Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          W9esKnyweuiCLuF7qEJzc1TmQnOUrMTAIjhr7jnyGXU=
Subject key identifier:   27:08:54:01:89:B3:D4:D1:5C:4B:CA:B3:79:CA:E4:C9:98:93:C3:AF
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       019738E21A33EC026CD4D4EE6A3980CBB0E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          1573
Signing time:             Wed 04 Jun 2025 03:00:31 +0000
Manifest this update:     Wed 04 Jun 2025 03:00:31 +0000
Manifest next update:     Thu 05 Jun 2025 03:00:31 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: vXYaAyvDQ3EnkHrJYm9KsA/3zVQwrclUoicMSnhSd6w=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:38:e2:1a:33:ec:02:6c:d4:d4:ee:6a:39:80:cb:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Jun  4 03:00:31 2025 GMT
            Not After : Jun  5 03:00:31 2025 GMT
        Subject: CN=2708540189b3d4d15c4bcab379cae4c99893c3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:60:6e:f8:e0:ac:21:a5:2b:2e:84:a2:b8:
                    24:83:58:5b:dc:10:9e:57:e9:9e:12:e0:2f:15:86:
                    57:fd:7b:5f:86:d5:fb:0c:30:57:14:b2:24:fe:48:
                    03:e4:a9:08:78:c4:b5:9c:9c:33:53:e9:a8:5f:ad:
                    87:48:48:d8:ba:c9:45:b9:37:19:8b:92:05:e6:cd:
                    17:41:fe:4a:e3:39:5d:87:70:f4:99:31:d8:ef:34:
                    cd:21:b2:8a:79:17:ab:e9:7c:11:fc:59:a9:98:13:
                    03:61:0e:79:42:40:6e:3b:dd:02:60:b2:d9:cf:bd:
                    93:f7:c7:88:36:52:8f:19:dc:3a:ea:f1:28:87:f7:
                    b7:eb:99:40:26:40:07:50:49:65:2f:7f:45:eb:b0:
                    eb:26:56:44:6c:e2:2c:b7:5c:6d:ab:dc:ea:25:17:
                    80:7c:dd:3e:8a:95:d5:51:a2:5e:15:7c:72:e1:b5:
                    21:ea:06:39:ff:e5:30:47:b8:b4:d5:99:67:53:fe:
                    a7:4a:7c:22:9f:5a:fc:cc:46:55:03:b1:e0:c9:4a:
                    ad:3e:77:17:f0:ba:45:d8:04:27:31:c1:9b:91:48:
                    ec:c0:42:89:95:95:5a:5f:f0:d6:2a:09:9b:23:74:
                    e5:6e:45:fc:ee:8c:c8:c7:73:41:33:34:c5:f7:4b:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:54:01:89:B3:D4:D1:5C:4B:CA:B3:79:CA:E4:C9:98:93:C3:AF
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fc:bd:08:ad:86:b8:2c:26:41:89:fd:7f:3c:de:f3:d4:d8:
         95:70:95:9d:5a:73:f4:2f:ce:58:18:fd:d6:2d:6b:9f:8c:0f:
         34:96:67:9a:2c:55:d4:e7:53:16:7e:7c:7a:4f:a9:46:32:c6:
         e5:a2:3b:68:fc:36:a8:08:ad:f1:6c:9f:41:11:c1:43:6f:e4:
         2a:3a:f3:c5:9c:c3:ba:17:a5:25:a2:0f:26:23:53:60:22:81:
         65:09:6b:13:4b:9f:b3:d0:49:be:fe:50:7f:9d:17:7f:c5:a6:
         81:e3:a6:a6:38:93:6c:4b:39:c7:cb:bf:2b:67:48:d0:4e:f3:
         f0:69:e6:16:74:7e:13:32:ef:67:97:44:90:ef:6d:2c:4e:55:
         ac:2c:2e:9b:f8:fb:2d:67:a9:79:85:58:4d:c2:bd:3e:07:a0:
         6f:00:42:2c:b4:cb:5e:49:0c:a3:1d:bf:a7:d4:f5:db:6e:bd:
         75:be:d4:e0:cc:49:9b:c7:16:6e:46:84:aa:b8:65:3e:c8:b2:
         67:8b:c7:00:d8:65:d3:1b:a0:00:78:43:ce:c0:80:77:b6:c3:
         ce:a7:9c:84:45:4f:e8:ba:56:1c:a3:b3:d7:8c:8f:cf:56:e3:
         6e:8c:6d:c4:67:7f:38:95:8e:23:92:0c:cf:10:e1:1b:13:cf:
         ee:0c:b8:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc44hoz7AJs1NTuajmAy7DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExOGJhNGVmOTAxYWFjMTA4NzZjY2Y5NzZhNWY3ZDE2YzRj
YTc5ZjAwHhcNMjUwNjA0MDMwMDMxWhcNMjUwNjA1MDMwMDMxWjAzMTEwLwYDVQQD
EygyNzA4NTQwMTg5YjNkNGQxNWM0YmNhYjM3OWNhZTRjOTk4OTNjM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pJgbvjgrCGlKy6Eorgkg1hb3BCe
V+meEuAvFYZX/XtfhtX7DDBXFLIk/kgD5KkIeMS1nJwzU+moX62HSEjYuslFuTcZ
i5IF5s0XQf5K4zldh3D0mTHY7zTNIbKKeRer6XwR/FmpmBMDYQ55QkBuO90CYLLZ
z72T98eINlKPGdw66vEoh/e365lAJkAHUEllL39F67DrJlZEbOIst1xtq9zqJReA
fN0+ipXVUaJeFXxy4bUh6gY5/+UwR7i01ZlnU/6nSnwin1r8zEZVA7HgyUqtPncX
8LpF2AQnMcGbkUjswEKJlZVaX/DWKgmbI3TlbkX87ozIx3NBMzTF90udLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcIVAGJs9TRXEvKs3nK5MmYk8OvMB8GA1UdIwQY
MBaAFBGLpO+QGqwQh2zPl2pffRbEynnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDIt
ZjJiNGVmYmE1OWJjLzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDItZjJiNGVmYmE1OWJj
LzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/y9CK2G
uCwmQYn9fzze89TYlXCVnVpz9C/OWBj91i1rn4wPNJZnmixV1OdTFn58ek+pRjLG
5aI7aPw2qAit8WyfQRHBQ2/kKjrzxZzDuhelJaIPJiNTYCKBZQlrE0ufs9BJvv5Q
f50Xf8WmgeOmpjiTbEs5x8u/K2dI0E7z8GnmFnR+EzLvZ5dEkO9tLE5VrCwum/j7
LWepeYVYTcK9PgegbwBCLLTLXkkMox2/p9T12269db7U4MxJm8cWbkaEqrhlPsiy
Z4vHANhl0xugAHhDzsCAd7bDzqechEVP6LpWHKOz14yPz1bjboxtxGd/OJWOI5IM
zxDhGxPP7gy4vw==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:41:43 2025 by rpki-client