Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          NPUsyMha1RASCQFJ27fNz/JtLHLwT+/1EVu9FeMzoyE=
Subject key identifier:   C6:60:2C:0B:7E:4B:4E:DD:99:EA:7F:CF:2C:35:67:C3:3F:C0:72:96
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       0197BB224D76B1F83995E3AC3849FB1178BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          15B8
Signing time:             Sun 29 Jun 2025 10:01:16 +0000
Manifest this update:     Sun 29 Jun 2025 10:01:16 +0000
Manifest next update:     Mon 30 Jun 2025 10:01:16 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: PGvkmKc8YdAujMQFqA/dE8Pjbxr7S6rfE7GiiwUKQEM=)
                          2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:22:4d:76:b1:f8:39:95:e3:ac:38:49:fb:11:78:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Jun 29 10:01:16 2025 GMT
            Not After : Jun 30 10:01:16 2025 GMT
        Subject: CN=c6602c0b7e4b4edd99ea7fcf2c3567c33fc07296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bc:c3:39:34:91:24:e7:6c:c3:ee:85:71:94:
                    84:1d:98:90:c7:6d:4b:08:d3:40:2a:e4:00:2c:3c:
                    61:56:2f:e2:14:2d:75:3f:98:9c:e9:5d:e4:3a:48:
                    7f:ce:58:81:ee:88:13:51:7d:43:54:ec:9a:28:79:
                    58:d1:a0:0a:67:62:0c:2e:9a:6f:7e:f1:55:38:44:
                    20:73:0c:e2:24:6b:b7:89:88:2c:53:35:b5:c5:54:
                    67:e7:d0:ab:db:a0:c4:c4:73:cb:ef:fe:8b:8f:d1:
                    74:b6:d2:d9:58:27:59:18:0d:91:7e:fa:3b:9b:1f:
                    8d:36:6c:65:67:2a:cf:79:1d:85:60:65:80:93:6b:
                    e2:d6:b2:3d:93:22:44:42:a4:c6:4a:82:5f:d5:6b:
                    18:d2:f1:46:e0:9c:76:da:db:c8:77:78:78:9b:1f:
                    3c:8c:b6:7f:71:b7:43:fe:5b:45:c1:14:c5:c8:a4:
                    01:76:97:3e:31:c2:87:60:85:16:74:a5:fb:5e:14:
                    bc:30:c8:41:b0:0f:fb:1c:12:6b:6d:a4:c1:31:64:
                    cb:79:68:bc:a1:e8:d5:dc:e3:16:7c:b0:c4:d3:a6:
                    3a:37:61:59:ec:d2:df:1e:a5:10:97:2c:cf:b0:8c:
                    d7:8f:41:24:8b:89:35:63:eb:76:2c:71:63:83:5d:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:2C:0B:7E:4B:4E:DD:99:EA:7F:CF:2C:35:67:C3:3F:C0:72:96
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:67:87:5e:04:63:5d:80:94:44:b0:a9:ab:78:d5:bc:01:
         6f:f6:e4:89:07:31:89:bc:87:b1:21:aa:b5:c7:79:66:32:3a:
         51:e8:c5:4a:4e:a6:42:f4:ae:75:dd:2b:ab:b6:fc:ba:2f:34:
         04:a2:6e:cd:fb:30:90:00:c9:06:7c:63:e2:f4:36:36:64:85:
         c0:84:54:cd:ff:ac:ad:ae:eb:1b:44:6e:48:fe:2c:35:04:0b:
         5d:19:2b:7b:0d:b8:b0:b8:86:9e:72:7e:a0:06:62:a2:07:73:
         cd:5f:81:4c:84:83:f1:5b:3e:68:66:47:5f:6f:6b:6d:91:54:
         d8:f5:20:ac:94:4e:a3:91:7a:d4:1b:a8:08:b1:f1:58:ed:9d:
         2d:4b:5c:d2:13:4d:fc:f9:63:91:7d:f6:f1:e9:60:fd:16:ef:
         46:bd:07:d7:4e:4c:ce:ed:ad:a2:45:ca:e9:75:ef:a5:3c:c1:
         62:55:bf:6e:1f:d1:62:91:65:84:0e:14:97:f5:8c:36:c9:a6:
         27:65:07:a9:a0:b1:ba:34:13:f2:5f:dc:db:4b:0a:dc:31:1c:
         ef:bf:ed:07:de:6a:a7:ed:3b:91:82:44:18:ce:e8:9c:ed:62:
         16:88:f0:c4:01:1c:97:1a:dc:37:34:a0:a6:5f:a3:33:98:81:
         cf:4c:2f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7Ik12sfg5leOsOEn7EXi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjY2ZkYWVlMWU5ZWFiZDgwMjM3NjAyOTYxYmFhMjVhYmM2
OWNkNjQwHhcNMjUwNjI5MTAwMTE2WhcNMjUwNjMwMTAwMTE2WjAzMTEwLwYDVQQD
EyhjNjYwMmMwYjdlNGI0ZWRkOTllYTdmY2YyYzM1NjdjMzNmYzA3Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57zDOTSRJOdsw+6FcZSEHZiQx21L
CNNAKuQALDxhVi/iFC11P5ic6V3kOkh/zliB7ogTUX1DVOyaKHlY0aAKZ2IMLppv
fvFVOEQgcwziJGu3iYgsUzW1xVRn59Cr26DExHPL7/6Lj9F0ttLZWCdZGA2Rfvo7
mx+NNmxlZyrPeR2FYGWAk2vi1rI9kyJEQqTGSoJf1WsY0vFG4Jx22tvId3h4mx88
jLZ/cbdD/ltFwRTFyKQBdpc+McKHYIUWdKX7XhS8MMhBsA/7HBJrbaTBMWTLeWi8
oejV3OMWfLDE06Y6N2FZ7NLfHqUQlyzPsIzXj0Eki4k1Y+t2LHFjg10+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZgLAt+S07dmep/zyw1Z8M/wHKWMB8GA1UdIwQY
MBaAFOzP2u4enqvYAjdgKWG6olq8ac1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt
M2YxYzE1MjNhMTIzLzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz
LzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkNnh14E
Y12AlESwqat41bwBb/bkiQcxibyHsSGqtcd5ZjI6UejFSk6mQvSudd0rq7b8ui80
BKJuzfswkADJBnxj4vQ2NmSFwIRUzf+sra7rG0RuSP4sNQQLXRkrew24sLiGnnJ+
oAZiogdzzV+BTISD8Vs+aGZHX29rbZFU2PUgrJROo5F61BuoCLHxWO2dLUtc0hNN
/PljkX328elg/RbvRr0H105Mzu2tokXK6XXvpTzBYlW/bh/RYpFlhA4Ul/WMNsmm
J2UHqaCxujQT8l/c20sK3DEc77/tB95qp+07kYJEGM7onO1iFojwxAEclxrcNzSg
pl+jM5iBz0wvdg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:46 2025 by rpki-client