Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File:                     EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier:          qeXzW5mtGnDua/0F1/uXOUPsYgzFZWgisGnO9qoj13s=
Subject key identifier:   C2:26:EF:8E:6F:6E:01:79:66:F6:FD:B4:5B:01:32:07:94:2A:2A:6D
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer:       /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial:       01964C3491ABBA5630DC5DAC4232761E5A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number:          06F3
Signing time:             Sat 19 Apr 2025 04:00:35 +0000
Manifest this update:     Sat 19 Apr 2025 04:00:35 +0000
Manifest next update:     Sun 20 Apr 2025 04:00:35 +0000
Files and hashes:         1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
                          2: 1heB0YuNq-USGUveTj29qvEG1XU.roa (hash: 0NZHYUEHQ1C7qLoCH8KkLUBz6NfTEtAiQEDR0MzkAeo=)
                          3: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (hash: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=)
                          4: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: e66bVSLk3171zFiwyi6D9aqA6TyYzcsD3HKUQpcZh6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:34:91:ab:ba:56:30:dc:5d:ac:42:32:76:1e:5a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
        Validity
            Not Before: Apr 19 04:00:35 2025 GMT
            Not After : Apr 20 04:00:35 2025 GMT
        Subject: CN=c226ef8e6f6e017966f6fdb45b013207942a2a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:76:df:bd:09:54:82:fb:78:4b:b6:8a:5c:
                    18:fa:77:4b:49:41:ca:f3:02:4f:8b:8c:d4:c9:f9:
                    f0:e2:74:50:88:54:bd:f8:9c:3e:03:47:f7:c3:a3:
                    7d:33:c2:e9:bf:ad:82:fe:68:c0:4f:3b:57:ec:3e:
                    00:f4:29:71:63:a4:93:49:42:87:b8:76:22:6c:0d:
                    ce:4f:c2:65:d2:8a:05:9d:ff:36:64:87:bb:ae:6b:
                    25:4c:95:f8:8b:98:19:b3:af:1a:9c:bc:65:ed:97:
                    82:b5:a0:7e:38:e0:92:40:fd:e0:4d:45:e7:5f:c1:
                    07:37:81:ab:47:84:39:ef:8d:7f:9d:2c:38:46:5c:
                    6f:74:d4:a6:42:45:5b:0c:88:a3:03:5b:b6:4f:4d:
                    c0:bd:7c:c2:92:cd:68:24:39:89:c2:84:9c:6b:9a:
                    79:eb:fc:b3:6f:3f:4f:71:51:28:87:21:bf:8e:b9:
                    54:e7:f1:b5:63:a2:1c:d3:16:85:7c:6b:cf:2f:7f:
                    55:ca:1f:99:2a:18:be:cc:57:46:91:e7:aa:98:a5:
                    72:e4:26:cc:e3:c7:f0:5f:12:43:38:62:25:e5:c9:
                    ed:a3:57:4e:16:d5:64:ae:21:63:cd:4a:ba:3e:5c:
                    a9:20:f3:d1:a9:11:f7:77:6e:38:f5:ee:52:b9:b5:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:EF:8E:6F:6E:01:79:66:F6:FD:B4:5B:01:32:07:94:2A:2A:6D
            X509v3 Authority Key Identifier:
                keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:91:72:3c:41:da:95:42:40:ee:c3:96:68:41:37:16:06:fa:
         67:80:7c:ad:9c:99:95:d6:af:19:3d:49:7b:0b:94:60:4e:0d:
         73:72:08:ca:84:57:d2:04:94:27:37:3d:39:6d:71:62:75:4e:
         21:71:31:73:9c:11:fa:4f:fd:f7:8d:5e:f7:2b:81:73:bf:84:
         3e:61:d8:a5:b5:70:09:1d:ce:c5:be:5f:a3:15:a5:d7:c6:73:
         ca:10:e9:f8:92:85:81:bf:df:5f:1f:66:b4:4b:2a:d0:4b:78:
         2f:30:2c:94:2e:ab:e9:28:f9:c9:39:9d:63:c1:28:12:29:23:
         80:c7:26:e4:ed:81:a5:02:9b:0e:bd:47:91:f0:8c:42:9e:05:
         22:70:8b:12:a1:dc:1d:1b:6e:c2:f4:b6:dc:30:21:c4:16:74:
         9b:61:6b:8e:9a:aa:9f:c7:20:74:68:ee:32:99:13:35:41:18:
         87:ba:0c:e4:fe:1f:76:15:21:e1:45:5d:46:cf:88:67:a0:89:
         5e:78:08:16:25:08:d0:8d:e9:7f:51:c4:83:48:1b:3d:16:61:
         14:3c:db:ed:ea:55:db:01:f9:7e:cd:87:da:76:03:83:6f:4c:
         89:70:02:65:6f:b0:39:34:2c:55:19:ff:e0:e8:a1:98:61:0a:
         02:95:ca:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNJGrulYw3F2sQjJ2HlpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx
ZThkYmQwHhcNMjUwNDE5MDQwMDM1WhcNMjUwNDIwMDQwMDM1WjAzMTEwLwYDVQQD
EyhjMjI2ZWY4ZTZmNmUwMTc5NjZmNmZkYjQ1YjAxMzIwNzk0MmEyYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zB2370JVIL7eEu2ilwY+ndLSUHK
8wJPi4zUyfnw4nRQiFS9+Jw+A0f3w6N9M8Lpv62C/mjATztX7D4A9ClxY6STSUKH
uHYibA3OT8Jl0ooFnf82ZIe7rmslTJX4i5gZs68anLxl7ZeCtaB+OOCSQP3gTUXn
X8EHN4GrR4Q5741/nSw4RlxvdNSmQkVbDIijA1u2T03AvXzCks1oJDmJwoSca5p5
6/yzbz9PcVEohyG/jrlU5/G1Y6Ic0xaFfGvPL39Vyh+ZKhi+zFdGkeeqmKVy5CbM
48fwXxJDOGIl5cnto1dOFtVkriFjzUq6PlypIPPRqRH3d2449e5SubVtpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIm745vbgF5Zvb9tFsBMgeUKiptMB8GA1UdIwQY
MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt
M2EzODkzMzJmNzlmLzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm
LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJFyPEHa
lUJA7sOWaEE3Fgb6Z4B8rZyZldavGT1JewuUYE4Nc3IIyoRX0gSUJzc9OW1xYnVO
IXExc5wR+k/9941e9yuBc7+EPmHYpbVwCR3Oxb5foxWl18ZzyhDp+JKFgb/fXx9m
tEsq0Et4LzAslC6r6Sj5yTmdY8EoEikjgMcm5O2BpQKbDr1HkfCMQp4FInCLEqHc
HRtuwvS23DAhxBZ0m2Frjpqqn8cgdGjuMpkTNUEYh7oM5P4fdhUh4UVdRs+IZ6CJ
XngIFiUI0I3pf1HEg0gbPRZhFDzb7epV2wH5fs2H2nYDg29MiXACZW+wOTQsVRn/
4OihmGEKApXKgg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:20 2025 by rpki-client