Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File:                     7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier:          SZjsEiLGgd46lRDwfViOkQ2eD/Td8pjraPtzri3rVBM=
Subject key identifier:   C9:66:9E:04:F9:A8:58:53:1C:4E:23:A1:3D:17:59:71:DB:ED:B0:78
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer:       /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial:       019753474B2A89A7A5397542F83801B25639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number:          04D0
Signing time:             Mon 09 Jun 2025 06:01:10 +0000
Manifest this update:     Mon 09 Jun 2025 06:01:10 +0000
Manifest next update:     Tue 10 Jun 2025 06:01:10 +0000
Files and hashes:         1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: rFMUlnCv+ir1w9QXqm5p+3jKhsMmKk9VWQOrBeBxfP4=)
                          2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:47:4b:2a:89:a7:a5:39:75:42:f8:38:01:b2:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
        Validity
            Not Before: Jun  9 06:01:10 2025 GMT
            Not After : Jun 10 06:01:10 2025 GMT
        Subject: CN=c9669e04f9a858531c4e23a13d175971dbedb078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:94:95:17:ff:29:d6:39:0c:bd:dc:66:59:
                    d2:b1:8c:35:4a:d6:9a:09:9f:2c:e2:ec:c8:41:a4:
                    fd:f8:16:a4:d7:fb:e3:16:ed:41:27:33:93:c4:16:
                    eb:2c:4d:03:60:87:14:5d:f1:06:5c:89:28:20:cc:
                    79:cc:61:50:a5:7f:35:db:2f:9e:3e:f9:d8:6f:6f:
                    f2:70:0e:cb:c2:c7:ba:5d:40:dd:ac:d8:24:e2:d3:
                    db:66:6f:d5:74:ee:62:2f:59:44:a6:44:25:5b:a9:
                    db:3e:47:98:2a:d8:bb:e3:2e:6a:91:61:84:08:7e:
                    7e:0d:f5:db:73:32:ff:66:f6:fb:83:43:dc:cc:98:
                    ff:a9:72:2a:84:ee:99:f4:91:8d:50:69:fe:1f:b5:
                    fb:f7:0d:a9:56:07:0e:73:cc:92:d2:64:8c:30:c1:
                    d3:aa:57:3a:ac:d6:cd:19:c0:41:25:52:b1:37:97:
                    5d:86:72:0d:63:c2:27:9d:a6:f1:59:4e:e8:8d:0d:
                    8b:8a:f6:3e:4a:19:60:c5:6e:9d:1c:33:9d:2b:be:
                    b4:46:37:f3:7f:cc:34:8e:a3:76:bd:4d:6d:b5:5f:
                    17:ac:b3:8a:31:60:bb:57:38:de:09:1b:e0:14:d7:
                    07:62:0b:c5:8f:3c:fc:2c:a8:07:92:f4:08:b0:26:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:9E:04:F9:A8:58:53:1C:4E:23:A1:3D:17:59:71:DB:ED:B0:78
            X509v3 Authority Key Identifier:
                keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:55:73:a9:69:25:fa:8f:86:f1:55:ac:e6:9b:2c:4b:6f:
         61:bf:13:f3:fa:c2:dc:e2:e7:d5:5d:e5:f6:8b:b2:43:0f:3f:
         fd:7c:18:84:c0:09:1d:1d:bf:fe:d7:63:2d:18:81:f5:b2:14:
         40:01:25:bb:af:9b:c9:f3:08:38:7b:84:3e:cf:81:80:81:bb:
         48:a7:4a:c3:69:48:07:69:39:7a:bd:8e:4b:b3:1f:0b:f4:1a:
         9b:a9:c2:61:09:5b:c9:39:7c:3f:18:06:10:61:dd:ec:0e:f7:
         73:fb:ee:08:93:30:85:79:46:12:1f:45:7a:f3:05:fc:83:7e:
         6f:80:b4:bf:a3:c3:7b:f5:ce:fe:c6:a0:65:95:af:b5:b2:82:
         cb:21:37:63:9d:8d:1b:50:59:0c:23:c6:66:c3:a7:04:1f:b3:
         e4:26:39:1e:5c:99:ab:61:ea:37:a2:08:3c:84:58:d2:c7:7c:
         e8:b5:32:7f:f6:9c:ba:e0:dc:cc:b8:ea:51:2b:9c:03:16:8c:
         63:90:15:f7:bb:2c:a9:22:f8:29:87:4d:70:cc:60:1e:ba:07:
         0c:9a:56:46:1d:87:25:b6:d0:58:01:ba:f1:3b:88:75:32:f2:
         4e:c6:07:d8:e1:da:f8:49:07:fb:78:81:ba:09:8c:d6:37:d2:
         9d:a4:e4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTR0sqiaelOXVC+DgBslY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWE0ZDRhNmFkNmI3Mjg5YjE4MjJmZjRlMzgzN2EwYTA2
MTkyMDQwHhcNMjUwNjA5MDYwMTEwWhcNMjUwNjEwMDYwMTEwWjAzMTEwLwYDVQQD
EyhjOTY2OWUwNGY5YTg1ODUzMWM0ZTIzYTEzZDE3NTk3MWRiZWRiMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uSUlRf/KdY5DL3cZlnSsYw1Staa
CZ8s4uzIQaT9+Bak1/vjFu1BJzOTxBbrLE0DYIcUXfEGXIkoIMx5zGFQpX812y+e
PvnYb2/ycA7Lwse6XUDdrNgk4tPbZm/VdO5iL1lEpkQlW6nbPkeYKti74y5qkWGE
CH5+DfXbczL/Zvb7g0PczJj/qXIqhO6Z9JGNUGn+H7X79w2pVgcOc8yS0mSMMMHT
qlc6rNbNGcBBJVKxN5ddhnINY8InnabxWU7ojQ2LivY+ShlgxW6dHDOdK760Rjfz
f8w0jqN2vU1ttV8XrLOKMWC7VzjeCRvgFNcHYgvFjzz8LKgHkvQIsCY5mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlmngT5qFhTHE4joT0XWXHb7bB4MB8GA1UdIwQY
MBaAFO7qTUpq1rcomxgi/044N6CgYZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTct
ZjcyMjMzMTc5Y2NmLzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9kNDhjZDQtMjA4OC00MDI1LWFhMTctZjcyMjMzMTc5Y2Nm
LzEvN3VwTlNtcld0eWliR0NMX1RqZzNvS0Joa2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/hVc6lp
JfqPhvFVrOabLEtvYb8T8/rC3OLn1V3l9ouyQw8//XwYhMAJHR2//tdjLRiB9bIU
QAElu6+byfMIOHuEPs+BgIG7SKdKw2lIB2k5er2OS7MfC/Qam6nCYQlbyTl8PxgG
EGHd7A73c/vuCJMwhXlGEh9FevMF/IN+b4C0v6PDe/XO/sagZZWvtbKCyyE3Y52N
G1BZDCPGZsOnBB+z5CY5HlyZq2HqN6IIPIRY0sd86LUyf/acuuDczLjqUSucAxaM
Y5AV97ssqSL4KYdNcMxgHroHDJpWRh2HJbbQWAG68TuIdTLyTsYH2OHa+EkH+3iB
ugmM1jfSnaTkiw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:51:48 2025 by rpki-client