Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          9TjsbWvJ/BA5XKu72e4Z/OC+CKkFqkDWFONefbUaiXk=
Subject key identifier:   20:9A:4C:24:21:33:12:6E:CE:E3:5D:CF:D3:49:71:F2:C2:B2:C4:5C
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       01974D0E1D61410CFE18639296B71CD60CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 01:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:59 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: U2QyRV1t/EqIkNcI1RK7twtLrwU0+mNpBkLqI6ILqrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:1d:61:41:0c:fe:18:63:92:96:b7:1c:d6:0c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: Jun  8 01:00:59 2025 GMT
            Not After : Jun  9 01:00:59 2025 GMT
        Subject: CN=209a4c242133126ecee35dcfd34971f2c2b2c45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:56:76:f4:48:50:91:09:c7:a1:63:f5:87:
                    5f:84:71:e1:7c:9a:bc:ee:42:c9:de:c1:b0:ed:4f:
                    9b:e4:53:83:f8:d2:bd:f9:a4:e2:d9:48:d0:f9:db:
                    f2:de:7c:e7:c9:37:0a:15:f2:40:11:7f:91:17:95:
                    b6:7b:c0:4d:cb:7f:d0:f2:e2:5a:db:97:35:68:65:
                    17:9a:d2:95:2c:6e:24:75:54:d4:72:fe:1c:d4:23:
                    34:6d:c0:0f:c1:48:f0:e3:d6:4b:a7:3b:2f:4e:41:
                    a9:2c:a6:03:3c:3a:a7:98:bf:66:b9:fd:0a:cf:69:
                    29:68:45:fb:9f:2d:e5:20:df:76:02:7d:64:ac:77:
                    58:f9:ca:03:99:2f:f1:d9:d3:15:e0:69:1e:c1:e3:
                    c0:c8:9f:f2:01:71:db:3e:27:51:e4:c8:f8:a7:a2:
                    f3:7f:69:da:2b:75:f6:24:2d:85:0b:45:64:23:9a:
                    e6:5e:d9:ad:08:ce:d8:0a:83:ab:99:aa:f4:34:af:
                    8a:5f:0a:8e:bf:b7:d3:30:38:c5:4d:d1:5c:68:33:
                    84:a8:61:7b:2c:01:9a:7c:e0:a4:61:68:76:61:3d:
                    b7:38:92:09:b6:2b:4c:1a:de:44:d8:4b:f3:77:88:
                    c4:bd:ee:e2:73:12:6a:8f:4c:af:ec:24:15:40:7f:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9A:4C:24:21:33:12:6E:CE:E3:5D:CF:D3:49:71:F2:C2:B2:C4:5C
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:58:5e:a1:be:6c:19:32:ee:7e:96:89:d1:b6:b1:2f:88:
         04:72:3b:79:9e:90:0e:2b:27:cf:c0:f5:11:29:d5:b6:45:f7:
         b0:18:2e:51:71:ae:9e:65:6b:fd:1c:80:4c:22:27:7f:19:9e:
         3e:bf:9d:f4:ad:17:47:d9:e8:1f:b2:e6:7f:af:77:3b:04:40:
         11:ea:56:be:e5:10:51:93:70:3f:56:46:f5:e0:cf:88:e3:16:
         e4:f9:d3:ef:48:07:f0:66:e2:cf:54:71:8b:04:34:f3:da:1a:
         79:ac:17:db:7c:b2:3f:4c:4a:e9:7b:ac:da:bc:63:53:f5:31:
         99:31:9b:4e:0f:d0:73:aa:1b:47:dc:12:04:8f:0c:bf:ac:ac:
         7f:27:d5:c8:5d:79:f6:95:8d:9d:2e:43:cc:63:ab:79:0b:00:
         a9:68:a6:e3:45:e7:e5:f8:29:8d:91:3a:8a:3d:db:42:bb:e4:
         e1:b7:13:3d:a3:c2:54:fe:e6:35:75:64:e6:ae:b4:62:6b:31:
         12:0a:9c:a1:51:d3:8d:e0:42:1c:bc:5d:14:05:e7:f3:f5:e6:
         bf:15:25:ae:86:13:8f:d5:3d:4d:9e:6c:7d:25:09:1e:49:9c:
         a2:61:ab:52:c7:39:dd:ec:ce:96:2f:1a:42:09:0f:d8:cf:91:
         d1:50:01:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDh1hQQz+GGOSlrcc1gzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTUwYmExOWI0ZjE3YTM0NzMxMjdmZDA3N2E5YTIwMDJl
YmVhMzYwHhcNMjUwNjA4MDEwMDU5WhcNMjUwNjA5MDEwMDU5WjAzMTEwLwYDVQQD
EygyMDlhNGMyNDIxMzMxMjZlY2VlMzVkY2ZkMzQ5NzFmMmMyYjJjNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1JWdvRIUJEJx6Fj9YdfhHHhfJq8
7kLJ3sGw7U+b5FOD+NK9+aTi2UjQ+dvy3nznyTcKFfJAEX+RF5W2e8BNy3/Q8uJa
25c1aGUXmtKVLG4kdVTUcv4c1CM0bcAPwUjw49ZLpzsvTkGpLKYDPDqnmL9muf0K
z2kpaEX7ny3lIN92An1krHdY+coDmS/x2dMV4GkewePAyJ/yAXHbPidR5Mj4p6Lz
f2naK3X2JC2FC0VkI5rmXtmtCM7YCoOrmar0NK+KXwqOv7fTMDjFTdFcaDOEqGF7
LAGafOCkYWh2YT23OJIJtitMGt5E2Evzd4jEve7icxJqj0yv7CQVQH94rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCaTCQhMxJuzuNdz9NJcfLCssRcMB8GA1UdIwQY
MBaAFHiVC6GbTxejRzEn/Qd6miAC6+o2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MGZjYjktY2E4NC00NmEyLWIxYjAt
ZmQ1ZTQ0NjVkMTQ0LzEvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MGZjYjktY2E4NC00NmEyLWIxYjAtZmQ1ZTQ0NjVkMTQ0
LzEvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeZYXqG+
bBky7n6WidG2sS+IBHI7eZ6QDisnz8D1ESnVtkX3sBguUXGunmVr/RyATCInfxme
Pr+d9K0XR9noH7Lmf693OwRAEepWvuUQUZNwP1ZG9eDPiOMW5PnT70gH8Gbiz1Rx
iwQ089oaeawX23yyP0xK6Xus2rxjU/UxmTGbTg/Qc6obR9wSBI8Mv6ysfyfVyF15
9pWNnS5DzGOreQsAqWim40Xn5fgpjZE6ij3bQrvk4bcTPaPCVP7mNXVk5q60Ymsx
EgqcoVHTjeBCHLxdFAXn8/XmvxUlroYTj9U9TZ5sfSUJHkmcomGrUsc53ezOli8a
QgkP2M+R0VABuA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:19 2025 by rpki-client