Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File:                     HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier:          bPVMLXMxHQ/+Z0kktR719aY6LgubLB9yrRVzh2lC4Jw=
Subject key identifier:   E6:B3:F8:E6:C2:E1:EF:72:15:2B:82:CA:AE:DB:AD:21:C9:22:C9:32
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer:       /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial:       0197B77C3B136A502FDAA0A955DA617DE626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number:          C8
Signing time:             Sat 28 Jun 2025 17:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:01 +0000
Files and hashes:         1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
                          2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: T0hK3nf+UuUn76dlEn45yW+sQnBnslT4gmzQxjCkFKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:3b:13:6a:50:2f:da:a0:a9:55:da:61:7d:e6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
        Validity
            Not Before: Jun 28 17:01:01 2025 GMT
            Not After : Jun 29 17:01:01 2025 GMT
        Subject: CN=e6b3f8e6c2e1ef72152b82caaedbad21c922c932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:e5:fe:e5:d1:11:95:28:82:49:2e:bf:7f:
                    2c:41:ac:74:0b:78:82:e9:9b:0f:d4:16:b8:dc:dc:
                    f4:9f:f5:49:4e:93:19:4c:da:44:2b:ed:8b:d9:0e:
                    28:2a:27:b8:0c:cc:fd:9a:4e:ee:dd:1c:05:7a:35:
                    f4:e5:c9:64:28:bc:18:81:94:c1:59:3a:de:66:bf:
                    80:0d:33:98:43:58:36:ed:1c:41:4f:07:8b:88:15:
                    c3:59:a0:60:81:24:48:50:88:2c:2b:54:cf:e2:ac:
                    01:bc:d4:e5:f9:f2:db:e9:47:41:91:95:70:74:27:
                    59:49:88:84:5e:1d:96:82:54:b1:aa:47:75:b2:b5:
                    53:e7:70:85:5e:92:77:4a:19:53:21:cd:d6:75:61:
                    ce:5b:af:d7:70:c4:57:d0:2a:1a:60:ab:61:b3:d4:
                    2c:00:0e:11:6f:72:73:19:2e:86:17:17:9c:db:c5:
                    b3:07:0b:07:dd:57:6e:86:1e:20:59:62:fa:6f:60:
                    21:23:0b:79:d9:2b:07:1c:a6:7b:e2:0b:94:ab:49:
                    7e:9f:c3:d3:25:d9:23:8b:a5:a6:0b:25:46:43:24:
                    a4:06:82:6c:87:cf:c2:7f:93:5f:35:65:a7:a2:19:
                    69:7d:d7:11:0c:12:0f:38:22:a8:f7:dc:1d:0e:ad:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:F8:E6:C2:E1:EF:72:15:2B:82:CA:AE:DB:AD:21:C9:22:C9:32
            X509v3 Authority Key Identifier:
                keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:da:0b:50:91:70:17:a8:3f:c9:2d:8a:b4:45:80:f2:ed:54:
         34:d8:91:84:ce:3e:a7:6a:71:08:69:68:54:ec:77:75:20:5d:
         00:48:66:79:78:60:a4:df:6b:f8:e9:b1:5d:65:c7:52:4f:4b:
         19:07:7c:a5:ae:29:bd:f8:3f:59:6c:ec:d6:86:be:85:9d:11:
         d1:02:45:11:24:df:06:08:6a:94:f8:73:70:fb:4b:27:75:db:
         f3:d3:77:f0:98:96:d8:d9:7a:27:b3:d3:c5:79:e2:77:9a:70:
         2f:ea:93:ea:59:32:21:a2:bd:a2:4b:eb:35:e2:0f:6e:37:d5:
         86:6d:99:39:dc:e2:68:87:a1:a4:c3:8c:23:7c:6e:b3:fd:6f:
         9f:de:cc:d0:32:0e:96:f8:34:6d:75:29:59:5e:dd:b2:ea:f4:
         b6:4d:46:1b:b5:74:53:a2:1d:11:b8:a5:cd:d8:d3:9c:fe:42:
         18:47:9b:cd:ac:48:83:49:7b:6a:ee:30:f3:13:01:05:40:56:
         e7:27:3e:e1:0e:72:69:f2:63:44:da:de:d3:3a:77:02:59:ed:
         5e:e5:19:1d:79:f4:73:af:c2:e6:8e:a2:d6:0c:c2:a5:f1:79:
         cc:94:c5:d5:6b:c1:68:44:8c:a8:48:5b:f4:31:cd:05:13:51:
         05:39:ff:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDsTalAv2qCpVdphfeYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi
ZTZkOTQwHhcNMjUwNjI4MTcwMTAxWhcNMjUwNjI5MTcwMTAxWjAzMTEwLwYDVQQD
EyhlNmIzZjhlNmMyZTFlZjcyMTUyYjgyY2FhZWRiYWQyMWM5MjJjOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnTl/uXREZUogkkuv38sQax0C3iC
6ZsP1Ba43Nz0n/VJTpMZTNpEK+2L2Q4oKie4DMz9mk7u3RwFejX05clkKLwYgZTB
WTreZr+ADTOYQ1g27RxBTweLiBXDWaBggSRIUIgsK1TP4qwBvNTl+fLb6UdBkZVw
dCdZSYiEXh2WglSxqkd1srVT53CFXpJ3ShlTIc3WdWHOW6/XcMRX0CoaYKths9Qs
AA4Rb3JzGS6GFxec28WzBwsH3Vduhh4gWWL6b2AhIwt52SsHHKZ74guUq0l+n8PT
Jdkji6WmCyVGQySkBoJsh8/Cf5NfNWWnohlpfdcRDBIPOCKo99wdDq2sgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaz+ObC4e9yFSuCyq7brSHJIskyMB8GA1UdIwQY
MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt
NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2
LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtoLUJFw
F6g/yS2KtEWA8u1UNNiRhM4+p2pxCGloVOx3dSBdAEhmeXhgpN9r+OmxXWXHUk9L
GQd8pa4pvfg/WWzs1oa+hZ0R0QJFESTfBghqlPhzcPtLJ3Xb89N38JiW2Nl6J7PT
xXnid5pwL+qT6lkyIaK9okvrNeIPbjfVhm2ZOdziaIehpMOMI3xus/1vn97M0DIO
lvg0bXUpWV7dsur0tk1GG7V0U6IdEbilzdjTnP5CGEebzaxIg0l7au4w8xMBBUBW
5yc+4Q5yafJjRNre0zp3AlntXuUZHXn0c6/C5o6i1gzCpfF5zJTF1WvBaESMqEhb
9DHNBRNRBTn/tw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:40 2025 by rpki-client