Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File:                     ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier:          H1mMh9kvEW8TcI6THTdxWZIG2BW8/COVszHBWqkOOW4=
Subject key identifier:   F9:21:FC:CE:BF:05:E8:CE:EA:EB:78:ED:65:C8:3D:15:8E:3C:BE:2C
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer:       /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial:       0197493102A14876BBE90CB4A437A2389EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number:          0C1F
Signing time:             Sat 07 Jun 2025 07:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:38 +0000
Files and hashes:         1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: wZpdYqSAqo6tIXREGXwLZaY9PhSGKmLOmyWh93sqxCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:02:a1:48:76:bb:e9:0c:b4:a4:37:a2:38:9e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
        Validity
            Not Before: Jun  7 07:00:38 2025 GMT
            Not After : Jun  8 07:00:38 2025 GMT
        Subject: CN=f921fccebf05e8ceeaeb78ed65c83d158e3cbe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:c1:e4:dd:24:c1:f0:18:fe:81:ba:e9:d9:
                    8b:9f:6d:a6:76:db:c9:a6:47:ca:08:78:d9:1b:ab:
                    0b:6d:cf:20:11:ea:64:08:92:26:b6:bf:3a:e5:cd:
                    3c:18:ee:d2:3e:22:e5:43:ca:f8:d8:eb:b0:dc:98:
                    8a:82:49:7e:ac:73:81:a7:50:24:fe:db:71:80:cb:
                    b7:6f:08:5f:99:e6:a7:ef:6f:00:28:4b:9c:09:30:
                    71:40:18:70:85:6f:d8:bf:3c:07:20:e2:b6:c1:64:
                    4d:54:c1:ce:68:c0:ef:39:ce:8a:b9:ec:7b:47:cd:
                    33:7e:87:87:f6:16:1d:5a:b0:14:b4:16:22:27:fb:
                    95:c8:4e:dc:53:ce:77:7b:1d:73:ba:49:ad:f9:d2:
                    ce:2e:41:83:34:5b:5d:f8:a3:62:be:50:d2:13:45:
                    27:96:ef:22:87:81:52:b6:ba:17:15:6a:de:2f:51:
                    72:f2:64:a5:ea:9b:2e:96:b6:95:c7:39:43:dd:d6:
                    45:b2:ff:bd:4b:f4:ce:a8:0f:bc:c2:18:58:14:21:
                    7d:b8:33:ca:24:66:06:a4:6b:18:30:8d:2b:f3:53:
                    05:77:0a:a6:39:57:b4:64:9c:6e:ab:b4:7e:6a:1f:
                    7f:fc:c1:42:5f:9e:2c:c2:08:98:22:33:66:c4:2b:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:FC:CE:BF:05:E8:CE:EA:EB:78:ED:65:C8:3D:15:8E:3C:BE:2C
            X509v3 Authority Key Identifier:
                keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d8:21:82:80:81:05:6c:23:a9:db:11:4e:c5:4b:a2:78:fe:
         a4:d0:91:f6:98:5b:e1:0a:6a:9f:09:96:87:83:b7:f9:44:94:
         33:39:67:ae:6e:1a:a2:49:4a:51:3a:e8:b0:90:67:d6:78:b4:
         13:72:4f:80:48:f7:49:91:f5:c6:e7:73:de:3a:ee:a1:32:3a:
         4a:d0:94:78:e6:07:bb:0a:74:bc:96:1d:a1:67:f9:2f:b3:fd:
         a3:18:f7:0b:8c:bd:28:b9:32:3d:48:27:b9:a6:7c:31:6d:fc:
         7b:57:ca:77:6f:33:1b:73:4c:20:77:11:46:78:9c:c8:a7:91:
         6d:42:3f:c6:47:11:3e:b3:f6:f6:25:f1:0b:15:2e:43:2e:e3:
         21:ef:db:0b:90:4e:77:ba:95:64:d5:3e:dc:e2:1c:e3:ed:6c:
         be:cd:89:e8:95:aa:d7:a2:df:25:a0:19:11:9d:3e:1b:9c:cb:
         5b:ec:5b:01:db:36:c4:56:f1:89:cc:1c:f1:33:79:46:54:20:
         05:29:94:53:52:80:02:d3:dd:22:b4:04:86:7b:09:0b:7f:7e:
         7a:2f:0d:07:1d:9c:a8:42:b2:e8:c4:fd:2d:3f:6b:4a:a5:f9:
         30:6b:87:c1:f6:80:1c:61:cc:d5:45:1a:b8:6f:34:a4:82:bd:
         3f:a8:27:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQKhSHa76Qy0pDeiOJ7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzg5ZmI0OGZiMDVkNDgxZjFmMjM5MTk0YzUzN2QxNWIz
NTcwMDkwHhcNMjUwNjA3MDcwMDM4WhcNMjUwNjA4MDcwMDM4WjAzMTEwLwYDVQQD
EyhmOTIxZmNjZWJmMDVlOGNlZWFlYjc4ZWQ2NWM4M2QxNThlM2NiZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6/B5N0kwfAY/oG66dmLn22mdtvJ
pkfKCHjZG6sLbc8gEepkCJImtr865c08GO7SPiLlQ8r42Ouw3JiKgkl+rHOBp1Ak
/ttxgMu3bwhfmean728AKEucCTBxQBhwhW/YvzwHIOK2wWRNVMHOaMDvOc6Kuex7
R80zfoeH9hYdWrAUtBYiJ/uVyE7cU853ex1zukmt+dLOLkGDNFtd+KNivlDSE0Un
lu8ih4FStroXFWreL1Fy8mSl6psulraVxzlD3dZFsv+9S/TOqA+8whhYFCF9uDPK
JGYGpGsYMI0r81MFdwqmOVe0ZJxuq7R+ah9//MFCX54swgiYIjNmxCutYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkh/M6/BejO6ut47WXIPRWOPL4sMB8GA1UdIwQY
MBaAFHo4n7SPsF1IHx8jkZTFN9FbNXAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUt
YTFhMDhlYmY0ZWVhLzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYjEwNjQtNmQyNi00NTU1LTlmYTUtYTFhMDhlYmY0ZWVh
LzEvZWppZnRJLXdYVWdmSHlPUmxNVTMwVnMxY0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9ghgoCB
BWwjqdsRTsVLonj+pNCR9phb4QpqnwmWh4O3+USUMzlnrm4aoklKUTrosJBn1ni0
E3JPgEj3SZH1xudz3jruoTI6StCUeOYHuwp0vJYdoWf5L7P9oxj3C4y9KLkyPUgn
uaZ8MW38e1fKd28zG3NMIHcRRnicyKeRbUI/xkcRPrP29iXxCxUuQy7jIe/bC5BO
d7qVZNU+3OIc4+1svs2J6JWq16LfJaAZEZ0+G5zLW+xbAds2xFbxicwc8TN5RlQg
BSmUU1KAAtPdIrQEhnsJC39+ei8NBx2cqEKy6MT9LT9rSqX5MGuHwfaAHGHM1UUa
uG80pIK9P6gnNg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:22 2025 by rpki-client