Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          QiuZ5NtlTW/MZ6LoxQbK2XJBF72PbYGz/AfbVqUySjY=
Subject key identifier:   86:D3:1F:80:45:73:2F:BC:F8:FA:E6:2C:95:B3:F0:87:24:69:AA:E3
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       019749316760DAEA4F3684B99281047FE247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          1112
Signing time:             Sat 07 Jun 2025 07:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:03 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: F1KeDV+/3XuWgXXoJrmw6vD1uou/QBFjhVLBCN8Flq8=)
                          2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:67:60:da:ea:4f:36:84:b9:92:81:04:7f:e2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: Jun  7 07:01:03 2025 GMT
            Not After : Jun  8 07:01:03 2025 GMT
        Subject: CN=86d31f8045732fbcf8fae62c95b3f0872469aae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:24:86:21:0b:18:73:a7:1b:2c:80:cb:c4:
                    a3:f2:6b:99:9a:64:4b:4f:eb:06:59:30:12:91:08:
                    71:c6:f3:cf:a6:cb:8b:8e:74:f0:0c:38:4d:10:ae:
                    81:96:ce:b1:4f:56:a7:76:e6:e7:3f:65:69:f9:14:
                    d6:8e:a1:c3:6d:e0:94:1a:8f:d6:55:7a:95:5d:1f:
                    91:b9:06:a6:c1:6b:38:ef:b1:a7:e5:65:37:d7:34:
                    52:90:d3:7e:38:67:cc:2b:30:29:90:fa:06:1d:82:
                    fb:d1:3b:96:a3:32:91:da:b6:b7:32:7f:11:c8:b3:
                    b8:40:d5:05:c0:ab:eb:73:c7:b3:c4:b6:81:eb:e7:
                    b5:85:75:22:fb:33:cc:a1:ae:fd:1c:c3:3e:a4:91:
                    7b:3d:68:0d:6c:cb:24:d4:a3:51:27:85:93:fc:3c:
                    6f:7a:80:c9:0d:79:f4:fd:dc:3f:77:c0:5d:1b:dd:
                    f8:c1:bc:56:1e:c3:d8:cc:23:f6:ae:bb:71:af:fb:
                    d7:84:7c:1d:b4:24:f6:9d:6f:73:13:9b:52:86:ea:
                    71:35:d8:2f:43:bf:7a:1d:ca:6b:8f:8c:99:cd:ce:
                    7d:65:5d:4b:3e:f9:2f:b7:87:ad:7b:6d:29:ee:e9:
                    28:05:5e:a0:53:20:43:58:b0:49:0a:d5:93:28:4b:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:1F:80:45:73:2F:BC:F8:FA:E6:2C:95:B3:F0:87:24:69:AA:E3
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:61:ea:4b:71:f4:4f:14:6a:13:a8:fb:6c:03:ba:b7:7f:28:
         37:91:1b:0c:39:3c:e0:0c:8b:ca:df:16:dd:d8:ff:87:79:4f:
         19:93:0c:29:d9:4e:25:f0:64:9b:97:a0:c8:0d:75:16:08:b8:
         d1:d8:0c:9a:3b:6b:7a:15:ab:c1:4f:03:ef:dd:95:71:98:43:
         10:6d:02:02:97:52:23:25:b7:bc:56:10:b5:98:2a:a9:c0:d2:
         b1:d5:0b:d9:d1:bd:d0:dc:d3:dc:26:0c:0d:51:2a:66:88:d8:
         2a:63:b4:22:e0:42:1f:50:07:cc:40:a0:be:15:4d:6b:dd:bf:
         5f:79:c2:af:35:d2:22:9c:e3:c0:04:69:d5:bf:24:62:60:90:
         f2:63:99:35:b3:f4:8f:4d:11:f6:bf:1e:3f:00:67:78:69:ad:
         2d:97:81:67:df:be:90:78:fd:e2:9f:ed:b5:5f:1f:0d:90:62:
         2e:70:25:30:b8:c9:50:14:bd:4d:3b:a7:2d:5f:85:38:5e:42:
         8c:42:64:a6:08:e0:f2:02:c7:a5:cd:ba:9a:12:17:b9:26:a2:
         09:27:4f:91:b0:74:c4:63:ad:e0:86:33:76:19:78:d3:ab:63:
         45:e1:f8:47:83:27:5d:c4:c2:ab:7d:28:5c:eb:4d:f6:2e:50:
         f4:2f:af:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMWdg2upPNoS5koEEf+JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOGFmOWU5YzU2NTJiMzU4NDRiMmU1ZDRiNTM3ZTlmY2Q0
NDUyZjMwHhcNMjUwNjA3MDcwMTAzWhcNMjUwNjA4MDcwMTAzWjAzMTEwLwYDVQQD
Eyg4NmQzMWY4MDQ1NzMyZmJjZjhmYWU2MmM5NWIzZjA4NzI0NjlhYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu0khiELGHOnGyyAy8Sj8muZmmRL
T+sGWTASkQhxxvPPpsuLjnTwDDhNEK6Bls6xT1andubnP2Vp+RTWjqHDbeCUGo/W
VXqVXR+RuQamwWs477Gn5WU31zRSkNN+OGfMKzApkPoGHYL70TuWozKR2ra3Mn8R
yLO4QNUFwKvrc8ezxLaB6+e1hXUi+zPMoa79HMM+pJF7PWgNbMsk1KNRJ4WT/Dxv
eoDJDXn0/dw/d8BdG934wbxWHsPYzCP2rrtxr/vXhHwdtCT2nW9zE5tShupxNdgv
Q796Hcprj4yZzc59ZV1LPvkvt4ete20p7ukoBV6gUyBDWLBJCtWTKEu7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbTH4BFcy+8+PrmLJWz8IckaarjMB8GA1UdIwQY
MBaAFBCK+enFZSs1hEsuXUtTfp/NRFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODIt
ZGUyZjZlYTAyMGJhLzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODItZGUyZjZlYTAyMGJh
LzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2HqS3H0
TxRqE6j7bAO6t38oN5EbDDk84AyLyt8W3dj/h3lPGZMMKdlOJfBkm5egyA11Fgi4
0dgMmjtrehWrwU8D792VcZhDEG0CApdSIyW3vFYQtZgqqcDSsdUL2dG90NzT3CYM
DVEqZojYKmO0IuBCH1AHzECgvhVNa92/X3nCrzXSIpzjwARp1b8kYmCQ8mOZNbP0
j00R9r8ePwBneGmtLZeBZ9++kHj94p/ttV8fDZBiLnAlMLjJUBS9TTunLV+FOF5C
jEJkpgjg8gLHpc26mhIXuSaiCSdPkbB0xGOt4IYzdhl406tjReH4R4MnXcTCq30o
XOtN9i5Q9C+vVw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:24 2025 by rpki-client