Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
File:                     V_nB-yK84e8kHdfviSpRjQVmqKs.mft (raw, json)
Hash identifier:          Q6gAyskEkUS7OgWV90V5Ws2Av5ErD3k3CRQFhcnHA9g=
Subject key identifier:   CC:8A:01:46:F6:A4:28:D5:59:54:12:51:68:B2:E7:AF:5F:B2:B5:8B
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Certificate issuer:       /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial:       0197B70E94C78F8C26A7AD9DAD4F347B0CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 15:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:15 +0000
Files and hashes:         1: V_nB-yK84e8kHdfviSpRjQVmqKs.crl (hash: ZGIOrLANsbsENIw8CGkVCEmGJJ2EoslhpYaPQKUllLs=)
                          2: fnzKoJIItFzpKqsa1DSC_YU9Oz0.roa (hash: VMMeskb+gseTxaGOSqruyC/TYUaQqqzUpJ/qPck/ehc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:94:c7:8f:8c:26:a7:ad:9d:ad:4f:34:7b:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
        Validity
            Not Before: Jun 28 15:01:15 2025 GMT
            Not After : Jun 29 15:01:15 2025 GMT
        Subject: CN=cc8a0146f6a428d55954125168b2e7af5fb2b58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:43:a7:da:b0:4e:15:f2:72:aa:16:65:16:
                    66:d7:13:49:92:1d:fd:b6:3a:48:4d:d3:6d:e3:a8:
                    09:bb:f2:f3:e4:04:68:1e:e8:70:5f:19:76:6e:30:
                    6d:c2:ba:5e:fd:81:cd:11:44:a0:6e:3a:57:a0:c7:
                    15:17:61:8b:dc:7f:50:07:f4:0e:43:4f:30:79:65:
                    6e:ae:fa:c7:81:d2:db:4f:88:95:bb:cd:1e:cd:6e:
                    b2:57:11:2c:db:3c:ef:76:d7:fa:d4:45:f4:17:25:
                    80:48:ac:0f:08:95:9a:8a:6b:e6:c2:a6:d2:ad:7a:
                    97:a1:81:ae:d2:88:b7:de:f8:b3:45:21:67:20:79:
                    be:a5:f8:7c:31:db:85:4e:79:22:71:83:68:d1:be:
                    d3:e1:c6:1f:4b:ab:70:e0:1d:20:f2:29:ed:40:54:
                    00:db:62:61:57:0a:e2:dc:5f:1f:27:22:71:47:a5:
                    94:67:b1:a7:c3:89:be:c0:97:a5:24:07:fe:f5:31:
                    96:95:4a:83:12:17:4a:4f:43:0f:ba:ec:ce:3a:ac:
                    31:4a:5d:f3:9b:bb:c0:a3:f7:72:1a:e0:90:b0:22:
                    a0:2c:d7:29:7b:99:31:04:43:b5:db:22:24:60:f2:
                    d6:d8:0c:83:5e:02:71:e6:2f:22:1f:1f:55:92:2c:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8A:01:46:F6:A4:28:D5:59:54:12:51:68:B2:E7:AF:5F:B2:B5:8B
            X509v3 Authority Key Identifier:
                keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:cc:ee:f2:0b:01:b0:29:9b:27:b9:a1:4d:ad:80:50:72:
         a7:95:90:b8:4d:b5:da:7c:c4:2f:2e:88:b1:31:dd:46:96:f1:
         60:85:b2:1f:0b:47:5e:56:46:95:0f:57:03:80:09:7f:71:82:
         62:77:93:5f:d3:b6:1d:52:59:38:32:da:d5:64:85:1d:cd:54:
         7b:b9:03:d1:c2:d0:6c:d1:fb:a9:88:0a:56:87:73:44:3b:ab:
         f0:3c:22:56:37:c8:8d:8c:5d:fe:e1:94:7d:fd:52:2f:f9:c5:
         b2:dc:e0:92:93:1b:2a:75:3f:6d:e1:8c:13:00:c2:8a:c3:5b:
         9b:a1:52:b0:02:c3:5e:70:ab:d4:a5:00:b8:ee:2b:11:5e:46:
         fa:e6:80:44:52:65:31:4e:f7:93:c6:49:d5:2e:6b:3d:e8:de:
         ec:ab:1f:1f:e4:df:dc:90:a3:93:8a:70:74:4e:18:a4:bd:82:
         e4:82:70:f4:33:98:f5:80:d0:42:a6:b6:82:d5:36:99:9f:eb:
         4b:3e:1f:fd:a9:c7:ad:5f:65:20:70:2b:62:ac:be:fa:5a:46:
         2b:d9:44:08:8d:e4:a8:aa:a4:01:be:eb:fb:16:d0:c9:c2:c8:
         b2:8f:53:de:c9:19:cc:6e:08:b6:35:44:8c:30:72:a1:3d:83:
         52:0c:4a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DpTHj4wmp62drU80ewy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjljMWZiMjJiY2UxZWYyNDFkZDdlZjg5MmE1MThkMDU2
NmE4YWIwHhcNMjUwNjI4MTUwMTE1WhcNMjUwNjI5MTUwMTE1WjAzMTEwLwYDVQQD
EyhjYzhhMDE0NmY2YTQyOGQ1NTk1NDEyNTE2OGIyZTdhZjVmYjJiNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZlDp9qwThXycqoWZRZm1xNJkh39
tjpITdNt46gJu/Lz5ARoHuhwXxl2bjBtwrpe/YHNEUSgbjpXoMcVF2GL3H9QB/QO
Q08weWVurvrHgdLbT4iVu80ezW6yVxEs2zzvdtf61EX0FyWASKwPCJWaimvmwqbS
rXqXoYGu0oi33vizRSFnIHm+pfh8MduFTnkicYNo0b7T4cYfS6tw4B0g8intQFQA
22JhVwri3F8fJyJxR6WUZ7Gnw4m+wJelJAf+9TGWlUqDEhdKT0MPuuzOOqwxSl3z
m7vAo/dyGuCQsCKgLNcpe5kxBEO12yIkYPLW2AyDXgJx5i8iHx9Vkizk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyKAUb2pCjVWVQSUWiy569fsrWLMB8GA1UdIwQY
MBaAFFf5wfsivOHvJB3X74kqUY0FZqirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85NzY1OTctNjU5Yi00NGU0LTkyYjIt
OWQ4ZWEyMzQyOTViLzEvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85NzY1OTctNjU5Yi00NGU0LTkyYjItOWQ4ZWEyMzQyOTVi
LzEvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHjM7vIL
AbApmye5oU2tgFByp5WQuE212nzELy6IsTHdRpbxYIWyHwtHXlZGlQ9XA4AJf3GC
YneTX9O2HVJZODLa1WSFHc1Ue7kD0cLQbNH7qYgKVodzRDur8DwiVjfIjYxd/uGU
ff1SL/nFstzgkpMbKnU/beGMEwDCisNbm6FSsALDXnCr1KUAuO4rEV5G+uaARFJl
MU73k8ZJ1S5rPeje7KsfH+Tf3JCjk4pwdE4YpL2C5IJw9DOY9YDQQqa2gtU2mZ/r
Sz4f/anHrV9lIHArYqy++lpGK9lECI3kqKqkAb7r+xbQycLIso9T3skZzG4ItjVE
jDByoT2DUgxKqw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:26 2025 by rpki-client