Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File:                     4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier:          eygffxpWaz49lRJC+mb2Bjh3mBPcBz+f/QLSqq2FLcw=
Subject key identifier:   D8:CC:AA:45:94:F9:4D:9A:AD:58:08:8A:79:E9:62:14:E1:A6:1A:25
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer:       /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial:       01974967A295035092ABC670E561F8BB8061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number:          08DC
Signing time:             Sat 07 Jun 2025 08:00:17 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:17 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:17 +0000
Files and hashes:         1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: HT1fEDOq8/19Zq6f6PVo6mXcK+Cyn8oRhdQmN0EvcHs=)
                          2: uZUj605EbQuLLmDhIGYJBIbMOqc.roa (hash: 50VcK1tqnjE/JlOLPdg4sk24p7Wrw6D6UQSl3XM780U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:a2:95:03:50:92:ab:c6:70:e5:61:f8:bb:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
        Validity
            Not Before: Jun  7 08:00:17 2025 GMT
            Not After : Jun  8 08:00:17 2025 GMT
        Subject: CN=d8ccaa4594f94d9aad58088a79e96214e1a61a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:fc:b0:13:07:c8:01:b7:07:4a:26:c6:23:
                    19:b7:ed:f8:c3:5d:b9:f0:e1:6b:dd:67:b8:e9:4a:
                    e0:66:99:66:95:8c:1f:c7:d1:3d:9f:64:43:13:74:
                    ac:bc:2e:0e:11:6a:d8:3c:6e:5c:9c:06:33:a8:05:
                    62:0e:35:d1:7f:0c:30:88:b8:b8:17:79:20:3d:c8:
                    f7:20:3b:18:c9:e3:48:14:56:d2:1d:87:68:90:1f:
                    1b:e4:67:9e:ec:0a:2f:65:9a:46:48:39:72:5b:dc:
                    cd:bb:87:87:b5:7f:e3:f3:4a:28:b1:b6:c0:8d:58:
                    76:af:7e:86:7b:d5:c0:6d:5a:71:4e:27:48:51:ea:
                    be:2e:75:38:c4:69:be:1e:6e:f7:d1:29:ce:85:ae:
                    9f:d4:b7:60:25:5f:df:05:77:51:69:a8:5f:6c:2c:
                    a8:ea:e3:bd:a9:58:e5:1c:fa:1b:4c:39:9d:93:3e:
                    6e:97:ce:f8:d2:b7:5a:f7:3b:ea:ba:68:b6:a0:bf:
                    97:66:f6:7a:0e:de:05:f6:20:2a:7c:eb:25:01:0c:
                    ea:8b:58:17:0c:e0:bf:e2:c8:19:34:bb:33:8a:55:
                    db:c1:42:7d:93:38:b6:2e:34:50:6b:7a:62:0c:13:
                    79:5b:9e:87:98:e2:fc:4a:52:e1:27:b9:33:7c:77:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CC:AA:45:94:F9:4D:9A:AD:58:08:8A:79:E9:62:14:E1:A6:1A:25
            X509v3 Authority Key Identifier:
                keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:54:e4:36:14:03:5d:f7:a8:32:7b:20:3d:73:f9:0a:f0:35:
         f6:3c:4a:7c:1a:fc:2b:61:28:b9:5b:c4:d7:13:81:93:af:54:
         0c:a5:76:0a:cf:3a:07:ed:4d:be:bf:38:d3:f1:8b:c9:1e:a8:
         fc:95:8b:19:d5:19:e4:99:83:c9:e7:7b:93:a8:6f:eb:b8:3d:
         16:70:68:78:5a:45:96:f1:f5:bc:4f:f8:f6:eb:ce:4c:c2:34:
         c5:3c:01:8b:d6:c9:58:c0:2a:f4:a2:cd:5e:28:72:c4:a8:2e:
         fe:69:ef:a8:57:b4:6e:e3:a7:64:e3:97:b9:61:50:a8:85:49:
         a9:6d:36:9e:76:ff:b0:63:3e:f9:1b:90:18:5d:fb:1a:b9:58:
         86:cb:38:c5:80:e9:25:f6:18:9b:f4:8c:c1:9b:50:7e:e7:dd:
         3b:fe:d9:c0:87:e4:ba:49:8e:9a:98:36:72:7a:c1:c9:38:37:
         ac:33:94:12:3a:75:3e:9e:e2:2a:86:f8:dd:56:39:94:7e:bf:
         8e:85:0f:95:e4:c3:20:fe:12:76:33:0a:6c:d4:47:07:bf:e5:
         16:43:9b:e3:a3:23:08:97:49:51:2c:2f:cf:f7:02:fa:3f:4d:
         12:5f:59:75:db:0c:29:6c:40:81:24:dd:5b:6d:cc:66:4f:ae:
         86:13:c6:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ6KVA1CSq8Zw5WH4u4BhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2E1MzA1Mzg0MWU2MmYzNzg3MzAyYmQzYjNkYzE3YWU4
MzQ3YTMwHhcNMjUwNjA3MDgwMDE3WhcNMjUwNjA4MDgwMDE3WjAzMTEwLwYDVQQD
EyhkOGNjYWE0NTk0Zjk0ZDlhYWQ1ODA4OGE3OWU5NjIxNGUxYTYxYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOf8sBMHyAG3B0omxiMZt+34w125
8OFr3We46UrgZplmlYwfx9E9n2RDE3SsvC4OEWrYPG5cnAYzqAViDjXRfwwwiLi4
F3kgPcj3IDsYyeNIFFbSHYdokB8b5Gee7AovZZpGSDlyW9zNu4eHtX/j80oosbbA
jVh2r36Ge9XAbVpxTidIUeq+LnU4xGm+Hm730SnOha6f1LdgJV/fBXdRaahfbCyo
6uO9qVjlHPobTDmdkz5ul8740rda9zvqumi2oL+XZvZ6Dt4F9iAqfOslAQzqi1gX
DOC/4sgZNLszilXbwUJ9kzi2LjRQa3piDBN5W56HmOL8SlLhJ7kzfHcm8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjMqkWU+U2arVgIinnpYhThpholMB8GA1UdIwQY
MBaAFOJ6UwU4QeYvN4cwK9Oz3Beug0ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWIt
Y2FlZGJkNzE0MGU5LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWItY2FlZGJkNzE0MGU5
LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFTkNhQD
XfeoMnsgPXP5CvA19jxKfBr8K2EouVvE1xOBk69UDKV2Cs86B+1Nvr840/GLyR6o
/JWLGdUZ5JmDyed7k6hv67g9FnBoeFpFlvH1vE/49uvOTMI0xTwBi9bJWMAq9KLN
XihyxKgu/mnvqFe0buOnZOOXuWFQqIVJqW02nnb/sGM++RuQGF37GrlYhss4xYDp
JfYYm/SMwZtQfufdO/7ZwIfkukmOmpg2cnrByTg3rDOUEjp1Pp7iKob43VY5lH6/
joUPleTDIP4SdjMKbNRHB7/lFkOb46MjCJdJUSwvz/cC+j9NEl9ZddsMKWxAgSTd
W23MZk+uhhPGfA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:31 2025 by rpki-client