Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          gtEp+RBCZVqnzWb0O+LGm4izXc9yGo17tJ5iP09o2w8=
Subject key identifier:   B7:94:97:FB:55:5F:11:78:69:D6:81:B9:53:7D:B9:8A:4A:A3:73:49
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       0197C4C9C3D00A691D7966F56D5A1D3B26A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          07B5
Signing time:             Tue 01 Jul 2025 07:00:46 +0000
Manifest this update:     Tue 01 Jul 2025 07:00:46 +0000
Manifest next update:     Wed 02 Jul 2025 07:00:46 +0000
Files and hashes:         1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: gdE/fkZy4/0XRY68WUuVhUau2BIpJF7h3Nrd38UwONY=)
                          2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:c9:c3:d0:0a:69:1d:79:66:f5:6d:5a:1d:3b:26:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Jul  1 07:00:46 2025 GMT
            Not After : Jul  2 07:00:46 2025 GMT
        Subject: CN=b79497fb555f117869d681b9537db98a4aa37349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:86:21:f6:39:ba:51:8c:11:8e:2b:c5:05:
                    d3:41:64:1e:b9:75:82:8f:b8:16:11:6e:94:43:ce:
                    aa:ff:24:23:79:f9:48:02:eb:25:48:70:f5:af:37:
                    55:a7:a5:4d:68:20:d3:05:19:f4:33:da:23:34:9e:
                    04:89:e8:2f:fd:a9:65:a0:db:ce:b1:86:88:a8:71:
                    87:5d:e8:8d:9e:1f:82:f9:26:9d:d9:36:65:b2:b9:
                    3c:80:a1:56:1e:15:b9:b6:0b:7f:dc:aa:0d:4f:f4:
                    ec:b1:bf:1d:7e:97:80:94:53:5b:0f:22:27:b9:c1:
                    df:fa:7a:b7:53:e4:d7:69:4e:29:c0:02:25:6a:d7:
                    75:1f:e4:a7:36:9a:81:3a:8b:7e:b2:c2:59:b1:6c:
                    f8:b4:cc:d2:94:fa:40:f1:00:ff:7c:99:7f:9b:66:
                    bb:5b:8e:52:2e:a6:47:05:a1:06:f7:ac:41:58:6e:
                    84:be:26:46:99:45:3d:d8:30:37:c8:6c:2e:00:89:
                    89:b8:6c:e1:db:02:c4:eb:59:c3:ab:e6:e4:83:8b:
                    6e:4b:99:f9:c4:00:7b:72:10:ab:06:56:fc:ce:04:
                    b2:34:d3:4b:1f:ba:5c:66:e2:42:22:4c:10:0f:38:
                    49:e1:76:62:50:ab:4b:0b:06:c8:4c:01:1c:3d:8e:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:97:FB:55:5F:11:78:69:D6:81:B9:53:7D:B9:8A:4A:A3:73:49
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:95:0e:3b:31:a8:a5:9a:bc:66:1e:f1:a4:01:f6:40:3e:f2:
         a0:65:43:30:bf:e6:1d:fe:4c:d3:48:57:51:93:47:9c:b9:62:
         5d:5e:8a:91:27:93:ba:d3:4b:08:b7:45:6e:66:ce:4c:b6:85:
         35:a8:85:2f:c2:bf:68:e3:ac:cb:7b:a5:be:93:94:4d:96:d5:
         bc:73:9a:ba:06:3d:5c:39:71:25:b4:e7:25:3f:8e:2e:0c:a0:
         de:52:db:dc:63:6a:7e:7c:a7:dd:47:13:1a:b8:9e:16:5b:d8:
         6c:7b:9a:ff:bf:ef:ce:a5:6f:6b:40:08:5e:6f:65:ce:4f:42:
         80:48:f9:7d:a3:63:4b:f2:d5:3b:bc:b1:5e:1a:c2:05:e6:c7:
         24:f0:9a:0a:7e:27:75:be:44:57:50:fb:0c:7e:7d:ac:35:d9:
         15:55:d1:83:91:8a:8f:c9:49:a6:77:11:cf:08:2b:a1:67:de:
         9a:b8:63:a3:e4:11:04:d7:86:94:c2:ed:95:b5:f0:e5:61:98:
         9c:22:97:72:49:6b:19:14:a3:60:66:a2:3d:c2:50:19:f2:12:
         9b:74:b8:4c:33:46:7c:2e:cd:bb:52:9f:ff:c9:10:4e:38:0c:
         9c:59:1f:a3:39:8c:bf:c2:02:b0:f9:aa:ee:9b:18:13:0c:59:
         35:ac:a9:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEycPQCmkdeWb1bVodOyahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjdjNDkwNDQ3ZjUwNDVjMDIzNjdkYjhkMjFiNGUwODc0
OWZhNzYwHhcNMjUwNzAxMDcwMDQ2WhcNMjUwNzAyMDcwMDQ2WjAzMTEwLwYDVQQD
EyhiNzk0OTdmYjU1NWYxMTc4NjlkNjgxYjk1MzdkYjk4YTRhYTM3MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVOGIfY5ulGMEY4rxQXTQWQeuXWC
j7gWEW6UQ86q/yQjeflIAuslSHD1rzdVp6VNaCDTBRn0M9ojNJ4Eiegv/alloNvO
sYaIqHGHXeiNnh+C+Sad2TZlsrk8gKFWHhW5tgt/3KoNT/Tssb8dfpeAlFNbDyIn
ucHf+nq3U+TXaU4pwAIlatd1H+SnNpqBOot+ssJZsWz4tMzSlPpA8QD/fJl/m2a7
W45SLqZHBaEG96xBWG6EviZGmUU92DA3yGwuAImJuGzh2wLE61nDq+bkg4tuS5n5
xAB7chCrBlb8zgSyNNNLH7pcZuJCIkwQDzhJ4XZiUKtLCwbITAEcPY6hrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeUl/tVXxF4adaBuVN9uYpKo3NJMB8GA1UdIwQY
MBaAFHNnxJBEf1BFwCNn240htOCHSfp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTIt
NWJhNzU2ZTc4ODY5LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTItNWJhNzU2ZTc4ODY5
LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZUOOzGo
pZq8Zh7xpAH2QD7yoGVDML/mHf5M00hXUZNHnLliXV6KkSeTutNLCLdFbmbOTLaF
NaiFL8K/aOOsy3ulvpOUTZbVvHOaugY9XDlxJbTnJT+OLgyg3lLb3GNqfnyn3UcT
GrieFlvYbHua/7/vzqVva0AIXm9lzk9CgEj5faNjS/LVO7yxXhrCBebHJPCaCn4n
db5EV1D7DH59rDXZFVXRg5GKj8lJpncRzwgroWfemrhjo+QRBNeGlMLtlbXw5WGY
nCKXcklrGRSjYGaiPcJQGfISm3S4TDNGfC7Nu1Kf/8kQTjgMnFkfozmMv8ICsPmq
7psYEwxZNaypSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:32 2025 by rpki-client