Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          uEBeOletU0e6mUVnOCClFfsmFBDJmH78tpCkxA/W81g=
Subject key identifier:   7B:58:AA:FB:8D:9C:D0:76:4F:32:91:9A:42:36:F4:35:E6:8C:F7:37
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       0197488D242B33A7F227481F012A9E3C19E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          05EE
Signing time:             Sat 07 Jun 2025 04:01:38 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:38 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:38 +0000
Files and hashes:         1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: nT/XllGutsgAvcvIOXFf+mpdti/pqduiiE40FIc7igE=)
                          2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:24:2b:33:a7:f2:27:48:1f:01:2a:9e:3c:19:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Jun  7 04:01:38 2025 GMT
            Not After : Jun  8 04:01:38 2025 GMT
        Subject: CN=7b58aafb8d9cd0764f32919a4236f435e68cf737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:23:93:2e:2c:e4:cf:fa:bf:ff:d9:e2:85:
                    17:98:19:f1:f7:85:99:ad:26:32:b5:81:4c:05:ea:
                    23:49:43:f1:4d:66:b6:4d:5b:21:af:e7:93:80:52:
                    77:85:4e:bf:5a:22:d7:10:12:5c:84:cc:7a:af:3a:
                    d2:63:de:3d:5a:c1:dc:bf:eb:1e:48:93:4b:42:42:
                    51:06:2b:9c:e8:0f:96:c5:9a:aa:19:7d:73:cd:a3:
                    1f:f9:8d:cd:0f:9f:df:91:d9:86:83:4d:ea:44:3f:
                    22:3a:ab:25:3e:54:41:00:94:2d:e0:6a:a5:dd:7b:
                    d1:9a:50:cc:48:36:71:c4:ed:c6:40:ef:ca:90:2f:
                    f6:4b:1d:1d:1c:8b:72:09:19:29:03:d2:92:cb:4c:
                    ee:d0:4c:83:d5:da:24:5d:af:d2:24:8a:23:c2:c0:
                    2b:73:ca:94:9e:c1:5f:41:d1:49:5d:cc:71:3c:b8:
                    e9:e8:23:23:ac:96:39:4b:7e:36:6d:e4:e8:dc:c0:
                    9d:56:6a:dd:11:91:1b:68:df:a7:f8:43:76:2d:7b:
                    cc:4d:79:40:38:72:40:b7:64:25:ad:92:ea:e5:e7:
                    d7:d9:04:5a:10:9a:35:1c:ea:9d:63:5f:41:87:07:
                    d6:3a:fb:24:6f:08:2f:c1:6e:bb:a1:b7:01:e8:bb:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:AA:FB:8D:9C:D0:76:4F:32:91:9A:42:36:F4:35:E6:8C:F7:37
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:8f:a7:44:89:c8:6e:8a:62:cc:4a:5e:f3:db:ae:33:d5:b4:
         51:53:ad:cb:78:23:f8:8e:3e:df:d7:1d:d3:3a:e2:d1:8e:77:
         46:fa:dd:b2:68:28:3e:be:c7:3b:0a:76:ed:c7:5d:59:ac:dc:
         1e:4c:15:f7:e4:7c:b2:17:c3:43:8c:a8:d0:44:ed:e9:1a:3d:
         14:53:01:62:f0:c6:33:8b:77:42:7a:87:82:2b:ca:c0:09:82:
         f8:70:5a:b1:b8:39:3d:2c:79:43:ee:23:5a:12:e8:96:42:2e:
         1f:e7:02:66:19:5a:8e:4d:03:b2:b1:cb:c4:be:91:f5:e7:01:
         bd:c4:b2:16:c1:1c:01:09:e0:17:bc:a2:82:2e:a3:71:1e:21:
         57:43:1a:70:98:d4:8e:44:74:7b:5c:fe:61:fa:59:22:fc:f5:
         fd:ec:e7:48:b9:4d:df:56:2f:ef:e4:67:39:44:3a:3f:a5:d5:
         ca:8e:81:43:ad:4a:c3:a3:ed:1d:2b:65:c9:e0:e0:5c:4b:d3:
         aa:11:69:de:01:5e:4b:a7:f7:62:cc:36:bb:71:91:02:db:ec:
         b7:03:65:bb:9b:35:ee:3e:31:69:cc:ee:60:63:c8:c7:2a:f1:
         e6:29:c5:38:4f:29:56:09:03:75:c0:55:7b:ba:63:3b:34:95:
         39:52:56:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjSQrM6fyJ0gfASqePBnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzRhN2EzZmViYWZiYzg0MDBhYmUxZGMxMmYyMmM2YzFl
OGE1YmUwHhcNMjUwNjA3MDQwMTM4WhcNMjUwNjA4MDQwMTM4WjAzMTEwLwYDVQQD
Eyg3YjU4YWFmYjhkOWNkMDc2NGYzMjkxOWE0MjM2ZjQzNWU2OGNmNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPUjky4s5M/6v//Z4oUXmBnx94WZ
rSYytYFMBeojSUPxTWa2TVshr+eTgFJ3hU6/WiLXEBJchMx6rzrSY949WsHcv+se
SJNLQkJRBiuc6A+WxZqqGX1zzaMf+Y3ND5/fkdmGg03qRD8iOqslPlRBAJQt4Gql
3XvRmlDMSDZxxO3GQO/KkC/2Sx0dHItyCRkpA9KSy0zu0EyD1dokXa/SJIojwsAr
c8qUnsFfQdFJXcxxPLjp6CMjrJY5S342beTo3MCdVmrdEZEbaN+n+EN2LXvMTXlA
OHJAt2QlrZLq5efX2QRaEJo1HOqdY19BhwfWOvskbwgvwW67obcB6LtOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtYqvuNnNB2TzKRmkI29DXmjPc3MB8GA1UdIwQY
MBaAFIo0p6P+uvvIQAq+HcEvIsbB6KW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMt
YjYyOWJiNDc2MmYwLzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NzhjNGQtZDllNC00NDg4LWIxOGMtYjYyOWJiNDc2MmYw
LzEvaWpTbm9fNjYtOGhBQ3I0ZHdTOGl4c0hvcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Y+nRInI
bopizEpe89uuM9W0UVOty3gj+I4+39cd0zri0Y53RvrdsmgoPr7HOwp27cddWazc
HkwV9+R8shfDQ4yo0ETt6Ro9FFMBYvDGM4t3QnqHgivKwAmC+HBasbg5PSx5Q+4j
WhLolkIuH+cCZhlajk0DsrHLxL6R9ecBvcSyFsEcAQngF7yigi6jcR4hV0MacJjU
jkR0e1z+YfpZIvz1/eznSLlN31Yv7+RnOUQ6P6XVyo6BQ61Kw6PtHStlyeDgXEvT
qhFp3gFeS6f3Ysw2u3GRAtvstwNlu5s17j4xaczuYGPIxyrx5inFOE8pVgkDdcBV
e7pjOzSVOVJWiw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:45:33 2025 by rpki-client