Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
File:                     EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft (raw, json)
Hash identifier:          Tq/w6uzYXJnMEHfrB4YLLJQaY+Pp/2mhxpfK33aHMYE=
Subject key identifier:   C0:A6:20:18:D9:51:23:AB:D2:62:99:48:B1:9E:F5:28:19:A5:98:E3
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Certificate issuer:       /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial:       019747B0E3C319A56318B361E0A594F353AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
Manifest number:          09DF
Signing time:             Sat 07 Jun 2025 00:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:04 +0000
Files and hashes:         1: EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl (hash: jZehlPzmQiMmgConSbx014eG/8p5pNA+2VpunJ8vxl4=)
                          2: R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa (hash: oSyFhN1ovW7xy9oFAp6jlzZPhvsjlMjehmNfek88Rzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:e3:c3:19:a5:63:18:b3:61:e0:a5:94:f3:53:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
        Validity
            Not Before: Jun  7 00:01:04 2025 GMT
            Not After : Jun  8 00:01:04 2025 GMT
        Subject: CN=c0a62018d95123abd2629948b19ef52819a598e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:5f:1a:4a:66:da:85:66:85:52:03:5d:1c:
                    58:b5:aa:56:5b:4f:08:bc:58:5a:44:f3:98:21:11:
                    91:06:b5:e4:a8:d8:4a:5a:a6:81:31:0d:81:ad:29:
                    fd:9e:3f:8c:ca:3d:04:48:49:2d:22:a5:f0:47:ea:
                    e1:d6:a3:b9:82:c3:ea:65:b2:ba:c5:e4:57:c4:bc:
                    9f:29:03:0d:0d:0b:d2:aa:88:0c:23:f7:3d:da:94:
                    bf:6c:c7:ec:c3:b9:2d:70:39:f1:a4:fe:2d:e5:3a:
                    66:93:7c:5d:66:04:9c:74:46:81:0a:ee:05:d8:9d:
                    7e:04:b0:f7:ae:a0:6e:5b:2f:7b:40:dd:49:56:cc:
                    03:2c:f7:52:38:cf:97:4b:72:9a:ef:ca:69:43:f4:
                    29:6b:34:25:ae:41:da:8c:fe:2e:bb:3c:4c:85:b9:
                    03:a8:0f:b9:11:3a:ee:5f:3d:54:31:09:20:9c:ad:
                    6a:0c:7e:c4:67:61:63:1d:15:0e:52:44:16:6a:02:
                    71:b1:80:75:78:46:d7:f4:fe:bf:d4:65:ca:a7:d3:
                    8e:0a:ab:9e:fc:bb:2d:c8:65:46:b5:11:e8:a5:8e:
                    57:1c:21:51:79:15:56:5d:fe:95:1c:bb:0c:0e:7f:
                    d3:9d:86:6b:92:f9:0e:f7:58:94:54:56:fa:16:b7:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:20:18:D9:51:23:AB:D2:62:99:48:B1:9E:F5:28:19:A5:98:E3
            X509v3 Authority Key Identifier:
                keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:bc:84:13:4a:72:30:89:7e:a7:49:c6:55:f9:da:f6:d7:
         96:7c:92:8c:ee:e9:21:62:3e:ee:90:be:e4:13:af:d1:7d:a5:
         4e:8b:73:39:97:44:2f:f2:b5:4c:5d:b3:1e:49:dd:07:63:9b:
         11:b1:d3:72:93:51:29:b3:45:f5:e2:c6:c1:d4:54:9d:5b:8e:
         5f:16:15:e1:68:9c:c8:73:e2:ab:98:b2:a3:62:ac:bd:01:40:
         31:46:6e:3e:b7:36:f8:44:94:c5:dd:be:83:84:c3:a5:09:b9:
         0e:98:0f:d9:37:54:41:4a:d7:a9:f8:8e:34:58:cc:d2:d8:48:
         52:d6:88:c5:40:cd:40:3f:1b:d6:6e:d2:a9:41:34:6a:98:ba:
         93:a0:55:df:f1:bd:62:85:30:cd:5b:34:a9:a3:51:81:49:dc:
         29:c8:21:69:ee:90:22:de:61:8b:8d:56:8e:b2:b4:24:e5:14:
         a4:a3:30:ac:1f:ae:62:f8:74:f6:eb:39:06:dd:7e:95:61:83:
         f6:20:27:da:75:62:79:78:66:0e:d1:a7:aa:cf:3d:00:7a:ba:
         4f:6a:cb:6d:a3:f4:d3:d3:f6:c0:39:db:5a:f7:10:7b:ba:b3:
         86:1c:66:0e:70:c3:78:1e:9e:8d:c2:cf:a4:b8:28:62:8c:d1:
         f0:b3:91:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsOPDGaVjGLNh4KWU81OvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzU3MzhjNmMxM2MyYTA5MmU0YzRhMjFkNWQ1NWMxMGVl
MDVjNWEwHhcNMjUwNjA3MDAwMTA0WhcNMjUwNjA4MDAwMTA0WjAzMTEwLwYDVQQD
EyhjMGE2MjAxOGQ5NTEyM2FiZDI2Mjk5NDhiMTllZjUyODE5YTU5OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdpfGkpm2oVmhVIDXRxYtapWW08I
vFhaRPOYIRGRBrXkqNhKWqaBMQ2BrSn9nj+Myj0ESEktIqXwR+rh1qO5gsPqZbK6
xeRXxLyfKQMNDQvSqogMI/c92pS/bMfsw7ktcDnxpP4t5Tpmk3xdZgScdEaBCu4F
2J1+BLD3rqBuWy97QN1JVswDLPdSOM+XS3Ka78ppQ/QpazQlrkHajP4uuzxMhbkD
qA+5ETruXz1UMQkgnK1qDH7EZ2FjHRUOUkQWagJxsYB1eEbX9P6/1GXKp9OOCque
/LstyGVGtRHopY5XHCFReRVWXf6VHLsMDn/TnYZrkvkO91iUVFb6FrclAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCmIBjZUSOr0mKZSLGe9SgZpZjjMB8GA1UdIwQY
MBaAFBM1c4xsE8KgkuTEoh1dVcEO4FxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpWempHd1R3cUNTNU1TaUhWMVZ3UTdnWEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lODliMDYtOWIyNC00NmExLThlY2Yt
MjQ0YzE3NzZhN2FkLzEvRXpWempHd1R3cUNTNU1TaUhWMVZ3UTdnWEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lODliMDYtOWIyNC00NmExLThlY2YtMjQ0YzE3NzZhN2Fk
LzEvRXpWempHd1R3cUNTNU1TaUhWMVZ3UTdnWEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlC8hBNK
cjCJfqdJxlX52vbXlnySjO7pIWI+7pC+5BOv0X2lTotzOZdEL/K1TF2zHkndB2Ob
EbHTcpNRKbNF9eLGwdRUnVuOXxYV4WicyHPiq5iyo2KsvQFAMUZuPrc2+ESUxd2+
g4TDpQm5DpgP2TdUQUrXqfiONFjM0thIUtaIxUDNQD8b1m7SqUE0api6k6BV3/G9
YoUwzVs0qaNRgUncKcghae6QIt5hi41WjrK0JOUUpKMwrB+uYvh09us5Bt1+lWGD
9iAn2nVieXhmDtGnqs89AHq6T2rLbaP009P2wDnbWvcQe7qzhhxmDnDDeB6ejcLP
pLgoYozR8LORrA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:07 2025 by rpki-client