Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File:                     eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier:          t2r4p/Q+2nVbgabQ5qiaZ8xAob4W+Urkj0CCBTrLBtY=
Subject key identifier:   84:46:70:7C:54:03:2B:C6:B0:E8:69:C1:14:DA:C4:55:D6:39:A0:47
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer:       /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial:       019764A81B89891AE14D9C13424EE13EB283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number:          06DE
Signing time:             Thu 12 Jun 2025 15:00:27 +0000
Manifest this update:     Thu 12 Jun 2025 15:00:27 +0000
Manifest next update:     Fri 13 Jun 2025 15:00:27 +0000
Files and hashes:         1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: CcxLTiw8c9Ht0pxqpm63EL1jAdi9u5rfFwwbVjGpTv4=)
                          2: mJE_Ax4JDpdyNPeWFMSVsXGju14.roa (hash: t5TGMLR0+nDNKqcsV3Ft/NZxzvRzL5m7zfzdz2TzA60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:a8:1b:89:89:1a:e1:4d:9c:13:42:4e:e1:3e:b2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
        Validity
            Not Before: Jun 12 15:00:27 2025 GMT
            Not After : Jun 13 15:00:27 2025 GMT
        Subject: CN=8446707c54032bc6b0e869c114dac455d639a047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:7a:bc:eb:01:16:f6:da:2f:7f:68:ab:02:
                    53:54:5b:f9:5d:60:2c:96:02:89:cd:04:6a:4e:ae:
                    51:fe:2b:8e:f0:59:d0:b0:13:e9:ff:1b:e1:bc:b2:
                    99:90:88:2b:b6:e6:bd:e4:33:bc:ba:80:a2:63:db:
                    92:70:20:56:e1:4b:56:56:b1:0d:3b:9b:50:03:78:
                    5b:b4:59:2b:b7:ab:67:d7:95:c5:79:2f:d3:9c:cd:
                    66:97:68:c7:b5:c9:25:de:bf:9a:59:b4:42:e0:f0:
                    49:47:3f:5f:e3:61:89:17:02:80:3b:15:32:3e:2d:
                    63:5c:d9:4f:58:e0:12:64:25:81:a0:47:ff:ab:06:
                    2b:a8:b3:b0:b8:8b:0b:89:7d:6e:c6:e4:6c:6c:05:
                    d1:d4:7a:ec:90:df:26:c3:0a:c3:31:35:83:66:81:
                    4b:31:be:06:bd:a0:b8:d7:c9:35:73:2f:3f:36:58:
                    50:86:c0:bd:8f:ae:4f:35:90:a4:40:03:b0:a1:3e:
                    b9:5c:10:c2:60:ff:e5:44:f5:2d:e3:38:c5:31:3e:
                    1b:ce:65:93:04:8c:21:05:fc:ad:b9:18:39:43:e9:
                    4a:f1:c9:25:99:36:2a:d5:0e:17:43:34:fd:40:73:
                    e9:45:1e:d1:f6:6e:c2:fd:06:db:89:4e:ab:3a:7c:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:70:7C:54:03:2B:C6:B0:E8:69:C1:14:DA:C4:55:D6:39:A0:47
            X509v3 Authority Key Identifier:
                keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:98:91:67:a1:c2:f5:3f:45:2c:38:e9:7c:86:cc:2e:93:
         62:44:40:70:6f:9d:83:5c:97:25:4d:cd:16:32:f8:e8:d9:db:
         74:ed:a5:30:bd:17:54:75:83:c4:9c:15:1b:36:14:a9:f9:87:
         2e:66:6b:79:3a:3d:cd:ae:ba:fe:19:07:5c:c1:fd:f5:11:7d:
         77:d8:64:22:8b:36:31:a6:f9:e1:de:60:c5:08:7c:f8:78:5b:
         eb:6a:30:e7:10:4f:7c:70:98:4f:d8:a3:0b:38:8f:86:72:b2:
         ac:ad:d9:2f:98:c8:bc:7c:99:70:8a:50:ed:fe:0b:de:2d:2b:
         3d:da:15:57:b6:67:eb:bf:30:ff:d1:8e:e5:95:1d:1f:6e:cc:
         f4:61:d4:7d:b2:28:6c:8d:f7:67:23:16:a1:c3:82:92:41:00:
         c0:f9:a2:7c:86:12:23:d1:2d:a8:f7:22:9c:d2:a9:a7:52:01:
         b1:de:f5:e9:19:f1:72:1e:d5:d7:dc:12:da:df:9e:69:98:f4:
         be:54:28:13:ac:b8:dd:8a:62:f6:e7:f8:84:db:e8:96:61:2e:
         8e:e2:dc:fb:a2:6d:c4:a8:bd:e9:87:7b:c2:b4:81:e7:23:6d:
         61:f0:34:8d:2b:14:f8:a4:38:bc:c2:c9:79:20:5a:a7:df:d9:
         8c:90:d6:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkqBuJiRrhTZwTQk7hPrKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZTM3NmM4ZTQ5MGQyODYyMGMyNGY5N2UyYjkzM2Q2MmZk
MDIzOGIwHhcNMjUwNjEyMTUwMDI3WhcNMjUwNjEzMTUwMDI3WjAzMTEwLwYDVQQD
Eyg4NDQ2NzA3YzU0MDMyYmM2YjBlODY5YzExNGRhYzQ1NWQ2MzlhMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2V6vOsBFvbaL39oqwJTVFv5XWAs
lgKJzQRqTq5R/iuO8FnQsBPp/xvhvLKZkIgrtua95DO8uoCiY9uScCBW4UtWVrEN
O5tQA3hbtFkrt6tn15XFeS/TnM1ml2jHtckl3r+aWbRC4PBJRz9f42GJFwKAOxUy
Pi1jXNlPWOASZCWBoEf/qwYrqLOwuIsLiX1uxuRsbAXR1HrskN8mwwrDMTWDZoFL
Mb4GvaC418k1cy8/NlhQhsC9j65PNZCkQAOwoT65XBDCYP/lRPUt4zjFMT4bzmWT
BIwhBfytuRg5Q+lK8cklmTYq1Q4XQzT9QHPpRR7R9m7C/QbbiU6rOnyF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRGcHxUAyvGsOhpwRTaxFXWOaBHMB8GA1UdIwQY
MBaAFHnjdsjkkNKGIMJPl+K5M9Yv0COLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOGI4NWEtZjM3NS00NzcxLWFmM2Qt
MTI1ZTFlMWYxNTliLzEvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOGI4NWEtZjM3NS00NzcxLWFmM2QtMTI1ZTFlMWYxNTli
LzEvZWVOMnlPU1Ewb1lnd2stWDRya3oxaV9RSTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOomYkWeh
wvU/RSw46XyGzC6TYkRAcG+dg1yXJU3NFjL46NnbdO2lML0XVHWDxJwVGzYUqfmH
LmZreTo9za66/hkHXMH99RF9d9hkIos2Mab54d5gxQh8+Hhb62ow5xBPfHCYT9ij
CziPhnKyrK3ZL5jIvHyZcIpQ7f4L3i0rPdoVV7Zn678w/9GO5ZUdH27M9GHUfbIo
bI33ZyMWocOCkkEAwPmifIYSI9EtqPcinNKpp1IBsd716Rnxch7V19wS2t+eaZj0
vlQoE6y43Ypi9uf4hNvolmEujuLc+6JtxKi96Yd7wrSB5yNtYfA0jSsU+KQ4vMLJ
eSBap9/ZjJDW2A==
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:52 2025 by rpki-client