Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          4vhhXF8sbfBrpOc9kLbS133codiOn0KrSchcDvTjXPY=
Subject key identifier:   5A:8E:78:98:1F:D9:69:09:3B:3D:38:3C:A2:61:03:68:76:F4:FF:11
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       0197CC4C75FCA107DC1E9595814CB141D5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          15C3
Signing time:             Wed 02 Jul 2025 18:00:52 +0000
Manifest this update:     Wed 02 Jul 2025 18:00:52 +0000
Manifest next update:     Thu 03 Jul 2025 18:00:52 +0000
Files and hashes:         1: 6IT6mwHMW9EmbRzGBzUbwgbsgAw.roa (hash: IGvYi40SLFLfH2GmSqyI1/Hiu8HPblZw4TFx94fRjF4=)
                          2: ATi_Bwlv3Jj4IB4BpyKVNAFc_kM.roa (hash: MWLTnUp2/uK02bics6n76jtOUMYQIGtbRzMIp5qiCR0=)
                          3: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: 9S3byUjSaffOmi7vqmu06o907Z+5sylOvftYyqSTiuk=)
                          4: X8j-g5UXznvugZtsX4vPUTZkNCs.roa (hash: m7iBDDotS9ucjB95WAdQ3fETMEIIDDjOdH3AnU2GIAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:4c:75:fc:a1:07:dc:1e:95:95:81:4c:b1:41:d5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Jul  2 18:00:52 2025 GMT
            Not After : Jul  3 18:00:52 2025 GMT
        Subject: CN=5a8e78981fd969093b3d383ca261036876f4ff11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:de:ce:c7:cc:89:a0:c7:68:6e:b0:53:c9:
                    7b:a7:ae:e5:f0:f7:f9:bb:a1:ed:bc:8e:5a:54:1d:
                    fd:74:c6:06:19:de:01:35:11:aa:16:cf:46:09:2f:
                    ad:5d:83:04:65:27:ca:98:70:72:91:99:8d:9c:25:
                    75:08:b4:f3:d0:82:8f:ea:1b:4a:f2:b4:90:27:3c:
                    40:43:f0:35:43:f7:f4:2a:d8:ff:1d:6f:58:b2:4a:
                    f9:29:a2:9e:64:d0:8b:43:6b:77:eb:de:27:e5:0d:
                    42:68:40:6e:70:de:3e:4b:52:20:9f:4f:e3:03:38:
                    9d:f6:8f:11:8d:7f:03:90:a1:6e:8a:5a:05:09:8f:
                    65:13:e2:76:ce:f8:45:0e:fb:25:a2:51:7c:5e:d8:
                    1e:00:06:e2:70:35:2f:1b:b1:20:eb:57:9c:ff:43:
                    d4:fa:81:4a:7d:1d:02:c1:b8:dc:13:d9:0e:2b:a4:
                    0a:9d:60:7d:35:0c:54:09:71:f7:a7:61:35:d1:03:
                    47:1a:9d:07:fb:f7:1f:b1:10:8c:58:c3:a1:a6:00:
                    77:6a:23:98:1d:76:6a:8a:fe:61:a6:ee:42:d8:27:
                    48:da:28:6f:90:0d:f5:f4:f3:f6:2a:68:eb:9a:5a:
                    b0:29:1d:97:92:fa:4c:f7:de:1a:d7:2c:4d:b2:95:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:78:98:1F:D9:69:09:3B:3D:38:3C:A2:61:03:68:76:F4:FF:11
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:74:17:c3:31:75:83:81:b8:14:8d:e2:75:1e:a6:9d:80:99:
         6c:59:4b:20:d7:22:9f:08:52:fe:37:8d:ae:e1:73:e4:d0:63:
         fc:a3:30:8e:3d:1d:01:54:d7:43:c6:8c:be:9e:20:27:87:d7:
         f3:5b:7a:5c:6f:76:96:51:cc:da:36:4f:e4:26:a3:b5:74:1f:
         5f:ea:b7:96:c0:28:ad:02:b2:8e:fa:1c:c8:a1:f9:c6:07:f1:
         84:9c:20:b8:7e:15:d2:71:92:76:ee:64:2b:e9:f9:36:cf:5a:
         39:cf:bd:52:6e:7d:79:94:70:a2:b9:5a:43:7b:a1:f7:10:57:
         e8:b5:09:4d:1d:56:44:74:f3:06:73:ab:9d:6b:2d:59:ed:a3:
         e1:1b:b1:9c:ba:50:30:6d:2d:3a:dd:72:84:4c:7a:4e:5f:44:
         7f:de:79:23:cb:73:3b:8a:e7:69:c8:54:e0:ac:e3:5a:dd:c5:
         59:9a:cd:3d:5a:87:5f:85:04:ca:1c:d6:54:66:5e:63:f2:0d:
         ca:84:37:60:2b:40:fe:d5:54:8f:95:3d:b4:bc:24:e5:95:72:
         1b:43:09:b9:57:90:07:f3:42:18:c9:38:8b:7a:68:7d:49:31:
         c5:cb:77:27:52:3f:9f:f9:da:41:b2:ee:cc:bc:ea:5f:d6:68:
         dc:89:f3:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMTHX8oQfcHpWVgUyxQdXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWVjNTIzMWQyMTJiMzEwNTc5ZDc4ZmM0MTQ3OWNhNmVj
MmFhMDcwHhcNMjUwNzAyMTgwMDUyWhcNMjUwNzAzMTgwMDUyWjAzMTEwLwYDVQQD
Eyg1YThlNzg5ODFmZDk2OTA5M2IzZDM4M2NhMjYxMDM2ODc2ZjRmZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG/ezsfMiaDHaG6wU8l7p67l8Pf5
u6HtvI5aVB39dMYGGd4BNRGqFs9GCS+tXYMEZSfKmHBykZmNnCV1CLTz0IKP6htK
8rSQJzxAQ/A1Q/f0Ktj/HW9Yskr5KaKeZNCLQ2t3694n5Q1CaEBucN4+S1Ign0/j
Azid9o8RjX8DkKFuiloFCY9lE+J2zvhFDvslolF8XtgeAAbicDUvG7Eg61ec/0PU
+oFKfR0CwbjcE9kOK6QKnWB9NQxUCXH3p2E10QNHGp0H+/cfsRCMWMOhpgB3aiOY
HXZqiv5hpu5C2CdI2ihvkA319PP2KmjrmlqwKR2XkvpM994a1yxNspVopQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqOeJgf2WkJOz04PKJhA2h29P8RMB8GA1UdIwQY
MBaAFC7uxSMdISsxBXnXj8QUecpuwqoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDIt
MjcxYTk1NzZlYWU3LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDItMjcxYTk1NzZlYWU3
LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3QXwzF1
g4G4FI3idR6mnYCZbFlLINcinwhS/jeNruFz5NBj/KMwjj0dAVTXQ8aMvp4gJ4fX
81t6XG92llHM2jZP5CajtXQfX+q3lsAorQKyjvocyKH5xgfxhJwguH4V0nGSdu5k
K+n5Ns9aOc+9Um59eZRworlaQ3uh9xBX6LUJTR1WRHTzBnOrnWstWe2j4RuxnLpQ
MG0tOt1yhEx6Tl9Ef955I8tzO4rnachU4KzjWt3FWZrNPVqHX4UEyhzWVGZeY/IN
yoQ3YCtA/tVUj5U9tLwk5ZVyG0MJuVeQB/NCGMk4i3pofUkxxct3J1I/n/naQbLu
zLzqX9Zo3InzaQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:17:31 2025 by rpki-client