Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          zQOd2JwQ5/aKL0v5jKf2xc+WRSKVVUYomOt60xWD1GY=
Subject key identifier:   96:CE:52:70:80:CF:BC:F0:7D:13:1A:37:1F:86:6B:93:6C:38:F2:41
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       0197B8904A4A490DD5FB2CC7D7812E7EB6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:02:33 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:33 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:33 +0000
Files and hashes:         1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: KiYjUT+lfMnDGJbqRLY+7NB3tYYdinRmB+jKW8LMGWY=)
                          2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:4a:4a:49:0d:d5:fb:2c:c7:d7:81:2e:7e:b6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Jun 28 22:02:33 2025 GMT
            Not After : Jun 29 22:02:33 2025 GMT
        Subject: CN=96ce527080cfbcf07d131a371f866b936c38f241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:ea:66:54:bb:b7:ae:6a:15:2b:ad:f3:b8:
                    6c:d7:39:f7:a4:6b:fa:9d:1c:44:70:64:0d:a8:a6:
                    cd:84:1e:82:7a:8c:0d:6e:5c:09:da:ef:d4:b5:9c:
                    57:1d:af:71:d5:0a:b2:ee:4e:99:0e:97:eb:71:6d:
                    88:9d:31:f9:25:de:d3:7c:16:29:f5:f5:9f:0c:d7:
                    62:2a:da:0a:a1:ec:ed:9f:88:0d:33:7e:7e:61:04:
                    61:3b:29:15:f7:17:7d:76:f9:f5:ab:e3:9e:5a:a9:
                    1e:26:c4:05:7f:d8:c5:b0:e4:c7:bd:92:0b:64:07:
                    4d:1d:e6:0e:cf:bb:c2:78:09:22:db:0b:4c:bd:36:
                    87:9b:83:8c:3d:f3:df:dd:ea:6d:41:ff:25:ec:ba:
                    5b:63:61:3f:be:6f:b9:81:2a:05:24:50:c6:46:c1:
                    35:f0:30:6b:b3:83:09:e9:ae:44:3d:55:7d:7f:bf:
                    c5:23:5b:dd:44:57:fd:a8:6b:24:47:91:26:18:68:
                    4d:8f:20:10:e2:42:59:29:11:06:1c:93:85:4f:1e:
                    3e:0d:0c:cd:2e:a6:85:bb:0c:36:9d:0c:ca:35:ce:
                    7a:b7:59:83:1d:19:fd:ee:43:f5:3f:38:03:32:a0:
                    cc:d0:f7:7c:6a:89:f6:4e:35:67:37:fa:b5:06:52:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CE:52:70:80:CF:BC:F0:7D:13:1A:37:1F:86:6B:93:6C:38:F2:41
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:5f:9e:f0:08:de:1e:53:22:53:04:13:80:e9:ee:d8:87:
         a8:b8:ff:99:6d:64:77:c8:d6:71:e6:7d:55:48:9f:4b:2d:f3:
         89:d0:93:40:b1:43:97:22:a4:7b:2c:36:aa:d3:34:37:96:37:
         d4:c2:43:7e:50:bd:7f:49:75:a3:03:73:6d:64:82:3b:4e:31:
         70:ed:8c:d6:b0:1d:6b:72:aa:b6:8f:d1:9e:77:e9:26:99:04:
         ce:6b:91:50:db:3c:eb:c2:d6:c6:9e:18:14:cd:ce:e1:f9:49:
         bb:20:1a:2e:20:12:e2:dd:65:9b:63:ad:cd:1e:13:e3:ae:28:
         73:45:cb:14:7a:91:9c:8b:42:32:b4:04:9b:63:4f:4d:5e:59:
         1d:7a:88:31:e2:ae:b2:e9:69:42:09:86:47:58:94:e1:e2:fa:
         4c:17:06:a1:b5:c8:57:89:35:22:2d:4a:38:59:ff:a3:e4:07:
         b0:c8:fd:77:85:e9:2e:8b:56:70:61:ef:a1:fe:cb:24:fb:f0:
         96:f6:41:41:5a:7b:5d:a0:6c:01:fe:8f:04:5a:a2:29:eb:0a:
         e7:9d:85:0e:16:b3:46:a2:88:58:49:8d:f4:d6:40:28:23:22:
         24:e5:53:a7:da:0f:69:81:a1:76:f9:7c:b7:7e:68:80:01:03:
         ec:c1:3f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kEpKSQ3V+yzH14EufrbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi
YjFkZWYwHhcNMjUwNjI4MjIwMjMzWhcNMjUwNjI5MjIwMjMzWjAzMTEwLwYDVQQD
Eyg5NmNlNTI3MDgwY2ZiY2YwN2QxMzFhMzcxZjg2NmI5MzZjMzhmMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjzqZlS7t65qFSut87hs1zn3pGv6
nRxEcGQNqKbNhB6CeowNblwJ2u/UtZxXHa9x1Qqy7k6ZDpfrcW2InTH5Jd7TfBYp
9fWfDNdiKtoKoeztn4gNM35+YQRhOykV9xd9dvn1q+OeWqkeJsQFf9jFsOTHvZIL
ZAdNHeYOz7vCeAki2wtMvTaHm4OMPfPf3eptQf8l7LpbY2E/vm+5gSoFJFDGRsE1
8DBrs4MJ6a5EPVV9f7/FI1vdRFf9qGskR5EmGGhNjyAQ4kJZKREGHJOFTx4+DQzN
LqaFuww2nQzKNc56t1mDHRn97kP1PzgDMqDM0Pd8aon2TjVnN/q1BlKDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbOUnCAz7zwfRMaNx+Ga5NsOPJBMB8GA1UdIwQY
MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt
YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw
LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+5fnvAI
3h5TIlMEE4Dp7tiHqLj/mW1kd8jWceZ9VUifSy3zidCTQLFDlyKkeyw2qtM0N5Y3
1MJDflC9f0l1owNzbWSCO04xcO2M1rAda3Kqto/RnnfpJpkEzmuRUNs868LWxp4Y
FM3O4flJuyAaLiAS4t1lm2OtzR4T464oc0XLFHqRnItCMrQEm2NPTV5ZHXqIMeKu
sulpQgmGR1iU4eL6TBcGobXIV4k1Ii1KOFn/o+QHsMj9d4XpLotWcGHvof7LJPvw
lvZBQVp7XaBsAf6PBFqiKesK552FDhazRqKIWEmN9NZAKCMiJOVTp9oPaYGhdvl8
t35ogAED7ME/dQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:27 2025 by rpki-client