Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File:                     eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier:          /Go4OSASDYKgahuV1wHYGKthq1F7ZDFTjMtL1OhrvLI=
Subject key identifier:   F4:16:12:07:E5:2F:87:7A:49:E2:DA:9E:2D:D4:DA:A7:29:7D:F4:63
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       019749D5981CD6E4310AFFC97752FAE8B8B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number:          1584
Signing time:             Sat 07 Jun 2025 10:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:24 +0000
Files and hashes:         1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
                          2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
                          3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
                          4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
                          5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: yc2r34pwPzhrN16hWtpg3Z1cdbcgjnuI/mFsm0NkRTc=)
                          6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
                          7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
                          8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:98:1c:d6:e4:31:0a:ff:c9:77:52:fa:e8:b8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: Jun  7 10:00:24 2025 GMT
            Not After : Jun  8 10:00:24 2025 GMT
        Subject: CN=f4161207e52f877a49e2da9e2dd4daa7297df463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:2f:22:86:4c:10:b3:97:1a:74:2b:2a:3d:
                    3f:7f:85:4e:07:36:f3:29:25:aa:88:75:f0:93:a4:
                    84:82:77:56:bd:27:1e:a5:87:bf:69:6f:07:51:7e:
                    45:21:d5:51:4d:38:40:9d:d9:3e:7e:67:ed:c5:64:
                    16:0a:e6:c9:11:24:b1:43:c4:97:04:11:94:25:b6:
                    f8:8e:05:8d:c8:22:c5:51:1a:32:5f:73:21:af:53:
                    6b:e4:e8:65:9d:70:a7:67:e9:73:dc:46:d1:c5:40:
                    49:87:0f:df:ff:5c:e3:41:84:e5:75:11:b4:89:e4:
                    9b:9d:86:f8:2e:5e:1d:97:4b:25:c2:1d:8d:36:15:
                    73:ef:06:e7:ce:33:8c:0a:b3:8d:cb:e5:75:79:fa:
                    70:d3:f0:e8:42:b9:51:86:dd:2a:09:2c:72:23:86:
                    14:8c:c2:ae:53:a9:9d:fe:8d:35:34:72:43:22:41:
                    b7:2f:44:8b:6a:d6:1e:c3:e7:8f:84:c3:95:31:d6:
                    30:8a:c6:78:44:86:6c:0b:07:78:78:cd:1d:c6:e5:
                    ad:a0:51:b2:a5:22:3d:d2:bc:b8:fa:25:df:f8:e4:
                    69:f5:08:27:83:63:a3:6d:d5:09:d8:d4:8a:cc:4c:
                    04:89:ae:ce:19:9e:d4:51:7d:49:f7:bb:15:39:03:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:16:12:07:E5:2F:87:7A:49:E2:DA:9E:2D:D4:DA:A7:29:7D:F4:63
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:23:26:92:30:86:c6:0c:b9:8b:3e:25:ba:0f:13:cd:67:4d:
         a0:a7:78:0d:c1:e6:ba:f6:13:c9:fc:54:c3:b0:aa:e2:d4:5d:
         bc:d5:36:78:f5:28:5a:d2:9a:7e:9c:3e:aa:c2:6f:dc:70:7b:
         5f:49:c9:83:50:46:26:22:85:40:9e:6a:e0:22:23:e6:63:76:
         c9:35:80:5e:81:3f:d7:34:95:cc:0a:b9:ad:f1:20:b7:40:1c:
         bb:f5:91:1c:8e:e2:fc:45:c6:91:35:7e:69:3b:96:18:7b:92:
         5a:dd:78:26:19:2e:30:bc:4b:7d:8d:b4:53:29:32:3d:d6:59:
         d7:bb:a5:e0:a1:6a:36:bd:96:d0:48:d5:3d:41:4a:b9:b1:5b:
         cf:7d:02:63:20:9d:b3:71:f6:11:c7:d5:e4:70:3b:04:c9:e3:
         0c:2c:91:09:ac:fb:24:77:69:29:2c:4f:8a:48:12:fa:f6:43:
         88:33:da:0b:3d:ad:4f:59:c1:00:fa:7e:03:26:9a:17:3b:e2:
         01:74:1c:d5:00:d0:4e:b6:79:97:67:47:0d:7a:3d:59:64:62:
         c8:ce:de:8f:ec:26:1d:60:8c:37:0f:fe:23:e9:25:be:23:9f:
         59:a6:3f:34:84:31:1d:d6:c2:16:de:93:e9:bd:87:a8:de:83:
         47:32:57:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1Zgc1uQxCv/Jd1L66LiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjUwNjA3MTAwMDI0WhcNMjUwNjA4MTAwMDI0WjAzMTEwLwYDVQQD
EyhmNDE2MTIwN2U1MmY4NzdhNDllMmRhOWUyZGQ0ZGFhNzI5N2RmNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+8vIoZMELOXGnQrKj0/f4VOBzbz
KSWqiHXwk6SEgndWvScepYe/aW8HUX5FIdVRTThAndk+fmftxWQWCubJESSxQ8SX
BBGUJbb4jgWNyCLFURoyX3Mhr1Nr5OhlnXCnZ+lz3EbRxUBJhw/f/1zjQYTldRG0
ieSbnYb4Ll4dl0slwh2NNhVz7wbnzjOMCrONy+V1efpw0/DoQrlRht0qCSxyI4YU
jMKuU6md/o01NHJDIkG3L0SLatYew+ePhMOVMdYwisZ4RIZsCwd4eM0dxuWtoFGy
pSI90ry4+iXf+ORp9Qgng2OjbdUJ2NSKzEwEia7OGZ7UUX1J97sVOQNzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQWEgflL4d6SeLani3U2qcpffRjMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCMmkjCG
xgy5iz4lug8TzWdNoKd4DcHmuvYTyfxUw7Cq4tRdvNU2ePUoWtKafpw+qsJv3HB7
X0nJg1BGJiKFQJ5q4CIj5mN2yTWAXoE/1zSVzAq5rfEgt0Acu/WRHI7i/EXGkTV+
aTuWGHuSWt14JhkuMLxLfY20UykyPdZZ17ul4KFqNr2W0EjVPUFKubFbz30CYyCd
s3H2EcfV5HA7BMnjDCyRCaz7JHdpKSxPikgS+vZDiDPaCz2tT1nBAPp+AyaaFzvi
AXQc1QDQTrZ5l2dHDXo9WWRiyM7ej+wmHWCMNw/+I+klviOfWaY/NIQxHdbCFt6T
6b2HqN6DRzJXhQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:28:36 2025 by rpki-client