Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File:                     ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier:          grH1pkvU/ajFtrWQ3MDA9tar9w4v7UbhkaFDcwpN8IU=
Subject key identifier:   78:62:BB:B2:FD:0E:09:E8:D4:68:5B:54:99:35:AF:BA:8E:30:F9:15
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer:       /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial:       019849D325C7C2C3143260C2346CA41D5465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number:          0CE3
Signing time:             Sun 27 Jul 2025 03:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:31 +0000
Files and hashes:         1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=)
                          2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: 5lMthkfwSYolFh2dUiDWH/QMwMY90cY7aXFlZnLh5UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:25:c7:c2:c3:14:32:60:c2:34:6c:a4:1d:54:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
        Validity
            Not Before: Jul 27 03:00:31 2025 GMT
            Not After : Jul 28 03:00:31 2025 GMT
        Subject: CN=7862bbb2fd0e09e8d4685b549935afba8e30f915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:6e:cf:27:3c:ef:54:e3:99:3e:f7:85:48:
                    db:7c:ee:57:c5:05:df:55:e9:84:e1:37:98:a0:db:
                    c4:30:94:05:46:b2:6c:6a:96:84:1b:a3:5b:55:fe:
                    ba:ad:a9:a2:07:fb:c6:54:84:f8:13:5b:0c:26:2a:
                    95:83:a8:e2:3a:b1:76:1f:00:bc:66:bf:c3:42:e0:
                    f5:dc:c2:e0:25:5a:7d:87:47:c1:18:80:4b:63:03:
                    51:9d:1c:f2:90:fc:83:13:88:69:bc:23:08:8d:b6:
                    b1:50:5d:f0:bd:3c:33:9b:bf:fc:27:cb:59:86:9c:
                    a5:c1:05:c3:ff:2b:66:31:4e:db:01:c3:4b:4c:24:
                    2d:2a:ea:08:ee:ff:53:0e:a7:58:b8:38:80:29:2a:
                    98:77:88:49:ba:19:44:cd:cc:3b:b7:05:75:f5:ba:
                    8e:0c:53:26:99:e3:a5:47:e1:20:34:d4:9a:32:81:
                    5a:d3:7c:fc:9f:93:81:af:61:e5:f9:24:3e:57:7b:
                    f6:fc:77:97:22:9b:1e:fd:1e:36:40:22:09:fb:c9:
                    64:15:ca:48:63:57:d8:76:f5:65:6a:1f:ba:a9:3f:
                    38:45:d5:4e:49:a9:83:82:b0:be:a2:54:b6:48:bd:
                    a1:0f:ad:f4:91:98:e3:d7:cf:2c:e9:8a:97:d5:1b:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:BB:B2:FD:0E:09:E8:D4:68:5B:54:99:35:AF:BA:8E:30:F9:15
            X509v3 Authority Key Identifier:
                keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:0a:2d:61:90:30:03:1f:33:82:2a:cc:b4:ab:b1:26:03:
         7c:19:3a:aa:8b:1f:17:83:f0:89:7d:6e:35:c6:34:65:e0:cc:
         5d:b1:21:3e:d7:63:23:a4:7a:72:a0:70:ca:3e:5b:28:c1:ac:
         a2:41:df:cb:b9:e0:15:9e:de:63:ac:25:52:75:bd:c1:36:d1:
         d6:19:9a:20:29:bc:ea:c0:cb:8d:67:80:56:72:c2:9a:4e:a4:
         48:43:2f:ff:85:6b:14:5d:c1:1d:a2:fc:6f:2a:8f:dd:b7:f4:
         f8:6e:2b:48:9e:53:73:87:46:ce:b6:d2:0f:5a:71:b3:ca:4c:
         96:c4:b6:e5:c7:90:07:28:2b:6d:6c:77:e7:0a:c6:82:f1:8d:
         46:df:1e:11:b7:68:2b:2e:6c:47:28:97:a1:50:21:37:e1:82:
         b0:e2:4e:f8:34:00:62:97:c7:02:88:ee:67:17:1d:fb:be:c2:
         31:83:37:a6:4d:50:02:24:47:b1:c7:d1:cb:e5:5f:36:d2:70:
         b6:6c:59:54:15:bd:d1:5e:8d:e1:df:b4:64:7a:a8:d2:e0:a2:
         7c:6b:44:9d:9b:2d:8a:4d:6c:82:dc:ee:56:31:8d:4c:f0:82:
         5f:86:0a:8e:e8:b6:3c:17:a9:ec:a0:10:73:97:e9:92:fd:6e:
         82:a1:69:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0yXHwsMUMmDCNGykHVRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0
NzQ4MzUwHhcNMjUwNzI3MDMwMDMxWhcNMjUwNzI4MDMwMDMxWjAzMTEwLwYDVQQD
Eyg3ODYyYmJiMmZkMGUwOWU4ZDQ2ODViNTQ5OTM1YWZiYThlMzBmOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZuzyc871TjmT73hUjbfO5XxQXf
VemE4TeYoNvEMJQFRrJsapaEG6NbVf66ramiB/vGVIT4E1sMJiqVg6jiOrF2HwC8
Zr/DQuD13MLgJVp9h0fBGIBLYwNRnRzykPyDE4hpvCMIjbaxUF3wvTwzm7/8J8tZ
hpylwQXD/ytmMU7bAcNLTCQtKuoI7v9TDqdYuDiAKSqYd4hJuhlEzcw7twV19bqO
DFMmmeOlR+EgNNSaMoFa03z8n5OBr2Hl+SQ+V3v2/HeXIpse/R42QCIJ+8lkFcpI
Y1fYdvVlah+6qT84RdVOSamDgrC+olS2SL2hD630kZjj188s6YqX1RsYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhiu7L9Dgno1GhbVJk1r7qOMPkVMB8GA1UdIwQY
MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct
MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx
LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMEKLWGQ
MAMfM4IqzLSrsSYDfBk6qosfF4PwiX1uNcY0ZeDMXbEhPtdjI6R6cqBwyj5bKMGs
okHfy7ngFZ7eY6wlUnW9wTbR1hmaICm86sDLjWeAVnLCmk6kSEMv/4VrFF3BHaL8
byqP3bf0+G4rSJ5Tc4dGzrbSD1pxs8pMlsS25ceQBygrbWx35wrGgvGNRt8eEbdo
Ky5sRyiXoVAhN+GCsOJO+DQAYpfHAojuZxcd+77CMYM3pk1QAiRHscfRy+VfNtJw
tmxZVBW90V6N4d+0ZHqo0uCifGtEnZstik1sgtzuVjGNTPCCX4YKjui2PBep7KAQ
c5fpkv1ugqFpYQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:37 2025 by rpki-client