Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          3d2metfjX7ArryLnlceBTPGggv9O/eBthEiK/oyJXRI=
Subject key identifier:   F0:17:57:AC:31:5B:6D:E7:F0:91:AD:10:16:51:54:CE:C7:1D:B5:51
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       01975C80A768A39F8D0072D5E243B51AA0B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          0B25
Signing time:             Wed 11 Jun 2025 01:00:24 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:24 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:24 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: MS1Omg/w+8ejvUpmcwMe7G9HKmo1/R4FzNXgmkRV+Cw=)
                          2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:80:a7:68:a3:9f:8d:00:72:d5:e2:43:b5:1a:a0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Jun 11 01:00:24 2025 GMT
            Not After : Jun 12 01:00:24 2025 GMT
        Subject: CN=f01757ac315b6de7f091ad10165154cec71db551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:14:3d:0e:41:e9:f2:97:d9:d9:50:e4:74:
                    ea:e0:d5:98:ad:38:38:6b:87:f0:dc:81:74:03:dd:
                    49:50:b4:96:e2:01:6b:46:3f:c3:24:2f:7e:7d:9d:
                    24:ce:c8:28:d4:1c:5f:ca:9f:6b:f1:7f:85:dc:c4:
                    ae:24:c4:6b:f7:4e:67:83:06:bf:8d:97:30:4b:28:
                    60:a1:de:78:3c:d0:0d:b6:4a:e2:33:00:84:86:8a:
                    62:0f:83:96:52:56:38:07:df:f6:55:11:8e:89:2a:
                    de:44:34:57:b4:5f:7d:91:94:d1:18:b9:62:2a:06:
                    ff:cf:8b:90:e2:79:12:45:46:d6:d5:f9:7a:bf:da:
                    e5:4d:96:01:d6:82:70:1b:8a:51:3f:a2:2c:12:ce:
                    6a:b6:3f:06:bb:1a:27:fe:78:a3:31:f0:4d:46:7c:
                    9f:34:19:9e:36:33:82:8e:df:25:01:83:8d:76:ce:
                    ef:4b:a4:4c:2e:63:d9:c9:23:4a:8a:fa:88:7a:dd:
                    2e:87:e5:d3:61:de:c7:0a:85:22:fb:1e:48:f9:37:
                    cb:72:81:98:bb:f1:44:d2:7c:a4:db:1d:59:33:e1:
                    d8:1d:bb:59:a2:ca:ad:97:4d:e4:cb:76:47:1f:5a:
                    3d:c5:55:58:b5:58:5a:1e:a3:6e:41:ff:22:6c:02:
                    ef:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:57:AC:31:5B:6D:E7:F0:91:AD:10:16:51:54:CE:C7:1D:B5:51
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:b5:b0:a5:8c:0d:cc:f0:79:ff:9c:f9:8d:28:5d:e3:6b:
         f8:16:e6:9f:7f:a1:b3:eb:73:58:e0:7c:36:98:da:8d:be:b7:
         33:0b:9e:14:a3:a1:14:2f:76:c8:6e:3a:19:8e:46:29:39:0d:
         de:15:e4:b1:da:91:8b:25:50:12:9c:45:62:6f:ac:40:9d:aa:
         c2:67:a7:8f:fb:25:c7:ba:c1:fa:45:1a:e9:b5:c8:ac:9b:d5:
         b3:03:29:f1:ff:23:86:ba:38:54:d0:a3:ad:e2:78:22:50:cd:
         11:c2:b7:e2:be:8d:86:a7:72:af:50:cb:7c:d1:19:ad:d5:bf:
         4b:95:75:6c:7c:8a:e6:46:a1:4c:6a:03:c5:c2:15:be:79:90:
         45:88:a4:a9:5f:cc:13:5f:fc:ac:4c:ec:85:7a:c0:70:bc:53:
         41:a7:9b:b8:d6:cc:6e:94:ee:33:dc:7d:e1:09:32:9a:7a:ec:
         3b:1f:bc:ff:eb:6f:be:1b:65:2b:0e:ee:cf:4d:0a:78:cd:f4:
         1f:c9:d4:2b:a2:95:d1:20:bf:6d:60:ac:4c:e5:13:a7:22:61:
         09:e6:f9:b7:7e:e3:0d:45:f7:62:6f:c4:5c:04:da:2c:69:d6:
         14:96:91:a7:45:07:74:fb:2c:29:4c:ed:96:bf:af:ce:a6:a9:
         4c:f9:78:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdcgKdoo5+NAHLV4kO1GqC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NGE2NTU5OWFmYjlkODcyN2MzZGI5NDdlZmZiYWUyZTVi
ODUzZDEwHhcNMjUwNjExMDEwMDI0WhcNMjUwNjEyMDEwMDI0WjAzMTEwLwYDVQQD
EyhmMDE3NTdhYzMxNWI2ZGU3ZjA5MWFkMTAxNjUxNTRjZWM3MWRiNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioAUPQ5B6fKX2dlQ5HTq4NWYrTg4
a4fw3IF0A91JULSW4gFrRj/DJC9+fZ0kzsgo1Bxfyp9r8X+F3MSuJMRr905ngwa/
jZcwSyhgod54PNANtkriMwCEhopiD4OWUlY4B9/2VRGOiSreRDRXtF99kZTRGLli
Kgb/z4uQ4nkSRUbW1fl6v9rlTZYB1oJwG4pRP6IsEs5qtj8Guxon/nijMfBNRnyf
NBmeNjOCjt8lAYONds7vS6RMLmPZySNKivqIet0uh+XTYd7HCoUi+x5I+TfLcoGY
u/FE0nyk2x1ZM+HYHbtZosqtl03ky3ZHH1o9xVVYtVhaHqNuQf8ibALv+wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPAXV6wxW23n8JGtEBZRVM7HHbVRMB8GA1UdIwQY
MBaAFPhKZVma+52HJ8PblH7/uuLluFPRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FcGxXWnI3blljbnc5dVVmdi02NHVXNFU5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1
LTgxMTVkZjMxNzIzNS8xLzEtRXBsV1pyN25ZY253OXVVZnYtNjR1VzRVOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQxLzU2NTdjOC01MDM3LTQ4Y2QtOGRiNS04MTE1ZGYzMTcy
MzUvMS8xLUVwbFdacjduWWNudzl1VWZ2LTY0dVc0VTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDu1
sKWMDczwef+c+Y0oXeNr+Bbmn3+hs+tzWOB8Npjajb63MwueFKOhFC92yG46GY5G
KTkN3hXksdqRiyVQEpxFYm+sQJ2qwmenj/slx7rB+kUa6bXIrJvVswMp8f8jhro4
VNCjreJ4IlDNEcK34r6Nhqdyr1DLfNEZrdW/S5V1bHyK5kahTGoDxcIVvnmQRYik
qV/ME1/8rEzshXrAcLxTQaebuNbMbpTuM9x94QkymnrsOx+8/+tvvhtlKw7uz00K
eM30H8nUK6KV0SC/bWCsTOUTpyJhCeb5t37jDUX3Ym/EXATaLGnWFJaRp0UHdPss
KUztlr+vzqapTPl4qA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 10:24:02 2025 by rpki-client