Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
File:                     ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json)
Hash identifier:          pHw3PYufh6RjP6ODimpRQvMHIYn4+moypl0rLlHMiqs=
Subject key identifier:   99:1D:C7:61:83:28:39:FF:FD:2A:30:30:67:8D:FA:8F:42:0B:18:60
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Certificate issuer:       /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial:       01974B8DB0ACC4974CF46B674326A7957611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
Manifest number:          C4
Signing time:             Sat 07 Jun 2025 18:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:06 +0000
Files and hashes:         1: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: aNMlj/TgRgEFklSet1e0ZmLy7WqNS6YPAcS8XZ5Tx0c=)
                          2: zEjaNBQI4k6YoVMcAWG4aZw2i8I.roa (hash: SAGcvlJkIuY5apIUsDex2pUGAYdLriBQVThdf59HtA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:b0:ac:c4:97:4c:f4:6b:67:43:26:a7:95:76:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
        Validity
            Not Before: Jun  7 18:01:06 2025 GMT
            Not After : Jun  8 18:01:06 2025 GMT
        Subject: CN=991dc761832839fffd2a3030678dfa8f420b1860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:f9:13:49:84:21:24:e3:81:cf:36:a5:20:
                    de:f0:cf:7d:65:12:75:94:98:01:3f:ae:57:f6:c2:
                    b2:7f:e2:31:6f:84:d8:78:a3:38:d2:e3:68:9c:a8:
                    4b:b0:40:af:ca:a1:3f:4e:b8:50:7e:89:77:36:d6:
                    81:9d:49:c6:29:31:21:95:9a:f5:68:61:a8:87:65:
                    7c:84:4f:91:72:b6:4b:b3:70:71:81:5c:b8:57:2d:
                    f3:ce:c8:79:01:7f:db:76:8a:7a:72:69:ee:29:36:
                    64:7d:8a:49:c3:e4:e4:a2:bc:8f:6f:32:48:12:1c:
                    35:f3:ce:83:28:2d:69:d6:a5:d3:90:72:25:b0:57:
                    3b:84:54:f6:c0:01:db:2b:e8:e2:ce:f5:5d:35:52:
                    af:7e:31:65:9d:5e:d4:34:1f:7f:4a:37:23:8d:a7:
                    96:12:db:7f:31:1a:48:fc:8b:28:51:01:69:07:ac:
                    5e:f6:22:61:fb:a0:fd:49:0e:12:cf:9d:74:4b:73:
                    4b:d7:40:4c:d2:4f:17:54:fe:ac:94:08:ca:48:e5:
                    4e:b1:eb:9d:fa:38:17:ac:58:fe:fa:8c:ce:c1:9b:
                    2f:3f:6f:48:a8:a6:fb:40:e4:14:da:8c:4f:96:05:
                    6e:94:b5:ae:e3:6e:47:0a:7f:33:49:2e:2e:3e:7c:
                    d7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:C7:61:83:28:39:FF:FD:2A:30:30:67:8D:FA:8F:42:0B:18:60
            X509v3 Authority Key Identifier:
                keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:40:83:81:92:08:fe:77:e9:54:c2:c6:8b:45:99:d6:d8:
         1c:1e:f2:9a:28:36:90:58:bc:3b:df:de:fe:88:2d:a9:66:2c:
         f3:47:07:1a:68:e8:ff:f5:fb:81:f9:56:71:8a:cf:b4:8e:ae:
         e7:74:f2:55:49:ab:3c:7e:ee:ec:9e:4a:da:25:6e:a2:8d:c3:
         05:b6:e2:71:d8:c8:04:fa:28:27:54:2e:2a:a1:b1:e8:00:b4:
         76:ce:23:56:fe:4f:17:64:c9:3a:ec:3d:e4:06:e4:84:9b:76:
         1f:b2:80:e8:1b:63:55:08:c0:ec:c0:98:2c:e7:b1:0c:cf:06:
         69:f9:50:c2:94:fc:0b:4a:27:3c:ed:d5:c4:1c:3f:07:3d:42:
         cd:46:30:4b:8f:0c:11:1c:bf:ab:9d:3d:4e:ae:59:18:65:7e:
         35:80:9e:86:65:88:63:cb:32:45:ce:19:8d:a8:40:32:26:5b:
         d7:4d:93:32:cf:54:9a:52:6b:e4:4c:3d:52:89:b1:c9:da:d3:
         a3:5f:04:b1:2a:1c:29:b6:97:b0:7f:81:b3:35:7b:0e:44:b6:
         42:e2:b1:91:4d:6e:b2:0a:cc:95:62:9e:01:da:b4:8d:e7:41:
         ae:f6:c4:93:7a:61:27:a8:87:ab:e5:5d:63:23:fc:c6:71:e0:
         0f:e5:8f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjbCsxJdM9GtnQyanlXYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Y2I5MTM5NGI3OTA3ODFkM2E4NzczYTg1NWU1YTlhM2Fm
MjA4MTAwHhcNMjUwNjA3MTgwMTA2WhcNMjUwNjA4MTgwMTA2WjAzMTEwLwYDVQQD
Eyg5OTFkYzc2MTgzMjgzOWZmZmQyYTMwMzA2NzhkZmE4ZjQyMGIxODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DT5E0mEISTjgc82pSDe8M99ZRJ1
lJgBP65X9sKyf+Ixb4TYeKM40uNonKhLsECvyqE/TrhQfol3NtaBnUnGKTEhlZr1
aGGoh2V8hE+RcrZLs3BxgVy4Vy3zzsh5AX/bdop6cmnuKTZkfYpJw+TkoryPbzJI
Ehw1886DKC1p1qXTkHIlsFc7hFT2wAHbK+jizvVdNVKvfjFlnV7UNB9/SjcjjaeW
Ett/MRpI/IsoUQFpB6xe9iJh+6D9SQ4Sz510S3NL10BM0k8XVP6slAjKSOVOseud
+jgXrFj++ozOwZsvP29IqKb7QOQU2oxPlgVulLWu425HCn8zSS4uPnzXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkdx2GDKDn//SowMGeN+o9CCxhgMB8GA1UdIwQY
MBaAFHnLkTlLeQeB06h3OoVeWpo68ggQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmIt
ZjExNzEyMTQ5OTY2LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmItZjExNzEyMTQ5OTY2
LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/JAg4GS
CP536VTCxotFmdbYHB7ymig2kFi8O9/e/ogtqWYs80cHGmjo//X7gflWcYrPtI6u
53TyVUmrPH7u7J5K2iVuoo3DBbbicdjIBPooJ1QuKqGx6AC0ds4jVv5PF2TJOuw9
5AbkhJt2H7KA6BtjVQjA7MCYLOexDM8GaflQwpT8C0onPO3VxBw/Bz1CzUYwS48M
ERy/q509Tq5ZGGV+NYCehmWIY8syRc4ZjahAMiZb102TMs9UmlJr5Ew9UomxydrT
o18EsSocKbaXsH+BszV7DkS2QuKxkU1usgrMlWKeAdq0jedBrvbEk3phJ6iHq+Vd
YyP8xnHgD+WPYA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:11 2025 by rpki-client