Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File:                     6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier:          Gm221rEmE8BryJUFvugyRWBHs+FL131eIZS/eDL7zBU=
Subject key identifier:   5E:0A:E6:27:47:B5:35:00:FF:7E:D7:FE:04:BC:EF:19:CC:F7:DC:CA
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer:       /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial:       01975F8235E38C44AF23D86DE4D08F62730E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number:          128C
Signing time:             Wed 11 Jun 2025 15:00:58 +0000
Manifest this update:     Wed 11 Jun 2025 15:00:58 +0000
Manifest next update:     Thu 12 Jun 2025 15:00:58 +0000
Files and hashes:         1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=)
                          2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: GTad/Z795XeVSxjWKSvPR+C0UiFIrr0utEvEimuqfKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:82:35:e3:8c:44:af:23:d8:6d:e4:d0:8f:62:73:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
        Validity
            Not Before: Jun 11 15:00:58 2025 GMT
            Not After : Jun 12 15:00:58 2025 GMT
        Subject: CN=5e0ae62747b53500ff7ed7fe04bcef19ccf7dcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:07:f1:de:49:67:76:7f:28:9c:88:ad:53:
                    2d:5c:c4:7d:ba:a7:f3:9d:cf:26:c8:b9:a6:2d:ef:
                    9c:82:19:6b:ec:6d:58:12:d3:2e:45:63:87:91:81:
                    a2:f4:88:66:aa:3c:82:a1:ee:30:9d:7c:07:a2:d9:
                    06:8e:54:5d:99:f9:7a:d2:16:d5:be:33:a5:f1:be:
                    bf:f3:22:ae:a7:59:2c:b9:ec:b2:04:47:a7:2b:bd:
                    30:0b:47:dc:72:77:3f:3e:c9:da:75:f9:c9:2d:8a:
                    30:cb:c5:71:6e:34:6c:a5:15:5f:e1:b0:60:99:34:
                    00:e4:e8:31:0b:ed:a6:d5:c1:be:df:58:44:f5:f9:
                    74:78:cd:e9:d6:24:cd:d4:5a:7f:d0:06:67:40:ce:
                    0a:11:cd:b3:c2:be:9e:13:19:6d:0e:96:32:9f:1e:
                    51:26:fa:fe:d8:49:28:66:63:2f:ab:40:b0:79:ad:
                    89:c3:62:78:a3:87:0a:f8:f6:bb:ef:eb:8b:77:3f:
                    1f:fa:0b:53:3e:75:db:83:76:7c:e5:43:fb:df:12:
                    10:b0:f3:c8:4b:5a:88:de:62:f8:76:ea:3f:02:d9:
                    79:e5:c4:5a:53:d8:03:6e:c2:2f:ea:66:f3:6d:b7:
                    3d:b8:e2:ff:ff:12:d7:2b:6e:27:91:6f:47:d8:c2:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:E6:27:47:B5:35:00:FF:7E:D7:FE:04:BC:EF:19:CC:F7:DC:CA
            X509v3 Authority Key Identifier:
                keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:14:71:67:ec:13:35:0d:d7:25:5c:8d:03:ad:10:90:95:d0:
         69:09:08:d1:96:a5:01:23:09:e5:da:de:3b:ef:3e:05:c7:2f:
         4b:40:04:a3:16:25:50:ef:45:62:80:f0:03:5a:31:88:f9:e5:
         01:cd:54:ba:06:38:c2:bd:92:cd:e2:34:8e:65:89:89:19:aa:
         a8:bb:9d:10:65:91:93:93:0d:77:ed:18:a8:33:c3:3a:fd:76:
         e5:f8:ed:fa:94:8c:fb:28:9b:17:bf:d1:d7:0e:a7:2f:31:d7:
         58:1f:81:be:2a:a6:62:39:87:79:82:e9:13:f6:3f:7e:1a:9a:
         7d:22:23:b5:c7:de:02:5e:3d:62:d0:24:b2:99:a2:6e:ad:4b:
         d7:43:e3:ad:44:59:28:f0:a6:72:84:2f:35:db:47:b5:49:f9:
         e7:61:47:82:22:84:b1:4c:af:f5:59:5b:60:06:ee:96:b9:a4:
         3b:55:34:1b:9b:41:48:f1:18:85:57:46:7e:a8:37:44:a4:73:
         d6:00:49:17:c3:93:27:cf:4c:d7:21:ed:89:00:10:7c:6b:a8:
         98:09:40:11:41:aa:7b:66:4f:f4:e9:ae:e8:bd:67:06:75:df:
         bf:e9:27:36:42:d7:38:1a:34:26:db:46:33:4c:19:a2:42:e9:
         4c:11:fe:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfgjXjjESvI9ht5NCPYnMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGY3NjI4MmRmNTMyMDlhNThjMDMwMmU3NGY4YTk3Y2Ez
YWZmMDUwHhcNMjUwNjExMTUwMDU4WhcNMjUwNjEyMTUwMDU4WjAzMTEwLwYDVQQD
Eyg1ZTBhZTYyNzQ3YjUzNTAwZmY3ZWQ3ZmUwNGJjZWYxOWNjZjdkY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XcH8d5JZ3Z/KJyIrVMtXMR9uqfz
nc8myLmmLe+cghlr7G1YEtMuRWOHkYGi9IhmqjyCoe4wnXwHotkGjlRdmfl60hbV
vjOl8b6/8yKup1ksueyyBEenK70wC0fccnc/PsnadfnJLYowy8VxbjRspRVf4bBg
mTQA5OgxC+2m1cG+31hE9fl0eM3p1iTN1Fp/0AZnQM4KEc2zwr6eExltDpYynx5R
Jvr+2EkoZmMvq0Cwea2Jw2J4o4cK+Pa77+uLdz8f+gtTPnXbg3Z85UP73xIQsPPI
S1qI3mL4duo/Atl55cRaU9gDbsIv6mbzbbc9uOL//xLXK24nkW9H2MKpCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4K5idHtTUA/37X/gS87xnM99zKMB8GA1UdIwQY
MBaAFOoPdigt9TIJpYwDAudPipfKOv8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2ZhNTUtNTkyNS00YmE5LWFkMzgt
YmU3YzgxOTQ4MzI0LzEvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lN2ZhNTUtNTkyNS00YmE5LWFkMzgtYmU3YzgxOTQ4MzI0
LzEvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxRxZ+wT
NQ3XJVyNA60QkJXQaQkI0ZalASMJ5dreO+8+BccvS0AEoxYlUO9FYoDwA1oxiPnl
Ac1UugY4wr2SzeI0jmWJiRmqqLudEGWRk5MNd+0YqDPDOv125fjt+pSM+yibF7/R
1w6nLzHXWB+BviqmYjmHeYLpE/Y/fhqafSIjtcfeAl49YtAkspmibq1L10PjrURZ
KPCmcoQvNdtHtUn552FHgiKEsUyv9VlbYAbulrmkO1U0G5tBSPEYhVdGfqg3RKRz
1gBJF8OTJ89M1yHtiQAQfGuomAlAEUGqe2ZP9Omu6L1nBnXfv+knNkLXOBo0JttG
M0wZokLpTBH+6A==
-----END CERTIFICATE-----
Generated at Thu Jun 12 00:25:31 2025 by rpki-client