Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File:                     v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier:          K/2Iz7ohCvdJtOgMuIoCrEA4Y2lJGY5i2izeca/Ai7k=
Subject key identifier:   47:94:E6:C7:4B:AA:83:C4:EF:38:7A:8D:71:7C:D1:CE:4F:D7:FF:ED
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer:       /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial:       0197B820FB782A75B406B5843C7AEE43EC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 20:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:58 +0000
Files and hashes:         1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
                          2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: 8Y0QyyzSkzYoyhdzv4K7HuxzKcJvz4Aa1Y70Hr1tqo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:fb:78:2a:75:b4:06:b5:84:3c:7a:ee:43:ec:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
        Validity
            Not Before: Jun 28 20:00:58 2025 GMT
            Not After : Jun 29 20:00:58 2025 GMT
        Subject: CN=4794e6c74baa83c4ef387a8d717cd1ce4fd7ffed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:5b:22:f9:7f:48:81:6d:4a:2f:9c:e3:5a:
                    fc:02:a9:3a:03:13:1b:19:7c:f3:ef:34:51:4f:01:
                    db:0e:ac:eb:6f:28:4f:6d:cb:24:6d:99:56:12:ae:
                    a9:04:50:33:b4:0a:63:36:c0:26:88:35:32:ac:af:
                    9d:26:ff:ba:f0:18:32:c0:9f:12:90:67:66:54:60:
                    7d:d4:17:b5:0f:85:51:38:8b:14:f8:5f:b1:41:e9:
                    34:78:a2:90:17:ee:6f:a7:8b:ba:a6:fd:8f:14:81:
                    79:93:6f:19:17:85:df:b7:4f:15:fb:67:fa:97:1e:
                    2e:b0:1c:83:a8:f9:18:25:0c:14:61:49:37:dd:af:
                    6e:ab:5a:d2:70:eb:8c:12:3d:eb:11:8b:f1:b3:c2:
                    85:81:a3:45:ef:12:8f:0b:80:73:2e:df:28:b8:dd:
                    13:46:f6:89:fa:38:c3:d0:de:ca:d0:ec:c6:34:72:
                    b0:58:43:07:92:61:f7:41:b5:6a:e0:ea:7f:bf:3b:
                    70:32:8f:ef:6a:d0:f7:0a:2e:2b:0c:f7:c0:e5:28:
                    ac:95:3a:30:80:a1:28:20:25:c2:43:0f:36:6b:1a:
                    0a:ee:df:2c:ab:ab:79:a9:74:ca:50:58:32:ae:4b:
                    e2:40:21:ee:de:7f:b4:1d:43:5a:02:c5:86:d5:de:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:94:E6:C7:4B:AA:83:C4:EF:38:7A:8D:71:7C:D1:CE:4F:D7:FF:ED
            X509v3 Authority Key Identifier:
                keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:dc:e2:60:37:28:05:45:93:2e:67:0f:ad:20:dc:15:a1:5b:
         cf:5b:96:bc:e7:a9:51:09:e5:18:41:95:a6:46:cc:b1:ca:d6:
         c4:6a:87:c7:23:c5:fd:6e:69:be:f9:a9:df:da:ae:6b:88:0e:
         45:64:93:d2:03:23:26:68:1f:0e:5f:42:54:fd:e8:02:4b:63:
         30:1a:a5:de:1d:f0:9e:b2:5a:ae:f0:c0:c7:88:98:28:4d:dd:
         e4:b7:7c:f7:14:3c:10:96:14:6a:71:a2:f3:03:5e:10:82:cc:
         9c:4b:2f:7e:fe:49:14:7c:f7:fb:e2:13:86:c4:9b:9b:50:c8:
         76:7e:f9:69:8f:5a:d0:25:39:16:a2:9b:4b:69:26:b6:9f:c4:
         69:b2:47:f9:7e:97:56:8d:6c:2f:3f:c5:69:66:a1:85:ca:1d:
         cd:7a:13:d4:3b:a3:c8:9c:85:c7:7e:a9:88:b1:74:8f:22:fe:
         87:fe:0f:8f:d5:bc:2b:c3:55:ef:56:e2:b7:75:8a:be:24:74:
         f7:bf:4a:49:0e:0e:5a:66:b1:fc:82:88:b3:e0:e9:65:02:95:
         d3:ed:41:aa:d0:1f:ef:b8:b0:34:fa:73:5a:49:91:c5:4c:7b:
         86:0e:7e:0e:88:df:46:d4:a8:01:93:9a:46:dc:e4:67:da:76:
         4d:4a:96:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPt4KnW0BrWEPHruQ+xVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjUwNjI4MjAwMDU4WhcNMjUwNjI5MjAwMDU4WjAzMTEwLwYDVQQD
Eyg0Nzk0ZTZjNzRiYWE4M2M0ZWYzODdhOGQ3MTdjZDFjZTRmZDdmZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP5bIvl/SIFtSi+c41r8Aqk6AxMb
GXzz7zRRTwHbDqzrbyhPbcskbZlWEq6pBFAztApjNsAmiDUyrK+dJv+68BgywJ8S
kGdmVGB91Be1D4VROIsU+F+xQek0eKKQF+5vp4u6pv2PFIF5k28ZF4Xft08V+2f6
lx4usByDqPkYJQwUYUk33a9uq1rScOuMEj3rEYvxs8KFgaNF7xKPC4BzLt8ouN0T
RvaJ+jjD0N7K0OzGNHKwWEMHkmH3QbVq4Op/vztwMo/vatD3Ci4rDPfA5SislTow
gKEoICXCQw82axoK7t8sq6t5qXTKUFgyrkviQCHu3n+0HUNaAsWG1d7pOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeU5sdLqoPE7zh6jXF80c5P1//tMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtziYDco
BUWTLmcPrSDcFaFbz1uWvOepUQnlGEGVpkbMscrWxGqHxyPF/W5pvvmp39qua4gO
RWST0gMjJmgfDl9CVP3oAktjMBql3h3wnrJarvDAx4iYKE3d5Ld89xQ8EJYUanGi
8wNeEILMnEsvfv5JFHz3++IThsSbm1DIdn75aY9a0CU5FqKbS2kmtp/EabJH+X6X
Vo1sLz/FaWahhcodzXoT1DujyJyFx36piLF0jyL+h/4Pj9W8K8NV71bit3WKviR0
979KSQ4OWmax/IKIs+DpZQKV0+1BqtAf77iwNPpzWkmRxUx7hg5+DojfRtSoAZOa
RtzkZ9p2TUqW3A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:28 2025 by rpki-client