Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File:                     erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier:          n63mWFM71kgHVmL7B3PpY7HPSP3IceZlvwGfw13h7XY=
Subject key identifier:   7C:98:C5:7E:26:F1:D0:C1:A5:89:F2:BF:B1:E9:AA:0C:7D:45:AB:70
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer:       /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial:       01974BC4A1D6760F27BF53E722830BAAC226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number:          1539
Signing time:             Sat 07 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:07 +0000
Files and hashes:         1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
                          2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: TVZZe9uCqmnVDf0kCX8OoP92KSflTidpMj9nu2XsfD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:a1:d6:76:0f:27:bf:53:e7:22:83:0b:aa:c2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
        Validity
            Not Before: Jun  7 19:01:07 2025 GMT
            Not After : Jun  8 19:01:07 2025 GMT
        Subject: CN=7c98c57e26f1d0c1a589f2bfb1e9aa0c7d45ab70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:40:75:8a:bb:2f:3d:f2:df:f6:13:24:1b:75:
                    4c:2e:72:b7:70:95:cb:6d:6a:e0:07:5d:1b:a8:ad:
                    14:ac:67:f0:9d:2f:55:82:b4:c0:21:62:4b:df:a9:
                    3d:26:fd:b1:a9:6c:3d:cc:8b:b6:d5:fc:7c:8b:6a:
                    96:a1:dc:fa:c2:20:8f:a5:d2:86:2d:db:a5:dc:31:
                    0f:24:22:1f:49:2e:12:6f:5b:57:1f:b0:40:d0:07:
                    82:d2:1c:be:f1:e8:d3:1d:ab:9e:a5:16:0c:e6:87:
                    81:70:3b:a8:77:84:85:58:b1:4f:23:55:8e:8b:48:
                    35:56:d3:4d:60:78:4a:54:6e:3c:5a:ad:5b:9c:c7:
                    09:d5:56:07:e4:45:bc:56:57:93:85:ca:0c:df:97:
                    13:a6:7b:8a:55:2a:68:63:cd:b1:4b:c8:73:1f:00:
                    6e:a1:fd:a9:e7:d2:db:74:4c:3d:85:00:14:6f:74:
                    58:32:0a:2a:13:f0:74:9e:b0:34:25:4c:cc:8b:69:
                    21:7d:e7:5a:c9:cf:16:bc:16:23:e6:b4:af:f8:26:
                    8b:97:86:dc:4a:bc:04:31:e2:a6:13:fb:94:1a:2f:
                    ff:23:01:14:6e:01:12:7b:0b:03:50:92:17:19:59:
                    72:f9:05:0b:5d:c1:7c:4c:5a:3a:0d:04:5e:29:0f:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:C5:7E:26:F1:D0:C1:A5:89:F2:BF:B1:E9:AA:0C:7D:45:AB:70
            X509v3 Authority Key Identifier:
                keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:3c:10:c4:ab:f3:50:60:a6:07:d0:c6:b7:21:24:7b:62:
         c4:a9:f9:3d:31:3e:9a:17:1c:8e:5c:b8:24:65:90:93:1d:1b:
         37:94:d1:4c:35:a6:01:2e:2e:49:6f:e1:b5:0c:c5:52:6f:87:
         ab:e5:84:47:85:70:3e:bc:d8:fb:68:d7:e9:3f:8c:ab:19:a7:
         2e:51:c6:ce:4e:c8:bf:f1:10:96:21:d9:d0:67:d7:e8:95:05:
         30:63:7d:ab:7a:77:bc:bb:a4:6a:db:ad:ab:1d:77:62:e6:1e:
         e8:6a:72:bb:bc:32:f3:e2:44:45:05:cf:bd:fa:f3:0c:0a:89:
         96:90:c7:42:c6:c2:0e:86:02:c9:e0:35:da:c9:7e:f2:ba:20:
         c4:7d:0f:f3:74:cd:98:b4:38:68:a5:6f:41:be:2e:e7:e6:19:
         2a:6f:e8:93:2c:6d:8f:b5:89:e8:72:6b:6f:54:d1:60:1e:a8:
         4b:5c:1a:92:58:f1:c7:b7:d6:1c:d4:a6:c4:27:37:78:29:d8:
         d3:31:f1:cd:86:81:ba:1a:aa:f9:7b:b1:3a:fe:b6:07:52:ec:
         67:a6:fc:bd:5c:6a:c4:94:18:83:2c:e5:32:71:4a:cb:07:8b:
         c7:c2:57:4a:84:34:bc:12:9e:97:65:7c:2a:ea:fb:17:bb:d3:
         5d:17:83:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxKHWdg8nv1PnIoMLqsImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYjc0YjAxMzA3ZjljM2ZhNzU2MTk2Mzg0MTczMTE1ZTY2
ZTZjNTUwHhcNMjUwNjA3MTkwMTA3WhcNMjUwNjA4MTkwMTA3WjAzMTEwLwYDVQQD
Eyg3Yzk4YzU3ZTI2ZjFkMGMxYTU4OWYyYmZiMWU5YWEwYzdkNDVhYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70B1irsvPfLf9hMkG3VMLnK3cJXL
bWrgB10bqK0UrGfwnS9VgrTAIWJL36k9Jv2xqWw9zIu21fx8i2qWodz6wiCPpdKG
Ldul3DEPJCIfSS4Sb1tXH7BA0AeC0hy+8ejTHauepRYM5oeBcDuod4SFWLFPI1WO
i0g1VtNNYHhKVG48Wq1bnMcJ1VYH5EW8VleThcoM35cTpnuKVSpoY82xS8hzHwBu
of2p59LbdEw9hQAUb3RYMgoqE/B0nrA0JUzMi2khfedayc8WvBYj5rSv+CaLl4bc
SrwEMeKmE/uUGi//IwEUbgESewsDUJIXGVly+QULXcF8TFo6DQReKQ/0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyYxX4m8dDBpYnyv7Hpqgx9RatwMB8GA1UdIwQY
MBaAFHq3SwEwf5w/p1YZY4QXMRXmbmxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAt
OWY1Zjc4MzUyNjAwLzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wYzVmNDYtNjJiOC00YWYzLTliMjAtOWY1Zjc4MzUyNjAw
LzEvZXJkTEFUQl9uRC1uVmhsamhCY3hGZVp1YkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABx88EMSr
81BgpgfQxrchJHtixKn5PTE+mhccjly4JGWQkx0bN5TRTDWmAS4uSW/htQzFUm+H
q+WER4VwPrzY+2jX6T+MqxmnLlHGzk7Iv/EQliHZ0GfX6JUFMGN9q3p3vLukatut
qx13YuYe6Gpyu7wy8+JERQXPvfrzDAqJlpDHQsbCDoYCyeA12sl+8rogxH0P83TN
mLQ4aKVvQb4u5+YZKm/okyxtj7WJ6HJrb1TRYB6oS1wakljxx7fWHNSmxCc3eCnY
0zHxzYaBuhqq+XuxOv62B1LsZ6b8vVxqxJQYgyzlMnFKyweLx8JXSoQ0vBKel2V8
Kur7F7vTXReD2A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:02:04 2025 by rpki-client