Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File:                     7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier:          LJsE9z/KDhyX99ZOf3Dw6WtGTLyH9DJDcctQA9FFaXw=
Subject key identifier:   C4:21:65:4A:1E:47:57:1E:C9:D2:7D:44:01:E5:21:DD:2D:8A:4D:20
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer:       /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial:       0197C425F09261800485CBC4A113DB7F6EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number:          035B
Signing time:             Tue 01 Jul 2025 04:01:50 +0000
Manifest this update:     Tue 01 Jul 2025 04:01:50 +0000
Manifest next update:     Wed 02 Jul 2025 04:01:50 +0000
Files and hashes:         1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: fHbkG2KDr9g34tLhq6M9JC0JQikFjRlnncwfE5Z+ovo=)
                          2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
                          3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:25:f0:92:61:80:04:85:cb:c4:a1:13:db:7f:6e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
        Validity
            Not Before: Jul  1 04:01:50 2025 GMT
            Not After : Jul  2 04:01:50 2025 GMT
        Subject: CN=c421654a1e47571ec9d27d4401e521dd2d8a4d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:53:d8:e9:8c:b0:a5:c7:71:3a:42:4d:42:
                    5d:a3:7b:98:53:83:5d:5c:32:1f:03:fa:e1:ca:62:
                    a9:ec:61:ca:1a:1f:52:a4:d7:af:6d:db:a9:17:1a:
                    78:ed:00:57:0d:f6:54:de:7c:6e:9d:43:d8:bc:59:
                    c2:cc:e5:48:e1:04:5c:12:ae:31:69:70:5b:8f:2a:
                    7c:12:a3:a2:40:52:6a:fe:cf:6e:ec:a9:c0:74:f3:
                    b5:e2:63:83:76:ff:8a:5a:80:ef:65:d4:d4:a1:84:
                    38:ac:a5:ab:ce:42:9e:59:8f:46:ff:14:5a:b7:aa:
                    eb:7a:e2:6a:e2:af:c0:63:a6:28:1b:74:5d:ae:d3:
                    38:58:c1:e8:2b:9f:b0:ce:a5:ea:38:75:93:7c:cc:
                    ed:e0:4a:70:ec:bf:9c:10:3a:16:d2:41:6d:78:4a:
                    c2:9f:85:89:41:12:5e:42:0c:1f:b6:54:65:a9:38:
                    9a:88:0c:be:4c:ae:af:a2:8f:44:f1:d1:81:42:8f:
                    24:2e:78:f9:02:97:34:12:9c:f9:4c:9d:6c:4b:0a:
                    25:fb:ef:c4:2e:72:6b:9f:17:82:3c:28:46:69:43:
                    1e:e0:4f:77:8a:1c:37:a9:e7:4d:4a:5c:c3:76:2b:
                    e4:82:14:fe:b9:27:80:82:bd:a3:0b:86:a3:8e:59:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:21:65:4A:1E:47:57:1E:C9:D2:7D:44:01:E5:21:DD:2D:8A:4D:20
            X509v3 Authority Key Identifier:
                keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:96:fe:b5:14:21:0a:1e:75:fd:87:86:bc:e6:6e:2c:43:db:
         5e:b2:6b:e1:27:e7:ff:79:7c:ff:69:6d:eb:33:91:fa:20:9e:
         d8:63:9e:20:a0:94:f1:56:11:0c:a5:62:a7:7b:41:ae:ea:b4:
         bd:d2:d5:3b:e9:21:30:56:bc:43:a4:55:65:70:48:42:9a:5f:
         bd:5d:75:15:8b:bb:78:1f:59:a0:bc:63:79:94:1e:9c:6b:87:
         2d:b5:f8:f3:4c:a0:3c:79:f7:3b:78:34:c7:68:01:a3:c5:57:
         0d:6d:4f:83:20:f7:87:52:0f:95:1e:04:b1:28:fe:58:66:7c:
         8e:08:84:ff:93:bb:86:7a:f4:47:b0:ca:1f:75:db:2b:9c:12:
         d5:d0:a4:6a:c4:ea:aa:c5:3b:0a:e5:b3:41:87:02:83:b5:8e:
         98:cf:69:c2:a6:fe:80:06:09:40:06:a1:13:e7:ec:90:c7:c0:
         66:98:73:ad:bd:28:a0:57:28:4f:48:bd:bd:ff:3d:6d:0b:55:
         9b:38:7c:ee:b0:b1:5a:28:e4:39:a8:bc:5b:be:a8:e3:f1:6c:
         df:3b:19:33:18:8e:33:30:11:e4:c7:2f:36:41:ff:84:46:f8:
         eb:a6:85:42:3e:9d:b5:80:d3:4d:bf:f3:0e:d6:76:66:64:9e:
         4d:e7:da:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJfCSYYAEhcvEoRPbf266MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1
MzY5ZjYwHhcNMjUwNzAxMDQwMTUwWhcNMjUwNzAyMDQwMTUwWjAzMTEwLwYDVQQD
EyhjNDIxNjU0YTFlNDc1NzFlYzlkMjdkNDQwMWU1MjFkZDJkOGE0ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApthT2OmMsKXHcTpCTUJdo3uYU4Nd
XDIfA/rhymKp7GHKGh9SpNevbdupFxp47QBXDfZU3nxunUPYvFnCzOVI4QRcEq4x
aXBbjyp8EqOiQFJq/s9u7KnAdPO14mODdv+KWoDvZdTUoYQ4rKWrzkKeWY9G/xRa
t6rreuJq4q/AY6YoG3RdrtM4WMHoK5+wzqXqOHWTfMzt4Epw7L+cEDoW0kFteErC
n4WJQRJeQgwftlRlqTiaiAy+TK6voo9E8dGBQo8kLnj5Apc0Epz5TJ1sSwol++/E
LnJrnxeCPChGaUMe4E93ihw3qedNSlzDdivkghT+uSeAgr2jC4ajjlml0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQhZUoeR1ceydJ9RAHlId0tik0gMB8GA1UdIwQY
MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt
MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1
LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJb+tRQh
Ch51/YeGvOZuLEPbXrJr4Sfn/3l8/2lt6zOR+iCe2GOeIKCU8VYRDKVip3tBruq0
vdLVO+khMFa8Q6RVZXBIQppfvV11FYu7eB9ZoLxjeZQenGuHLbX480ygPHn3O3g0
x2gBo8VXDW1PgyD3h1IPlR4EsSj+WGZ8jgiE/5O7hnr0R7DKH3XbK5wS1dCkasTq
qsU7CuWzQYcCg7WOmM9pwqb+gAYJQAahE+fskMfAZphzrb0ooFcoT0i9vf89bQtV
mzh87rCxWijkOai8W76o4/Fs3zsZMxiOMzAR5McvNkH/hEb466aFQj6dtYDTTb/z
DtZ2ZmSeTefaZw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:46 2025 by rpki-client