Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
File:                     0EtupigXnKOg5Bv_ruotM6VUYd4.mft (raw, json)
Hash identifier:          pWJCa3LG9eEF4llS7oHCxlGMxY4jEFRhXBsM8GVf09k=
Subject key identifier:   B3:68:64:11:98:D5:B2:62:79:AC:5E:AD:DA:7F:2E:2D:D7:96:2B:00
Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE
Certificate issuer:       /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
Certificate serial:       01975DCAE8F59BA3E3479766548FFB47EC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
Manifest number:          37
Signing time:             Wed 11 Jun 2025 07:01:08 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:08 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:08 +0000
Files and hashes:         1: 0EtupigXnKOg5Bv_ruotM6VUYd4.crl (hash: Kv6csY9oHa0oZZrTxC+Tr4sHO3aYQURvCdHMDEfk17g=)
                          2: 1-XjcgxPBlCdT6xkSyh2YSHlHr8c.roa (hash: TMzItRD9NOGFOwDM/LKIt7JF4ab7923oNjQ2Ls9AlQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:ca:e8:f5:9b:a3:e3:47:97:66:54:8f:fb:47:ec:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
        Validity
            Not Before: Jun 11 07:01:08 2025 GMT
            Not After : Jun 12 07:01:08 2025 GMT
        Subject: CN=b368641198d5b26279ac5eadda7f2e2dd7962b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:8d:94:1b:56:ad:33:b7:15:0e:b5:24:16:
                    df:b3:b6:a3:c3:4f:bb:0b:33:79:53:46:8a:4d:e2:
                    1a:55:15:c3:66:c9:48:f5:4a:20:2c:87:84:da:23:
                    a4:3b:d7:f3:f2:5e:f2:5a:fa:58:87:b4:85:16:b2:
                    c7:ff:0e:1f:29:00:ef:8d:71:b1:05:63:fe:3a:ef:
                    1c:6a:8c:93:f4:3a:92:09:d7:cc:0e:09:cf:c5:c8:
                    ef:bd:12:4c:28:28:6d:03:e3:15:bb:27:31:fc:9a:
                    16:ff:1f:62:84:47:57:84:83:35:e7:7e:02:dc:d0:
                    5d:0e:a1:4e:11:73:3f:2d:97:25:46:d6:5d:10:55:
                    5a:41:82:0f:4f:60:2f:de:d3:d1:13:96:90:ee:69:
                    fb:6e:23:93:18:96:ef:a1:8e:4e:a2:a1:c7:36:50:
                    d2:6f:9c:c6:e8:7b:eb:e4:3f:54:d3:3c:4c:18:68:
                    f6:c4:b2:cd:34:3d:b8:19:3f:ea:54:12:84:20:2f:
                    9a:0a:26:e4:17:d8:d7:8b:14:4e:59:22:66:a6:6b:
                    24:cf:fe:5e:11:e3:f0:54:fc:50:f4:ad:62:9c:26:
                    90:81:7e:bd:e5:13:c2:7f:c7:73:c7:b4:a9:e1:43:
                    f6:cc:48:fb:a8:36:a2:bb:78:e1:a6:35:7a:47:81:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:64:11:98:D5:B2:62:79:AC:5E:AD:DA:7F:2E:2D:D7:96:2B:00
            X509v3 Authority Key Identifier:
                keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:40:39:f0:b5:bf:ee:06:8e:82:8a:30:cf:eb:be:b3:52:
         d3:e9:9a:d9:61:b6:49:5b:ec:64:b0:d5:4f:da:b1:32:49:98:
         16:00:40:3a:20:9f:52:ae:5e:84:41:ee:e3:3d:b7:26:d1:f9:
         00:6c:c8:08:74:53:77:60:40:c9:2b:fb:9e:c5:a6:da:da:43:
         61:3b:f6:3b:56:02:c4:df:40:e5:ef:8d:72:65:20:2d:72:98:
         ba:5b:5a:ff:f9:d0:bb:27:a6:ac:0f:4a:29:f1:24:e5:f8:02:
         e9:eb:b9:99:8e:4c:6e:12:22:b5:f4:ca:dc:c3:39:39:38:d3:
         0f:5d:d2:7b:fb:ec:9b:61:5c:92:df:b3:ae:86:24:9d:da:fd:
         9e:9e:f7:cd:53:98:15:80:17:cd:6b:f2:fd:d1:26:63:3a:4c:
         15:91:d4:33:f9:69:a1:a7:c5:c6:8a:a9:83:e4:13:66:e3:3f:
         3a:8c:f9:98:1a:fe:ca:a4:1b:e6:65:b8:a8:54:8a:43:d2:29:
         f7:20:38:d8:24:f7:93:22:03:4f:d8:ac:76:d8:85:5a:1a:91:
         88:e4:6a:2e:60:aa:ec:de:52:7b:fc:42:a1:3d:83:ac:a3:0d:
         4b:b0:1a:48:7f:81:c2:33:0a:d6:c9:ec:44:7f:b6:45:ba:fe:
         8b:65:be:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyuj1m6PjR5dmVI/7R+yNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNGI2ZWE2MjgxNzljYTNhMGU0MWJmZmFlZWEyZDMzYTU1
NDYxZGUwHhcNMjUwNjExMDcwMTA4WhcNMjUwNjEyMDcwMTA4WjAzMTEwLwYDVQQD
EyhiMzY4NjQxMTk4ZDViMjYyNzlhYzVlYWRkYTdmMmUyZGQ3OTYyYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLyNlBtWrTO3FQ61JBbfs7ajw0+7
CzN5U0aKTeIaVRXDZslI9UogLIeE2iOkO9fz8l7yWvpYh7SFFrLH/w4fKQDvjXGx
BWP+Ou8caoyT9DqSCdfMDgnPxcjvvRJMKChtA+MVuycx/JoW/x9ihEdXhIM1534C
3NBdDqFOEXM/LZclRtZdEFVaQYIPT2Av3tPRE5aQ7mn7biOTGJbvoY5OoqHHNlDS
b5zG6Hvr5D9U0zxMGGj2xLLNND24GT/qVBKEIC+aCibkF9jXixROWSJmpmskz/5e
EePwVPxQ9K1inCaQgX695RPCf8dzx7Sp4UP2zEj7qDaiu3jhpjV6R4GJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNoZBGY1bJieaxerdp/Li3XlisAMB8GA1UdIwQY
MBaAFNBLbqYoF5yjoOQb/67qLTOlVGHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4Yzct
ZWNjNzIyZjlkN2ZmLzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4YzctZWNjNzIyZjlkN2Zm
LzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaxAOfC1
v+4GjoKKMM/rvrNS0+ma2WG2SVvsZLDVT9qxMkmYFgBAOiCfUq5ehEHu4z23JtH5
AGzICHRTd2BAySv7nsWm2tpDYTv2O1YCxN9A5e+NcmUgLXKYulta//nQuyemrA9K
KfEk5fgC6eu5mY5MbhIitfTK3MM5OTjTD13Se/vsm2Fckt+zroYkndr9np73zVOY
FYAXzWvy/dEmYzpMFZHUM/lpoafFxoqpg+QTZuM/Ooz5mBr+yqQb5mW4qFSKQ9Ip
9yA42CT3kyIDT9isdtiFWhqRiORqLmCq7N5Se/xCoT2DrKMNS7AaSH+BwjMK1sns
RH+2Rbr+i2W+pg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:46:34 2025 by rpki-client