Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File:                     sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier:          u7IReXKJtFiqJZDhi3J7UzaQtUCVK1SNj9bXTnsgoww=
Subject key identifier:   89:CB:71:D8:39:73:73:11:56:96:B4:3F:81:CA:E3:01:83:E2:E2:7C
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer:       /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial:       019748C3179A4FDBBC40E8048A5BF569FB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number:          0EE2
Signing time:             Sat 07 Jun 2025 05:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:34 +0000
Files and hashes:         1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
                          2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: pgS9kzqnJkownPPdONYOevOt06fZzI+VGndzvFJ3kfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:17:9a:4f:db:bc:40:e8:04:8a:5b:f5:69:fb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
        Validity
            Not Before: Jun  7 05:00:34 2025 GMT
            Not After : Jun  8 05:00:34 2025 GMT
        Subject: CN=89cb71d8397373115696b43f81cae30183e2e27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:21:6b:ae:6b:a1:af:db:df:71:87:0d:77:
                    b7:8c:6d:85:7b:ed:36:3f:5f:cb:d3:19:38:91:8f:
                    95:db:4c:36:5d:b1:8e:8f:77:3e:e7:66:b0:7f:0f:
                    b1:0c:cf:01:a4:70:ea:7d:0b:72:9d:9f:7f:a1:ca:
                    8e:65:54:5e:53:21:b0:62:8c:5a:91:70:16:c7:91:
                    60:36:44:44:e6:49:10:81:fe:47:88:c2:8c:76:30:
                    2b:74:7e:f8:8e:14:de:5f:9e:84:30:19:76:4b:c5:
                    fa:34:bc:87:6b:59:9d:d5:45:f7:df:fc:e6:14:7d:
                    02:c4:bb:ec:90:15:a8:da:30:53:38:f4:2f:47:c0:
                    29:1f:21:d7:27:d2:26:9f:31:39:d3:4c:64:a7:a6:
                    b1:fe:a9:8c:1b:17:c0:95:63:c3:87:94:83:7f:20:
                    e9:d4:2b:c6:ed:2c:55:11:22:f8:f1:25:d7:f7:4a:
                    97:91:0d:50:78:7f:2b:0b:6c:73:de:3f:ce:7c:3f:
                    fc:90:50:15:e4:24:54:4b:30:64:6c:a4:3e:d1:1d:
                    8b:c9:ba:e7:52:d4:d2:ff:b7:4d:a2:f3:55:a2:16:
                    3a:50:17:41:8f:25:fc:7a:73:5e:09:02:6e:2f:20:
                    a8:ac:aa:ee:17:f2:09:fd:1b:21:43:c5:40:8b:d1:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:71:D8:39:73:73:11:56:96:B4:3F:81:CA:E3:01:83:E2:E2:7C
            X509v3 Authority Key Identifier:
                keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:2c:00:18:3d:42:55:3b:4f:2b:99:d8:56:90:50:4e:31:
         a1:2d:5e:86:b5:5b:c3:d4:56:a5:03:e7:27:2d:c3:1c:13:1d:
         d4:91:d3:5b:4e:83:d7:43:9c:88:d2:56:bc:2a:5d:a5:31:dc:
         38:32:77:70:16:74:bd:8c:f5:9f:bb:d6:bf:fd:7e:36:64:08:
         60:2b:f1:0d:ca:83:e4:8e:c0:3c:85:a1:43:6c:3d:c4:1f:af:
         c0:af:24:ef:df:fa:61:2b:ee:29:44:b1:2a:b0:b2:70:c9:0e:
         9b:21:ce:4f:70:d2:a7:fd:27:74:e5:2f:62:75:72:c4:2a:60:
         15:10:70:d9:16:ea:83:11:cf:9e:b9:09:7c:91:68:d3:6e:99:
         79:f9:28:e8:f8:92:a4:47:52:38:ac:02:a7:9e:11:23:6d:2e:
         27:0c:5f:d8:22:0d:a9:b1:3c:65:0e:88:71:4a:a2:6f:04:07:
         eb:d0:25:2b:3c:9f:ad:db:56:27:94:46:52:78:2e:fa:8b:41:
         00:30:f6:11:55:ad:61:a4:14:87:c4:f5:da:54:a7:16:a0:c6:
         03:1d:76:c8:50:88:8a:79:57:78:e7:d2:bc:22:7f:1e:08:2f:
         cf:71:01:3b:34:bc:01:ef:82:bb:66:90:b5:cd:b9:eb:c4:4b:
         12:7a:bd:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwxeaT9u8QOgEilv1afuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi
OGRmZTIwHhcNMjUwNjA3MDUwMDM0WhcNMjUwNjA4MDUwMDM0WjAzMTEwLwYDVQQD
Eyg4OWNiNzFkODM5NzM3MzExNTY5NmI0M2Y4MWNhZTMwMTgzZTJlMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ0ha65roa/b33GHDXe3jG2Fe+02
P1/L0xk4kY+V20w2XbGOj3c+52awfw+xDM8BpHDqfQtynZ9/ocqOZVReUyGwYoxa
kXAWx5FgNkRE5kkQgf5HiMKMdjArdH74jhTeX56EMBl2S8X6NLyHa1md1UX33/zm
FH0CxLvskBWo2jBTOPQvR8ApHyHXJ9ImnzE500xkp6ax/qmMGxfAlWPDh5SDfyDp
1CvG7SxVESL48SXX90qXkQ1QeH8rC2xz3j/OfD/8kFAV5CRUSzBkbKQ+0R2Lybrn
UtTS/7dNovNVohY6UBdBjyX8enNeCQJuLyCorKruF/IJ/RshQ8VAi9GwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInLcdg5c3MRVpa0P4HK4wGD4uJ8MB8GA1UdIwQY
MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt
Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk
LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfksABg9
QlU7TyuZ2FaQUE4xoS1ehrVbw9RWpQPnJy3DHBMd1JHTW06D10OciNJWvCpdpTHc
ODJ3cBZ0vYz1n7vWv/1+NmQIYCvxDcqD5I7APIWhQ2w9xB+vwK8k79/6YSvuKUSx
KrCycMkOmyHOT3DSp/0ndOUvYnVyxCpgFRBw2RbqgxHPnrkJfJFo026Zefko6PiS
pEdSOKwCp54RI20uJwxf2CINqbE8ZQ6IcUqibwQH69AlKzyfrdtWJ5RGUngu+otB
ADD2EVWtYaQUh8T12lSnFqDGAx12yFCIinlXeOfSvCJ/Hggvz3EBOzS8Ae+Cu2aQ
tc2568RLEnq9Iw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:27 2025 by rpki-client