Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File:                     ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier:          El8qh3LOmreI8FuqWGrAPKrWOHeVzUm+ABNok/SKcUk=
Subject key identifier:   78:DA:26:AA:92:21:2C:59:77:F4:26:D5:72:55:7C:A9:B8:C5:E8:FC
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer:       /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial:       01975E3873FD0DBF991CE6F67BC7F7BF0472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number:          11AE
Signing time:             Wed 11 Jun 2025 09:00:47 +0000
Manifest this update:     Wed 11 Jun 2025 09:00:47 +0000
Manifest next update:     Thu 12 Jun 2025 09:00:47 +0000
Files and hashes:         1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
                          2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: NE+ClBddr3YH5JJYa03FwvdtAsmGZDsSR3r36bURVKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:38:73:fd:0d:bf:99:1c:e6:f6:7b:c7:f7:bf:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
        Validity
            Not Before: Jun 11 09:00:47 2025 GMT
            Not After : Jun 12 09:00:47 2025 GMT
        Subject: CN=78da26aa92212c5977f426d572557ca9b8c5e8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1c:17:bf:58:4f:58:b7:4d:88:05:f8:39:e9:
                    0b:19:66:79:1d:56:6b:b0:cd:76:c4:7a:f1:9c:99:
                    38:66:c2:2e:25:00:1c:2a:c1:d3:f5:02:cc:8f:7f:
                    b2:58:f3:d7:d8:5a:6b:be:73:91:92:63:b8:73:85:
                    0e:0f:9c:99:b3:8c:62:10:eb:56:57:7a:42:ee:94:
                    b8:e7:34:5e:32:6c:9c:72:d9:20:a6:f3:c9:1f:e6:
                    27:97:05:75:ba:f0:45:0d:bf:ae:80:6e:46:ba:25:
                    0a:f8:5a:b4:c3:1e:28:7e:dc:ef:33:d7:ac:49:8d:
                    be:c2:24:2b:46:c1:2e:ad:e5:bb:ed:61:72:dd:fb:
                    49:c4:3b:b9:87:89:48:c2:fe:12:a8:b5:b8:5b:f9:
                    64:a6:b5:9f:12:ee:11:6e:ff:92:6c:7e:44:98:76:
                    8e:5c:a1:69:89:e0:c6:db:f6:72:5e:e7:6d:75:68:
                    b7:d7:6b:eb:fd:b0:a8:03:73:65:43:a2:0f:cb:0b:
                    f4:9d:6c:0f:6d:b3:44:cf:7d:0c:ba:4f:e7:7d:4c:
                    33:54:60:74:c0:be:5f:30:8a:20:1f:d1:28:19:aa:
                    70:55:cb:61:c2:d9:93:d5:1c:1e:22:fe:fb:f8:92:
                    de:54:7e:1a:6d:33:c3:64:f6:6c:7a:fa:d3:dc:3a:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:26:AA:92:21:2C:59:77:F4:26:D5:72:55:7C:A9:B8:C5:E8:FC
            X509v3 Authority Key Identifier:
                keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:b5:ed:9b:4a:c0:cf:5f:ba:4c:da:12:cf:f3:9b:22:27:
         45:16:7c:12:6e:ff:5a:49:c5:a2:e8:bd:cf:fc:29:84:bc:56:
         cd:8d:c2:8b:69:52:f2:3c:23:9e:ad:25:87:89:05:51:3a:ac:
         b7:50:cf:62:c1:68:35:d9:99:05:2b:12:80:65:76:c8:62:1a:
         00:4a:af:00:41:29:6c:66:4f:68:d1:fe:56:02:42:f3:26:45:
         25:0c:e4:59:d3:6e:e0:ce:13:05:13:0f:37:13:e8:3c:64:ab:
         64:94:e2:ae:fe:79:3d:7c:db:da:c5:ac:6d:19:eb:a0:33:1b:
         ff:d0:47:fb:62:7b:48:d4:0e:07:4c:db:dd:1f:5a:bd:11:6c:
         5f:ce:6e:6b:2b:27:09:08:94:7e:55:26:de:d9:e6:49:80:51:
         e3:47:e1:3a:15:fa:2a:31:e9:95:b8:60:5a:44:31:0e:17:dc:
         b8:c7:f6:f1:d3:e5:fc:35:87:98:76:d4:85:1c:38:c3:0f:5d:
         45:29:ea:2c:3c:7d:69:86:ed:46:9e:21:ba:e5:d5:b7:45:ee:
         fb:06:5d:d3:40:27:6e:1a:ec:4b:e9:c1:3b:a2:cf:2d:c4:eb:
         c4:35:8a:eb:e4:00:40:f9:0a:25:96:80:ee:22:10:82:32:98:
         61:60:68:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeOHP9Db+ZHOb2e8f3vwRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj
Yzg4ZDEwHhcNMjUwNjExMDkwMDQ3WhcNMjUwNjEyMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg3OGRhMjZhYTkyMjEyYzU5NzdmNDI2ZDU3MjU1N2NhOWI4YzVlOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hwXv1hPWLdNiAX4OekLGWZ5HVZr
sM12xHrxnJk4ZsIuJQAcKsHT9QLMj3+yWPPX2FprvnORkmO4c4UOD5yZs4xiEOtW
V3pC7pS45zReMmycctkgpvPJH+YnlwV1uvBFDb+ugG5GuiUK+Fq0wx4oftzvM9es
SY2+wiQrRsEureW77WFy3ftJxDu5h4lIwv4SqLW4W/lkprWfEu4Rbv+SbH5EmHaO
XKFpieDG2/ZyXudtdWi312vr/bCoA3NlQ6IPywv0nWwPbbNEz30Muk/nfUwzVGB0
wL5fMIogH9EoGapwVcthwtmT1RweIv77+JLeVH4abTPDZPZsevrT3Dr1YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjaJqqSISxZd/Qm1XJVfKm4xej8MB8GA1UdIwQY
MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt
ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5
LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPy17ZtK
wM9fukzaEs/zmyInRRZ8Em7/WknFoui9z/wphLxWzY3Ci2lS8jwjnq0lh4kFUTqs
t1DPYsFoNdmZBSsSgGV2yGIaAEqvAEEpbGZPaNH+VgJC8yZFJQzkWdNu4M4TBRMP
NxPoPGSrZJTirv55PXzb2sWsbRnroDMb/9BH+2J7SNQOB0zb3R9avRFsX85uaysn
CQiUflUm3tnmSYBR40fhOhX6KjHplbhgWkQxDhfcuMf28dPl/DWHmHbUhRw4ww9d
RSnqLDx9aYbtRp4huuXVt0Xu+wZd00AnbhrsS+nBO6LPLcTrxDWK6+QAQPkKJZaA
7iIQgjKYYWBo+A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 14:26:14 2025 by rpki-client