Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          n0wvRpIxu+yLZKdmkLg/raS8Dxa4p9IboDcMidx0RKI=
Subject key identifier:   CD:56:46:C4:BB:B3:AE:2C:77:AA:23:E8:CF:FC:ED:5F:50:FE:C4:9D
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       0197B77CAE5F75A9F7DBCE300BCF1B36F176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 17:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:31 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: CshlveEX6kisiw2yoigzaMgt6RpD91GuFwNsa+3TQV8=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ae:5f:75:a9:f7:db:ce:30:0b:cf:1b:36:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Jun 28 17:01:31 2025 GMT
            Not After : Jun 29 17:01:31 2025 GMT
        Subject: CN=cd5646c4bbb3ae2c77aa23e8cffced5f50fec49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:dc:8d:51:37:13:c6:2a:d1:c5:94:a4:28:
                    f2:8f:68:18:3b:8d:e5:58:f9:65:fa:ec:e6:39:a4:
                    b8:92:67:ec:72:a9:d0:69:ed:3f:00:15:c8:0f:d2:
                    12:fe:b5:2a:16:38:f5:8a:0f:b7:43:4c:93:d8:6f:
                    b9:28:d9:0e:88:1c:b2:c9:30:32:90:6f:51:91:21:
                    22:6b:02:f9:18:b1:67:a6:c0:62:9b:b2:76:02:59:
                    03:52:b6:10:14:ce:8d:20:a5:72:21:90:54:33:40:
                    9c:1f:85:0b:c2:7c:f1:a0:76:bf:1e:2d:1f:cf:d3:
                    a6:6c:be:ac:3a:0d:35:fc:ef:d1:6a:ea:a2:3b:3f:
                    82:d3:1c:fc:6f:cb:55:f5:d7:77:4b:a1:20:ba:75:
                    2c:7e:63:1e:87:1a:f8:3e:39:f7:46:e8:bd:6c:ef:
                    b7:4b:4b:49:13:1f:9d:c3:ee:97:67:b2:a1:82:3c:
                    d5:91:6c:ad:66:79:40:f8:f7:62:dc:ca:d1:d1:5b:
                    7b:6f:72:54:8a:bc:ea:dc:aa:09:cf:10:35:87:e0:
                    89:27:17:3d:17:9a:48:83:0c:53:8d:a8:99:e2:8e:
                    ee:80:c5:cb:1e:33:b5:4a:e7:4d:19:ef:8b:15:c9:
                    56:51:39:49:d9:6e:15:a4:c6:2b:93:93:0e:2e:24:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:56:46:C4:BB:B3:AE:2C:77:AA:23:E8:CF:FC:ED:5F:50:FE:C4:9D
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:aa:e0:80:18:fa:cf:e9:b5:02:80:4b:3f:f2:df:97:6f:
         d3:a2:28:4e:2a:3f:20:fa:f1:92:36:ec:09:9d:ee:37:56:6f:
         7d:5e:07:09:5e:0a:c3:1c:34:d2:e2:88:cf:a1:b6:52:25:6f:
         46:c7:2c:db:41:1a:92:1e:8a:90:d1:3a:0a:bc:6b:cc:d5:a6:
         0b:7c:a0:72:81:71:a6:2f:cf:34:1f:7a:9d:5a:3a:1a:22:8e:
         7f:30:a0:be:de:c6:f1:07:36:10:95:c7:33:4b:bf:7d:04:6b:
         db:e6:fc:e3:33:7e:7b:03:69:e4:67:4d:2c:05:ae:be:ec:d0:
         72:45:e9:5e:6e:26:f8:4f:b5:9e:91:8f:cb:a7:ea:1d:e5:10:
         cb:67:ab:95:ee:86:eb:e4:57:fc:7a:ae:31:44:72:c6:db:a7:
         59:a8:63:5f:4d:93:28:42:1d:90:c5:3a:73:52:55:cd:9e:72:
         95:6b:35:02:58:15:a7:cb:fb:c9:17:45:fa:89:29:74:a8:f6:
         23:96:9f:9e:f4:58:74:48:14:25:0f:f2:86:83:c1:ba:d8:9e:
         22:e8:7c:f8:fb:4c:60:12:df:c6:11:53:0a:c0:8f:38:f7:cd:
         08:3d:a3:c1:30:b7:e7:61:b0:e3:fc:e3:e6:3f:00:db:ef:50:
         e5:9f:17:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fK5fdan3284wC88bNvF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWU0NzBiZjUxMDk5NzY5MzRmNTFlN2VhZWYyMTA3Nzlh
MmM0ZGUwHhcNMjUwNjI4MTcwMTMxWhcNMjUwNjI5MTcwMTMxWjAzMTEwLwYDVQQD
EyhjZDU2NDZjNGJiYjNhZTJjNzdhYTIzZThjZmZjZWQ1ZjUwZmVjNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxibcjVE3E8Yq0cWUpCjyj2gYO43l
WPll+uzmOaS4kmfscqnQae0/ABXID9IS/rUqFjj1ig+3Q0yT2G+5KNkOiByyyTAy
kG9RkSEiawL5GLFnpsBim7J2AlkDUrYQFM6NIKVyIZBUM0CcH4ULwnzxoHa/Hi0f
z9OmbL6sOg01/O/RauqiOz+C0xz8b8tV9dd3S6EgunUsfmMehxr4Pjn3Rui9bO+3
S0tJEx+dw+6XZ7KhgjzVkWytZnlA+Pdi3MrR0Vt7b3JUirzq3KoJzxA1h+CJJxc9
F5pIgwxTjaiZ4o7ugMXLHjO1SudNGe+LFclWUTlJ2W4VpMYrk5MOLiQb7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1WRsS7s64sd6oj6M/87V9Q/sSdMB8GA1UdIwQY
MBaAFOzuRwv1EJl2k09R5+rvIQd5osTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZjk1ZDUtYWU2OS00M2JiLWI1MzEt
NDE4NGVkMzMxYjc1LzEvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zZjk1ZDUtYWU2OS00M2JiLWI1MzEtNDE4NGVkMzMxYjc1
LzEvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjuq4IAY
+s/ptQKASz/y35dv06IoTio/IPrxkjbsCZ3uN1ZvfV4HCV4Kwxw00uKIz6G2UiVv
Rscs20Eakh6KkNE6CrxrzNWmC3ygcoFxpi/PNB96nVo6GiKOfzCgvt7G8Qc2EJXH
M0u/fQRr2+b84zN+ewNp5GdNLAWuvuzQckXpXm4m+E+1npGPy6fqHeUQy2erle6G
6+RX/HquMURyxtunWahjX02TKEIdkMU6c1JVzZ5ylWs1AlgVp8v7yRdF+okpdKj2
I5afnvRYdEgUJQ/yhoPButieIuh8+PtMYBLfxhFTCsCPOPfNCD2jwTC352Gw4/zj
5j8A2+9Q5Z8Xmw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client