Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          GLRs8vZNVeIqm5cJY0VxoldwQl/e8LPAGDVJLXNxfCk=
Subject key identifier:   50:C9:0B:90:50:9E:73:61:5D:41:96:E8:0F:74:5D:E9:A0:59:89:0D
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       0197C3B7A13EDF716299EBC7851FEA776605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          15C4
Signing time:             Tue 01 Jul 2025 02:01:20 +0000
Manifest this update:     Tue 01 Jul 2025 02:01:20 +0000
Manifest next update:     Wed 02 Jul 2025 02:01:20 +0000
Files and hashes:         1: 72fMUbgrTDPPo7cUu15VnQvLNWQ.roa (hash: RvxteBLUmDvyXH+S4lsSzz7zQ7LVEwbzwy16GpnGfc8=)
                          2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
                          3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
                          4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
                          5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: HwgTr1othTpMcC9y0+wkRZi27XcECed1DUetQBynhLQ=)
                          6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
                          7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:b7:a1:3e:df:71:62:99:eb:c7:85:1f:ea:77:66:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jul  1 02:01:20 2025 GMT
            Not After : Jul  2 02:01:20 2025 GMT
        Subject: CN=50c90b90509e73615d4196e80f745de9a059890d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:79:38:ac:04:a1:0b:a2:ae:10:a8:85:87:
                    2a:5d:a7:0b:f6:3c:d1:56:62:b7:f3:70:af:45:02:
                    48:95:cd:52:32:e4:f2:a2:b5:5f:16:41:1b:c9:60:
                    b0:f5:f4:32:c4:1d:5e:c5:3c:8b:61:61:ed:c1:a0:
                    9b:1b:b2:75:42:81:c9:93:db:1e:fe:55:66:b4:c3:
                    6a:ed:a7:4b:0a:d0:f3:67:3a:51:ca:00:b2:d2:d8:
                    ba:ba:68:a8:59:5c:ec:6d:49:f8:c0:ec:cd:56:97:
                    d7:3b:1b:33:41:35:ff:29:54:41:1c:65:52:78:bc:
                    e4:72:62:c2:a6:ca:2f:64:17:66:ec:10:33:a8:37:
                    ec:b0:a6:70:4f:33:f6:eb:22:51:83:fe:b7:cb:48:
                    91:36:4e:36:53:16:c6:78:23:8a:2c:31:40:ae:67:
                    e0:68:8b:50:b0:c6:5c:ca:cf:1e:17:1f:1c:2e:41:
                    85:c0:73:d4:91:6f:7e:0d:fd:70:1d:9f:43:17:29:
                    ad:a4:ed:42:44:69:58:07:2a:69:f3:ab:50:d6:86:
                    6f:22:62:f4:b3:f2:8f:26:39:79:53:c7:98:d0:7e:
                    55:ce:45:e8:ae:f3:f5:ad:ab:d8:98:2c:c3:2d:24:
                    9c:58:ed:60:69:75:23:cd:62:b4:8d:e1:85:27:42:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C9:0B:90:50:9E:73:61:5D:41:96:E8:0F:74:5D:E9:A0:59:89:0D
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:a0:8b:e0:01:52:e1:a2:46:4f:86:e5:f0:83:4e:86:aa:
         b6:0c:0b:29:5f:cf:c0:c0:da:c1:27:e8:1a:70:36:34:86:a4:
         7a:4e:dd:1c:63:b5:6d:36:e3:96:98:2f:81:11:6d:13:aa:45:
         a2:c5:9e:f3:30:e6:e7:bc:fa:3f:b5:df:1e:b5:08:ea:c4:bc:
         9f:24:a1:9c:ab:c3:8e:99:0d:40:a9:3e:b8:f9:ac:39:a6:0b:
         00:e0:8d:30:ef:0b:97:b2:7b:d7:8a:eb:00:1f:2f:ce:0d:43:
         d4:a3:c7:ec:2f:ab:e8:7d:3c:5c:6f:56:18:98:cb:aa:cd:64:
         65:ca:2f:4c:1c:ee:87:82:e1:02:17:1a:fd:7f:41:a9:4a:4c:
         1d:b3:3e:17:57:69:7e:2a:2d:af:f8:2c:56:e8:39:9f:23:b4:
         cd:14:b0:cb:e5:ca:06:aa:5b:94:de:7d:61:d4:74:40:c1:8d:
         ab:88:c9:b5:9a:12:6f:a9:5e:ab:e6:56:6a:33:93:0f:ce:a0:
         b0:c0:ee:04:eb:e4:d0:45:13:5b:45:cd:35:40:cc:6b:90:4b:
         3f:7a:ba:31:f5:cf:02:db:d4:16:ad:6f:9f:8c:3e:78:a3:46:
         cb:b8:95:06:53:28:d1:9d:b4:0f:88:87:19:f2:c2:ef:8b:69:
         15:7e:74:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDt6E+33FimevHhR/qd2YFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh
YWUxNGYwHhcNMjUwNzAxMDIwMTIwWhcNMjUwNzAyMDIwMTIwWjAzMTEwLwYDVQQD
Eyg1MGM5MGI5MDUwOWU3MzYxNWQ0MTk2ZTgwZjc0NWRlOWEwNTk4OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7l5OKwEoQuirhCohYcqXacL9jzR
VmK383CvRQJIlc1SMuTyorVfFkEbyWCw9fQyxB1exTyLYWHtwaCbG7J1QoHJk9se
/lVmtMNq7adLCtDzZzpRygCy0ti6umioWVzsbUn4wOzNVpfXOxszQTX/KVRBHGVS
eLzkcmLCpsovZBdm7BAzqDfssKZwTzP26yJRg/63y0iRNk42UxbGeCOKLDFArmfg
aItQsMZcys8eFx8cLkGFwHPUkW9+Df1wHZ9DFymtpO1CRGlYBypp86tQ1oZvImL0
s/KPJjl5U8eY0H5VzkXorvP1ravYmCzDLSScWO1gaXUjzWK0jeGFJ0L8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDJC5BQnnNhXUGW6A90XemgWYkNMB8GA1UdIwQY
MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct
ZDRmMTJiMzdhMzE4LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4
LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS86gi+AB
UuGiRk+G5fCDToaqtgwLKV/PwMDawSfoGnA2NIakek7dHGO1bTbjlpgvgRFtE6pF
osWe8zDm57z6P7XfHrUI6sS8nyShnKvDjpkNQKk+uPmsOaYLAOCNMO8Ll7J714rr
AB8vzg1D1KPH7C+r6H08XG9WGJjLqs1kZcovTBzuh4LhAhca/X9BqUpMHbM+F1dp
fiotr/gsVug5nyO0zRSwy+XKBqpblN59YdR0QMGNq4jJtZoSb6leq+ZWajOTD86g
sMDuBOvk0EUTW0XNNUDMa5BLP3q6MfXPAtvUFq1vn4w+eKNGy7iVBlMo0Z20D4iH
GfLC74tpFX50pg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:58:00 2025 by rpki-client