Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File:                     l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier:          Tgqjc7aeem3QcRgJNb/6GF4V5tL5h6pr9htNz9KeYqI=
Subject key identifier:   F5:83:1F:41:DE:C5:F3:D8:23:BD:02:23:E9:39:35:FE:92:E0:AC:99
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer:       /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial:       0197B6A20F5D7CBA5C0F77ACBE8E1CB8EFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number:          155D
Signing time:             Sat 28 Jun 2025 13:02:43 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:43 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:43 +0000
Files and hashes:         1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
                          2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: 5jZJqNmPbb+LJ8j87/Nzmj+8VvXffD/a29lk0SvimEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:0f:5d:7c:ba:5c:0f:77:ac:be:8e:1c:b8:ef:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
        Validity
            Not Before: Jun 28 13:02:43 2025 GMT
            Not After : Jun 29 13:02:43 2025 GMT
        Subject: CN=f5831f41dec5f3d823bd0223e93935fe92e0ac99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:8d:6d:28:f4:92:f5:96:ed:a3:a4:25:b6:
                    89:e1:f7:98:c6:ff:63:2c:cd:d0:fe:c4:2a:10:18:
                    d1:3a:21:f7:82:41:22:da:7b:f3:08:d4:d9:3d:7b:
                    44:ff:0a:f1:7b:7a:2e:51:58:ff:65:e8:10:d0:74:
                    89:23:25:70:38:30:0e:23:ba:6f:47:d7:22:30:fb:
                    9d:a5:fb:e3:24:cb:84:ab:40:b4:9b:23:8f:19:52:
                    56:14:47:40:40:9a:58:c2:56:40:4e:d8:60:f6:8f:
                    3d:2f:a0:57:06:d3:58:55:32:81:c1:14:cf:c2:f9:
                    9c:02:51:93:40:b2:2f:14:e2:46:e0:0c:8e:58:fd:
                    34:5a:93:f1:7a:e2:5c:8e:00:28:64:de:0e:ed:20:
                    ac:4c:ce:23:28:a2:f7:6f:b4:d0:e7:6a:1e:96:c4:
                    4f:bd:12:b9:ed:28:66:e8:f6:a9:af:3a:74:e0:21:
                    d5:a1:29:06:e6:e1:5b:14:0d:a7:1c:50:82:dd:71:
                    4d:42:80:f8:fb:93:bf:f8:ac:c3:87:c6:f3:5d:5b:
                    aa:ff:2b:0a:41:57:43:f8:1b:92:f7:2a:d9:d0:a2:
                    fa:3b:10:0e:b8:99:9a:0b:d9:5e:6a:d3:14:e7:2d:
                    4f:b5:77:47:0a:ee:1d:d3:14:4e:0c:04:bc:d6:c3:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:1F:41:DE:C5:F3:D8:23:BD:02:23:E9:39:35:FE:92:E0:AC:99
            X509v3 Authority Key Identifier:
                keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:c6:ba:0d:0f:77:2b:6d:27:33:f5:ad:68:49:58:33:d2:
         5f:fd:16:a8:96:a1:6b:40:de:25:a5:b8:32:13:f5:5d:b0:65:
         c4:48:eb:51:6a:9b:4b:04:e0:54:11:43:7b:f3:b5:42:b8:9e:
         23:6d:47:fe:38:5c:74:d3:a8:87:54:eb:6a:c2:20:2e:8a:e8:
         e2:90:f7:96:5d:1a:3d:fd:86:6e:21:8a:ac:ef:94:76:a5:f7:
         2e:c2:bd:41:06:98:29:ce:00:49:92:24:7f:e9:b7:35:f5:94:
         c3:7f:db:e7:ec:ed:50:e0:74:56:0e:5f:26:68:f0:a3:e4:c7:
         6c:d9:8b:ed:0d:80:33:44:f4:71:ea:3b:79:94:85:81:19:8e:
         59:75:0e:d7:31:b3:fc:d2:10:23:a8:c6:e7:bd:f6:79:a0:d8:
         91:85:c9:a7:88:8c:ff:8e:24:1f:23:d9:2b:f3:82:30:51:d6:
         07:a2:17:f4:75:ba:c9:87:23:5d:b0:2a:38:46:d7:da:b2:5c:
         4b:38:c5:9d:32:05:5a:22:16:d3:0d:1f:26:1b:1d:b2:62:ba:
         27:96:16:47:f7:8f:2a:8f:5e:26:5b:7e:c3:99:c9:d9:1d:d7:
         63:d8:4c:44:c2:9f:ed:40:92:c8:10:ac:7e:2f:2e:dc:cd:7c:
         60:4f:c6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2og9dfLpcD3esvo4cuO/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx
ZjEzOTcwHhcNMjUwNjI4MTMwMjQzWhcNMjUwNjI5MTMwMjQzWjAzMTEwLwYDVQQD
EyhmNTgzMWY0MWRlYzVmM2Q4MjNiZDAyMjNlOTM5MzVmZTkyZTBhYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN2NbSj0kvWW7aOkJbaJ4feYxv9j
LM3Q/sQqEBjROiH3gkEi2nvzCNTZPXtE/wrxe3ouUVj/ZegQ0HSJIyVwODAOI7pv
R9ciMPudpfvjJMuEq0C0myOPGVJWFEdAQJpYwlZATthg9o89L6BXBtNYVTKBwRTP
wvmcAlGTQLIvFOJG4AyOWP00WpPxeuJcjgAoZN4O7SCsTM4jKKL3b7TQ52oelsRP
vRK57Shm6Paprzp04CHVoSkG5uFbFA2nHFCC3XFNQoD4+5O/+KzDh8bzXVuq/ysK
QVdD+BuS9yrZ0KL6OxAOuJmaC9leatMU5y1PtXdHCu4d0xRODAS81sNuQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWDH0HexfPYI70CI+k5Nf6S4KyZMB8GA1UdIwQY
MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt
MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0
LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRHGug0P
dyttJzP1rWhJWDPSX/0WqJaha0DeJaW4MhP1XbBlxEjrUWqbSwTgVBFDe/O1Qrie
I21H/jhcdNOoh1TrasIgLoro4pD3ll0aPf2GbiGKrO+UdqX3LsK9QQaYKc4ASZIk
f+m3NfWUw3/b5+ztUOB0Vg5fJmjwo+THbNmL7Q2AM0T0ceo7eZSFgRmOWXUO1zGz
/NIQI6jG5732eaDYkYXJp4iM/44kHyPZK/OCMFHWB6IX9HW6yYcjXbAqOEbX2rJc
SzjFnTIFWiIW0w0fJhsdsmK6J5YWR/ePKo9eJlt+w5nJ2R3XY9hMRMKf7UCSyBCs
fi8u3M18YE/GNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:35 2025 by rpki-client