Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
File:                     N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json)
Hash identifier:          RvgldoydE12znz0E4tOdQmNqZOlDhOEAd1PmzVGPtJA=
Subject key identifier:   D0:0C:74:CF:3D:96:A0:BB:87:60:EA:DB:09:E2:38:00:50:99:CA:39
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Certificate issuer:       /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial:       0197B8C5ACFA1D9EF636317D7EE60DDB3E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 23:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:52 +0000
Files and hashes:         1: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: X45Wqjlh44nmhJ2yb9W15a0xBQ862B4Xgw2Nqoepc2g=)
                          2: OpF39dteeAgdG0uMSaeSye2QMl4.roa (hash: 6AawtRpq3DsNtx6xd7OyKZI4o4kWWfOmTgahYICncm4=)
                          3: iddMiGg8ovKZ_KW8pvcXVd9RE60.roa (hash: tlHNfQDbOnq01Er7SY3BPzZvcVpBmTMeqa5ifXXCQPU=)
                          4: jPdoFO28ZYmIy0FwhFbaKyywLn4.roa (hash: 2DMBsYGpILPZ83xfOVSe8IYb5O9R3Gf6YlNKmTmqMeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:ac:fa:1d:9e:f6:36:31:7d:7e:e6:0d:db:3e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
        Validity
            Not Before: Jun 28 23:00:52 2025 GMT
            Not After : Jun 29 23:00:52 2025 GMT
        Subject: CN=d00c74cf3d96a0bb8760eadb09e238005099ca39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:d8:f7:38:d8:23:95:39:03:91:33:1c:61:
                    50:36:a5:3b:3f:dd:60:41:31:ca:bd:9a:70:7a:34:
                    1a:48:94:cd:18:14:ad:2b:6f:e9:b1:d8:86:af:c1:
                    96:8d:4b:29:94:13:ba:57:22:c1:99:37:05:35:c2:
                    5b:77:a3:86:7f:06:54:5f:49:85:f7:c3:d9:05:e1:
                    31:e9:36:62:2b:59:f2:86:ab:80:4e:42:68:84:e2:
                    75:1c:81:8e:ea:5f:f4:e9:74:f9:21:ef:51:2b:3a:
                    6f:e4:96:cd:07:ff:d0:fb:f9:22:a7:d6:6d:85:0b:
                    15:78:da:e0:cc:3f:5d:91:fd:0f:e3:69:23:94:c5:
                    a2:62:59:e7:b4:5c:93:33:89:da:5c:92:af:e5:62:
                    77:92:f5:f3:62:7d:f4:3b:cc:62:69:cd:3e:29:b4:
                    41:fb:5a:b0:13:2a:3b:08:2d:66:c8:5b:dd:0d:09:
                    ae:37:3c:90:bd:e5:cf:1a:a3:ed:7a:c7:26:e2:37:
                    41:c5:bd:20:c7:df:95:85:b1:08:0b:9c:3f:b2:c8:
                    92:0e:d9:fd:31:4e:d4:b5:33:b6:e8:ea:24:12:72:
                    bf:41:9c:28:17:fd:1a:e6:1d:2e:e9:8d:ae:3a:38:
                    44:b0:a2:6c:7e:72:b1:88:db:3e:7a:67:d4:4f:fb:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0C:74:CF:3D:96:A0:BB:87:60:EA:DB:09:E2:38:00:50:99:CA:39
            X509v3 Authority Key Identifier:
                keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:47:88:72:94:84:13:31:d3:42:d0:3b:89:de:15:3e:a4:34:
         2e:e3:ce:e9:32:72:20:6f:64:e7:76:bc:91:45:28:44:f4:d3:
         6c:9a:aa:a0:1c:f4:51:b0:c1:e7:6f:31:e5:c0:12:2e:1e:65:
         9b:2c:2e:a4:b2:47:ad:1a:ab:54:be:97:1f:ef:18:48:72:7b:
         f9:f6:9d:b1:f6:72:7f:25:44:48:6e:2e:2a:e8:86:b7:04:cf:
         14:25:94:bc:bd:b7:f6:13:af:46:e5:82:99:b8:73:a3:74:20:
         51:11:20:98:7c:df:75:26:57:a4:97:dc:82:cb:df:33:70:0b:
         21:6e:71:c8:db:73:01:11:95:19:b3:b4:8d:33:63:49:9f:86:
         8f:07:d5:40:f6:2b:fd:eb:5c:e2:73:c5:c3:2d:59:5a:54:09:
         d1:b6:98:0d:93:81:05:6e:e6:1a:a7:4e:5f:2f:09:1b:30:79:
         0b:72:6e:23:87:39:e0:47:6e:ad:30:ce:b9:5e:6c:85:a7:0c:
         b0:fc:27:33:a1:4e:0c:a6:15:09:c7:59:2c:c6:87:c3:30:ed:
         70:ec:b2:d3:e5:38:14:dc:04:bc:8c:db:2e:a2:52:d4:dd:d7:
         60:2d:ab:f5:1c:d1:61:0d:d2:52:fb:5c:66:6c:48:07:22:08:
         5c:f5:aa:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xaz6HZ72NjF9fuYN2z6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy
NmJhMGYwHhcNMjUwNjI4MjMwMDUyWhcNMjUwNjI5MjMwMDUyWjAzMTEwLwYDVQQD
EyhkMDBjNzRjZjNkOTZhMGJiODc2MGVhZGIwOWUyMzgwMDUwOTljYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0/Y9zjYI5U5A5EzHGFQNqU7P91g
QTHKvZpwejQaSJTNGBStK2/psdiGr8GWjUsplBO6VyLBmTcFNcJbd6OGfwZUX0mF
98PZBeEx6TZiK1nyhquATkJohOJ1HIGO6l/06XT5Ie9RKzpv5JbNB//Q+/kip9Zt
hQsVeNrgzD9dkf0P42kjlMWiYlnntFyTM4naXJKv5WJ3kvXzYn30O8xiac0+KbRB
+1qwEyo7CC1myFvdDQmuNzyQveXPGqPtescm4jdBxb0gx9+VhbEIC5w/ssiSDtn9
MU7UtTO26OokEnK/QZwoF/0a5h0u6Y2uOjhEsKJsfnKxiNs+emfUT/u1zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAMdM89lqC7h2Dq2wniOABQmco5MB8GA1UdIwQY
MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut
YzQ3MTE0ODIzODBlLzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl
LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUeIcpSE
EzHTQtA7id4VPqQ0LuPO6TJyIG9k53a8kUUoRPTTbJqqoBz0UbDB528x5cASLh5l
mywupLJHrRqrVL6XH+8YSHJ7+fadsfZyfyVESG4uKuiGtwTPFCWUvL239hOvRuWC
mbhzo3QgUREgmHzfdSZXpJfcgsvfM3ALIW5xyNtzARGVGbO0jTNjSZ+GjwfVQPYr
/etc4nPFwy1ZWlQJ0baYDZOBBW7mGqdOXy8JGzB5C3JuI4c54EdurTDOuV5shacM
sPwnM6FODKYVCcdZLMaHwzDtcOyy0+U4FNwEvIzbLqJS1N3XYC2r9RzRYQ3SUvtc
ZmxIByIIXPWqsw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:43:45 2025 by rpki-client