Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File:                     s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier:          DJ2TRg8X30CT0ycG0QVaGGsQZO5/uKgvlS25HtdiEyY=
Subject key identifier:   08:DB:8A:38:70:23:84:95:83:82:FD:5D:E3:C2:16:84:0E:35:65:47
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer:       /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial:       0197B6A1408ABACEBAA78999394C5AC09E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:01:50 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:50 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:50 +0000
Files and hashes:         1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: AevUPg6dusypJ3glq+1rtgms4TcTO7xC5LYupeXMBkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:40:8a:ba:ce:ba:a7:89:99:39:4c:5a:c0:9e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
        Validity
            Not Before: Jun 28 13:01:50 2025 GMT
            Not After : Jun 29 13:01:50 2025 GMT
        Subject: CN=08db8a38702384958382fd5de3c216840e356547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:30:37:58:23:1a:a8:5c:68:dc:46:28:88:
                    0e:7f:a7:a1:35:29:bb:be:41:a8:41:e5:8e:9b:26:
                    5c:df:ee:1f:90:b5:a1:22:dc:21:36:39:13:cd:bc:
                    3d:c9:e8:d9:ea:27:7b:05:ef:a2:c4:42:10:4b:e6:
                    4d:0d:2b:bb:00:d0:7f:e6:21:68:35:49:93:d2:e5:
                    6a:4c:7f:44:84:a2:c6:80:b7:de:00:d9:6c:ba:ae:
                    65:ff:f7:f4:c0:b6:ad:3a:62:01:3b:93:60:92:42:
                    51:0e:93:30:db:5c:42:40:20:0e:30:78:00:2a:82:
                    d8:0f:29:fd:ce:5e:3c:01:43:e9:14:a3:ce:3c:c9:
                    37:a6:55:87:f6:76:97:11:c2:b9:81:58:9a:73:0e:
                    e3:c6:99:1d:bd:27:86:b4:1d:55:af:f6:98:2a:8d:
                    17:f1:6b:a7:2f:6d:26:ea:21:33:6f:75:b0:7e:b3:
                    77:c8:3b:b1:74:7d:f4:96:16:cf:a0:df:03:6f:1e:
                    9f:9b:ef:8b:fb:63:14:5f:da:51:1b:7e:b6:3d:06:
                    9d:39:6f:bb:79:56:ea:52:9f:85:77:34:95:9f:30:
                    6b:12:03:8c:73:09:e5:7d:90:ca:32:f0:3e:ed:7d:
                    fa:69:69:2a:95:db:c0:f5:e5:0b:03:09:e2:00:0d:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:8A:38:70:23:84:95:83:82:FD:5D:E3:C2:16:84:0E:35:65:47
            X509v3 Authority Key Identifier:
                keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c2:fc:cc:7f:f6:54:98:e3:6f:eb:4e:00:dc:45:8f:ae:33:
         45:84:f1:2c:da:d3:b5:35:a9:d9:29:bf:e6:69:6e:f9:8b:d9:
         38:8e:2f:29:e3:a5:6a:8f:72:f6:1e:9e:49:99:40:03:f8:6b:
         f4:f1:d7:3b:70:34:4b:ae:d7:e4:1f:f8:cc:be:20:83:41:57:
         e3:c1:11:1a:52:fd:3c:a8:8e:fe:08:a5:54:7d:2f:43:8b:76:
         9f:e5:7e:93:4c:2b:12:15:16:1a:b8:34:56:0d:fe:a2:2b:24:
         97:c6:a2:d5:fc:1c:b9:fc:cc:93:88:cb:a1:ce:59:d3:10:10:
         4a:df:38:7e:b8:ff:7c:cd:ff:46:28:aa:7b:af:9e:9b:98:b4:
         e3:63:82:02:d2:eb:cc:cc:fb:29:9f:21:b6:0d:21:7a:76:57:
         d7:69:82:a1:95:18:8b:09:18:27:ce:7c:ef:dc:92:d0:f5:d4:
         84:b7:0c:5f:fc:34:7b:eb:a0:90:b3:ce:aa:9e:aa:ef:9f:7a:
         1d:40:88:94:29:85:b0:b6:80:c7:cf:eb:15:62:7d:f4:54:53:
         97:6a:d9:35:53:7c:7e:ab:6b:fc:72:54:4e:fe:c4:c6:4d:74:
         f4:c1:7b:6d:3f:b5:5f:2d:0b:76:4c:79:52:23:0a:f9:14:91:
         9e:8b:e3:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUCKus66p4mZOUxawJ6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVlMjFiODQ1YmIxZGRmYWJiMzg4ODgwMmMxOWE2MjI3
NzM4MDIwHhcNMjUwNjI4MTMwMTUwWhcNMjUwNjI5MTMwMTUwWjAzMTEwLwYDVQQD
EygwOGRiOGEzODcwMjM4NDk1ODM4MmZkNWRlM2MyMTY4NDBlMzU2NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JcwN1gjGqhcaNxGKIgOf6ehNSm7
vkGoQeWOmyZc3+4fkLWhItwhNjkTzbw9yejZ6id7Be+ixEIQS+ZNDSu7ANB/5iFo
NUmT0uVqTH9EhKLGgLfeANlsuq5l//f0wLatOmIBO5NgkkJRDpMw21xCQCAOMHgA
KoLYDyn9zl48AUPpFKPOPMk3plWH9naXEcK5gViacw7jxpkdvSeGtB1Vr/aYKo0X
8WunL20m6iEzb3WwfrN3yDuxdH30lhbPoN8Dbx6fm++L+2MUX9pRG362PQadOW+7
eVbqUp+FdzSVnzBrEgOMcwnlfZDKMvA+7X36aWkqldvA9eULAwniAA3/bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjbijhwI4SVg4L9XePCFoQONWVHMB8GA1UdIwQY
MBaAFLO14huEW7Hd+rs4iIAsGaYidzgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTIt
ZmU1MDY1MGUxYmU0LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTItZmU1MDY1MGUxYmU0
LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsL8zH/2
VJjjb+tOANxFj64zRYTxLNrTtTWp2Sm/5mlu+YvZOI4vKeOlao9y9h6eSZlAA/hr
9PHXO3A0S67X5B/4zL4gg0FX48ERGlL9PKiO/gilVH0vQ4t2n+V+k0wrEhUWGrg0
Vg3+oiskl8ai1fwcufzMk4jLoc5Z0xAQSt84frj/fM3/Riiqe6+em5i042OCAtLr
zMz7KZ8htg0henZX12mCoZUYiwkYJ85879yS0PXUhLcMX/w0e+ugkLPOqp6q7596
HUCIlCmFsLaAx8/rFWJ99FRTl2rZNVN8fqtr/HJUTv7Exk109MF7bT+1Xy0Ldkx5
UiMK+RSRnovjwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:24 2025 by rpki-client