Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
File:                     M7-dbirEKjrXVDcRN9XSSyRz0mU.mft (raw, json)
Hash identifier:          Wl7TDxNb4Fzb8oeFzXHu7wl4Z7j9iuxHBYQfY3bTdpE=
Subject key identifier:   2B:EA:BF:03:AA:A2:FE:EC:B3:43:88:B4:4F:2B:B0:99:5C:D4:C1:62
Authority key identifier: 33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65
Certificate issuer:       /CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265
Certificate serial:       0197B6D76E952079FB4FFD21785FA89FA2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
Manifest number:          88
Signing time:             Sat 28 Jun 2025 14:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:01 +0000
Files and hashes:         1: M7-dbirEKjrXVDcRN9XSSyRz0mU.crl (hash: 1+vq/P673a/rz2doktO8Upj88MdHjJiWGMYRVxkuMhE=)
                          2: X8KnFrMZvhtZ4Wnd7sCuYYb-z5U.roa (hash: GNsSYGNSDwNlfyU/HljGk6wnUDcc+id8yWHC280iL+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:6e:95:20:79:fb:4f:fd:21:78:5f:a8:9f:a2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33bf9d6e2ac42a3ad754371137d5d24b2473d265
        Validity
            Not Before: Jun 28 14:01:01 2025 GMT
            Not After : Jun 29 14:01:01 2025 GMT
        Subject: CN=2beabf03aaa2feecb34388b44f2bb0995cd4c162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:63:87:fc:34:f1:d2:98:a8:9a:50:d7:aa:
                    09:c5:78:d7:9b:36:51:2d:91:97:18:a2:4b:f6:4f:
                    eb:7c:48:7b:43:ef:b2:e6:8a:3e:76:db:44:2d:16:
                    ee:3d:7f:95:fb:3f:cb:26:5e:26:2f:f5:fa:17:97:
                    7b:08:9f:80:f7:01:58:4e:6b:83:d2:ed:af:39:d7:
                    69:bc:85:5a:da:46:7f:c8:38:75:c1:ad:33:6b:71:
                    82:69:14:87:07:07:cb:13:dd:9b:92:75:bc:81:9b:
                    09:f1:cc:7e:68:96:ad:9e:38:b5:b9:a8:33:a8:a0:
                    bc:be:63:c1:75:59:f8:95:b5:d9:19:1a:01:a4:d1:
                    d5:4c:36:1b:d5:7e:13:ae:cc:a7:8f:29:e1:da:d7:
                    95:33:2d:10:b2:64:bd:a8:d7:e0:c1:83:f6:b7:ab:
                    33:72:ec:d7:78:20:b4:d6:b4:ad:49:76:f7:da:9f:
                    0e:4c:ae:40:38:15:c8:3e:36:e0:b7:72:99:cf:e6:
                    cf:b7:e8:7b:ad:a7:4e:b9:2e:bb:59:af:ff:b3:43:
                    82:fb:1e:b8:99:8f:2d:8f:eb:5b:4d:1e:d5:f5:bf:
                    28:af:fc:80:ad:61:37:9e:5b:8c:65:f5:49:4a:86:
                    3f:34:bd:ad:62:74:bd:b0:cb:6b:21:9a:c4:83:06:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:BF:03:AA:A2:FE:EC:B3:43:88:B4:4F:2B:B0:99:5C:D4:C1:62
            X509v3 Authority Key Identifier:
                keyid:33:BF:9D:6E:2A:C4:2A:3A:D7:54:37:11:37:D5:D2:4B:24:73:D2:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7-dbirEKjrXVDcRN9XSSyRz0mU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/133a83-8892-4a75-a5a4-5559eb7cc218/1/M7-dbirEKjrXVDcRN9XSSyRz0mU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:13:84:df:67:5d:76:da:a5:22:db:03:55:0a:ae:4a:1d:
         56:28:f1:e1:03:6c:2a:fe:95:ef:22:04:f5:9f:92:cc:27:e9:
         1b:9c:e4:c4:78:78:ad:e3:90:a5:95:03:6a:3a:43:28:e3:33:
         f2:b1:67:77:c2:7d:63:4b:97:11:a4:e6:d6:fb:7b:f2:9a:c1:
         43:01:db:de:54:f9:e8:2e:b7:7b:52:53:85:de:86:22:1b:9f:
         4d:3f:b0:16:a4:e3:a5:e6:a8:be:88:1c:69:b0:91:72:3b:1c:
         f1:e1:e5:2f:c6:8c:e3:85:bc:d3:e4:9f:c2:e2:65:5f:42:1f:
         7a:86:c7:f5:2f:ca:b8:33:e0:ae:dc:0e:5f:f6:bf:11:1e:1d:
         5e:27:07:86:0d:d5:3d:0d:52:db:22:23:9d:df:a9:2e:d9:dc:
         eb:5e:cf:52:3b:24:3d:6a:0a:0e:95:d1:06:7f:53:46:30:ec:
         f0:a1:49:78:e7:07:0f:62:90:0a:0f:10:2b:45:08:9e:2d:f4:
         cb:64:5a:ad:86:59:3e:d5:f2:82:9a:50:40:64:f6:0a:b7:50:
         c1:c0:01:2b:3e:e8:7b:6a:45:aa:90:d6:b7:f3:7b:60:3d:97:
         c3:b7:6d:7d:18:b6:3f:8b:be:2f:32:fd:7e:16:55:f6:e8:a8:
         c8:d1:72:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2126VIHn7T/0heF+on6LEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmY5ZDZlMmFjNDJhM2FkNzU0MzcxMTM3ZDVkMjRiMjQ3
M2QyNjUwHhcNMjUwNjI4MTQwMTAxWhcNMjUwNjI5MTQwMTAxWjAzMTEwLwYDVQQD
EygyYmVhYmYwM2FhYTJmZWVjYjM0Mzg4YjQ0ZjJiYjA5OTVjZDRjMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLxjh/w08dKYqJpQ16oJxXjXmzZR
LZGXGKJL9k/rfEh7Q++y5oo+dttELRbuPX+V+z/LJl4mL/X6F5d7CJ+A9wFYTmuD
0u2vOddpvIVa2kZ/yDh1wa0za3GCaRSHBwfLE92bknW8gZsJ8cx+aJatnji1uagz
qKC8vmPBdVn4lbXZGRoBpNHVTDYb1X4Trsynjynh2teVMy0QsmS9qNfgwYP2t6sz
cuzXeCC01rStSXb32p8OTK5AOBXIPjbgt3KZz+bPt+h7radOuS67Wa//s0OC+x64
mY8tj+tbTR7V9b8or/yArWE3nluMZfVJSoY/NL2tYnS9sMtrIZrEgwazywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvqvwOqov7ss0OItE8rsJlc1MFiMB8GA1UdIwQY
MBaAFDO/nW4qxCo611Q3ETfV0kskc9JlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xMzNhODMtODg5Mi00YTc1LWE1YTQt
NTU1OWViN2NjMjE4LzEvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xMzNhODMtODg5Mi00YTc1LWE1YTQtNTU1OWViN2NjMjE4
LzEvTTctZGJpckVLanJYVkRjUk45WFNTeVJ6MG1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdgThN9n
XXbapSLbA1UKrkodVijx4QNsKv6V7yIE9Z+SzCfpG5zkxHh4reOQpZUDajpDKOMz
8rFnd8J9Y0uXEaTm1vt78prBQwHb3lT56C63e1JThd6GIhufTT+wFqTjpeaovogc
abCRcjsc8eHlL8aM44W80+SfwuJlX0IfeobH9S/KuDPgrtwOX/a/ER4dXicHhg3V
PQ1S2yIjnd+pLtnc617PUjskPWoKDpXRBn9TRjDs8KFJeOcHD2KQCg8QK0UIni30
y2RarYZZPtXygppQQGT2CrdQwcABKz7oe2pFqpDWt/N7YD2Xw7dtfRi2P4u+LzL9
fhZV9uioyNFy5g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:57 2025 by rpki-client