Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
File:                     7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft (raw, json)
Hash identifier:          1yW5RisiW2suOpZzgppLwSvcgbtrKIVZci5PPNRN+Bs=
Subject key identifier:   4D:38:71:B6:4B:5B:6A:DF:0A:97:43:9A:B2:BB:0F:6F:47:BF:2E:9D
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Certificate issuer:       /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial:       019761A7F03AC0B2ECB8C134456043865274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
Manifest number:          0C42
Signing time:             Thu 12 Jun 2025 01:01:25 +0000
Manifest this update:     Thu 12 Jun 2025 01:01:25 +0000
Manifest next update:     Fri 13 Jun 2025 01:01:25 +0000
Files and hashes:         1: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl (hash: 0qH/mhUyoK+t4VUZCo1sLUL1HyrlC/+6N7d0PFc6ztw=)
                          2: W3UE20l_8Px6YA0EYO3_NVSjfaA.roa (hash: SmuzL3cKoEYF8dbOh8LZGbcugb4WzfvFlt+ZhSQ+t5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:f0:3a:c0:b2:ec:b8:c1:34:45:60:43:86:52:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
        Validity
            Not Before: Jun 12 01:01:25 2025 GMT
            Not After : Jun 13 01:01:25 2025 GMT
        Subject: CN=4d3871b64b5b6adf0a97439ab2bb0f6f47bf2e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d2:04:22:e6:5f:6e:a2:34:3c:80:25:a8:ff:
                    99:f5:ce:d6:0a:4c:7c:94:91:36:e8:19:1a:cc:54:
                    0c:85:7c:84:99:9b:dd:36:be:6a:70:b5:ed:74:35:
                    fb:02:fd:37:e5:e6:6d:ef:1b:36:d3:c8:bd:9d:82:
                    94:79:15:ac:bb:e8:15:23:be:c6:7a:25:38:b2:32:
                    23:2f:4a:9b:16:70:79:37:9b:99:a7:d4:c3:95:dd:
                    28:4f:7f:53:91:dd:3d:1a:92:64:d3:ed:80:df:4c:
                    03:7f:71:0f:e1:40:0c:46:4d:c0:ca:60:2e:c0:fb:
                    05:2e:37:82:42:7e:d3:c9:73:75:37:3d:75:de:cd:
                    ef:5a:f5:ad:6d:73:b5:8c:27:77:f5:e3:f5:be:af:
                    c0:12:1c:ad:5e:c5:4b:58:1c:f4:d1:02:6e:e0:7b:
                    02:08:89:59:ab:ce:0f:ea:2a:1e:01:48:b7:f9:11:
                    e1:d5:28:c6:9d:8f:37:3e:6f:35:dd:c4:8a:55:95:
                    42:e0:a4:7a:6c:2b:6f:28:3d:56:33:73:a2:4a:82:
                    b9:5b:d5:79:10:3f:7e:e5:ec:ee:e6:9e:31:b1:02:
                    1f:a0:21:4c:2a:95:f6:73:11:be:c9:72:46:8f:cf:
                    3b:7b:c3:82:3f:aa:96:7b:96:54:c7:8b:af:82:97:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:38:71:B6:4B:5B:6A:DF:0A:97:43:9A:B2:BB:0F:6F:47:BF:2E:9D
            X509v3 Authority Key Identifier:
                keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d7:0e:13:b7:ef:ac:4a:fe:8f:e8:f2:40:cc:71:af:29:79:
         d4:80:36:7a:a4:9d:8d:78:1a:52:cc:ca:ca:4a:70:ab:63:1a:
         48:eb:44:7c:7f:28:e0:64:73:e2:fd:70:55:10:6c:57:36:6d:
         d5:6e:45:c8:90:92:9a:58:0f:e9:51:48:c2:3b:a8:aa:ad:3a:
         98:79:66:9b:dc:b9:1a:f6:76:9d:a8:6a:b8:56:7a:49:55:71:
         76:97:c0:52:3c:84:60:19:41:07:63:b4:19:3e:76:68:49:2e:
         01:8a:e8:1d:1d:7d:a3:54:7a:93:a8:50:6f:34:16:2b:f2:5f:
         cb:3b:13:b7:28:16:fd:1f:53:64:f8:16:f1:a8:0d:ee:0d:51:
         cb:e7:8a:da:0d:c7:a2:c8:03:6a:52:7b:1b:ea:c7:1c:ac:16:
         7e:24:b8:31:22:c3:27:c6:1e:ad:a1:21:a0:44:ef:8d:a1:63:
         b6:23:93:a3:ad:e0:c4:10:76:e3:e0:3b:10:a7:18:92:3d:da:
         cb:77:70:82:1f:5c:0b:b1:e9:e3:a7:14:82:8e:37:6a:f9:02:
         8b:d2:c8:cb:c2:dd:dd:e3:e4:5f:84:9d:57:e3:f0:e4:a8:61:
         da:b8:92:ca:3a:1c:c6:a2:e3:ba:41:7c:b9:2b:0a:5c:21:7e:
         b0:bb:06:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhp/A6wLLsuME0RWBDhlJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjQwOGY1NDUyNDI1NThjMTEwM2MwMTk0YjRmNTYxZWI5
YTIzYTIwHhcNMjUwNjEyMDEwMTI1WhcNMjUwNjEzMDEwMTI1WjAzMTEwLwYDVQQD
Eyg0ZDM4NzFiNjRiNWI2YWRmMGE5NzQzOWFiMmJiMGY2ZjQ3YmYyZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9IEIuZfbqI0PIAlqP+Z9c7WCkx8
lJE26BkazFQMhXyEmZvdNr5qcLXtdDX7Av035eZt7xs208i9nYKUeRWsu+gVI77G
eiU4sjIjL0qbFnB5N5uZp9TDld0oT39Tkd09GpJk0+2A30wDf3EP4UAMRk3AymAu
wPsFLjeCQn7TyXN1Nz113s3vWvWtbXO1jCd39eP1vq/AEhytXsVLWBz00QJu4HsC
CIlZq84P6ioeAUi3+RHh1SjGnY83Pm813cSKVZVC4KR6bCtvKD1WM3OiSoK5W9V5
ED9+5ezu5p4xsQIfoCFMKpX2cxG+yXJGj887e8OCP6qWe5ZUx4uvgpcjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE04cbZLW2rfCpdDmrK7D29Hvy6dMB8GA1UdIwQY
MBaAFOwkCPVFJCVYwRA8AZS09WHrmiOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NRSTlVVWtKVmpCRUR3QmxMVDFZZXVhSTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YjY2ZWEtZmY1Mi00ZmJiLTg3NGEt
ZTg0MjY4MGJhMWE3LzEvN0NRSTlVVWtKVmpCRUR3QmxMVDFZZXVhSTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80YjY2ZWEtZmY1Mi00ZmJiLTg3NGEtZTg0MjY4MGJhMWE3
LzEvN0NRSTlVVWtKVmpCRUR3QmxMVDFZZXVhSTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9cOE7fv
rEr+j+jyQMxxryl51IA2eqSdjXgaUszKykpwq2MaSOtEfH8o4GRz4v1wVRBsVzZt
1W5FyJCSmlgP6VFIwjuoqq06mHlmm9y5GvZ2nahquFZ6SVVxdpfAUjyEYBlBB2O0
GT52aEkuAYroHR19o1R6k6hQbzQWK/JfyzsTtygW/R9TZPgW8agN7g1Ry+eK2g3H
osgDalJ7G+rHHKwWfiS4MSLDJ8YeraEhoETvjaFjtiOTo63gxBB24+A7EKcYkj3a
y3dwgh9cC7Hp46cUgo43avkCi9LIy8Ld3ePkX4SdV+Pw5Khh2riSyjocxqLjukF8
uSsKXCF+sLsGFA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 05:21:58 2025 by rpki-client