Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          lsP8fjh47nvhBr1mpZ8Acgqs6M/6lyNbsY2DFCp2e4E=
Subject key identifier:   7D:71:CC:85:C1:C1:A4:77:CD:38:B8:30:AF:03:CF:52:91:D6:2F:5C
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       01974A7A53AB5E6CEB9573ED88FD87F83CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 13:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:20 +0000
Files and hashes:         1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: 4RMLuidH9P50KElhytBIdoXD72n1E4dq2rtuwDbUCjo=)
                          2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
                          3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
                          4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
                          5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:53:ab:5e:6c:eb:95:73:ed:88:fd:87:f8:3c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: Jun  7 13:00:20 2025 GMT
            Not After : Jun  8 13:00:20 2025 GMT
        Subject: CN=7d71cc85c1c1a477cd38b830af03cf5291d62f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:b7:8f:21:3a:4b:b1:42:65:30:dd:68:e7:
                    68:a6:f8:14:c7:0d:14:bd:98:dc:2f:d2:c9:d4:28:
                    1a:1f:41:81:c9:c4:72:bb:75:ca:a5:38:dc:89:de:
                    36:c4:e4:1d:e4:91:80:a7:6d:23:0b:3a:0f:71:44:
                    08:ae:ea:ea:00:12:bc:d7:87:85:31:8f:ce:12:dd:
                    ac:2f:64:c8:b8:5b:30:36:6e:0a:67:75:ca:14:1e:
                    9f:c4:60:ce:28:f2:7d:4f:82:6e:91:d8:96:a2:a7:
                    e6:af:e6:41:b7:56:16:f6:d3:ea:ce:73:53:75:c2:
                    5d:db:f0:60:7f:02:06:fb:2b:6e:e0:8f:4d:39:1b:
                    95:95:83:75:f5:92:9d:fe:fa:b7:a8:12:c8:ec:d5:
                    f7:a0:72:7a:60:6c:c8:96:93:ae:59:24:85:cc:92:
                    9f:70:f1:fd:ef:be:ac:43:6e:86:b6:3d:a5:6a:bb:
                    10:f8:41:a9:b8:23:56:c5:fb:9b:50:ab:b6:9c:7f:
                    65:8c:41:29:9e:e0:ff:55:f9:d1:bb:3d:32:45:80:
                    d9:f8:01:30:b0:16:d3:31:65:7f:f3:5f:48:d6:93:
                    c5:1f:2b:9c:c1:88:aa:00:5d:5f:9f:d1:65:04:ff:
                    3a:38:fe:f5:c9:94:b7:29:be:14:e8:39:d6:d4:2d:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:CC:85:C1:C1:A4:77:CD:38:B8:30:AF:03:CF:52:91:D6:2F:5C
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:45:83:cf:bf:59:cd:eb:c0:99:9e:59:14:f9:b0:42:7a:
         9f:20:2f:05:38:a0:97:df:b1:5d:8c:f9:54:c8:53:2a:50:4d:
         62:bc:f0:aa:b3:6a:d5:56:6a:bb:2b:1e:ab:b7:fa:79:5c:28:
         50:8b:28:3c:e6:77:6e:61:a4:4e:e3:e9:a5:ad:2c:aa:a7:27:
         69:5e:11:aa:fe:ed:23:f7:22:33:c0:49:9f:f1:a5:06:89:97:
         01:2e:2d:7a:cb:51:f6:39:5d:d7:02:78:66:42:a5:38:5d:cd:
         c1:b1:7e:1e:89:9d:1f:2d:c6:ff:3c:56:fc:89:ec:96:6b:e2:
         6d:fb:bf:23:d3:7a:b3:f8:47:99:63:92:c5:ef:79:db:67:51:
         1d:75:06:7e:7f:72:8c:b5:8b:e8:1a:03:ab:5a:e8:5b:c6:cf:
         a7:74:89:21:a5:63:67:d1:c9:cd:66:56:10:fa:34:89:74:cd:
         56:5f:d5:2b:a9:93:5b:e9:41:7f:23:87:f5:27:e4:05:d6:2a:
         80:03:5f:15:50:5f:6c:fd:90:1d:0d:63:6f:79:98:4b:bf:09:
         81:98:fc:da:52:a0:7f:1c:28:36:7f:71:9c:c6:6b:08:cd:01:
         49:4d:a0:61:bf:3a:2e:9f:e1:c7:ab:74:4d:28:a9:0d:ce:90:
         73:4f:20:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKelOrXmzrlXPtiP2H+DymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzBjZDhlMTNjODZkOGVmODM1YzFhYWM3ZDVmOTUzNDU1
YzAzNWMwHhcNMjUwNjA3MTMwMDIwWhcNMjUwNjA4MTMwMDIwWjAzMTEwLwYDVQQD
Eyg3ZDcxY2M4NWMxYzFhNDc3Y2QzOGI4MzBhZjAzY2Y1MjkxZDYyZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLS3jyE6S7FCZTDdaOdopvgUxw0U
vZjcL9LJ1CgaH0GBycRyu3XKpTjcid42xOQd5JGAp20jCzoPcUQIrurqABK814eF
MY/OEt2sL2TIuFswNm4KZ3XKFB6fxGDOKPJ9T4JukdiWoqfmr+ZBt1YW9tPqznNT
dcJd2/BgfwIG+ytu4I9NORuVlYN19ZKd/vq3qBLI7NX3oHJ6YGzIlpOuWSSFzJKf
cPH9776sQ26Gtj2larsQ+EGpuCNWxfubUKu2nH9ljEEpnuD/VfnRuz0yRYDZ+AEw
sBbTMWV/819I1pPFHyucwYiqAF1fn9FlBP86OP71yZS3Kb4U6DnW1C0jRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1xzIXBwaR3zTi4MK8Dz1KR1i9cMB8GA1UdIwQY
MBaAFBIwzY4TyG2O+DXBqsfV+VNFXANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQt
MDFmYjQ2YTQzM2UxLzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kMWYzOTAtNGVjNS00YzQyLThlNTQtMDFmYjQ2YTQzM2Ux
LzEvRWpETmpoUEliWTc0TmNHcXg5WDVVMFZjQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+1Fg8+/
Wc3rwJmeWRT5sEJ6nyAvBTigl9+xXYz5VMhTKlBNYrzwqrNq1VZquyseq7f6eVwo
UIsoPOZ3bmGkTuPppa0sqqcnaV4Rqv7tI/ciM8BJn/GlBomXAS4testR9jld1wJ4
ZkKlOF3NwbF+HomdHy3G/zxW/Inslmvibfu/I9N6s/hHmWOSxe9522dRHXUGfn9y
jLWL6BoDq1roW8bPp3SJIaVjZ9HJzWZWEPo0iXTNVl/VK6mTW+lBfyOH9SfkBdYq
gANfFVBfbP2QHQ1jb3mYS78JgZj82lKgfxwoNn9xnMZrCM0BSU2gYb86Lp/hx6t0
TSipDc6Qc08gjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:31 2025 by rpki-client