Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File:                     553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier:          swAfBQzfoyaYbumP/CVXh6lc1SRsQGs/On3V8ZgSttc=
Subject key identifier:   7D:15:59:4C:D5:89:54:8B:93:36:C3:E2:0D:5A:49:AC:6D:E1:BB:84
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer:       /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial:       019751C61C37074E7BB4D1D4198D8A005D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number:          0ED1
Signing time:             Sun 08 Jun 2025 23:00:27 +0000
Manifest this update:     Sun 08 Jun 2025 23:00:27 +0000
Manifest next update:     Mon 09 Jun 2025 23:00:27 +0000
Files and hashes:         1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: TiEDVmLEmI0zd1GNJSuscg2T4SLFKTXKiul7QQ/Eypc=)
                          2: Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa (hash: BXNYaUB0Zfc7mvCgmarWMLrgrg5dZOzYs8T6+u6yFW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:c6:1c:37:07:4e:7b:b4:d1:d4:19:8d:8a:00:5d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
        Validity
            Not Before: Jun  8 23:00:27 2025 GMT
            Not After : Jun  9 23:00:27 2025 GMT
        Subject: CN=7d15594cd589548b9336c3e20d5a49ac6de1bb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:7f:59:9b:a2:cd:48:dd:e5:60:8b:fe:5a:
                    82:52:e7:49:a8:2b:97:14:12:f6:86:3a:b5:e8:07:
                    13:0f:95:16:f9:9f:f6:85:ee:33:61:d2:2d:a8:d1:
                    b0:b1:be:b2:a3:4c:75:24:ce:40:2c:9c:d8:9e:a4:
                    23:63:bf:dd:d6:45:a7:8c:a4:45:9e:32:10:d9:34:
                    c0:42:ec:14:a6:2d:4e:3a:ec:4b:33:f8:f0:f3:e7:
                    fa:20:7a:ad:31:f9:e9:80:4c:94:1f:29:ae:fd:e5:
                    b5:83:00:7e:ba:a1:95:53:db:fc:78:b9:cb:57:00:
                    6b:fa:ca:d2:c6:fc:97:89:43:4f:64:39:ac:55:b5:
                    e3:a9:47:f3:20:96:68:79:95:dc:d0:ba:2e:ce:53:
                    18:7b:91:b5:c5:ab:a4:d7:b6:ce:8a:64:cf:52:25:
                    0e:19:15:58:0b:3d:bb:df:6a:da:98:cf:48:3b:34:
                    64:c6:a2:1b:96:c7:7a:ef:dd:63:55:1b:8a:fd:59:
                    99:fd:ca:63:a7:83:6a:ac:07:e3:33:5d:7c:99:e6:
                    e1:f5:c6:f8:00:3a:1e:87:65:3e:67:ee:92:a7:78:
                    16:bd:d2:6e:4c:c0:f0:7b:70:9c:32:62:c4:68:a4:
                    d5:04:8d:9a:1b:9c:d4:88:bb:b0:24:9e:f8:98:a0:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:59:4C:D5:89:54:8B:93:36:C3:E2:0D:5A:49:AC:6D:E1:BB:84
            X509v3 Authority Key Identifier:
                keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:31:68:46:87:61:f1:39:c8:1e:b0:08:40:f2:f2:68:89:9c:
         28:0d:72:c7:9f:99:24:36:ca:f3:80:b3:11:52:c8:1a:3b:46:
         44:e7:d7:41:82:cd:31:21:c5:2b:98:f1:dc:35:b9:c0:36:c6:
         f9:37:5f:cd:66:25:e2:10:d4:05:ad:ec:88:d3:84:7c:af:b3:
         9c:8b:af:3e:67:d8:d8:6c:71:06:74:70:83:0c:1e:9f:67:3e:
         f6:8b:0c:81:33:46:d9:be:e4:12:52:f9:e9:8d:ab:5a:e5:9e:
         23:d6:e4:4a:9b:fa:1a:83:84:e7:48:bb:47:e0:15:d3:10:35:
         a7:0e:4f:e5:38:1d:13:f1:73:bf:b8:91:7d:dd:f7:71:f9:ac:
         45:be:d3:cd:48:3f:c0:7a:68:dd:43:26:69:b1:86:d4:a9:fe:
         93:df:4d:74:ee:7f:04:cf:68:f4:b8:c1:3d:6d:59:94:c5:ec:
         86:d1:33:97:2d:64:aa:10:2f:f7:4c:a2:f7:03:72:67:3f:80:
         ed:de:53:d9:a4:21:a6:55:6d:63:71:f2:12:7b:c9:fb:4f:cc:
         36:49:ac:a7:0b:5a:39:8d:1c:6d:55:90:38:9b:69:e4:b2:08:
         49:ef:5b:bd:6a:02:b6:c5:98:30:06:0e:18:2d:09:76:28:39:
         b8:01:a9:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRxhw3B057tNHUGY2KAF2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWRjNTQzNWEyZGM5N2UzNjVmZjQ5NTcwYzA0ZDUxM2Y2
ZmNlZDIwHhcNMjUwNjA4MjMwMDI3WhcNMjUwNjA5MjMwMDI3WjAzMTEwLwYDVQQD
Eyg3ZDE1NTk0Y2Q1ODk1NDhiOTMzNmMzZTIwZDVhNDlhYzZkZTFiYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9J/WZuizUjd5WCL/lqCUudJqCuX
FBL2hjq16AcTD5UW+Z/2he4zYdItqNGwsb6yo0x1JM5ALJzYnqQjY7/d1kWnjKRF
njIQ2TTAQuwUpi1OOuxLM/jw8+f6IHqtMfnpgEyUHymu/eW1gwB+uqGVU9v8eLnL
VwBr+srSxvyXiUNPZDmsVbXjqUfzIJZoeZXc0LouzlMYe5G1xauk17bOimTPUiUO
GRVYCz2732ramM9IOzRkxqIblsd6791jVRuK/VmZ/cpjp4NqrAfjM118mebh9cb4
ADoeh2U+Z+6Sp3gWvdJuTMDwe3CcMmLEaKTVBI2aG5zUiLuwJJ74mKBh5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0VWUzViVSLkzbD4g1aSaxt4buEMB8GA1UdIwQY
MBaAFOedxUNaLcl+Nl/0lXDATVE/b87SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTUzRlExb3R5WDQyWF9TVmNNQk5VVDl2enRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZTk1YmUtYTM3YS00YzIzLWI5Y2It
NzA2NTU0Zjg4MDQ2LzEvNTUzRlExb3R5WDQyWF9TVmNNQk5VVDl2enRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jZTk1YmUtYTM3YS00YzIzLWI5Y2ItNzA2NTU0Zjg4MDQ2
LzEvNTUzRlExb3R5WDQyWF9TVmNNQk5VVDl2enRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjFoRodh
8TnIHrAIQPLyaImcKA1yx5+ZJDbK84CzEVLIGjtGROfXQYLNMSHFK5jx3DW5wDbG
+TdfzWYl4hDUBa3siNOEfK+znIuvPmfY2GxxBnRwgwwen2c+9osMgTNG2b7kElL5
6Y2rWuWeI9bkSpv6GoOE50i7R+AV0xA1pw5P5TgdE/Fzv7iRfd33cfmsRb7TzUg/
wHpo3UMmabGG1Kn+k99NdO5/BM9o9LjBPW1ZlMXshtEzly1kqhAv90yi9wNyZz+A
7d5T2aQhplVtY3HyEnvJ+0/MNkmspwtaOY0cbVWQOJtp5LIISe9bvWoCtsWYMAYO
GC0Jdig5uAGpsg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:47 2025 by rpki-client