Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          tGacdAPImGaDMg4I770l4btFgvpMUdheBYSmCtJReZ0=
Subject key identifier:   42:83:E4:97:51:CB:4D:CE:E0:A7:5A:FC:15:55:47:E5:44:78:0F:F1
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       0197BA0F3D44D14B3E223046846E4CC848BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          15B5
Signing time:             Sun 29 Jun 2025 05:00:50 +0000
Manifest this update:     Sun 29 Jun 2025 05:00:50 +0000
Manifest next update:     Mon 30 Jun 2025 05:00:50 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: cU3hc7vafyRjRrFvH0jbHB1QG/aw/UPU3VgoZSxjIZA=)
                          2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:3d:44:d1:4b:3e:22:30:46:84:6e:4c:c8:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Jun 29 05:00:50 2025 GMT
            Not After : Jun 30 05:00:50 2025 GMT
        Subject: CN=4283e49751cb4dcee0a75afc155547e544780ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:3d:c6:f9:46:6d:b1:6b:e1:00:5d:87:9b:
                    85:07:33:6e:d8:55:16:82:2a:01:24:71:70:2c:31:
                    96:08:d4:98:64:d6:4e:dd:04:da:86:83:26:63:da:
                    29:f6:c8:eb:b6:ec:3f:30:aa:51:4d:5a:af:73:87:
                    ba:ff:da:cd:f2:7d:01:76:b7:1c:39:56:47:e7:5a:
                    42:03:8b:ad:cc:1c:97:d5:22:4a:3c:bf:74:36:17:
                    fd:69:ef:0a:78:3f:8f:c9:1e:ef:9a:f9:2b:b5:a1:
                    58:ca:a5:b4:74:90:4f:29:d1:3b:a9:61:65:e6:c6:
                    02:77:ab:9b:58:e6:12:11:3b:24:33:91:9c:16:fb:
                    fa:14:4d:43:ce:84:d6:69:b5:e5:63:c6:a2:92:f4:
                    e2:16:c0:7c:8b:17:b2:c8:21:4e:e7:ca:d5:4a:5f:
                    d2:f5:1a:0d:ba:60:f5:31:0f:44:c4:06:e0:97:2c:
                    3e:d8:8c:fa:a1:0c:f0:2d:b9:d2:a7:ee:2c:13:88:
                    37:de:06:90:06:be:6b:3b:3f:a2:97:cb:32:d0:02:
                    b6:e2:a0:c0:62:a6:9f:21:97:d7:8e:ee:35:a1:72:
                    21:8d:a1:5c:bc:f6:f7:6b:90:4d:c3:16:05:ee:07:
                    6c:3a:2c:44:1a:9e:ac:10:13:fe:14:b4:ed:a2:e9:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:83:E4:97:51:CB:4D:CE:E0:A7:5A:FC:15:55:47:E5:44:78:0F:F1
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7a:68:77:d7:38:53:57:db:ea:4e:b1:43:6d:c3:8b:4a:a0:
         b6:2e:80:71:f7:b8:d8:24:f9:1f:26:2f:fa:76:16:79:86:33:
         31:5e:a4:5d:e5:90:fb:2b:e7:0f:0e:05:df:64:de:7f:4f:d7:
         0a:87:5c:33:ab:f1:10:52:81:9e:86:a7:3c:61:e1:35:9c:9d:
         de:75:c8:bc:4b:96:f7:c5:35:47:22:2d:e2:3f:7c:db:39:4d:
         2e:19:df:d4:e9:b0:d3:f2:00:d4:b0:60:20:29:21:64:c5:e0:
         72:d4:15:20:da:fa:71:9d:6f:0d:9d:63:83:ab:98:07:1a:9a:
         50:e1:90:a7:2d:ad:4f:ac:44:75:83:60:66:11:5b:26:ec:51:
         5a:fc:d4:cd:a0:66:16:f2:1d:a9:57:e2:d0:fa:d0:94:39:ef:
         02:45:39:55:d9:e1:2b:88:a9:0a:ad:cb:8a:32:b4:be:0d:6e:
         6a:ae:85:d6:ed:20:91:aa:e4:4e:26:4c:3e:aa:21:3c:d0:30:
         00:8d:7e:ee:01:27:77:6d:63:29:d4:21:50:65:65:24:52:92:
         0e:89:c8:80:92:8a:74:1f:c4:a5:8d:88:a4:a6:2e:3d:e3:75:
         86:9e:b5:a7:cc:7e:73:82:b3:58:b8:68:8e:5c:ea:bb:7b:bc:
         9c:65:b1:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe6Dz1E0Us+IjBGhG5MyEi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTg3YzViMGQ0MTU1MTZkNzJmNTkxNGY1ZjVmYjUyOGEz
MmExMmMwHhcNMjUwNjI5MDUwMDUwWhcNMjUwNjMwMDUwMDUwWjAzMTEwLwYDVQQD
Eyg0MjgzZTQ5NzUxY2I0ZGNlZTBhNzVhZmMxNTU1NDdlNTQ0NzgwZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGM9xvlGbbFr4QBdh5uFBzNu2FUW
gioBJHFwLDGWCNSYZNZO3QTahoMmY9op9sjrtuw/MKpRTVqvc4e6/9rN8n0Bdrcc
OVZH51pCA4utzByX1SJKPL90Nhf9ae8KeD+PyR7vmvkrtaFYyqW0dJBPKdE7qWFl
5sYCd6ubWOYSETskM5GcFvv6FE1DzoTWabXlY8aikvTiFsB8ixeyyCFO58rVSl/S
9RoNumD1MQ9ExAbglyw+2Iz6oQzwLbnSp+4sE4g33gaQBr5rOz+il8sy0AK24qDA
YqafIZfXju41oXIhjaFcvPb3a5BNwxYF7gdsOixEGp6sEBP+FLTtounU4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEKD5JdRy03O4Kda/BVVR+VEeA/xMB8GA1UdIwQY
MBaAFPlYfFsNQVUW1y9ZFPX1+1KKMqEsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WaDhXdzFCVlJiWEwxa1U5Zlg3VW9veW9Tdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvZjdkMDcwLTMyODEtNDdiNy04NWM4
LThmYjYyNDM5NGU3YS8xLzEtVmg4V3cxQlZSYlhMMWtVOWZYN1Vvb3lvU3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVjL2Y3ZDA3MC0zMjgxLTQ3YjctODVjOC04ZmI2MjQzOTRl
N2EvMS8xLVZoOFd3MUJWUmJYTDFrVTlmWDdVb295b1N3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3po
d9c4U1fb6k6xQ23Di0qgti6Acfe42CT5HyYv+nYWeYYzMV6kXeWQ+yvnDw4F32Te
f0/XCodcM6vxEFKBnoanPGHhNZyd3nXIvEuW98U1RyIt4j982zlNLhnf1Omw0/IA
1LBgICkhZMXgctQVINr6cZ1vDZ1jg6uYBxqaUOGQpy2tT6xEdYNgZhFbJuxRWvzU
zaBmFvIdqVfi0PrQlDnvAkU5VdnhK4ipCq3LijK0vg1uaq6F1u0gkarkTiZMPqoh
PNAwAI1+7gEnd21jKdQhUGVlJFKSDonIgJKKdB/EpY2IpKYuPeN1hp61p8x+c4Kz
WLhojlzqu3u8nGWxxw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:46 2025 by rpki-client