Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File:                     SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier:          6JzzJBgWyI59AKtlknunPPd+Abk8WTz701HNcQPhf84=
Subject key identifier:   97:E8:CB:63:78:3B:68:80:B4:49:2E:23:C2:F3:81:B4:AD:D4:DE:28
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer:       /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial:       0197B96AAF48A106951BA710357B1CC571C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 02:01:05 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:05 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:05 +0000
Files and hashes:         1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
                          2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: hyfq/dZSHo8C+S2yMupX44FgOEJ7QibCj7l+hGApwiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:af:48:a1:06:95:1b:a7:10:35:7b:1c:c5:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
        Validity
            Not Before: Jun 29 02:01:05 2025 GMT
            Not After : Jun 30 02:01:05 2025 GMT
        Subject: CN=97e8cb63783b6880b4492e23c2f381b4add4de28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:40:fa:d8:b3:76:a1:ee:3e:1f:c8:0d:49:
                    ac:7d:3f:34:20:86:38:85:0b:90:a4:cc:3d:03:8c:
                    da:b3:a4:ad:6a:45:a8:dd:b9:75:98:aa:23:d3:c1:
                    a1:47:40:17:89:6f:fd:90:a5:f8:97:13:98:ec:af:
                    08:cb:e6:b6:86:a4:e6:d6:3f:66:b5:b3:7f:be:f1:
                    4f:bf:00:a3:3d:b3:5c:a4:49:0a:d8:0c:23:01:aa:
                    39:53:7b:45:66:7f:d7:62:61:96:9b:6a:fe:74:db:
                    53:07:b2:c5:a0:92:a5:4c:06:23:aa:9e:7b:3a:96:
                    74:7e:39:1f:25:85:db:d7:95:d9:7a:5c:62:fc:0f:
                    52:6f:3e:ba:3c:46:d7:b3:f1:0f:67:64:6e:98:e5:
                    be:75:38:ca:5d:1e:a1:2a:b5:3e:7c:0b:4a:9e:ca:
                    a7:e8:a0:67:6b:c9:1a:44:f9:d6:ef:10:58:39:1c:
                    5f:3f:93:05:07:00:c7:08:c7:86:78:3a:a6:85:2b:
                    4d:c5:61:59:d3:f8:e2:f1:5c:4c:5e:63:e0:16:86:
                    f0:52:5c:08:06:73:86:af:ef:18:29:3f:98:ee:91:
                    27:f6:fa:f5:76:66:34:0a:dd:50:6a:4b:f4:1c:21:
                    64:d0:b5:48:41:b4:af:cb:f2:c9:39:31:f0:ce:da:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:CB:63:78:3B:68:80:B4:49:2E:23:C2:F3:81:B4:AD:D4:DE:28
            X509v3 Authority Key Identifier:
                keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:2d:97:7a:6e:f8:c0:83:0b:be:87:da:f2:69:e0:fc:d1:
         c2:67:1f:52:a3:6b:52:f8:ff:48:59:40:52:12:d8:50:e5:b5:
         16:44:a6:57:c3:c5:e6:25:5a:1f:fe:5f:37:87:78:59:1a:db:
         bf:fd:17:19:a5:1d:09:c8:fe:8a:f7:8d:2a:2f:5b:d8:a4:b2:
         c4:a2:68:79:27:e4:13:c5:3e:ab:8e:29:75:f3:7d:db:65:f0:
         f1:69:01:8d:8e:3e:36:55:c0:b5:2a:77:51:8b:68:42:53:db:
         59:fa:7d:03:62:83:e7:e4:a9:8f:c0:32:d7:d0:81:7f:11:a2:
         84:71:cc:41:32:0f:05:65:9e:21:0a:1f:7d:c0:7f:2d:ad:b3:
         2d:38:4f:18:db:a0:36:4f:b9:f7:f0:14:bc:f7:c2:05:5b:52:
         61:1d:72:29:b5:c2:b3:10:59:0c:3a:43:ba:fc:ab:0a:4f:48:
         e5:d2:8d:da:2e:f9:53:bb:fd:2e:95:f6:b0:e3:15:67:f0:c1:
         6b:ff:9d:ea:b1:c7:31:6d:b9:d6:c1:19:f9:8a:71:96:ea:ad:
         e7:ed:56:ae:5a:17:cc:f7:da:32:55:3f:d3:c6:ea:1b:bc:63:
         2d:63:d4:5b:99:47:02:ff:4a:29:29:ba:81:44:5b:b1:d7:b0:
         48:75:54:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5aq9IoQaVG6cQNXscxXHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDUyNmRiZjNkNTc4ZWQ4YjYzMGMwZTcxZGJkMThjZDU0
N2E1Y2QwHhcNMjUwNjI5MDIwMTA1WhcNMjUwNjMwMDIwMTA1WjAzMTEwLwYDVQQD
Eyg5N2U4Y2I2Mzc4M2I2ODgwYjQ0OTJlMjNjMmYzODFiNGFkZDRkZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/dA+tizdqHuPh/IDUmsfT80IIY4
hQuQpMw9A4zas6StakWo3bl1mKoj08GhR0AXiW/9kKX4lxOY7K8Iy+a2hqTm1j9m
tbN/vvFPvwCjPbNcpEkK2AwjAao5U3tFZn/XYmGWm2r+dNtTB7LFoJKlTAYjqp57
OpZ0fjkfJYXb15XZelxi/A9Sbz66PEbXs/EPZ2RumOW+dTjKXR6hKrU+fAtKnsqn
6KBna8kaRPnW7xBYORxfP5MFBwDHCMeGeDqmhStNxWFZ0/ji8VxMXmPgFobwUlwI
BnOGr+8YKT+Y7pEn9vr1dmY0Ct1Qakv0HCFk0LVIQbSvy/LJOTHwztraQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfoy2N4O2iAtEkuI8LzgbSt1N4oMB8GA1UdIwQY
MBaAFEgFJtvz1Xjti2MMDnHb0YzVR6XNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUt
ODAxMGYxM2JhMTVhLzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUtODAxMGYxM2JhMTVh
LzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksYtl3pu
+MCDC76H2vJp4PzRwmcfUqNrUvj/SFlAUhLYUOW1FkSmV8PF5iVaH/5fN4d4WRrb
v/0XGaUdCcj+iveNKi9b2KSyxKJoeSfkE8U+q44pdfN922Xw8WkBjY4+NlXAtSp3
UYtoQlPbWfp9A2KD5+Spj8Ay19CBfxGihHHMQTIPBWWeIQoffcB/La2zLThPGNug
Nk+59/AUvPfCBVtSYR1yKbXCsxBZDDpDuvyrCk9I5dKN2i75U7v9LpX2sOMVZ/DB
a/+d6rHHMW251sEZ+Ypxluqt5+1WrloXzPfaMlU/08bqG7xjLWPUW5lHAv9KKSm6
gURbsdewSHVUog==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:29 2025 by rpki-client