Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File:                     Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier:          qTSBoePRj7vwNquWW7FwlRsLXtKUwkPoSDcckygr4L8=
Subject key identifier:   16:F8:D0:2E:78:5D:84:3C:EE:30:A1:4A:A9:C1:96:67:5E:13:4B:20
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer:       /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial:       01975CEEBCF55406DCEEE9ABAAA6A7DB012D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number:          1272
Signing time:             Wed 11 Jun 2025 03:00:39 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:39 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:39 +0000
Files and hashes:         1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: ip6TRXgXRcjOY3LkuS9ulOAjSh7xLoN907EwbHmhfvo=)
                          2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:bc:f5:54:06:dc:ee:e9:ab:aa:a6:a7:db:01:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
        Validity
            Not Before: Jun 11 03:00:39 2025 GMT
            Not After : Jun 12 03:00:39 2025 GMT
        Subject: CN=16f8d02e785d843cee30a14aa9c196675e134b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:8a:89:e3:a0:cd:a9:bb:7f:17:ac:b6:60:
                    a7:55:11:0c:e3:b9:2a:4a:a1:b6:b1:2a:4a:5a:fd:
                    36:18:95:d5:b7:37:d7:36:95:f1:57:72:a9:e9:a2:
                    48:10:65:38:d5:cf:dc:7d:1e:f5:57:5d:08:a0:25:
                    e9:3c:71:76:fc:0c:4f:82:32:73:b5:c6:cc:18:9b:
                    e1:61:4e:e8:6d:bd:9f:58:e7:54:16:7a:05:57:2c:
                    0c:c2:96:80:bf:f7:ba:0c:3a:73:52:d7:31:00:8e:
                    c0:73:5a:7b:87:b9:0a:c1:08:5a:b1:9c:a6:4c:90:
                    26:f4:ce:ed:66:c3:f4:e4:d0:a3:1c:d1:52:09:8a:
                    f9:43:4d:6a:54:c0:3e:9d:9d:2a:db:5d:8a:05:58:
                    25:be:97:e9:4a:0d:19:74:23:d4:24:a3:bf:a9:59:
                    6b:ed:15:d1:64:fc:af:10:59:94:b0:11:da:17:6f:
                    7e:a1:20:13:27:83:86:e8:1f:59:86:e7:dc:4b:ac:
                    f5:c5:cf:08:e8:ee:43:d0:83:25:d0:a9:b8:ce:de:
                    1e:29:77:c9:93:7f:19:25:13:27:aa:0e:d5:d9:17:
                    50:fe:66:2b:2e:71:b0:46:41:88:41:fb:55:69:18:
                    b2:41:10:0f:a7:cb:c0:98:eb:65:a1:2c:3c:3c:45:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:D0:2E:78:5D:84:3C:EE:30:A1:4A:A9:C1:96:67:5E:13:4B:20
            X509v3 Authority Key Identifier:
                keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:0d:66:95:9f:b1:6c:63:8e:f9:27:51:4b:ac:4c:a7:36:
         0b:07:94:d3:64:2c:b8:27:88:4e:4f:e7:24:10:dd:3b:3a:a5:
         69:d7:56:7c:fc:20:44:53:d0:96:b4:d8:9c:e0:03:db:94:0e:
         39:e5:2f:72:73:bf:b4:f7:95:d2:c5:72:86:a9:38:6f:49:be:
         e8:57:93:ee:0e:8e:3c:19:4f:39:e0:24:71:be:a9:b8:c4:e7:
         f2:47:99:47:88:21:0a:79:4f:b1:1b:f1:4b:12:a6:01:fe:e0:
         21:18:12:b6:cb:17:33:b3:65:43:4e:19:17:03:6e:c5:5d:10:
         26:84:1c:ab:22:ea:b1:0c:ce:d2:12:b9:45:e0:14:d0:44:b2:
         c6:d1:fb:ff:1a:6d:ca:07:e3:a2:9e:b2:08:af:42:d1:24:23:
         6d:72:ea:3e:f6:c4:88:96:40:6c:46:e2:d3:7a:78:09:95:57:
         48:9a:76:ee:a2:2b:59:57:6c:a0:6e:d5:04:cd:5a:d7:58:68:
         34:7e:3f:92:d4:4a:55:dc:a1:a5:bb:db:ce:81:a1:b7:23:e0:
         de:da:b4:4a:e8:a1:9e:a9:94:07:11:ff:4a:fe:a4:db:eb:f0:
         8c:01:95:f5:2b:89:7d:cf:bd:e4:e9:28:42:54:15:40:45:d1:
         41:96:18:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdc7rz1VAbc7umrqqan2wEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjUwNjExMDMwMDM5WhcNMjUwNjEyMDMwMDM5WjAzMTEwLwYDVQQD
EygxNmY4ZDAyZTc4NWQ4NDNjZWUzMGExNGFhOWMxOTY2NzVlMTM0YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwWKieOgzam7fxestmCnVREM47kq
SqG2sSpKWv02GJXVtzfXNpXxV3Kp6aJIEGU41c/cfR71V10IoCXpPHF2/AxPgjJz
tcbMGJvhYU7obb2fWOdUFnoFVywMwpaAv/e6DDpzUtcxAI7Ac1p7h7kKwQhasZym
TJAm9M7tZsP05NCjHNFSCYr5Q01qVMA+nZ0q212KBVglvpfpSg0ZdCPUJKO/qVlr
7RXRZPyvEFmUsBHaF29+oSATJ4OG6B9ZhufcS6z1xc8I6O5D0IMl0Km4zt4eKXfJ
k38ZJRMnqg7V2RdQ/mYrLnGwRkGIQftVaRiyQRAPp8vAmOtloSw8PEVd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb40C54XYQ87jChSqnBlmdeE0sgMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJwNZpWf
sWxjjvknUUusTKc2CweU02QsuCeITk/nJBDdOzqladdWfPwgRFPQlrTYnOAD25QO
OeUvcnO/tPeV0sVyhqk4b0m+6FeT7g6OPBlPOeAkcb6puMTn8keZR4ghCnlPsRvx
SxKmAf7gIRgStssXM7NlQ04ZFwNuxV0QJoQcqyLqsQzO0hK5ReAU0ESyxtH7/xpt
ygfjop6yCK9C0SQjbXLqPvbEiJZAbEbi03p4CZVXSJp27qIrWVdsoG7VBM1a11ho
NH4/ktRKVdyhpbvbzoGhtyPg3tq0SuihnqmUBxH/Sv6k2+vwjAGV9SuJfc+95Oko
QlQVQEXRQZYYoA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:14:06 2025 by rpki-client