Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          E28Qb7KsFxOKEKuV3T1dek998pUyQCLsN5jvW8YzjzM=
Subject key identifier:   8A:38:88:D1:6F:56:45:0C:A0:31:9C:24:9C:6A:5A:F9:6D:CD:FF:C7
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       019748FA09D22C1ED973D065B05E21A9E529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          07BA
Signing time:             Sat 07 Jun 2025 06:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:35 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: buqPoZmoG3Jt1KUqNC7xX0lfHEAsOujpN/l1PxJvsLg=)
                          2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:09:d2:2c:1e:d9:73:d0:65:b0:5e:21:a9:e5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: Jun  7 06:00:35 2025 GMT
            Not After : Jun  8 06:00:35 2025 GMT
        Subject: CN=8a3888d16f56450ca0319c249c6a5af96dcdffc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:f6:ef:ab:13:56:b3:fe:98:05:99:ee:b8:
                    b9:d7:10:d7:a3:2d:77:a5:a5:fd:db:64:65:ae:50:
                    fc:f9:3c:38:4a:43:d9:c4:14:45:5d:dc:04:69:76:
                    1b:40:d1:de:5b:de:6b:b1:06:4c:4b:d9:5d:c1:30:
                    5d:61:10:49:8a:f0:b8:0a:ba:76:f9:88:df:7a:95:
                    5e:e7:7b:9f:c7:8f:d6:61:9d:03:0a:9b:fe:5e:9f:
                    9f:c5:bd:28:df:26:c3:c0:57:d9:fc:a1:9f:7c:ea:
                    33:a7:e3:8d:98:48:47:bd:a3:a8:8a:ac:62:31:81:
                    04:05:6c:5b:91:18:8c:c2:82:00:a9:b9:8e:70:71:
                    4a:62:a8:5c:93:ea:23:f4:4b:d0:17:ca:6e:20:d9:
                    60:0f:a9:86:b7:fd:47:7e:d6:d4:03:c3:05:23:e2:
                    0b:f4:ab:c5:10:d9:0c:a2:ca:51:73:5c:53:d8:21:
                    c2:f5:4f:7a:e1:29:0f:0d:f5:90:61:42:83:8a:50:
                    28:f4:b4:45:39:4f:4d:1d:a3:dc:a6:fc:fd:db:71:
                    2d:4f:4f:ab:c1:49:5e:49:ed:dc:fd:03:03:3f:9b:
                    0f:ac:41:38:a4:34:4a:c8:ed:95:a4:03:37:5d:54:
                    4c:46:27:d5:92:ff:b3:dd:36:78:ab:a2:16:b1:75:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:88:D1:6F:56:45:0C:A0:31:9C:24:9C:6A:5A:F9:6D:CD:FF:C7
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:9c:90:d2:38:f9:1c:3a:fa:0d:a8:4e:0c:3e:24:94:9c:
         29:cb:8c:3a:37:33:c9:00:07:18:32:01:aa:de:66:bb:d3:7d:
         8e:5a:1d:b7:0f:12:4a:8b:fd:91:17:2b:1e:f7:ec:01:05:76:
         96:1f:dd:29:fb:88:bd:cc:62:f5:ab:b8:10:5f:26:c9:5c:6f:
         3a:7b:08:4e:a0:bc:eb:36:e8:40:89:b1:86:1f:81:3a:c2:3f:
         fd:b0:ec:f5:d0:60:75:bc:e4:98:bc:51:85:7b:f1:a4:2a:a9:
         eb:e8:c6:d8:da:c2:45:cf:06:aa:ef:0c:eb:be:22:3f:29:77:
         cb:51:b6:38:bb:27:53:f5:49:d0:40:2a:37:07:f9:0e:92:38:
         46:11:cc:8e:e6:c2:4a:c6:38:63:aa:2f:11:02:f3:38:18:6f:
         fa:db:95:ef:eb:87:40:91:a5:e2:60:62:96:e7:73:fa:a1:6a:
         25:97:38:6d:92:b6:06:a1:2d:c9:3f:95:98:66:3e:cb:44:37:
         d4:6c:b2:56:46:23:f4:23:5e:8e:da:db:05:f6:cf:7f:9b:52:
         58:94:0c:cc:ca:32:f7:1f:ea:84:01:cc:2b:63:4b:54:8c:42:
         41:36:8d:4b:41:63:bb:b3:0d:b2:f0:16:67:74:fe:71:6b:6b:
         d8:d1:fe:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+gnSLB7Zc9BlsF4hqeUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZjliZDFjNzE2ZmQyZTk1YWM5ZDYxMDc1ZDcwOTYyMWFl
ODA2MDAwHhcNMjUwNjA3MDYwMDM1WhcNMjUwNjA4MDYwMDM1WjAzMTEwLwYDVQQD
Eyg4YTM4ODhkMTZmNTY0NTBjYTAzMTljMjQ5YzZhNWFmOTZkY2RmZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/276sTVrP+mAWZ7ri51xDXoy13
paX922RlrlD8+Tw4SkPZxBRFXdwEaXYbQNHeW95rsQZMS9ldwTBdYRBJivC4Crp2
+YjfepVe53ufx4/WYZ0DCpv+Xp+fxb0o3ybDwFfZ/KGffOozp+ONmEhHvaOoiqxi
MYEEBWxbkRiMwoIAqbmOcHFKYqhck+oj9EvQF8puINlgD6mGt/1HftbUA8MFI+IL
9KvFENkMospRc1xT2CHC9U964SkPDfWQYUKDilAo9LRFOU9NHaPcpvz923EtT0+r
wUleSe3c/QMDP5sPrEE4pDRKyO2VpAM3XVRMRifVkv+z3TZ4q6IWsXUu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo4iNFvVkUMoDGcJJxqWvltzf/HMB8GA1UdIwQY
MBaAFBD5vRxxb9LpWsnWEHXXCWIa6AYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUt
ZDJhZjFjYzNmYTMxLzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUtZDJhZjFjYzNmYTMx
LzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+6ckNI4
+Rw6+g2oTgw+JJScKcuMOjczyQAHGDIBqt5mu9N9jlodtw8SSov9kRcrHvfsAQV2
lh/dKfuIvcxi9au4EF8myVxvOnsITqC86zboQImxhh+BOsI//bDs9dBgdbzkmLxR
hXvxpCqp6+jG2NrCRc8Gqu8M674iPyl3y1G2OLsnU/VJ0EAqNwf5DpI4RhHMjubC
SsY4Y6ovEQLzOBhv+tuV7+uHQJGl4mBiludz+qFqJZc4bZK2BqEtyT+VmGY+y0Q3
1GyyVkYj9CNejtrbBfbPf5tSWJQMzMoy9x/qhAHMK2NLVIxCQTaNS0Fju7MNsvAW
Z3T+cWtr2NH+Xw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:16:43 2025 by rpki-client