Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          Zqwen37/49FfJZfop/Ua/P5j2BNKMqZ9EnaBoGxn1a4=
Subject key identifier:   C1:8D:B1:45:29:24:70:B9:11:01:D3:62:36:9E:DE:51:65:93:1A:5C
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       0197E04160B9B0E0ED6DCB08A443075435AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          15C9
Signing time:             Sun 06 Jul 2025 15:01:10 +0000
Manifest this update:     Sun 06 Jul 2025 15:01:10 +0000
Manifest next update:     Mon 07 Jul 2025 15:01:10 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: MhMt0z9CSjFXQF3bMXSQXPAN0HQ1FeuWwpGc5cf5GEQ=)
                          2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Jul 2025 07:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:e0:41:60:b9:b0:e0:ed:6d:cb:08:a4:43:07:54:35:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Jul  6 15:01:10 2025 GMT
            Not After : Jul  7 15:01:10 2025 GMT
        Subject: CN=c18db145292470b91101d362369ede5165931a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:6e:88:aa:ef:bf:bf:fd:d1:67:91:31:cc:
                    3f:1c:d0:3a:81:68:0f:24:45:cd:03:89:81:f2:b8:
                    35:b6:22:b7:5b:a4:cf:52:db:6e:cb:c7:8c:d7:41:
                    20:94:96:82:f8:78:fe:65:e1:df:91:15:ba:50:5e:
                    90:1d:a1:17:b7:f5:bf:bd:51:bb:de:f3:0d:98:6b:
                    13:6b:7f:4f:bb:d4:56:44:12:59:72:26:f1:08:56:
                    0b:d8:2d:56:79:d4:b7:a8:d9:a3:41:80:c4:2b:1a:
                    42:59:28:98:af:62:13:c2:26:04:70:21:d4:ac:2c:
                    1b:81:85:81:50:66:b6:7c:7c:06:e8:67:45:d0:6d:
                    b7:bb:9d:61:fd:b7:50:ab:a5:c6:b3:1a:51:25:25:
                    88:d3:d1:97:a9:4c:cf:a4:f7:5f:0a:d8:96:1b:6d:
                    93:35:a2:f2:6a:db:f3:93:8f:72:64:1f:8a:65:81:
                    89:85:66:4c:40:d0:01:5a:5d:da:38:d3:99:d1:ce:
                    64:33:07:87:3c:e1:37:d1:1d:69:fe:bd:13:4e:e6:
                    3f:6c:cb:2e:b4:ac:07:ca:35:1c:ed:e3:51:d7:bb:
                    a5:ba:89:16:57:52:9a:e0:b8:82:0d:e8:b7:7f:5b:
                    58:a3:44:34:15:b9:7d:d9:c1:47:e0:44:47:75:44:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8D:B1:45:29:24:70:B9:11:01:D3:62:36:9E:DE:51:65:93:1A:5C
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3c:bf:ff:59:78:02:d9:6f:19:1d:3d:9f:0f:a8:f0:1e:08:
         d0:47:5d:26:64:ee:74:f3:1a:b1:5f:f7:70:f7:52:8c:32:4e:
         87:a4:fd:69:0c:ee:65:24:64:3b:f2:3d:2d:3c:3b:6f:47:63:
         4f:61:34:54:a9:36:c6:f5:b9:24:6e:7b:31:ad:2b:03:0f:d9:
         63:04:46:39:f2:a9:ed:c3:fc:f7:fd:36:e4:1a:6f:2b:86:31:
         03:0d:97:9f:1a:2a:ca:57:8f:6f:26:da:3c:ec:1c:2b:b6:15:
         63:87:1e:f7:9a:ca:da:f5:ae:47:1d:32:a7:f0:c9:52:6e:45:
         7f:8c:af:59:0e:18:c1:83:dc:fc:3f:b7:77:30:90:74:73:96:
         07:c1:bf:f0:38:bf:b2:62:43:32:3f:39:f7:69:d6:d9:9f:3e:
         97:28:5a:17:ab:6d:76:34:79:36:90:04:c5:50:e9:48:dd:d3:
         d3:28:58:41:ec:eb:2c:ff:ff:64:27:e7:54:86:3a:cb:78:3b:
         33:bf:ae:e6:89:17:29:57:63:06:73:a0:5f:36:b3:6d:92:19:
         e2:16:da:9d:46:64:f2:ec:c8:34:e4:c3:b7:f7:a2:27:a0:97:
         ce:cd:ea:40:e6:4d:39:be:59:c2:f3:66:8a:96:6e:b3:9d:a6:
         24:16:19:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfgQWC5sODtbcsIpEMHVDWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm
MWNjZTEwHhcNMjUwNzA2MTUwMTEwWhcNMjUwNzA3MTUwMTEwWjAzMTEwLwYDVQQD
EyhjMThkYjE0NTI5MjQ3MGI5MTEwMWQzNjIzNjllZGU1MTY1OTMxYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVZuiKrvv7/90WeRMcw/HNA6gWgP
JEXNA4mB8rg1tiK3W6TPUttuy8eM10EglJaC+Hj+ZeHfkRW6UF6QHaEXt/W/vVG7
3vMNmGsTa39Pu9RWRBJZcibxCFYL2C1WedS3qNmjQYDEKxpCWSiYr2ITwiYEcCHU
rCwbgYWBUGa2fHwG6GdF0G23u51h/bdQq6XGsxpRJSWI09GXqUzPpPdfCtiWG22T
NaLyatvzk49yZB+KZYGJhWZMQNABWl3aONOZ0c5kMweHPOE30R1p/r0TTuY/bMsu
tKwHyjUc7eNR17uluokWV1Ka4LiCDei3f1tYo0Q0Fbl92cFH4ERHdURnyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGNsUUpJHC5EQHTYjae3lFlkxpcMB8GA1UdIwQY
MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt
NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3
LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjy//1l4
AtlvGR09nw+o8B4I0EddJmTudPMasV/3cPdSjDJOh6T9aQzuZSRkO/I9LTw7b0dj
T2E0VKk2xvW5JG57Ma0rAw/ZYwRGOfKp7cP89/025BpvK4YxAw2XnxoqylePbyba
POwcK7YVY4ce95rK2vWuRx0yp/DJUm5Ff4yvWQ4YwYPc/D+3dzCQdHOWB8G/8Di/
smJDMj8592nW2Z8+lyhaF6ttdjR5NpAExVDpSN3T0yhYQezrLP//ZCfnVIY6y3g7
M7+u5okXKVdjBnOgXzazbZIZ4hbanUZk8uzINOTDt/eiJ6CXzs3qQOZNOb5ZwvNm
ipZus52mJBYZHg==
-----END CERTIFICATE-----
Generated at Sun Jul 6 16:14:17 2025 by rpki-client