Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          b4FyRDFoeYY8xCEtL3M6Erar+6Ax1wM0oEIh4juS0wg=
Subject key identifier:   3F:46:4B:3B:70:62:6C:93:83:5E:24:ED:21:58:ED:CE:B5:3C:A7:CA
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       0197B6A23E056D493088B3C55E654747998F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:55 +0000
Files and hashes:         1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: EhsdvF7ntRh45lnwnaj3sPObqWCZD9c4yAeT4jvDCao=)
                          3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:3e:05:6d:49:30:88:b3:c5:5e:65:47:47:99:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Jun 28 13:02:55 2025 GMT
            Not After : Jun 29 13:02:55 2025 GMT
        Subject: CN=3f464b3b70626c93835e24ed2158edceb53ca7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:c1:6e:16:37:93:81:a7:73:44:e5:da:5d:
                    7b:6e:f5:09:9c:27:71:18:1d:48:e0:37:0c:e2:e5:
                    9b:60:ed:94:d3:44:75:49:f8:4d:c8:bf:12:83:e3:
                    da:ba:26:2e:fb:30:40:0b:e5:36:fd:7a:9b:60:00:
                    3e:1c:0e:c9:11:a9:be:df:e3:42:f0:e3:aa:bc:67:
                    0f:50:3d:f3:6f:21:4d:b2:90:9c:a0:91:2c:94:2c:
                    b9:92:19:3c:60:58:2c:b6:14:64:03:57:13:d8:81:
                    a4:a9:3c:ec:b8:8b:47:9d:90:a6:53:a6:f1:28:4b:
                    56:0b:c2:ba:e5:fd:c5:8b:29:a6:83:dd:8d:0b:9a:
                    6c:88:55:e7:2a:c8:45:f5:27:9d:22:a9:45:e2:a7:
                    80:84:54:ae:e1:60:d4:ec:21:ba:f7:07:a9:a8:f5:
                    98:f6:cf:2d:8c:58:65:96:85:32:af:20:0f:e1:c0:
                    2a:d2:ad:1a:d5:ef:03:91:14:41:81:b9:72:35:90:
                    66:34:64:56:1f:67:97:aa:37:48:37:d2:f5:93:45:
                    66:00:45:74:ce:ae:1d:09:de:b2:a6:0b:62:a9:95:
                    4a:fe:aa:16:e6:72:9d:c2:c3:f7:d7:d6:e6:f7:3a:
                    da:56:df:c5:ea:02:04:2a:b2:44:6f:bb:9b:9e:34:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:4B:3B:70:62:6C:93:83:5E:24:ED:21:58:ED:CE:B5:3C:A7:CA
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:28:a0:32:7a:f7:79:92:01:58:3e:ac:ff:7b:4b:8d:f8:
         de:54:0c:35:7e:47:e4:ac:01:c3:6f:e7:16:9b:38:f6:d7:f8:
         1d:9c:af:c6:b9:b3:4d:65:96:38:e0:22:b3:d9:ab:03:24:ab:
         ac:75:23:29:fd:b7:2a:9a:ec:0b:6d:45:b1:97:fc:f2:fc:65:
         1c:2d:d0:d0:90:36:42:91:9a:8e:8d:38:fa:bd:08:b4:f1:d0:
         ea:d4:00:f5:32:97:5f:52:b9:5b:68:a9:ca:48:01:c2:79:ef:
         f6:00:0d:3b:00:eb:88:82:e4:fe:5f:b0:53:b8:bc:1a:14:ac:
         b8:8b:5e:aa:71:e2:f7:de:e5:80:7e:b3:0a:bb:d5:9a:13:3d:
         af:5b:01:98:f0:8d:f8:c2:94:54:10:0d:00:40:d2:b8:21:c5:
         12:4c:e7:0d:4c:ee:8c:de:7f:51:8d:ac:36:11:2f:a5:93:e5:
         29:f9:02:02:79:3d:c4:9a:50:4a:38:6f:90:5f:e6:53:30:fa:
         c0:7f:b8:8d:00:ff:64:f3:7f:f9:e5:33:d2:01:3e:3f:80:e1:
         48:8b:05:25:2b:bb:7e:c9:46:ae:43:b8:93:0c:2e:0f:e3:d7:
         f7:81:23:da:d1:f6:cc:81:6a:83:53:35:8c:80:c1:f9:98:67:
         f6:96:4c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oj4FbUkwiLPFXmVHR5mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTdiMTUzZWVkMTEwYmNiZDE0ZGM3ZTMzZmQ0N2YwMmUy
ZmUwNzEwHhcNMjUwNjI4MTMwMjU1WhcNMjUwNjI5MTMwMjU1WjAzMTEwLwYDVQQD
EygzZjQ2NGIzYjcwNjI2YzkzODM1ZTI0ZWQyMTU4ZWRjZWI1M2NhN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv7BbhY3k4Gnc0Tl2l17bvUJnCdx
GB1I4DcM4uWbYO2U00R1SfhNyL8Sg+PauiYu+zBAC+U2/XqbYAA+HA7JEam+3+NC
8OOqvGcPUD3zbyFNspCcoJEslCy5khk8YFgsthRkA1cT2IGkqTzsuItHnZCmU6bx
KEtWC8K65f3Fiymmg92NC5psiFXnKshF9SedIqlF4qeAhFSu4WDU7CG69wepqPWY
9s8tjFhlloUyryAP4cAq0q0a1e8DkRRBgblyNZBmNGRWH2eXqjdIN9L1k0VmAEV0
zq4dCd6ypgtiqZVK/qoW5nKdwsP319bm9zraVt/F6gIEKrJEb7ubnjQEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9GSztwYmyTg14k7SFY7c61PKfKMB8GA1UdIwQY
MBaAFH1XsVPu0RC8vRTcfjP9R/AuL+BxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQt
MDgwNzA5MWFhNzdkLzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hOGQ2ZDgtZDJhNS00YWYyLWJiNDQtMDgwNzA5MWFhNzdk
LzEvZlZleFUtN1JFTHk5Rk54LU1fMUg4QzR2NEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZkooDJ6
93mSAVg+rP97S4343lQMNX5H5KwBw2/nFps49tf4HZyvxrmzTWWWOOAis9mrAySr
rHUjKf23KprsC21FsZf88vxlHC3Q0JA2QpGajo04+r0ItPHQ6tQA9TKXX1K5W2ip
ykgBwnnv9gANOwDriILk/l+wU7i8GhSsuIteqnHi997lgH6zCrvVmhM9r1sBmPCN
+MKUVBANAEDSuCHFEkznDUzujN5/UY2sNhEvpZPlKfkCAnk9xJpQSjhvkF/mUzD6
wH+4jQD/ZPN/+eUz0gE+P4DhSIsFJSu7fslGrkO4kwwuD+PX94Ej2tH2zIFqg1M1
jIDB+Zhn9pZMkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:48 2025 by rpki-client