Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File:                     eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier:          d357UQdAajXfFUU2U1Wpnwgv3X16eSjS2ko+ApnDQVE=
Subject key identifier:   B1:CB:34:43:90:CF:7A:AF:46:91:A6:85:6A:C3:D3:FA:14:6B:9D:D3
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer:       /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial:       01974CA004951FEE65D2E7625EB66B290010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number:          10A8
Signing time:             Sat 07 Jun 2025 23:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:44 +0000
Files and hashes:         1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: YOHfWgFZM4vOUTbQD5B4jHV1a1lk6nhoBXVX4VCO240=)
                          2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:04:95:1f:ee:65:d2:e7:62:5e:b6:6b:29:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
        Validity
            Not Before: Jun  7 23:00:44 2025 GMT
            Not After : Jun  8 23:00:44 2025 GMT
        Subject: CN=b1cb344390cf7aaf4691a6856ac3d3fa146b9dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:a9:c9:e5:45:4b:70:1c:ea:22:69:50:46:
                    f0:d3:17:9f:79:fe:41:67:fc:2e:74:ba:f0:c8:f0:
                    ee:33:d2:8c:81:ae:41:a1:e1:dc:f3:f7:31:13:67:
                    91:87:7c:3e:a1:67:ae:7f:5f:75:87:72:d5:ca:54:
                    53:6a:e6:d6:34:c0:f6:d8:7a:3b:f1:96:52:33:c9:
                    34:2d:3d:7d:3e:0e:42:7c:94:45:48:8b:7e:14:4d:
                    1e:92:10:dc:f1:d9:92:57:d7:7c:c9:55:0c:f3:55:
                    f6:16:10:6a:83:7f:4e:84:b7:20:a8:40:15:06:99:
                    a3:5a:87:73:df:f4:3a:b6:90:39:cb:1f:c9:9c:04:
                    9b:b0:14:ca:a1:64:56:7f:52:dd:e2:35:d1:5a:5a:
                    99:df:5f:83:02:59:76:0f:36:17:ff:ed:8a:25:ea:
                    b5:f8:56:ca:29:e8:6a:6b:39:43:59:ef:b9:c0:69:
                    98:c1:09:c8:de:65:72:c2:59:8f:00:e6:b3:c0:b1:
                    6c:06:2b:8a:93:13:96:05:4b:d8:bd:68:37:58:ee:
                    59:dc:a8:83:97:ca:5a:c4:71:d4:ba:ce:36:df:50:
                    0f:f6:35:e9:6a:4d:50:f2:a3:96:47:74:29:9c:a8:
                    7e:2f:2a:b6:79:16:f4:51:43:94:2c:41:9f:ab:de:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:34:43:90:CF:7A:AF:46:91:A6:85:6A:C3:D3:FA:14:6B:9D:D3
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:f5:d9:7a:90:e8:00:87:8c:08:ea:d5:40:2f:01:70:db:5c:
         e2:06:c6:b5:3d:97:a1:60:56:81:8f:03:5a:aa:e4:84:54:15:
         16:68:00:11:4d:f2:8e:3a:da:67:64:c9:83:01:7b:f3:d5:90:
         f5:fb:e3:23:c6:e9:ae:24:58:c9:33:f2:78:93:88:2a:3b:40:
         29:04:24:6a:18:2e:a2:3b:d2:d1:1c:f1:32:f3:42:d0:c2:19:
         0e:c9:df:64:fc:ef:14:36:ad:2a:1f:97:3d:11:9c:07:16:bd:
         6b:52:27:f0:78:50:16:d8:70:2b:b5:a4:58:74:bb:82:f5:e9:
         44:4e:29:ed:70:6f:20:93:93:5d:cf:a0:87:0b:77:73:70:7f:
         d3:44:d0:92:de:43:0f:22:1c:10:55:69:a7:55:c1:0d:3b:12:
         34:70:30:78:5a:2b:3f:3b:8e:ed:89:b0:8c:3f:1d:e4:3a:87:
         53:1a:74:bb:16:b8:3a:af:48:29:cf:f0:ea:82:93:cc:c5:e5:
         f5:dc:1b:16:a5:aa:d6:83:7d:4f:71:fe:70:9c:e5:16:b1:eb:
         c7:c8:a3:0d:2c:a0:84:ce:99:34:eb:40:41:ca:a0:68:86:62:
         c9:93:2a:4b:6b:f0:00:d3:16:66:9e:3d:87:71:74:6d:fb:c1:
         03:7d:9c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoASVH+5l0udiXrZrKQAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGQ3MDEzYTdmZGJiNTY2M2ZkMzg0YTRmZWQxMjMwMzE0
NWUzY2UwHhcNMjUwNjA3MjMwMDQ0WhcNMjUwNjA4MjMwMDQ0WjAzMTEwLwYDVQQD
EyhiMWNiMzQ0MzkwY2Y3YWFmNDY5MWE2ODU2YWMzZDNmYTE0NmI5ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qpyeVFS3Ac6iJpUEbw0xefef5B
Z/wudLrwyPDuM9KMga5BoeHc8/cxE2eRh3w+oWeuf191h3LVylRTaubWNMD22Ho7
8ZZSM8k0LT19Pg5CfJRFSIt+FE0ekhDc8dmSV9d8yVUM81X2FhBqg39OhLcgqEAV
BpmjWodz3/Q6tpA5yx/JnASbsBTKoWRWf1Ld4jXRWlqZ31+DAll2DzYX/+2KJeq1
+FbKKehqazlDWe+5wGmYwQnI3mVywlmPAOazwLFsBiuKkxOWBUvYvWg3WO5Z3KiD
l8paxHHUus4231AP9jXpak1Q8qOWR3QpnKh+Lyq2eRb0UUOULEGfq96N0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHLNEOQz3qvRpGmhWrD0/oUa53TMB8GA1UdIwQY
MBaAFHmNcBOn/btWY/04Sk/tEjAxRePOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzct
MjRkODE4YmE3ZjI5LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzctMjRkODE4YmE3ZjI5
LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0vXZepDo
AIeMCOrVQC8BcNtc4gbGtT2XoWBWgY8DWqrkhFQVFmgAEU3yjjraZ2TJgwF789WQ
9fvjI8bpriRYyTPyeJOIKjtAKQQkahguojvS0RzxMvNC0MIZDsnfZPzvFDatKh+X
PRGcBxa9a1In8HhQFthwK7WkWHS7gvXpRE4p7XBvIJOTXc+ghwt3c3B/00TQkt5D
DyIcEFVpp1XBDTsSNHAweForPzuO7YmwjD8d5DqHUxp0uxa4Oq9IKc/w6oKTzMXl
9dwbFqWq1oN9T3H+cJzlFrHrx8ijDSyghM6ZNOtAQcqgaIZiyZMqS2vwANMWZp49
h3F0bfvBA32crw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:03 2025 by rpki-client