Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          24uqlz+GECe3jdnZDCwZkYqXuQeAO+39/wXEWLYPZSw=
Subject key identifier:   1E:40:B1:71:8D:06:9C:37:B7:13:30:00:02:C3:51:DF:CD:A5:B0:95
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       01974EC53EC83D283DCF4DEEE6C00F2648CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          0D8D
Signing time:             Sun 08 Jun 2025 09:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 09:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 09:00:38 +0000
Files and hashes:         1: Z7fNj1YJ8aSn3r_MEyl5vIDYUPE.roa (hash: WsvnlIuXrT6wZCrahcudQBBAK43k6FKEOxnr2kwJ0Ew=)
                          2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: YfT2dLGM1QHRbTVMlwZ0pUap7Ky6RuTqz7UcPhmzbk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:c5:3e:c8:3d:28:3d:cf:4d:ee:e6:c0:0f:26:48:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Jun  8 09:00:38 2025 GMT
            Not After : Jun  9 09:00:38 2025 GMT
        Subject: CN=1e40b1718d069c37b713300002c351dfcda5b095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:d0:af:8c:08:54:d9:18:fe:bd:5c:4c:4a:
                    74:24:6b:68:9a:e3:60:27:a6:5a:82:25:97:4e:21:
                    1f:69:9a:d0:ca:ff:9d:1c:3e:62:e6:85:f6:1e:38:
                    e8:fb:f4:7f:26:34:00:1a:20:d2:f0:ac:14:a2:e8:
                    b4:fc:f4:81:ac:c1:e7:be:14:a5:c8:89:87:af:7b:
                    19:66:3d:a7:3e:cf:7c:b7:f3:37:b0:2f:83:d3:10:
                    55:96:8b:3f:44:0e:02:5b:1b:87:ad:0f:02:fe:29:
                    7c:22:8d:91:5d:23:ea:7f:cf:ac:ce:89:ba:7f:b8:
                    bb:02:40:3c:f5:c5:8b:52:b1:13:81:7b:89:21:05:
                    f1:56:c6:6c:23:a0:bf:a6:30:b7:85:8e:e2:bb:72:
                    5b:83:6f:1f:95:91:34:49:39:37:e5:9b:a7:5e:b8:
                    77:10:db:59:70:8d:f0:cd:76:4b:a8:59:94:be:bd:
                    d8:38:9f:0a:52:de:30:7e:e9:70:04:d1:b0:eb:b3:
                    98:32:28:32:95:41:d1:47:c5:22:3e:74:47:96:3b:
                    0f:c8:63:91:08:61:37:e5:47:b9:61:85:90:c6:c5:
                    a3:98:56:77:a4:86:4e:3e:62:ac:ec:51:dc:fe:bc:
                    b0:55:21:02:63:5b:76:10:a6:df:ea:98:f8:aa:5d:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:B1:71:8D:06:9C:37:B7:13:30:00:02:C3:51:DF:CD:A5:B0:95
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0c:fc:e1:37:48:13:c0:b5:c6:d6:8d:bd:16:46:38:19:7e:
         5f:eb:90:2f:35:d7:14:61:54:af:31:b1:e3:05:ba:39:80:b7:
         cd:03:8c:dc:cc:93:d9:ae:4c:b7:3e:ad:57:95:6b:09:57:77:
         f5:44:ad:ad:13:34:79:b4:06:6c:92:00:ce:9e:38:aa:18:c9:
         42:a5:96:d0:8c:12:b7:9c:49:43:24:93:4c:5c:7e:e4:11:e8:
         cc:ca:ba:46:31:75:a5:f8:96:80:25:24:d4:e5:c9:82:3d:86:
         e4:28:e3:d8:30:9b:30:f8:a0:4b:8f:73:54:36:27:72:85:75:
         e5:f8:ad:02:02:b5:3b:77:36:40:c4:4a:80:07:ff:44:fe:92:
         90:12:ec:58:14:c8:b8:91:2a:f2:f1:d3:09:5a:2c:37:df:60:
         32:77:20:83:4e:43:6b:56:49:9d:c2:ec:5b:e8:70:6f:d8:ef:
         1b:6d:da:95:c0:57:fe:6f:ce:8f:c7:96:f7:29:bc:62:e3:f3:
         99:22:c2:a0:cd:fe:22:d7:1e:2a:78:42:d1:28:51:be:3d:c2:
         a8:87:e0:81:d2:b6:88:06:b9:24:40:e1:b4:c8:b5:f7:cb:89:
         04:1a:74:7a:ba:e2:95:eb:13:8d:1d:67:14:f0:2a:b6:59:af:
         fe:b7:20:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxT7IPSg9z03u5sAPJkjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl
ZTJjZmYwHhcNMjUwNjA4MDkwMDM4WhcNMjUwNjA5MDkwMDM4WjAzMTEwLwYDVQQD
EygxZTQwYjE3MThkMDY5YzM3YjcxMzMwMDAwMmMzNTFkZmNkYTViMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q7Qr4wIVNkY/r1cTEp0JGtomuNg
J6ZagiWXTiEfaZrQyv+dHD5i5oX2Hjjo+/R/JjQAGiDS8KwUoui0/PSBrMHnvhSl
yImHr3sZZj2nPs98t/M3sC+D0xBVlos/RA4CWxuHrQ8C/il8Io2RXSPqf8+szom6
f7i7AkA89cWLUrETgXuJIQXxVsZsI6C/pjC3hY7iu3Jbg28flZE0STk35ZunXrh3
ENtZcI3wzXZLqFmUvr3YOJ8KUt4wfulwBNGw67OYMigylUHRR8UiPnRHljsPyGOR
CGE35Ue5YYWQxsWjmFZ3pIZOPmKs7FHc/rywVSECY1t2EKbf6pj4ql06JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5AsXGNBpw3txMwAALDUd/NpbCVMB8GA1UdIwQY
MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt
NGZlM2Y2MTExMGRlLzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl
LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAz84TdI
E8C1xtaNvRZGOBl+X+uQLzXXFGFUrzGx4wW6OYC3zQOM3MyT2a5Mtz6tV5VrCVd3
9UStrRM0ebQGbJIAzp44qhjJQqWW0IwSt5xJQySTTFx+5BHozMq6RjF1pfiWgCUk
1OXJgj2G5Cjj2DCbMPigS49zVDYncoV15fitAgK1O3c2QMRKgAf/RP6SkBLsWBTI
uJEq8vHTCVosN99gMncgg05Da1ZJncLsW+hwb9jvG23alcBX/m/Oj8eW9ym8YuPz
mSLCoM3+ItceKnhC0ShRvj3CqIfggdK2iAa5JEDhtMi198uJBBp0errilesTjR1n
FPAqtlmv/rcgcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:28:29 2025 by rpki-client