Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File:                     zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier:          F2F54Kc23cm2tQX8ufhao6kwmQ0jDwOOr2Ee5fxF01o=
Subject key identifier:   76:09:29:7A:5B:C9:C9:17:30:15:F1:46:7C:6E:EE:BF:01:39:59:17
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer:       /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial:       0197CA5E9BA7DF7BC1C22FCA3F0BB9C82259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number:          15C2
Signing time:             Wed 02 Jul 2025 09:01:27 +0000
Manifest this update:     Wed 02 Jul 2025 09:01:27 +0000
Manifest next update:     Thu 03 Jul 2025 09:01:27 +0000
Files and hashes:         1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
                          2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
                          3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: o9zdxPIRxYl7dGkipWAiN8fyx/019jWtY/AWDqjBPZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:5e:9b:a7:df:7b:c1:c2:2f:ca:3f:0b:b9:c8:22:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
        Validity
            Not Before: Jul  2 09:01:27 2025 GMT
            Not After : Jul  3 09:01:27 2025 GMT
        Subject: CN=7609297a5bc9c9173015f1467c6eeebf01395917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:7e:44:98:fc:44:3e:ab:05:b7:30:c6:35:
                    d9:0b:0b:d5:88:1d:66:eb:56:1e:75:b5:82:f3:c6:
                    bb:b3:2b:e7:da:33:b6:19:d7:c7:a8:9f:5d:1e:6b:
                    13:d1:f1:8a:e5:ba:7c:6f:17:1c:3a:5a:59:fe:40:
                    7f:4a:6d:ec:f6:d1:ef:c2:d1:6a:b0:be:ed:e0:07:
                    e5:c9:45:ec:8b:fd:f8:77:d9:58:64:ea:85:fe:48:
                    5b:e6:e4:f1:bd:24:9a:9e:d5:59:f4:8c:7d:1f:e9:
                    45:6e:98:db:61:6e:f7:a9:27:43:1a:3e:28:d9:74:
                    8d:b7:6d:fd:bc:d8:4f:a6:b0:63:3e:1f:f4:47:23:
                    47:34:de:8c:18:7c:12:d5:06:6e:b3:c2:39:96:94:
                    18:cc:32:98:b0:32:59:9e:a5:f8:ce:09:00:ea:44:
                    3e:3f:a5:24:f2:80:b8:6f:eb:25:92:5c:a2:21:85:
                    a7:4b:13:da:c2:59:76:68:19:c1:f4:7c:d9:92:0d:
                    f2:f4:42:86:da:08:a3:96:b6:76:a0:fd:e6:9c:0b:
                    6e:71:46:4e:70:d2:56:e6:9e:0a:53:06:39:d1:0b:
                    66:34:79:56:16:32:34:9a:1c:36:dd:f4:4d:99:0a:
                    fd:01:53:2e:c7:df:ff:2d:44:7b:0b:2c:f0:10:2f:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:29:7A:5B:C9:C9:17:30:15:F1:46:7C:6E:EE:BF:01:39:59:17
            X509v3 Authority Key Identifier:
                keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:e7:5a:9a:25:d3:fb:b6:b8:78:04:24:bd:8a:7f:e1:a4:
         f6:97:3d:47:2e:a7:32:75:d8:45:98:8d:57:87:a3:31:3f:44:
         2e:ff:0e:27:50:57:c2:85:ae:2b:1e:27:13:05:f3:cb:c2:1d:
         95:3b:d5:87:e2:ed:b3:a8:d2:12:31:7a:e9:be:a0:22:95:b0:
         2b:ad:27:f6:16:17:b1:09:16:89:83:eb:e3:78:89:57:f9:0f:
         5b:c6:d0:b2:b8:30:c2:31:1c:6e:a8:63:02:c8:6c:65:9c:15:
         c7:45:e6:2b:51:6d:89:65:42:23:1b:f0:80:c9:a8:e0:29:dd:
         4e:31:6c:f1:1c:5a:41:7d:7d:c4:e0:dd:40:e1:ed:fd:d4:a2:
         1d:a5:68:6e:d0:ea:2a:96:89:26:06:7a:48:3f:f8:dd:a5:f6:
         2b:49:69:04:5d:e6:8a:32:f8:f7:67:9b:6d:3c:96:3a:79:9f:
         5c:db:0b:09:10:ce:60:85:e3:40:3a:44:e4:64:60:22:18:62:
         7d:ab:28:b1:fa:b5:92:4a:dc:24:49:85:94:37:71:cc:60:6e:
         3b:d4:d2:0c:a4:1b:dd:ee:0a:03:56:cf:33:d8:2b:27:62:7b:
         cb:f6:4c:72:f9:7c:9b:9e:17:33:c7:4f:dc:de:80:45:e6:c7:
         df:31:5d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXpun33vBwi/KPwu5yCJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjUwNzAyMDkwMTI3WhcNMjUwNzAzMDkwMTI3WjAzMTEwLwYDVQQD
Eyg3NjA5Mjk3YTViYzljOTE3MzAxNWYxNDY3YzZlZWViZjAxMzk1OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d1+RJj8RD6rBbcwxjXZCwvViB1m
61YedbWC88a7syvn2jO2GdfHqJ9dHmsT0fGK5bp8bxccOlpZ/kB/Sm3s9tHvwtFq
sL7t4AflyUXsi/34d9lYZOqF/khb5uTxvSSantVZ9Ix9H+lFbpjbYW73qSdDGj4o
2XSNt239vNhPprBjPh/0RyNHNN6MGHwS1QZus8I5lpQYzDKYsDJZnqX4zgkA6kQ+
P6Uk8oC4b+slklyiIYWnSxPawll2aBnB9HzZkg3y9EKG2gijlrZ2oP3mnAtucUZO
cNJW5p4KUwY50QtmNHlWFjI0mhw23fRNmQr9AVMux9//LUR7CyzwEC8QVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYJKXpbyckXMBXxRnxu7r8BOVkXMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRrnWpol
0/u2uHgEJL2Kf+Gk9pc9Ry6nMnXYRZiNV4ejMT9ELv8OJ1BXwoWuKx4nEwXzy8Id
lTvVh+Lts6jSEjF66b6gIpWwK60n9hYXsQkWiYPr43iJV/kPW8bQsrgwwjEcbqhj
AshsZZwVx0XmK1FtiWVCIxvwgMmo4CndTjFs8RxaQX19xODdQOHt/dSiHaVobtDq
KpaJJgZ6SD/43aX2K0lpBF3mijL492ebbTyWOnmfXNsLCRDOYIXjQDpE5GRgIhhi
fasosfq1kkrcJEmFlDdxzGBuO9TSDKQb3e4KA1bPM9grJ2J7y/ZMcvl8m54XM8dP
3N6ARebH3zFdMw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:22:21 2025 by rpki-client