Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          ufGK3XYLIy/nGXDuXFctD8nJJYp2TjQQVeXnwmEx+Os=
Subject key identifier:   8D:94:99:21:D4:47:C7:C1:3A:B3:5A:0B:B5:7E:FB:E2:3A:DB:2C:7C
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       0197469E6353BA3764E9751154C671E94175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          0698
Signing time:             Fri 06 Jun 2025 19:01:14 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:14 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:14 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: q3Bx6DJGls1VS4KxDdOF2KUxxFUEqG1Nal0NbGtSngM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:63:53:ba:37:64:e9:75:11:54:c6:71:e9:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Jun  6 19:01:14 2025 GMT
            Not After : Jun  7 19:01:14 2025 GMT
        Subject: CN=8d949921d447c7c13ab35a0bb57efbe23adb2c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:f1:69:b6:d4:3a:61:e7:69:c7:74:19:a9:
                    e4:3f:bd:f9:8c:e4:f3:5b:09:6c:b6:62:fe:e5:77:
                    4e:3a:58:bd:2b:07:87:93:2b:52:83:83:65:6e:4e:
                    50:57:f8:5d:f6:b8:a5:97:2c:cf:b0:53:07:09:7f:
                    f9:03:9b:67:82:9a:c0:01:82:b0:d1:6a:d4:f0:09:
                    43:b3:57:0b:b7:bc:7f:58:fd:1d:01:ee:31:4d:e4:
                    4b:b9:bf:84:54:ba:de:9e:83:09:6a:ff:0f:7b:2d:
                    19:f5:77:b6:5a:18:0b:b7:22:d4:44:de:96:04:b3:
                    75:d3:fe:87:02:98:1b:f3:b1:9d:13:a3:68:ca:5e:
                    32:60:69:79:d3:02:9b:92:aa:bf:84:91:57:12:aa:
                    78:69:01:59:04:fd:43:34:26:f3:b8:c1:48:a2:5f:
                    0f:4d:55:85:9c:ce:0d:db:17:50:e5:de:7a:e3:2d:
                    fe:56:43:13:9d:7d:7f:35:89:dd:07:fc:1d:2e:1e:
                    95:33:3d:10:77:6c:cc:86:a3:f0:aa:57:56:84:95:
                    56:a8:a6:b2:8e:7b:97:4a:2d:b0:98:7f:4e:97:c7:
                    f7:12:6b:1a:f0:3e:fa:3d:a4:e5:9d:9e:32:fc:a8:
                    ce:98:31:ec:39:6d:48:00:4f:92:d3:69:3e:0f:b7:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:99:21:D4:47:C7:C1:3A:B3:5A:0B:B5:7E:FB:E2:3A:DB:2C:7C
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:64:a8:2d:19:13:aa:fa:05:1d:bd:36:c7:10:8e:7a:d7:
         16:e9:2f:45:37:d7:b1:1a:08:b2:30:fb:e9:5a:f4:28:66:3b:
         0a:d8:73:17:f2:62:74:1f:d8:18:99:44:a0:9f:9d:8b:2c:ef:
         da:ad:34:f9:63:5a:0f:e6:69:41:4e:95:8d:98:d2:5b:b1:52:
         6b:59:03:38:2b:d1:e1:2b:5e:05:eb:69:78:65:e6:de:46:aa:
         b9:b1:bc:c5:ee:ea:bb:d9:c1:b9:89:f1:1a:6f:ee:00:e9:8b:
         b1:fd:c9:b0:51:2e:69:8c:4b:52:fc:17:00:ac:96:ab:f9:63:
         07:9b:9c:17:f6:21:c3:92:fd:35:21:1e:00:ee:b8:a9:67:e8:
         31:7a:54:b3:a9:0e:e2:9a:dc:ca:e4:27:a1:8c:48:78:ff:bc:
         ab:c3:dd:29:5a:39:be:d5:78:b9:06:f5:eb:1f:9a:2f:86:4d:
         a2:00:ed:52:8f:de:42:16:3c:e5:53:50:1c:3b:d4:3a:40:89:
         a6:5c:e7:09:98:1b:99:3b:02:e6:f9:c6:c6:5a:16:38:e2:16:
         0f:a4:71:a9:b3:54:e1:4e:30:ae:5d:05:41:3b:b7:03:d8:a4:
         f6:fc:85:f6:6e:d0:dc:11:3c:d0:6e:38:06:f3:4e:b5:b1:dd:
         dc:15:58:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnmNTujdk6XURVMZx6UF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDQwM2Q5MzhkNzFiZGM1YTNhY2IwNzZkMzJhZjgyODNi
ZTYyN2MwHhcNMjUwNjA2MTkwMTE0WhcNMjUwNjA3MTkwMTE0WjAzMTEwLwYDVQQD
Eyg4ZDk0OTkyMWQ0NDdjN2MxM2FiMzVhMGJiNTdlZmJlMjNhZGIyYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJLxabbUOmHnacd0GankP735jOTz
WwlstmL+5XdOOli9KweHkytSg4Nlbk5QV/hd9rillyzPsFMHCX/5A5tngprAAYKw
0WrU8AlDs1cLt7x/WP0dAe4xTeRLub+EVLrenoMJav8Pey0Z9Xe2WhgLtyLURN6W
BLN10/6HApgb87GdE6Noyl4yYGl50wKbkqq/hJFXEqp4aQFZBP1DNCbzuMFIol8P
TVWFnM4N2xdQ5d564y3+VkMTnX1/NYndB/wdLh6VMz0Qd2zMhqPwqldWhJVWqKay
jnuXSi2wmH9Ol8f3Emsa8D76PaTlnZ4y/KjOmDHsOW1IAE+S02k+D7d0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2UmSHUR8fBOrNaC7V+++I62yx8MB8GA1UdIwQY
MBaAFHjUA9k41xvcWjrLB20yr4KDvmJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTct
YTFhNzcxOWY5ODhiLzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTctYTFhNzcxOWY5ODhi
LzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMtkqC0Z
E6r6BR29NscQjnrXFukvRTfXsRoIsjD76Vr0KGY7CthzF/JidB/YGJlEoJ+diyzv
2q00+WNaD+ZpQU6VjZjSW7FSa1kDOCvR4SteBetpeGXm3kaqubG8xe7qu9nBuYnx
Gm/uAOmLsf3JsFEuaYxLUvwXAKyWq/ljB5ucF/Yhw5L9NSEeAO64qWfoMXpUs6kO
4prcyuQnoYxIeP+8q8PdKVo5vtV4uQb16x+aL4ZNogDtUo/eQhY85VNQHDvUOkCJ
plznCZgbmTsC5vnGxloWOOIWD6RxqbNU4U4wrl0FQTu3A9ik9vyF9m7Q3BE80G44
BvNOtbHd3BVYHg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:41 2025 by rpki-client