Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File:                     7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier:          AS37ATrDOSbQse9JnAg384XcHeTqWCYJT1N6BZ2ANEk=
Subject key identifier:   80:29:25:6F:50:9B:DA:C1:0F:2B:D4:EC:9F:29:87:A3:F0:AC:4C:B3
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer:       /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial:       0197B70E733175F26522AFB2279142D7129D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number:          046B
Signing time:             Sat 28 Jun 2025 15:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:06 +0000
Files and hashes:         1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: Yl9lCrecfp9CInO3vrEtGoc4f8asb6P/LOgQb2yjiHA=)
                          2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:73:31:75:f2:65:22:af:b2:27:91:42:d7:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
        Validity
            Not Before: Jun 28 15:01:06 2025 GMT
            Not After : Jun 29 15:01:06 2025 GMT
        Subject: CN=8029256f509bdac10f2bd4ec9f2987a3f0ac4cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:dd:ed:b5:7e:ee:53:65:57:dd:a4:19:9c:
                    13:51:53:6d:b9:6f:2d:38:b9:36:51:cd:b9:6f:b8:
                    40:ba:df:c8:f9:46:70:4b:c4:1b:35:ea:0b:e2:35:
                    a7:5b:35:07:31:dc:54:3a:b0:be:82:e5:d1:0a:d2:
                    83:6a:65:af:52:af:da:ec:e9:08:f7:f2:f1:5a:94:
                    9b:99:f8:cd:23:0f:97:8a:be:a7:3f:89:4f:1d:15:
                    ed:ba:4a:1a:94:13:72:c4:e6:09:34:e8:19:89:93:
                    b2:25:fd:8f:83:77:00:fd:0f:3f:ea:7e:b3:d8:3f:
                    f2:7b:0f:10:8c:b5:d8:47:c5:bf:c5:70:2f:5d:c0:
                    a8:d1:1d:4c:49:51:54:20:5b:61:dd:ac:17:30:03:
                    7c:80:29:a7:af:dc:9a:ef:a0:d8:bb:06:2b:72:47:
                    b8:e4:40:bc:ce:0f:42:5c:79:7a:0f:46:a1:49:69:
                    f8:51:25:19:04:ee:b4:cc:8d:28:5e:69:34:a0:86:
                    e7:dc:fc:27:f0:42:ef:50:24:e2:06:29:00:7f:ef:
                    75:15:e5:c8:f9:c3:af:53:85:6a:9e:73:7a:12:e4:
                    df:67:60:aa:5e:55:81:2d:7d:53:7b:00:ac:21:0a:
                    73:5b:76:56:23:21:87:e8:02:d0:3e:f9:c8:49:50:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:29:25:6F:50:9B:DA:C1:0F:2B:D4:EC:9F:29:87:A3:F0:AC:4C:B3
            X509v3 Authority Key Identifier:
                keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:21:6a:5c:a9:51:a1:8b:8d:d2:78:15:4c:35:31:cb:d6:
         fb:80:b6:a9:c0:94:00:8a:0a:1e:c8:e7:65:a0:ba:92:a3:33:
         b2:fb:33:31:56:ab:3c:6f:54:fd:e5:0b:96:2e:4c:47:58:77:
         6e:95:40:65:b1:18:25:bf:62:f3:e8:96:39:3f:2c:22:bf:07:
         e7:32:73:b5:36:37:8d:f4:4b:cf:fb:4e:be:b9:91:41:43:e6:
         27:6c:e0:06:50:6c:ca:95:13:67:4c:d4:63:de:e9:de:26:90:
         33:e0:33:f1:e9:a9:3d:c7:8d:6d:63:76:37:df:95:a9:6f:40:
         5d:b6:cd:ee:ed:aa:71:61:0e:3d:69:2c:6e:c4:26:0e:bc:5b:
         96:bc:6f:3b:c4:14:c0:d9:d0:6b:48:e1:09:a9:55:a0:0e:6e:
         98:be:f1:2e:10:6f:cb:fb:26:2e:14:45:48:c3:82:cd:6c:e6:
         64:bb:92:33:d2:9e:ba:05:ac:6d:db:8a:17:61:01:3c:4d:20:
         82:f2:47:b9:bd:20:43:bf:88:91:e4:c6:6e:63:1d:18:7c:24:
         17:59:45:88:0c:9a:f2:6d:50:fc:54:3b:0d:b3:2f:42:cf:d3:
         2e:f0:bb:6d:03:1f:98:a8:c1:dc:6c:14:2a:15:03:50:cf:40:
         46:ab:34:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnMxdfJlIq+yJ5FC1xKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk
MTQ0ODkwHhcNMjUwNjI4MTUwMTA2WhcNMjUwNjI5MTUwMTA2WjAzMTEwLwYDVQQD
Eyg4MDI5MjU2ZjUwOWJkYWMxMGYyYmQ0ZWM5ZjI5ODdhM2YwYWM0Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSrd7bV+7lNlV92kGZwTUVNtuW8t
OLk2Uc25b7hAut/I+UZwS8QbNeoL4jWnWzUHMdxUOrC+guXRCtKDamWvUq/a7OkI
9/LxWpSbmfjNIw+Xir6nP4lPHRXtukoalBNyxOYJNOgZiZOyJf2Pg3cA/Q8/6n6z
2D/yew8QjLXYR8W/xXAvXcCo0R1MSVFUIFth3awXMAN8gCmnr9ya76DYuwYrcke4
5EC8zg9CXHl6D0ahSWn4USUZBO60zI0oXmk0oIbn3Pwn8ELvUCTiBikAf+91FeXI
+cOvU4VqnnN6EuTfZ2CqXlWBLX1TewCsIQpzW3ZWIyGH6ALQPvnISVBzNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIApJW9Qm9rBDyvU7J8ph6PwrEyzMB8GA1UdIwQY
MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt
ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi
LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOEhalyp
UaGLjdJ4FUw1McvW+4C2qcCUAIoKHsjnZaC6kqMzsvszMVarPG9U/eULli5MR1h3
bpVAZbEYJb9i8+iWOT8sIr8H5zJztTY3jfRLz/tOvrmRQUPmJ2zgBlBsypUTZ0zU
Y97p3iaQM+Az8empPceNbWN2N9+VqW9AXbbN7u2qcWEOPWksbsQmDrxblrxvO8QU
wNnQa0jhCalVoA5umL7xLhBvy/smLhRFSMOCzWzmZLuSM9KeugWsbduKF2EBPE0g
gvJHub0gQ7+IkeTGbmMdGHwkF1lFiAya8m1Q/FQ7DbMvQs/TLvC7bQMfmKjB3GwU
KhUDUM9ARqs0qA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:05 2025 by rpki-client