Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File:                     7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier:          5KZ/WDdc5lJzUgpwvo3YcE4e036KES+49LPsHctS8y4=
Subject key identifier:   A5:5A:06:F6:96:C5:CF:D4:A7:76:92:2E:AE:26:CF:45:F6:8B:07:66
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer:       /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial:       01974AE846C81877DC5ECCF7CBDC32F0A0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number:          F9
Signing time:             Sat 07 Jun 2025 15:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:25 +0000
Files and hashes:         1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: PhsoMrBR0ZaaknmicMR+oBqnmi0ROOcIQF9zzsTwXdE=)
                          2: 9afYGMn0MXo12vWxONnA_EJex40.roa (hash: xwH479WcvwH10cQAzYfUAmHWqafDbEvP/HGQkmQ08iY=)
                          3: SaZ443oipq0bsfJDLYjIo19nSYE.roa (hash: bbGAwjIFSt24TQW5ErR63eFYBdAf3A/1rF+QUtCNcps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:46:c8:18:77:dc:5e:cc:f7:cb:dc:32:f0:a0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
        Validity
            Not Before: Jun  7 15:00:25 2025 GMT
            Not After : Jun  8 15:00:25 2025 GMT
        Subject: CN=a55a06f696c5cfd4a776922eae26cf45f68b0766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:a7:9a:b0:d9:8a:68:1d:6d:e3:89:49:4f:
                    c1:b9:20:54:72:5d:b5:37:56:e8:14:bc:ca:be:9b:
                    25:8f:7a:6d:1b:a5:a5:7b:00:06:78:f3:15:dd:5a:
                    d6:58:05:70:08:91:51:49:5d:76:ca:6f:10:14:ae:
                    5f:6c:0e:0d:ae:9e:a0:cf:1b:d5:2c:58:e5:3f:f6:
                    6f:28:a3:96:b0:e4:4d:d0:fb:61:4a:da:06:d5:67:
                    5b:8c:07:ec:2e:14:e8:31:ed:0b:60:5b:f1:7a:58:
                    81:2b:da:21:3e:15:e3:c8:f7:f1:39:88:f6:ca:b7:
                    85:d5:22:5b:ed:d0:0a:9e:4b:a5:90:5a:9c:a6:35:
                    1f:2a:11:67:44:c0:80:7e:1b:f6:f1:46:51:84:76:
                    a4:c8:06:e3:c3:b1:07:d5:ce:31:57:73:dd:ab:1f:
                    2d:9d:d2:2a:77:61:f2:22:58:c4:98:4a:58:67:bf:
                    59:22:41:1a:b8:04:c7:9a:b3:ad:d0:41:8a:41:a5:
                    d1:87:bc:1f:62:22:92:4a:3f:c3:75:ae:d1:f6:3a:
                    77:4f:dc:52:db:ae:20:49:65:df:f2:24:b5:a2:f2:
                    4e:e1:a7:32:af:50:fa:ad:4e:10:3f:c6:d1:e3:19:
                    3a:ec:12:dc:2e:36:e3:96:e2:9b:94:3e:fb:9d:d9:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:06:F6:96:C5:CF:D4:A7:76:92:2E:AE:26:CF:45:F6:8B:07:66
            X509v3 Authority Key Identifier:
                keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:8c:52:6f:56:53:cc:59:6a:77:61:a8:5a:00:5c:94:01:
         2c:a4:e0:1b:3b:25:80:bb:dc:a5:01:5e:c1:fb:fd:81:ba:4d:
         e0:14:76:1a:08:80:bc:7d:8c:6c:9c:50:5a:24:b6:c5:0f:72:
         48:0c:d5:68:b7:d0:27:06:50:ae:6e:9c:71:7b:eb:11:91:54:
         b7:1a:7d:cd:7a:91:61:5e:48:06:b5:c1:53:3d:e3:99:a0:30:
         2c:6b:88:bf:fc:67:9b:08:d7:ce:6c:d7:83:c0:94:2b:35:85:
         d7:09:bc:30:00:90:cb:37:92:2c:4b:23:f5:a5:5b:c2:11:06:
         6d:88:a0:82:29:34:1c:a3:71:f8:72:65:75:45:41:a0:49:f7:
         63:ce:e7:a8:c8:4f:5f:5b:01:fb:f5:bf:ef:24:56:f8:89:b9:
         95:e9:fc:b0:ad:25:e4:47:48:45:b5:e8:17:c1:3f:8d:fd:12:
         17:70:b6:6c:1d:b0:80:c7:4d:10:89:c8:f5:7a:f4:02:67:a5:
         3a:28:0c:f5:f9:f7:40:28:8b:47:ff:aa:e3:cd:fd:a1:ce:fe:
         b9:90:11:3c:a0:2d:3a:a1:4a:c3:34:39:ad:a0:f4:c3:b1:af:
         a7:44:2c:1d:30:b4:ff:7f:4d:99:a7:2a:e9:d2:e5:aa:14:89:
         23:77:05:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6EbIGHfcXsz3y9wy8KCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx
NjdkYWUwHhcNMjUwNjA3MTUwMDI1WhcNMjUwNjA4MTUwMDI1WjAzMTEwLwYDVQQD
EyhhNTVhMDZmNjk2YzVjZmQ0YTc3NjkyMmVhZTI2Y2Y0NWY2OGIwNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IKnmrDZimgdbeOJSU/BuSBUcl21
N1boFLzKvpslj3ptG6WlewAGePMV3VrWWAVwCJFRSV12ym8QFK5fbA4Nrp6gzxvV
LFjlP/ZvKKOWsORN0PthStoG1WdbjAfsLhToMe0LYFvxeliBK9ohPhXjyPfxOYj2
yreF1SJb7dAKnkulkFqcpjUfKhFnRMCAfhv28UZRhHakyAbjw7EH1c4xV3Pdqx8t
ndIqd2HyIljEmEpYZ79ZIkEauATHmrOt0EGKQaXRh7wfYiKSSj/Dda7R9jp3T9xS
264gSWXf8iS1ovJO4acyr1D6rU4QP8bR4xk67BLcLjbjluKblD77ndktvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVaBvaWxc/Up3aSLq4mz0X2iwdmMB8GA1UdIwQY
MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt
MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4
LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOiMUm9W
U8xZandhqFoAXJQBLKTgGzslgLvcpQFewfv9gbpN4BR2GgiAvH2MbJxQWiS2xQ9y
SAzVaLfQJwZQrm6ccXvrEZFUtxp9zXqRYV5IBrXBUz3jmaAwLGuIv/xnmwjXzmzX
g8CUKzWF1wm8MACQyzeSLEsj9aVbwhEGbYiggik0HKNx+HJldUVBoEn3Y87nqMhP
X1sB+/W/7yRW+Im5len8sK0l5EdIRbXoF8E/jf0SF3C2bB2wgMdNEInI9Xr0Amel
OigM9fn3QCiLR/+q4839oc7+uZARPKAtOqFKwzQ5raD0w7Gvp0QsHTC0/39Nmacq
6dLlqhSJI3cFbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:24 2025 by rpki-client