Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File:                     eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier:          5BnN80bgnGxdm8rPq1YniPXf0m6YUebccEj2OiZ64UY=
Subject key identifier:   4D:9D:D0:AE:37:D6:1A:B8:FA:22:00:37:09:B5:3A:69:70:85:25:7C
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer:       /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial:       01974B8DD3C9D772C7A2FAD631955FB9674E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number:          0168
Signing time:             Sat 07 Jun 2025 18:01:15 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:15 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:15 +0000
Files and hashes:         1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
                          2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: IgRuawQ1veZNDVhKWPdVr1R/bWywb28AU7zisua0f74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:d3:c9:d7:72:c7:a2:fa:d6:31:95:5f:b9:67:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
        Validity
            Not Before: Jun  7 18:01:15 2025 GMT
            Not After : Jun  8 18:01:15 2025 GMT
        Subject: CN=4d9dd0ae37d61ab8fa22003709b53a697085257c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:6e:53:50:19:73:7a:4b:b7:ec:bc:19:dd:
                    be:f6:b0:58:d1:5a:55:43:bd:df:56:80:d8:d6:3a:
                    09:84:06:c0:06:2f:d1:0b:ba:c6:75:a2:d5:21:43:
                    02:9e:05:fd:6c:87:d7:b4:41:66:6b:c1:59:3c:4f:
                    93:32:2c:99:14:87:cc:a3:03:f7:39:03:d1:8b:96:
                    19:f0:5e:51:5d:d7:14:64:e1:2d:6c:a1:1d:84:ee:
                    bc:b9:f8:3d:cf:6d:ae:a8:ba:e7:b1:92:21:9a:b9:
                    99:ff:de:4b:b9:9e:c2:af:d7:53:7b:5e:f8:54:55:
                    97:6a:11:08:e5:9e:2c:0e:a3:8a:7b:d2:56:14:90:
                    bd:4b:38:7a:3a:13:7c:9a:d7:a1:dd:86:63:1b:ab:
                    11:46:49:2e:16:2e:41:d9:bd:2d:56:4d:01:74:fe:
                    2a:db:5c:62:6e:11:29:76:9c:cf:03:94:ac:94:3d:
                    03:f4:cc:3e:ff:2b:e7:fd:41:97:b7:15:11:f2:7e:
                    9e:f5:1c:e0:cd:68:ff:ba:71:81:ef:d7:7d:df:e2:
                    d3:e7:74:3b:0c:65:dd:4d:9d:0a:79:8d:36:12:b7:
                    90:3d:9d:d8:48:9f:8a:f8:1c:11:5e:f0:2c:a8:6b:
                    db:49:31:0b:da:12:b4:65:81:ab:84:f3:e7:64:ff:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:D0:AE:37:D6:1A:B8:FA:22:00:37:09:B5:3A:69:70:85:25:7C
            X509v3 Authority Key Identifier:
                keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ae:92:8b:a7:15:27:53:07:71:af:12:2f:90:02:10:df:11:
         a5:35:5a:e2:05:5a:1d:35:0f:e0:23:0b:71:98:ee:74:f3:ba:
         99:03:36:e9:48:1f:78:aa:18:ac:94:9f:f2:02:6d:0d:0e:8e:
         28:c1:54:76:22:b3:c8:8d:d2:2c:ea:73:a3:d6:4c:d9:89:e6:
         33:1a:4c:02:61:ff:66:b6:49:87:23:5f:de:c8:96:d2:b8:79:
         8a:b4:b3:2b:5f:70:f5:08:16:03:7b:55:ff:b3:3d:80:44:ad:
         3e:a4:84:65:8d:b4:d6:cc:9d:a4:b2:8a:7e:26:8e:1e:d2:2a:
         55:54:1b:65:1d:7e:5b:93:de:09:7e:27:76:be:26:22:3f:25:
         18:f9:60:8b:9a:43:11:4d:33:aa:dd:25:17:c0:f1:14:be:e5:
         15:e4:12:2f:ad:f1:e5:64:5f:6c:e2:54:0c:48:6e:35:7d:b7:
         c2:66:eb:12:3a:73:c2:18:d9:ce:55:2e:9e:5b:d8:59:95:f8:
         ba:66:7a:82:2e:bf:7f:eb:17:2e:c4:85:60:ee:fb:01:9c:c3:
         32:30:4d:0c:6d:16:79:7c:de:ad:6c:0c:15:6e:15:1a:3a:02:
         6d:35:6c:c4:c8:8c:ba:35:a8:ea:b3:82:72:27:05:52:2a:ff:
         a4:78:f3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjdPJ13LHovrWMZVfuWdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjdmNmQwMDYyYTk3NjZiZDU4ZjBkMDc1YzRmMGQxMDI1
N2U2MDYwHhcNMjUwNjA3MTgwMTE1WhcNMjUwNjA4MTgwMTE1WjAzMTEwLwYDVQQD
Eyg0ZDlkZDBhZTM3ZDYxYWI4ZmEyMjAwMzcwOWI1M2E2OTcwODUyNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QxuU1AZc3pLt+y8Gd2+9rBY0VpV
Q73fVoDY1joJhAbABi/RC7rGdaLVIUMCngX9bIfXtEFma8FZPE+TMiyZFIfMowP3
OQPRi5YZ8F5RXdcUZOEtbKEdhO68ufg9z22uqLrnsZIhmrmZ/95LuZ7Cr9dTe174
VFWXahEI5Z4sDqOKe9JWFJC9Szh6OhN8mteh3YZjG6sRRkkuFi5B2b0tVk0BdP4q
21xibhEpdpzPA5SslD0D9Mw+/yvn/UGXtxUR8n6e9RzgzWj/unGB79d93+LT53Q7
DGXdTZ0KeY02EreQPZ3YSJ+K+BwRXvAsqGvbSTEL2hK0ZYGrhPPnZP+K1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2d0K431hq4+iIANwm1OmlwhSV8MB8GA1UdIwQY
MBaAFHkn9tAGKpdmvVjw0HXE8NECV+YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWIt
YzVkMGNiN2I3ZGY1LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWItYzVkMGNiN2I3ZGY1
LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq6Si6cV
J1MHca8SL5ACEN8RpTVa4gVaHTUP4CMLcZjudPO6mQM26UgfeKoYrJSf8gJtDQ6O
KMFUdiKzyI3SLOpzo9ZM2YnmMxpMAmH/ZrZJhyNf3siW0rh5irSzK19w9QgWA3tV
/7M9gEStPqSEZY201sydpLKKfiaOHtIqVVQbZR1+W5PeCX4ndr4mIj8lGPlgi5pD
EU0zqt0lF8DxFL7lFeQSL63x5WRfbOJUDEhuNX23wmbrEjpzwhjZzlUunlvYWZX4
umZ6gi6/f+sXLsSFYO77AZzDMjBNDG0WeXzerWwMFW4VGjoCbTVsxMiMujWo6rOC
cicFUir/pHjzzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:24 2025 by rpki-client