Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File:                     7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier:          w85g1DukdfPM7vRFOVKU/PN9BlyhV7Oe7hGFhLCRuJ8=
Subject key identifier:   28:B0:01:E0:A5:99:1D:D1:3A:7F:40:EE:D9:5A:4D:18:B9:09:C5:6A
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer:       /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial:       0197B6A0C2D00E6CC616ED1D035FED3FAA2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number:          0A08
Signing time:             Sat 28 Jun 2025 13:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:18 +0000
Files and hashes:         1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: Bw5WfmdjS4LNZRDjig8bam0bYF4yZFfTeZvoDAutWKI=)
                          2: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (hash: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:c2:d0:0e:6c:c6:16:ed:1d:03:5f:ed:3f:aa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
        Validity
            Not Before: Jun 28 13:01:18 2025 GMT
            Not After : Jun 29 13:01:18 2025 GMT
        Subject: CN=28b001e0a5991dd13a7f40eed95a4d18b909c56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:31:3b:19:9f:e8:f6:86:c1:c3:32:b0:4e:
                    8f:05:9e:88:a9:63:97:cc:d2:a4:90:2c:ed:b7:79:
                    77:3b:0f:9f:93:de:79:c5:a2:c1:b4:8d:02:ca:5c:
                    d8:88:a3:ec:59:05:8d:b7:2d:db:8f:a8:29:be:72:
                    43:b8:cb:d2:55:a1:9a:1a:ea:ce:05:1d:80:a1:1e:
                    1c:ba:48:c7:f7:79:bb:e4:46:e4:5b:22:dd:44:1a:
                    5f:ad:19:81:44:b2:78:0e:36:c8:31:46:f9:47:32:
                    0f:97:7d:55:77:e8:53:d7:08:19:84:3b:05:d0:27:
                    64:a3:41:99:ff:17:6e:31:00:1f:a1:67:dd:55:5f:
                    15:d3:b3:a1:a6:54:78:ac:ed:a3:bf:08:60:21:7c:
                    f8:d6:2f:7a:21:15:96:20:1f:90:9d:0f:61:46:e5:
                    e0:b8:cf:1d:e4:58:15:db:2f:32:db:5a:01:e6:46:
                    28:6c:e2:f4:25:13:a0:a6:51:19:62:5c:b5:22:71:
                    61:fd:0e:d9:86:f7:25:da:2c:99:8d:84:7a:7b:ec:
                    0c:5a:3e:25:79:64:70:b0:ed:b7:03:52:e0:87:27:
                    27:71:fb:5a:e4:3a:9d:14:1b:0d:0a:17:d5:77:1e:
                    38:a8:e4:5e:99:59:ca:ba:30:a2:33:32:ba:b5:2b:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B0:01:E0:A5:99:1D:D1:3A:7F:40:EE:D9:5A:4D:18:B9:09:C5:6A
            X509v3 Authority Key Identifier:
                keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:33:71:33:d4:02:64:1f:8d:d6:f3:a9:a0:f7:1b:41:c7:fd:
         00:f5:51:18:4e:c1:80:c3:a4:95:5a:46:97:57:21:7f:21:b4:
         9c:39:16:58:c1:23:48:a8:1d:5b:87:54:17:dc:47:7f:aa:51:
         64:0a:60:d9:84:b6:35:e2:dc:6b:64:c6:d2:7b:0b:79:f9:10:
         a4:4a:79:a2:3f:2d:93:89:08:39:b3:06:d1:6c:8b:63:e9:ff:
         61:f3:d2:81:ff:10:8a:6c:bf:27:2f:58:44:37:56:6c:f4:50:
         9c:cc:fa:7d:20:e9:33:ab:63:cb:47:9b:16:38:ad:9e:1f:75:
         32:64:94:f2:0b:95:d2:39:ad:f9:7d:e0:ce:e0:9d:0b:96:10:
         5b:ce:07:7f:28:28:8a:bf:de:1c:64:8d:99:b2:3f:31:ae:ca:
         2b:2d:bd:3f:82:ef:e4:15:b4:b3:f5:7f:9f:71:10:53:81:2a:
         33:45:b7:07:66:97:6d:62:ca:d9:1b:e8:3a:b8:1d:38:49:7d:
         15:5e:f9:66:19:40:0f:2e:88:69:3d:46:26:89:d9:50:15:1d:
         d6:fb:19:5b:a0:a8:e6:2a:e6:cb:41:6c:10:a1:2f:aa:f9:2b:
         9e:a9:18:93:3c:79:41:32:ee:5f:68:f8:ce:1a:d9:84:12:47:
         4e:cb:29:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMLQDmzGFu0dA1/tP6osMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjUxOGM0MjZjZmM0MDgyZmI5MmVjNzQwZDdjM2M3ODgy
NTU2M2IwHhcNMjUwNjI4MTMwMTE4WhcNMjUwNjI5MTMwMTE4WjAzMTEwLwYDVQQD
EygyOGIwMDFlMGE1OTkxZGQxM2E3ZjQwZWVkOTVhNGQxOGI5MDljNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BkxOxmf6PaGwcMysE6PBZ6IqWOX
zNKkkCztt3l3Ow+fk955xaLBtI0CylzYiKPsWQWNty3bj6gpvnJDuMvSVaGaGurO
BR2AoR4cukjH93m75EbkWyLdRBpfrRmBRLJ4DjbIMUb5RzIPl31Vd+hT1wgZhDsF
0Cdko0GZ/xduMQAfoWfdVV8V07OhplR4rO2jvwhgIXz41i96IRWWIB+QnQ9hRuXg
uM8d5FgV2y8y21oB5kYobOL0JROgplEZYly1InFh/Q7Zhvcl2iyZjYR6e+wMWj4l
eWRwsO23A1Lghycncfta5DqdFBsNChfVdx44qORemVnKujCiMzK6tSvz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiwAeClmR3ROn9A7tlaTRi5CcVqMB8GA1UdIwQY
MBaAFO1lGMQmz8QIL7kux0DXw8eIJVY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYt
MDViM2I5NzA5ZjA5LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81ZmJkMDktMGE2MS00MjFjLTljMzYtMDViM2I5NzA5ZjA5
LzEvN1dVWXhDYlB4QWd2dVM3SFFOZkR4NGdsVmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETNxM9QC
ZB+N1vOpoPcbQcf9APVRGE7BgMOklVpGl1chfyG0nDkWWMEjSKgdW4dUF9xHf6pR
ZApg2YS2NeLca2TG0nsLefkQpEp5oj8tk4kIObMG0WyLY+n/YfPSgf8Qimy/Jy9Y
RDdWbPRQnMz6fSDpM6tjy0ebFjitnh91MmSU8guV0jmt+X3gzuCdC5YQW84Hfygo
ir/eHGSNmbI/Ma7KKy29P4Lv5BW0s/V/n3EQU4EqM0W3B2aXbWLK2RvoOrgdOEl9
FV75ZhlADy6IaT1GJonZUBUd1vsZW6Co5irmy0FsEKEvqvkrnqkYkzx5QTLuX2j4
zhrZhBJHTssptw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:33 2025 by rpki-client