Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File:                     5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier:          6Oc+2ckWX3c+qwV7rrA6hmWuaK178fW07uo8oQ/poZ4=
Subject key identifier:   39:94:5D:9B:95:BA:EC:2D:B8:3A:03:01:3F:19:1B:2F:AA:F4:24:EA
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer:       /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial:       0197B6A0BB91647FB9A841DBFDD4748EC0E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number:          106B
Signing time:             Sat 28 Jun 2025 13:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:16 +0000
Files and hashes:         1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: zM2FANfoyoyzXv3fHgvQWL8JNgEmpxRg1W8RTmEd8i4=)
                          2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:bb:91:64:7f:b9:a8:41:db:fd:d4:74:8e:c0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
        Validity
            Not Before: Jun 28 13:01:16 2025 GMT
            Not After : Jun 29 13:01:16 2025 GMT
        Subject: CN=39945d9b95baec2db83a03013f191b2faaf424ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:cf:04:c8:80:fa:d1:64:d1:63:83:fc:cc:
                    10:36:a3:2c:67:db:af:c3:a4:ed:60:d6:ea:2d:0c:
                    88:b0:e6:cf:54:4c:61:5d:ed:25:f4:c2:f5:2b:9a:
                    5b:02:63:cb:a8:02:50:2c:ca:e4:94:31:6b:12:2d:
                    1b:69:ac:15:87:7d:32:a1:4f:58:bb:6d:1f:18:28:
                    bf:49:fe:f8:ab:97:8a:bb:35:6f:c7:eb:16:1b:4a:
                    87:19:51:06:87:8d:62:29:1d:da:90:fd:eb:64:40:
                    e0:b0:3f:80:cc:6b:c6:2f:92:3a:a6:f9:19:f1:ec:
                    6a:8e:60:f0:98:4c:30:49:55:0b:e0:00:9e:75:66:
                    06:ef:43:ac:f5:a3:6f:c1:2a:9a:5c:5c:3e:b2:0f:
                    7d:fb:19:f5:9f:ad:78:c5:41:b1:b5:fe:45:4c:e3:
                    bb:bf:b5:f4:53:60:04:0b:38:6a:af:ac:9d:e1:16:
                    0c:a2:37:f8:fc:b5:59:a6:16:04:bd:d5:dd:3e:78:
                    29:fe:d3:14:1d:41:4c:1e:d5:f4:f9:bb:a9:e6:2f:
                    bd:8d:93:5a:39:86:d2:e1:d7:9d:7a:40:ec:17:7a:
                    8b:d5:df:5f:04:72:32:f8:be:f3:a6:6a:91:53:c3:
                    26:de:48:77:15:cd:71:a1:cc:0b:11:d5:88:c9:1d:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:94:5D:9B:95:BA:EC:2D:B8:3A:03:01:3F:19:1B:2F:AA:F4:24:EA
            X509v3 Authority Key Identifier:
                keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:13:20:0d:6d:60:ae:31:d9:6c:c8:25:c7:7f:84:be:59:
         6f:4b:fa:83:59:19:31:40:4b:b7:88:99:d2:69:4a:15:91:85:
         df:33:d5:f9:34:e8:90:6d:08:94:ac:4d:d2:ce:83:54:14:33:
         a5:95:cc:20:5f:fd:e6:1d:0c:79:04:8e:50:68:a7:c0:46:82:
         ba:a8:94:54:d7:78:d2:6e:29:55:a7:4a:4e:94:e9:6c:75:f9:
         a6:54:93:ae:e7:14:0e:31:18:79:f0:68:f3:a4:d8:fc:79:d1:
         e9:c2:70:71:d0:5c:56:37:38:06:0b:3d:27:47:b3:5b:fb:47:
         b0:15:9e:7d:8e:15:9e:8b:03:fb:38:8c:a6:24:55:83:ed:10:
         73:a3:1c:d7:b2:24:03:7e:fe:81:ba:cf:78:83:d8:c0:4b:2a:
         8d:e9:25:c3:b7:df:92:08:1e:97:f0:f4:eb:0e:fe:ce:a8:c1:
         78:fa:32:7a:15:23:48:c5:0f:14:82:21:df:35:5f:7f:2f:d4:
         05:35:1b:99:6b:d4:75:32:b8:ce:26:90:ec:10:23:b8:dc:5a:
         57:a9:25:76:22:45:e8:11:eb:3c:35:fe:d1:ea:60:b5:34:0e:
         08:88:64:42:c6:fb:65:d7:33:06:0f:7f:10:03:00:87:d3:45:
         8f:fb:00:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLuRZH+5qEHb/dR0jsDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjUwNjI4MTMwMTE2WhcNMjUwNjI5MTMwMTE2WjAzMTEwLwYDVQQD
EygzOTk0NWQ5Yjk1YmFlYzJkYjgzYTAzMDEzZjE5MWIyZmFhZjQyNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHPBMiA+tFk0WOD/MwQNqMsZ9uv
w6TtYNbqLQyIsObPVExhXe0l9ML1K5pbAmPLqAJQLMrklDFrEi0baawVh30yoU9Y
u20fGCi/Sf74q5eKuzVvx+sWG0qHGVEGh41iKR3akP3rZEDgsD+AzGvGL5I6pvkZ
8exqjmDwmEwwSVUL4ACedWYG70Os9aNvwSqaXFw+sg99+xn1n614xUGxtf5FTOO7
v7X0U2AECzhqr6yd4RYMojf4/LVZphYEvdXdPngp/tMUHUFMHtX0+bup5i+9jZNa
OYbS4dedekDsF3qL1d9fBHIy+L7zpmqRU8Mm3kh3Fc1xocwLEdWIyR0/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmUXZuVuuwtuDoDAT8ZGy+q9CTqMB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh
LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLITIA1t
YK4x2WzIJcd/hL5Zb0v6g1kZMUBLt4iZ0mlKFZGF3zPV+TTokG0IlKxN0s6DVBQz
pZXMIF/95h0MeQSOUGinwEaCuqiUVNd40m4pVadKTpTpbHX5plSTrucUDjEYefBo
86TY/HnR6cJwcdBcVjc4Bgs9J0ezW/tHsBWefY4VnosD+ziMpiRVg+0Qc6Mc17Ik
A37+gbrPeIPYwEsqjeklw7ffkggel/D06w7+zqjBePoyehUjSMUPFIIh3zVffy/U
BTUbmWvUdTK4ziaQ7BAjuNxaV6kldiJF6BHrPDX+0epgtTQOCIhkQsb7ZdczBg9/
EAMAh9NFj/sAiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:59 2025 by rpki-client