Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File:                     ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier:          FC2wazR2sm69fUrwLT+O+YwBkUl44/9+nmrX65n+EsM=
Subject key identifier:   B2:99:04:AC:86:73:17:5D:07:43:8E:2B:AE:DD:E4:A3:21:77:C7:0A
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer:       /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial:       01984AAEB1B6931EE4A340E622B6FF964655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number:          160A
Signing time:             Sun 27 Jul 2025 07:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:19 +0000
Files and hashes:         1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
                          2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: TqmjZ2ufogcel5zUXqYT904Pli8cDvo2BzVjwyo75r0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:b1:b6:93:1e:e4:a3:40:e6:22:b6:ff:96:46:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
        Validity
            Not Before: Jul 27 07:00:19 2025 GMT
            Not After : Jul 28 07:00:19 2025 GMT
        Subject: CN=b29904ac8673175d07438e2baedde4a32177c70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:0e:b7:6a:d3:8c:1c:2c:eb:09:e7:6c:ef:
                    a2:cf:41:ec:0a:11:18:6a:2b:78:72:8f:72:49:cd:
                    69:04:36:63:09:96:bc:b9:fb:03:d3:91:0e:dc:4d:
                    2f:ed:a3:02:03:df:01:e6:2f:25:fa:54:bc:ba:1f:
                    76:53:9b:db:d5:7d:4c:ab:ef:38:c0:c2:be:35:ea:
                    ce:b6:2f:a1:a7:5c:45:6f:da:a9:f6:a1:61:23:53:
                    11:c2:2c:6a:87:be:3d:34:06:f6:88:3e:04:42:95:
                    51:71:e6:c1:bd:db:7e:c7:4b:c3:54:a1:e2:37:55:
                    f9:90:c6:22:4c:ff:5b:2e:57:e4:0b:2d:1f:ef:fe:
                    68:47:51:f9:2b:86:ea:50:92:b3:5a:f3:94:c3:b8:
                    15:fb:22:b8:9a:d4:00:92:f5:af:cf:af:aa:ac:55:
                    fe:85:c5:f4:74:82:e2:41:ac:69:73:40:e8:71:98:
                    68:d4:bc:79:81:8b:90:5d:6e:64:12:87:59:70:6c:
                    8a:47:5d:e6:c1:d3:e2:b1:2d:6a:75:6f:7e:c9:47:
                    bd:45:d6:30:09:45:5b:3a:2e:36:8b:85:e5:8d:04:
                    ac:55:d0:49:41:64:9a:c9:ba:89:ee:57:54:5a:f3:
                    b1:fb:4f:f3:53:01:45:78:7f:9c:2b:19:b4:e5:a1:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:04:AC:86:73:17:5D:07:43:8E:2B:AE:DD:E4:A3:21:77:C7:0A
            X509v3 Authority Key Identifier:
                keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:9f:94:89:27:05:42:5d:b3:83:3c:17:bd:b7:2f:60:8b:
         24:96:7d:41:eb:30:42:d4:88:25:01:09:63:8d:4a:96:80:cd:
         98:6b:28:87:b7:39:d7:b4:7c:ea:98:9e:9a:31:b4:50:8e:01:
         69:31:84:68:8f:f5:38:f4:2e:36:68:48:83:7f:6d:3d:35:54:
         f3:7b:aa:ca:ad:27:fa:0a:a3:eb:8d:e6:32:81:4c:7c:c3:06:
         f5:9b:02:15:b5:17:10:5b:72:81:11:35:56:75:7a:ee:b4:f8:
         6e:b0:5f:c6:c0:4c:50:39:d2:48:6d:34:e9:c4:40:33:95:0a:
         7a:52:f1:66:0d:f6:1a:e4:85:dd:0f:52:03:9a:52:f6:df:a3:
         3c:39:4b:57:95:53:aa:c3:8a:ba:58:e4:ef:ff:0b:3b:7a:4b:
         cd:3f:10:29:aa:52:ca:a1:db:d1:0e:7f:ad:88:9e:b0:38:ae:
         55:ff:b0:be:0f:9a:34:c9:b8:f8:04:8e:0d:76:0f:90:eb:ba:
         6f:0a:e2:94:97:ae:b8:3c:d3:22:9f:c7:a3:6c:ed:3e:73:19:
         87:37:8a:d1:f9:f4:ff:e8:90:e4:a9:f4:35:a1:82:2e:d9:62:
         b1:45:00:e0:a4:6e:be:1a:a7:49:72:7e:f7:71:08:0b:fa:dd:
         98:26:a3:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrrG2kx7ko0DmIrb/lkZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMmJhNzk3NTc3ZWE2MGE1NjFhZjlhNDU5OGM0NTA2MGUz
YjcwODgwHhcNMjUwNzI3MDcwMDE5WhcNMjUwNzI4MDcwMDE5WjAzMTEwLwYDVQQD
EyhiMjk5MDRhYzg2NzMxNzVkMDc0MzhlMmJhZWRkZTRhMzIxNzdjNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GYOt2rTjBws6wnnbO+iz0HsChEY
ait4co9ySc1pBDZjCZa8ufsD05EO3E0v7aMCA98B5i8l+lS8uh92U5vb1X1Mq+84
wMK+NerOti+hp1xFb9qp9qFhI1MRwixqh749NAb2iD4EQpVRcebBvdt+x0vDVKHi
N1X5kMYiTP9bLlfkCy0f7/5oR1H5K4bqUJKzWvOUw7gV+yK4mtQAkvWvz6+qrFX+
hcX0dILiQaxpc0DocZho1Lx5gYuQXW5kEodZcGyKR13mwdPisS1qdW9+yUe9RdYw
CUVbOi42i4XljQSsVdBJQWSaybqJ7ldUWvOx+0/zUwFFeH+cKxm05aHS0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKZBKyGcxddB0OOK67d5KMhd8cKMB8GA1UdIwQY
MBaAFBErp5dXfqYKVhr5pFmMRQYOO3CIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAt
NmJjNDQzZjM1NTQ0LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAtNmJjNDQzZjM1NTQ0
LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnOflIkn
BUJds4M8F723L2CLJJZ9QeswQtSIJQEJY41KloDNmGsoh7c517R86piemjG0UI4B
aTGEaI/1OPQuNmhIg39tPTVU83uqyq0n+gqj643mMoFMfMMG9ZsCFbUXEFtygRE1
VnV67rT4brBfxsBMUDnSSG006cRAM5UKelLxZg32GuSF3Q9SA5pS9t+jPDlLV5VT
qsOKuljk7/8LO3pLzT8QKapSyqHb0Q5/rYiesDiuVf+wvg+aNMm4+ASODXYPkOu6
bwrilJeuuDzTIp/Ho2ztPnMZhzeK0fn0/+iQ5Kn0NaGCLtlisUUA4KRuvhqnSXJ+
93EIC/rdmCajug==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:06 2025 by rpki-client