Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File:                     1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier:          LjztUOtYkGYD4T7Wj50Mca7BmBkYmHIbmUr4RPYOap4=
Subject key identifier:   85:9F:10:62:B8:F8:9C:54:7F:7C:E9:C2:79:49:AD:F9:12:07:B2:5C
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer:       /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial:       0197D1E11B5E5844C35F138B2624355477AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number:          15C5
Signing time:             Thu 03 Jul 2025 20:01:20 +0000
Manifest this update:     Thu 03 Jul 2025 20:01:20 +0000
Manifest next update:     Fri 04 Jul 2025 20:01:20 +0000
Files and hashes:         1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: n9ln7H89DbbFkffQSNuxKAlWZE1VyDD8PGS7ayzFNhY=)
                          2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d1:e1:1b:5e:58:44:c3:5f:13:8b:26:24:35:54:77:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
        Validity
            Not Before: Jul  3 20:01:20 2025 GMT
            Not After : Jul  4 20:01:20 2025 GMT
        Subject: CN=859f1062b8f89c547f7ce9c27949adf91207b25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:ec:26:5c:f5:6c:b6:c5:27:5f:aa:2b:a9:
                    d7:00:10:62:28:e3:6d:72:46:c4:b3:48:20:d3:b6:
                    3a:2a:56:49:77:6d:ee:dd:0b:e7:26:fe:20:eb:d4:
                    8a:92:d3:30:db:de:58:60:77:05:fe:4c:bb:5e:0b:
                    d8:37:3a:f1:89:b7:74:e3:39:cd:f6:ec:81:6a:15:
                    55:f8:46:e9:e3:fe:03:33:7e:86:8f:ab:e6:2e:0b:
                    33:ae:f2:5b:2e:b6:ab:fc:e1:be:c1:de:0d:d7:f1:
                    0c:1a:b3:d5:7b:7d:35:98:0b:c1:fa:b6:b5:7a:4e:
                    9c:d3:16:59:74:31:33:17:af:3d:be:b1:2a:d5:c4:
                    69:9a:bb:fe:71:2f:d1:47:53:19:1b:43:98:24:8d:
                    80:ef:e3:bd:12:fa:a6:03:17:6f:b7:bd:37:b5:56:
                    4a:1f:07:c7:79:8e:c6:b3:e5:27:e3:5d:b1:3e:09:
                    5b:50:e6:3f:d8:0a:ea:57:61:b8:f5:1e:58:29:33:
                    39:81:e5:4f:b7:26:dc:80:28:db:2c:65:59:b5:04:
                    32:70:d6:6e:c0:be:6a:1b:43:cf:a6:f5:a4:cb:9e:
                    ae:f2:28:58:5e:99:f9:fb:8b:5a:e2:d9:77:c2:1e:
                    16:90:35:79:ab:a2:8c:ad:68:00:38:e3:12:89:84:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9F:10:62:B8:F8:9C:54:7F:7C:E9:C2:79:49:AD:F9:12:07:B2:5C
            X509v3 Authority Key Identifier:
                keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:02:da:8f:34:6a:1f:ec:23:67:cc:af:45:d6:ff:0b:5b:92:
         be:dc:24:86:08:40:25:02:35:b1:60:24:77:be:b3:b2:50:61:
         92:7e:04:98:13:0c:48:c0:f3:98:33:96:12:a3:0f:00:c5:e0:
         08:6e:82:00:5b:9c:94:15:fa:50:ef:e5:f0:5d:ad:da:26:c9:
         50:10:ce:3d:90:86:2c:db:92:43:af:ab:d1:3f:07:11:fc:32:
         7e:22:f4:04:88:91:90:9b:c1:97:51:16:00:b6:c2:e2:4e:88:
         e0:ce:2b:fe:3a:0a:cc:ca:c3:59:6d:0f:b1:07:fb:83:18:6d:
         c2:5a:6e:ac:54:7e:40:77:8c:c8:64:11:85:37:07:05:b8:db:
         82:ba:ae:96:44:89:12:a2:b1:59:5e:65:51:12:cf:e2:a0:fb:
         d7:7c:16:c3:ff:27:cf:54:81:8a:c9:fb:e1:78:89:6e:3d:f1:
         63:2a:2f:1b:51:e7:ca:f2:ac:e9:12:54:93:77:64:b1:ad:7f:
         9d:a6:33:d3:90:55:45:9b:04:2b:57:6a:21:e9:a6:e2:19:99:
         be:67:2c:06:0f:30:b0:82:10:ef:d4:0f:e4:00:72:85:4f:47:
         30:85:bf:47:e3:54:92:97:99:04:10:87:5f:16:27:67:d7:44:
         c0:79:16:8f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZfR4RteWETDXxOLJiQ1VHeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWIyN2MxZDU0M2FlMWVmZTgzYTE0MWJlMTI0NDRlOTI0
MThmZjMwHhcNMjUwNzAzMjAwMTIwWhcNMjUwNzA0MjAwMTIwWjAzMTEwLwYDVQQD
Eyg4NTlmMTA2MmI4Zjg5YzU0N2Y3Y2U5YzI3OTQ5YWRmOTEyMDdiMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO/sJlz1bLbFJ1+qK6nXABBiKONt
ckbEs0gg07Y6KlZJd23u3QvnJv4g69SKktMw295YYHcF/ky7XgvYNzrxibd04znN
9uyBahVV+Ebp4/4DM36Gj6vmLgszrvJbLrar/OG+wd4N1/EMGrPVe301mAvB+ra1
ek6c0xZZdDEzF689vrEq1cRpmrv+cS/RR1MZG0OYJI2A7+O9EvqmAxdvt703tVZK
HwfHeY7Gs+Un412xPglbUOY/2ArqV2G49R5YKTM5geVPtybcgCjbLGVZtQQycNZu
wL5qG0PPpvWky56u8ihYXpn5+4ta4tl3wh4WkDV5q6KMrWgAOOMSiYQ5swIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIWfEGK4+JxUf3zpwnlJrfkSB7JcMB8GA1UdIwQY
MBaAFPlbJ8HVQ64e/oOhQb4SRE6SQY/zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wc253ZFZEcmg3LWc2RkJ2aEpFVHBKQmpfTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYWU4NTU0LTc0NGEtNDJkOS1iNTE4
LWFiYWQxZmZiODExYy8xLzEtVnNud2RWRHJoNy1nNkZCdmhKRVRwSkJqX00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NiL2FlODU1NC03NDRhLTQyZDktYjUxOC1hYmFkMWZmYjgx
MWMvMS8xLVZzbndkVkRyaDctZzZGQnZoSkVUcEpCal9NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwLa
jzRqH+wjZ8yvRdb/C1uSvtwkhghAJQI1sWAkd76zslBhkn4EmBMMSMDzmDOWEqMP
AMXgCG6CAFuclBX6UO/l8F2t2ibJUBDOPZCGLNuSQ6+r0T8HEfwyfiL0BIiRkJvB
l1EWALbC4k6I4M4r/joKzMrDWW0PsQf7gxhtwlpurFR+QHeMyGQRhTcHBbjbgrqu
lkSJEqKxWV5lURLP4qD713wWw/8nz1SBisn74XiJbj3xYyovG1HnyvKs6RJUk3dk
sa1/naYz05BVRZsEK1dqIemm4hmZvmcsBg8wsIIQ79QP5AByhU9HMIW/R+NUkpeZ
BBCHXxYnZ9dEwHkWjw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:33:05 2025 by rpki-client