Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File:                     EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier:          Mop77BFrFtBymNEQI0QftyVdvMV7cilA4WS+7Sx3Ct8=
Subject key identifier:   B0:7F:EA:34:F7:20:A2:AC:18:41:C3:04:19:33:6D:CF:CC:A9:96:2B
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer:       /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial:       01985C108E13F4BD6A6B9C8E8488A2DA3243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number:          0CF4
Signing time:             Wed 30 Jul 2025 16:00:45 +0000
Manifest this update:     Wed 30 Jul 2025 16:00:45 +0000
Manifest next update:     Thu 31 Jul 2025 16:00:45 +0000
Files and hashes:         1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: l5+qC+EtcTqIqFvockOzww/5uAtNdNtvUbMs/ANRld8=)
                          2: TlnmoN3NW-y8xYiqm0HOIvqXMC0.roa (hash: fvos90x1MCHlKrWkPLr1FS+wwkNQEqqCA62xdTd9V6A=)
                          3: upwUY-IRDf6A9l9uowGDJXhgTCE.roa (hash: IubMyXokYf5K+jVmzZiM+AZcRQ0zYk8rqAfoAkObB6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 15:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5c:10:8e:13:f4:bd:6a:6b:9c:8e:84:88:a2:da:32:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
        Validity
            Not Before: Jul 30 16:00:45 2025 GMT
            Not After : Jul 31 16:00:45 2025 GMT
        Subject: CN=b07fea34f720a2ac1841c30419336dcfcca9962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:c6:4b:8b:8d:0c:90:76:1a:9e:0b:18:ea:
                    60:64:e0:88:e0:8b:37:51:fa:1e:80:35:09:85:82:
                    78:e6:32:97:13:f1:59:86:4c:cd:0e:f0:f4:23:0b:
                    0f:5c:4c:2c:dc:d4:c4:c0:74:b0:d4:3a:be:58:76:
                    c1:67:ca:18:6d:36:b9:df:ce:2a:c5:ad:0c:06:3a:
                    a4:2e:aa:7d:27:1f:fb:77:f2:9c:b2:bb:43:b1:96:
                    7f:36:d6:61:8a:68:ee:23:3c:a2:91:b2:91:8a:c7:
                    83:94:fc:45:a7:d7:f9:3d:96:92:07:f9:8f:3e:89:
                    00:fa:6c:f3:9d:69:98:1b:93:dc:7e:fe:96:4a:a5:
                    99:3c:ef:2a:df:68:25:33:3b:85:9f:a0:b7:39:0b:
                    de:3d:06:b2:d0:d5:5b:46:e9:0b:b0:a9:b4:9f:2a:
                    4b:2e:a0:18:60:8f:aa:24:1c:54:cd:9b:f5:cf:d1:
                    c9:71:92:70:ef:9d:38:40:ec:48:22:de:06:3b:4f:
                    fe:ca:96:1e:54:b3:bd:e9:cc:73:6f:ad:78:2c:33:
                    e4:08:40:b5:75:8e:cf:9f:20:4d:1c:6c:7b:68:86:
                    e8:ce:c2:95:9e:0d:16:da:f4:95:51:2f:a3:40:ec:
                    27:7e:e5:3d:a5:15:a5:9e:df:07:74:cd:ec:b0:c8:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7F:EA:34:F7:20:A2:AC:18:41:C3:04:19:33:6D:CF:CC:A9:96:2B
            X509v3 Authority Key Identifier:
                keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:57:73:7d:2c:2c:ef:f5:a1:44:ac:16:0c:64:6a:3c:ec:
         57:24:d4:fc:c3:0c:be:f1:fb:a4:3d:42:8e:23:36:6e:e8:31:
         99:77:71:a9:2e:d3:fe:84:d6:08:b0:b7:e0:67:7f:6a:1b:e1:
         34:2e:84:cc:28:66:d3:46:22:49:4e:0b:f3:06:70:53:fe:7e:
         6c:5c:d8:b0:5c:11:9d:f8:7d:3b:5a:8e:27:60:a5:fc:34:d6:
         f6:f0:a5:2c:4c:c8:8b:24:9d:70:83:26:91:94:53:96:d9:9b:
         f0:34:3e:79:01:36:f0:80:2c:17:e0:56:9d:05:b1:0a:61:b3:
         e9:90:45:d8:ad:04:04:0a:d3:04:f6:ec:9f:dc:35:6e:58:ec:
         6a:f7:40:9b:4a:a1:29:fd:d1:ea:cd:2a:cd:62:74:66:f5:96:
         23:9a:3f:0d:67:87:99:f4:5c:81:a9:c5:b0:1c:38:78:73:3a:
         1f:d1:07:3c:05:06:9f:ac:e6:a4:66:a7:8e:55:ff:b8:be:de:
         ed:09:49:c2:fe:09:2f:28:2d:be:c1:3a:e5:66:42:df:60:1a:
         aa:de:04:14:c9:f8:2a:5b:3d:a7:5e:d6:d2:45:fa:a3:bb:13:
         c4:29:53:36:99:d6:7a:de:71:0d:58:ae:5a:82:18:3b:d5:e9:
         d7:5c:10:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhcEI4T9L1qa5yOhIii2jJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTJhNzhkZGM3ZjEzOWYwYzIyYTJhNjM2NjJiNDgxMmFl
NTEzMmUwHhcNMjUwNzMwMTYwMDQ1WhcNMjUwNzMxMTYwMDQ1WjAzMTEwLwYDVQQD
EyhiMDdmZWEzNGY3MjBhMmFjMTg0MWMzMDQxOTMzNmRjZmNjYTk5NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NvGS4uNDJB2Gp4LGOpgZOCI4Is3
UfoegDUJhYJ45jKXE/FZhkzNDvD0IwsPXEws3NTEwHSw1Dq+WHbBZ8oYbTa5384q
xa0MBjqkLqp9Jx/7d/KcsrtDsZZ/NtZhimjuIzyikbKRiseDlPxFp9f5PZaSB/mP
PokA+mzznWmYG5Pcfv6WSqWZPO8q32glMzuFn6C3OQvePQay0NVbRukLsKm0nypL
LqAYYI+qJBxUzZv1z9HJcZJw7504QOxIIt4GO0/+ypYeVLO96cxzb614LDPkCEC1
dY7PnyBNHGx7aIbozsKVng0W2vSVUS+jQOwnfuU9pRWlnt8HdM3ssMiyVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB/6jT3IKKsGEHDBBkzbc/MqZYrMB8GA1UdIwQY
MBaAFBHip43cfxOfDCKipjZitIEq5RMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQt
ZGU1ZjdiZjU5ODM5LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQtZGU1ZjdiZjU5ODM5
LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxJXc30s
LO/1oUSsFgxkajzsVyTU/MMMvvH7pD1CjiM2bugxmXdxqS7T/oTWCLC34Gd/ahvh
NC6EzChm00YiSU4L8wZwU/5+bFzYsFwRnfh9O1qOJ2Cl/DTW9vClLEzIiySdcIMm
kZRTltmb8DQ+eQE28IAsF+BWnQWxCmGz6ZBF2K0EBArTBPbsn9w1bljsavdAm0qh
Kf3R6s0qzWJ0ZvWWI5o/DWeHmfRcganFsBw4eHM6H9EHPAUGn6zmpGanjlX/uL7e
7QlJwv4JLygtvsE65WZC32Aaqt4EFMn4Kls9p17W0kX6o7sTxClTNpnWet5xDViu
WoIYO9Xp11wQmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 20:28:14 2025 by rpki-client