Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          6Z3XeALzhl9aKMU16UuvKQr9tUglJrAhq0s9qI8MuAU=
Subject key identifier:   EE:9E:95:66:65:0D:B4:3E:2D:D1:24:03:0F:8C:19:64:31:3D:23:1B
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019745F94061694C94E9254573A363664E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0A50
Signing time:             Fri 06 Jun 2025 16:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:52 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: zxhdnPQIs478QnxASPz/eYfuEW1qlVo6ghDleK0ZQWk=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:40:61:69:4c:94:e9:25:45:73:a3:63:66:4e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Jun  6 16:00:52 2025 GMT
            Not After : Jun  7 16:00:52 2025 GMT
        Subject: CN=ee9e9566650db43e2dd124030f8c1964313d231b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:5f:5e:14:4a:14:09:ee:4d:9f:cb:07:d9:
                    ce:08:e5:00:9f:d8:34:16:b2:14:4a:74:96:87:10:
                    a7:e6:ba:95:0f:24:6d:90:22:22:93:16:86:66:f5:
                    e8:5a:4f:29:40:54:8a:a0:cb:d2:20:3e:bc:dc:f2:
                    9d:3e:20:24:18:42:6b:99:3b:09:be:4f:3f:41:b2:
                    03:aa:5e:77:85:d8:5d:40:fc:40:d3:9e:15:f4:2c:
                    21:69:2d:97:01:36:61:95:4e:c2:ef:2d:3c:cb:64:
                    f4:9d:4d:92:f6:cf:49:51:36:8e:fc:3d:0e:bf:77:
                    b8:c8:d5:5c:ba:ad:7f:cf:66:19:fe:9d:6e:0d:c0:
                    09:ee:71:20:b4:27:6f:31:1f:4c:85:ea:eb:3e:cd:
                    72:8f:6b:aa:4b:c9:3b:b8:84:de:ae:a2:b5:79:3e:
                    ac:99:a9:e2:2c:ee:a8:94:9d:10:9f:43:04:92:c5:
                    26:8d:87:74:ee:9c:41:2d:8c:6a:bc:45:0c:c1:d9:
                    76:79:b2:65:f2:d0:40:0a:8a:08:8c:5e:23:8a:f0:
                    fe:6e:6c:6a:4a:d1:96:95:ca:b3:52:41:46:86:60:
                    d7:83:6e:2f:34:66:d0:0f:e4:f4:21:16:b7:67:42:
                    02:7c:e4:7b:a0:0b:cd:f5:89:c0:20:d1:a5:ec:ec:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:95:66:65:0D:B4:3E:2D:D1:24:03:0F:8C:19:64:31:3D:23:1B
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:77:16:04:62:34:26:12:70:40:7c:1e:34:4a:c0:f7:56:
         d6:13:f7:49:44:b6:32:6d:77:fe:f9:00:39:a4:6e:ad:2c:1c:
         b8:d6:30:6a:f6:47:39:d3:d4:14:11:6a:67:f8:7f:71:b8:b9:
         3d:a7:ff:22:58:73:15:55:fc:a9:a4:9a:ee:9c:dc:35:22:3d:
         3b:57:9e:fc:ec:b6:60:54:26:af:a6:50:dc:2d:79:c2:35:17:
         be:15:b3:bb:01:19:81:ae:60:cc:6e:20:a1:5d:89:44:92:6b:
         0a:97:07:55:e1:bc:22:9e:51:59:99:5c:bf:d3:d7:7f:5a:ec:
         c6:9c:13:0a:89:b1:7e:f2:3c:ea:f8:17:94:a1:88:cf:2a:fa:
         d0:2f:3d:a4:51:41:7d:db:71:79:1f:fa:74:22:a3:e9:70:17:
         f5:a5:c0:b1:d0:ad:2b:38:90:c4:78:4f:17:07:50:49:a0:3f:
         ac:24:b5:4c:d5:6a:a8:98:94:59:58:4a:2c:d8:73:7c:49:07:
         7a:fe:d2:33:46:95:6c:b8:c5:2e:89:3c:61:e6:d0:58:60:ef:
         ba:98:99:da:3e:af:1e:e3:08:9c:49:09:57:87:cd:6e:11:fb:
         08:46:17:a0:81:bb:c3:ea:47:d2:82:6a:63:bb:27:25:29:a9:
         6d:00:10:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+UBhaUyU6SVFc6NjZk5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjUwNjA2MTYwMDUyWhcNMjUwNjA3MTYwMDUyWjAzMTEwLwYDVQQD
EyhlZTllOTU2NjY1MGRiNDNlMmRkMTI0MDMwZjhjMTk2NDMxM2QyMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IhfXhRKFAnuTZ/LB9nOCOUAn9g0
FrIUSnSWhxCn5rqVDyRtkCIikxaGZvXoWk8pQFSKoMvSID683PKdPiAkGEJrmTsJ
vk8/QbIDql53hdhdQPxA054V9CwhaS2XATZhlU7C7y08y2T0nU2S9s9JUTaO/D0O
v3e4yNVcuq1/z2YZ/p1uDcAJ7nEgtCdvMR9MherrPs1yj2uqS8k7uITerqK1eT6s
maniLO6olJ0Qn0MEksUmjYd07pxBLYxqvEUMwdl2ebJl8tBACooIjF4jivD+bmxq
StGWlcqzUkFGhmDXg24vNGbQD+T0IRa3Z0ICfOR7oAvN9YnAINGl7Ox1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6elWZlDbQ+LdEkAw+MGWQxPSMbMB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVJ3FgRi
NCYScEB8HjRKwPdW1hP3SUS2Mm13/vkAOaRurSwcuNYwavZHOdPUFBFqZ/h/cbi5
Paf/IlhzFVX8qaSa7pzcNSI9O1ee/Oy2YFQmr6ZQ3C15wjUXvhWzuwEZga5gzG4g
oV2JRJJrCpcHVeG8Ip5RWZlcv9PXf1rsxpwTComxfvI86vgXlKGIzyr60C89pFFB
fdtxeR/6dCKj6XAX9aXAsdCtKziQxHhPFwdQSaA/rCS1TNVqqJiUWVhKLNhzfEkH
ev7SM0aVbLjFLok8YebQWGDvupiZ2j6vHuMInEkJV4fNbhH7CEYXoIG7w+pH0oJq
Y7snJSmpbQAQxA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:15:28 2025 by rpki-client