Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File:                     5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier:          sUdLSktek2D335PzwNSHi3dUnLEX0ZtDdcLRJ/vWhmE=
Subject key identifier:   32:E5:6F:CB:75:FE:3D:16:E9:4C:55:77:55:F5:F7:42:98:68:8E:F2
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer:       /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial:       01976997A38C742375E319735BB991F083ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number:          151D
Signing time:             Fri 13 Jun 2025 14:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:34 +0000
Files and hashes:         1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: xNGLgvRcD0XXR4RnRDN+vZgZAmytwL59nQ1bnQovn5c=)
                          2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:a3:8c:74:23:75:e3:19:73:5b:b9:91:f0:83:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
        Validity
            Not Before: Jun 13 14:00:34 2025 GMT
            Not After : Jun 14 14:00:34 2025 GMT
        Subject: CN=32e56fcb75fe3d16e94c557755f5f74298688ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:e7:20:b8:f3:02:45:f8:86:fd:51:ea:a7:
                    46:d9:14:fc:a8:5b:96:4f:57:2a:dd:6a:13:39:58:
                    3f:b0:cb:de:d6:49:19:03:0c:da:fc:f6:af:77:e6:
                    c3:c8:64:5d:22:ad:fe:0c:6b:da:7a:c6:c1:d0:49:
                    91:26:7d:3b:5a:21:7c:f4:2b:6a:ef:78:9c:0a:9e:
                    94:5b:c9:45:2e:0c:32:a9:ad:aa:de:b6:d1:17:58:
                    f0:d7:ee:d9:8b:4e:d2:87:ad:98:d0:65:ef:0f:cf:
                    e4:50:88:b4:9a:a4:e4:c3:65:3a:a5:08:97:57:01:
                    1e:1c:2f:e4:7f:a1:22:87:6c:31:87:eb:97:48:26:
                    13:da:6e:58:b6:3d:2f:18:7f:8c:a0:0a:b2:18:8b:
                    c3:6c:be:24:39:92:66:e4:08:7b:7d:7f:63:da:16:
                    51:61:e5:92:9c:92:84:f1:6e:32:fc:3e:5d:e1:b1:
                    bf:3e:fe:33:b9:62:91:47:ec:cd:7d:6b:2b:6d:c9:
                    87:ee:43:24:a0:50:90:5c:98:66:c5:43:f8:d0:05:
                    58:b0:45:b5:5d:3e:d4:03:e5:a6:f9:a5:66:a9:17:
                    e8:d0:c7:5a:67:7f:53:02:13:7d:bf:2e:38:33:69:
                    e4:24:cf:f6:c2:3a:80:4a:46:7a:c8:0e:c4:92:5a:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:6F:CB:75:FE:3D:16:E9:4C:55:77:55:F5:F7:42:98:68:8E:F2
            X509v3 Authority Key Identifier:
                keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:0b:15:5c:e5:6e:71:ea:ca:4b:26:76:5f:68:1b:8a:b6:
         cd:62:46:70:09:3e:48:c2:1a:69:d5:42:6a:df:82:02:0f:14:
         ac:ee:21:54:a2:07:32:98:85:ec:49:73:76:4b:88:72:37:19:
         a0:6d:b5:d6:84:a6:9e:1c:d8:1c:90:8d:f4:a8:50:93:5e:0e:
         89:e6:e5:15:1e:60:a4:31:18:38:d1:ab:9f:7d:d6:24:3c:32:
         51:eb:8f:03:ce:91:23:f8:86:44:dd:59:6f:6b:ff:e8:16:20:
         ab:3b:7e:6b:92:56:e0:ad:a8:ab:9a:a7:66:ce:99:58:34:46:
         0a:22:69:5c:3e:64:0d:b9:04:09:a6:d3:19:96:19:be:d5:5f:
         b4:f2:fe:e6:6d:81:69:8a:a6:f2:0d:b6:c5:49:14:a2:ae:d2:
         5e:5b:cc:1b:ad:ae:6b:77:d0:8a:4f:57:a6:59:a5:1c:06:f6:
         c7:91:b7:a1:8f:5a:bb:38:de:63:da:a4:3b:fd:37:2b:b5:00:
         1a:1a:79:e9:fa:5e:29:36:14:21:28:45:c0:d5:5c:db:81:41:
         3d:81:e6:db:ab:8f:79:85:fc:c4:8f:13:6f:40:fc:6e:19:ca:
         eb:77:37:4f:b3:75:60:88:5f:32:e9:aa:4f:19:92:61:05:d7:
         2e:b6:35:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl6OMdCN14xlzW7mR8IPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODViYWVhNjJmOGQ2MDYyNjI0ODczOGM0NWRmYmQyMjE3
MzdmNGMwHhcNMjUwNjEzMTQwMDM0WhcNMjUwNjE0MTQwMDM0WjAzMTEwLwYDVQQD
EygzMmU1NmZjYjc1ZmUzZDE2ZTk0YzU1Nzc1NWY1Zjc0Mjk4Njg4ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEnnILjzAkX4hv1R6qdG2RT8qFuW
T1cq3WoTOVg/sMve1kkZAwza/Pavd+bDyGRdIq3+DGvaesbB0EmRJn07WiF89Ctq
73icCp6UW8lFLgwyqa2q3rbRF1jw1+7Zi07Sh62Y0GXvD8/kUIi0mqTkw2U6pQiX
VwEeHC/kf6Eih2wxh+uXSCYT2m5Ytj0vGH+MoAqyGIvDbL4kOZJm5Ah7fX9j2hZR
YeWSnJKE8W4y/D5d4bG/Pv4zuWKRR+zNfWsrbcmH7kMkoFCQXJhmxUP40AVYsEW1
XT7UA+Wm+aVmqRfo0MdaZ39TAhN9vy44M2nkJM/2wjqASkZ6yA7EklpxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLlb8t1/j0W6UxVd1X190KYaI7yMB8GA1UdIwQY
MBaAFOWFuupi+NYGJiSHOMRd+9Ihc39MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUt
YjIyZWI5NDg1MTVjLzEvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iZGEzZWYtNGEyZi00Y2NjLWIyOTUtYjIyZWI5NDg1MTVj
LzEvNVlXNjZtTDQxZ1ltSkljNHhGMzcwaUZ6ZjB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkv0LFVzl
bnHqyksmdl9oG4q2zWJGcAk+SMIaadVCat+CAg8UrO4hVKIHMpiF7ElzdkuIcjcZ
oG211oSmnhzYHJCN9KhQk14OieblFR5gpDEYONGrn33WJDwyUeuPA86RI/iGRN1Z
b2v/6BYgqzt+a5JW4K2oq5qnZs6ZWDRGCiJpXD5kDbkECabTGZYZvtVftPL+5m2B
aYqm8g22xUkUoq7SXlvMG62ua3fQik9XplmlHAb2x5G3oY9auzjeY9qkO/03K7UA
Ghp56fpeKTYUIShFwNVc24FBPYHm26uPeYX8xI8Tb0D8bhnK63c3T7N1YIhfMumq
TxmSYQXXLrY1ng==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:08 2025 by rpki-client