7e:5b:48:b6:
                    40:7f:22:f5:8f:7d:ca:ef:1f:d8:84:1d:4b:02:a5:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E3:28:01:1C:A2:4A:B4:AA:3D:81:43:50:B6:CA:B4:42:D8:3A:F8
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:1d:bb:6a:12:16:a0:14:ed:90:03:f4:4f:63:2b:58:b4:
         f6:d6:4e:16:d9:46:cc:8d:e2:8e:0c:b2:43:f1:69:f2:45:30:
         cb:c5:4f:17:3b:8b:ed:3b:12:19:ab:27:5d:9b:9f:83:ba:8a:
         cc:ff:34:64:8f:75:23:ef:50:32:17:80:d4:28:af:b3:e2:41:
         62:0a:1e:5f:11:6b:fe:64:34:04:4c:14:12:08:48:dc:0f:85:
         ba:f7:bd:b7:1d:63:10:e8:74:4a:40:c5:fd:97:46:79:e5:46:
         ad:85:8a:fc:d0:09:0a:2f:f1:54:d1:f0:74:07:4a:ae:20:e1:
         20:9d:1a:54:5b:40:8a:23:ae:2a:5c:12:78:0d:80:f9:69:ad:
         a3:16:8c:94:c7:34:fe:1a:b9:59:b3:a8:06:c8:76:ef:6b:68:
         b3:40:ad:eb:cf:5e:a9:5e:68:3c:1a:cb:4f:b6:ad:44:f0:70:
         91:a5:2a:38:40:08:3f:64:99:37:8c:30:1b:55:56:d3:5d:34:
         5e:07:4b:a6:06:b9:2a:56:4a:51:38:99:49:33:83:35:8a:6d:
         d0:82:11:09:10:e9:3a:0e:63:18:0a:b2:97:2a:41:95:f4:a9:
         b6:57:34:b3:36:b3:b7:62:d2:70:d9:aa:95:91:a3:ad:78:64:
         67:8c:03:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUHYhccMmQresbOs69RWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYjM1OTU2YTQwMzhhMDkzOGNjZGE4NTU5MmFkNTMxZTRh
ODgzYWQwHhcNMjUwNjE0MTIwMDU2WhcNMjUwNjE1MTIwMDU2WjAzMTEwLwYDVQQD
Eyg4M2UzMjgwMTFjYTI0YWI0YWEzZDgxNDM1MGI2Y2FiNDQyZDgzYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI5shh3Zo+wAr85ODQK1PtTiuylb
BTjgMk+1X0VXzX8WoPZ9UaSgcpw/P5t9a4RCAOhomeSEgGNXaXqXihp+nUQwktgY
JIZHNRijMi37LEoE2ckabYnpNB/RGUEfr1E/ZADcTu1g3P4MS2iZ0x2SYROHhMFS
cSJvKVPFgyibKrjmJwlmm6tJdHTCLBdWa9lMd5RQ5r5HascSmFVs0fht8YTnk7YR
iTGXk+N90JoXjh1BPfm6pXddpU7LvZ2etXen35sflFxe/tqlwX/+QslzMhrCS2Gu
P3dVBZxpteoLfJkCK/zGsBjIc9kM2n5bSLZAfyL1j33K7x/YhB1LAqUTEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPjKAEcokq0qj2BQ1C2yrRC2Dr4MB8GA1UdIwQY
MBaAFOOzWVakA4oJOMzahVkq1THkqIOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmIt
MDdhZTY4MmMxMjYyLzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2JmODUtZTJjMC00NmY5LWIwZmItMDdhZTY4MmMxMjYy
LzEvNDdOWlZxUURpZ2s0ek5xRldTclZNZVNvZzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIwdu2oS
FqAU7ZAD9E9jK1i09tZOFtlGzI3ijgyyQ/Fp8kUwy8VPFzuL7TsSGasnXZufg7qK
zP80ZI91I+9QMheA1Civs+JBYgoeXxFr/mQ0BEwUEghI3A+Fuve9tx1jEOh0SkDF
/ZdGeeVGrYWK/NAJCi/xVNHwdAdKriDhIJ0aVFtAiiOuKlwSeA2A+WmtoxaMlMc0
/hq5WbOoBsh272tos0Ct689eqV5oPBrLT7atRPBwkaUqOEAIP2SZN4wwG1VW0100
XgdLpga5KlZKUTiZSTODNYpt0IIRCRDpOg5jGAqylypBlfSptlc0szazt2LScNmq
lZGjrXhkZ4wDrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:06 2025 by rpki-client