Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          ijX71TXgZp9lVDTCtWjkCWtJDk7GxMTVXlPo8Eqlhj0=
Subject key identifier:   C3:37:B2:64:3A:27:60:B0:21:6F:D5:5B:83:8A:F9:1D:64:6B:45:74
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       0197B70EABD5A73ED24E3FA1D8C713C6443D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 15:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:21 +0000
Files and hashes:         1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
                          2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
                          3: 820Ud_GR15OB6xKqzxayx2Vq2Ow.roa (hash: Y4mHtGXvZVwTMpirNMNXroWlScEk84KdYNqjkd/s7Qk=)
                          4: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
                          5: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: 0kjV+o/iNRUJNk/2AQ0IWCJZNTNK4DM34RbROYJ/K6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ab:d5:a7:3e:d2:4e:3f:a1:d8:c7:13:c6:44:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Jun 28 15:01:21 2025 GMT
            Not After : Jun 29 15:01:21 2025 GMT
        Subject: CN=c337b2643a2760b0216fd55b838af91d646b4574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:59:4a:b2:47:fc:3e:9f:43:ab:df:13:44:
                    e5:2f:fd:1f:27:5a:2c:b3:5f:63:8a:18:e5:00:63:
                    f1:80:86:26:6d:e4:be:41:96:3e:7e:04:bd:a3:ae:
                    85:d1:67:c6:ea:0a:3f:52:8b:93:5a:48:f3:22:2b:
                    de:c8:9c:44:e9:ea:15:34:6c:05:6b:68:7d:f6:04:
                    e6:90:41:32:a6:df:39:79:68:e2:74:16:fb:63:3b:
                    83:bc:6a:33:b9:58:78:80:4b:9e:6b:83:b8:06:9d:
                    df:22:d2:37:0b:36:bc:10:17:71:66:45:2c:74:bc:
                    df:6a:c3:d8:8a:df:23:52:40:27:d1:82:32:b7:dd:
                    cd:9d:39:de:22:3a:e6:c5:84:49:f6:43:56:06:6f:
                    c3:f8:96:08:19:65:bd:d2:4c:00:0c:0f:3a:5a:95:
                    8b:24:dc:da:25:8a:42:24:f2:5d:f4:f3:11:4c:9d:
                    6a:8d:0e:fa:e0:3a:0c:c5:5c:0d:88:97:b8:8b:85:
                    d3:f1:d2:ad:76:12:24:7a:c5:71:46:77:56:38:72:
                    61:7a:d0:9d:10:77:fd:6d:59:00:a3:2b:c5:3d:59:
                    0a:d5:1b:34:c4:e1:62:1e:95:c8:19:c3:41:dc:1b:
                    ba:96:c0:f7:7d:40:f8:73:32:62:91:61:50:1f:88:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:B2:64:3A:27:60:B0:21:6F:D5:5B:83:8A:F9:1D:64:6B:45:74
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:83:cd:ce:fb:2d:28:b6:ab:14:49:27:d6:a3:ef:1e:ff:
         66:63:fd:15:7b:0d:32:98:fb:76:3c:ae:ac:13:5d:da:74:9b:
         50:c1:2b:91:86:0b:12:de:b6:fa:36:b1:a6:87:7c:70:bb:23:
         cf:68:f6:c5:7e:36:94:1e:0a:52:f9:f8:55:42:1f:c6:51:3e:
         02:10:d2:0b:10:76:16:a4:d6:50:0a:67:0c:ba:dc:14:00:24:
         4f:fa:9a:32:9c:c6:65:a5:69:ae:5d:4a:c8:07:24:54:f4:de:
         2a:f2:37:35:4a:45:74:1d:2f:47:5a:c6:00:2d:ac:ca:dd:ee:
         07:fc:d7:83:2c:62:29:2f:0a:0a:ea:5f:62:12:66:5a:6f:5e:
         ef:2e:d5:0b:5f:28:83:4b:4f:ab:1a:97:eb:d4:fd:9d:a6:1a:
         f9:69:3b:56:16:64:03:15:4b:22:1b:78:43:ed:36:4e:27:d0:
         de:10:e9:31:8b:b2:de:72:9d:d4:11:46:d6:e9:b8:1d:93:f4:
         78:29:e7:da:c4:d0:4e:70:6f:28:67:f0:8d:4f:dd:86:4c:f5:
         e9:2d:17:ca:6a:7b:07:b7:5b:1c:a7:27:dd:bf:eb:48:42:3e:
         f8:04:35:6c:b1:0a:40:7e:a4:ca:9e:56:f7:9d:df:80:ab:da:
         75:53:be:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqvVpz7STj+h2McTxkQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj
OTExMmEwHhcNMjUwNjI4MTUwMTIxWhcNMjUwNjI5MTUwMTIxWjAzMTEwLwYDVQQD
EyhjMzM3YjI2NDNhMjc2MGIwMjE2ZmQ1NWI4MzhhZjkxZDY0NmI0NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJZSrJH/D6fQ6vfE0TlL/0fJ1os
s19jihjlAGPxgIYmbeS+QZY+fgS9o66F0WfG6go/UouTWkjzIiveyJxE6eoVNGwF
a2h99gTmkEEypt85eWjidBb7YzuDvGozuVh4gEuea4O4Bp3fItI3Cza8EBdxZkUs
dLzfasPYit8jUkAn0YIyt93NnTneIjrmxYRJ9kNWBm/D+JYIGWW90kwADA86WpWL
JNzaJYpCJPJd9PMRTJ1qjQ764DoMxVwNiJe4i4XT8dKtdhIkesVxRndWOHJhetCd
EHf9bVkAoyvFPVkK1Rs0xOFiHpXIGcNB3Bu6lsD3fUD4czJikWFQH4hiXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM3smQ6J2CwIW/VW4OK+R1ka0V0MB8GA1UdIwQY
MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt
NThjYWY0NzAxYmUzLzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz
LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohmDzc77
LSi2qxRJJ9aj7x7/ZmP9FXsNMpj7djyurBNd2nSbUMErkYYLEt62+jaxpod8cLsj
z2j2xX42lB4KUvn4VUIfxlE+AhDSCxB2FqTWUApnDLrcFAAkT/qaMpzGZaVprl1K
yAckVPTeKvI3NUpFdB0vR1rGAC2syt3uB/zXgyxiKS8KCupfYhJmWm9e7y7VC18o
g0tPqxqX69T9naYa+Wk7VhZkAxVLIht4Q+02TifQ3hDpMYuy3nKd1BFG1um4HZP0
eCnn2sTQTnBvKGfwjU/dhkz16S0Xymp7B7dbHKcn3b/rSEI++AQ1bLEKQH6kyp5W
953fgKvadVO+Cw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:02 2025 by rpki-client