Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File:                     R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier:          5FEz/0B3l25psOIKflC0C+emKaId1juuMFyr9zZQvDI=
Subject key identifier:   D1:AB:48:9A:B4:4E:FB:66:B1:53:C1:B8:05:90:C6:80:57:CD:34:F5
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer:       /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial:       0197729B1E0ADD26D7FA1D46DD0DDECEB14C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number:          102E
Signing time:             Sun 15 Jun 2025 08:00:57 +0000
Manifest this update:     Sun 15 Jun 2025 08:00:57 +0000
Manifest next update:     Mon 16 Jun 2025 08:00:57 +0000
Files and hashes:         1: 4a0HJYQRvlOIxWqFzSTS62M9JlY.roa (hash: v/GVEGRuCChRazXZo6V06Cm9vDFae25oHTyVCpwMgzk=)
                          2: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: PMlap3XWg9aTMncTrBcyVnu5z4ppBOL7S01eHXdKrNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:9b:1e:0a:dd:26:d7:fa:1d:46:dd:0d:de:ce:b1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
        Validity
            Not Before: Jun 15 08:00:57 2025 GMT
            Not After : Jun 16 08:00:57 2025 GMT
        Subject: CN=d1ab489ab44efb66b153c1b80590c68057cd34f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fb:c5:80:7e:d4:b9:4f:ef:63:8d:96:51:ea:
                    85:4b:84:09:5e:36:cd:6f:4c:df:45:6c:fe:d7:33:
                    c8:7c:c2:3b:ae:7d:57:7c:60:56:a0:c3:11:5f:16:
                    8b:da:1f:11:97:10:f1:35:82:5a:5b:ce:c7:02:b5:
                    94:00:57:d9:ae:29:2f:0b:dc:09:92:47:66:09:ff:
                    11:61:f3:25:13:64:8c:cf:21:7c:85:74:4a:82:b5:
                    5d:1d:24:ca:38:de:ea:a9:ac:84:1e:2f:8f:f9:7c:
                    fd:4f:b6:e9:70:67:f3:82:d8:8f:35:4e:d5:a3:85:
                    d9:37:fa:56:eb:12:87:18:fc:d7:2e:2a:33:22:db:
                    99:44:fc:c0:b8:54:83:33:da:c2:a0:d5:5f:c6:0d:
                    6f:40:3d:ac:47:31:21:b3:67:69:d0:bc:36:a5:ff:
                    9a:7d:cd:f2:ce:45:ab:b1:98:82:11:c2:c3:1a:31:
                    b1:e5:bf:43:35:b7:ba:6a:8f:6d:32:25:45:29:4a:
                    91:8d:cb:44:2a:3c:36:9d:5f:37:84:53:27:44:70:
                    58:37:68:64:03:5e:9c:17:d0:0d:e3:a8:66:31:79:
                    8c:ac:4e:6a:ed:02:4a:2d:c9:22:07:64:ee:02:71:
                    0b:ef:2e:df:ac:b7:1c:b2:c9:3f:bd:01:5d:10:be:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AB:48:9A:B4:4E:FB:66:B1:53:C1:B8:05:90:C6:80:57:CD:34:F5
            X509v3 Authority Key Identifier:
                keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:ba:34:8c:31:61:c8:93:50:e7:32:77:8e:26:9f:9c:7f:
         6d:fc:f9:26:75:8b:fc:6c:76:e4:04:88:b6:22:df:46:28:22:
         43:e3:e6:5b:00:02:93:3c:5d:6c:68:7f:53:17:e5:71:cf:25:
         30:02:7f:7a:9b:48:d0:66:48:5c:7d:6d:84:e9:10:db:cf:c0:
         8f:9d:88:77:d7:0b:74:68:98:57:b0:b3:dd:80:30:d0:63:39:
         81:63:97:7a:13:13:4b:bb:9d:2f:dc:a7:26:4f:31:e0:ee:fc:
         6c:4c:0b:f7:e1:26:22:9c:c4:a2:e4:25:a9:f4:91:81:45:5a:
         45:d4:9d:0a:20:8a:fe:b2:5e:09:85:b0:13:12:50:a9:b4:92:
         35:74:29:39:08:00:dd:c0:1d:0e:fc:94:a0:cc:ab:ca:75:26:
         55:80:e5:0b:3a:9f:ab:15:88:dd:df:28:17:00:02:d6:be:7e:
         4c:32:8a:f8:c7:41:39:b6:8a:13:21:35:b0:4f:25:19:f9:71:
         83:7d:32:80:c0:dc:3d:dc:ac:39:ac:08:c7:5d:23:39:1e:cd:
         d1:7f:c7:59:54:c9:cc:2e:ec:05:4b:96:7a:5c:23:a6:5f:b5:
         6f:3b:58:ed:c8:50:ed:87:91:a2:32:fd:c2:d8:17:31:d1:d0:
         c0:cf:b5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdymx4K3SbX+h1G3Q3ezrFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmNkNzcwZjhlYTNkNDhlY2JiNGMzZWFiODk1ZjQyMmZm
YWM5MGQwHhcNMjUwNjE1MDgwMDU3WhcNMjUwNjE2MDgwMDU3WjAzMTEwLwYDVQQD
EyhkMWFiNDg5YWI0NGVmYjY2YjE1M2MxYjgwNTkwYzY4MDU3Y2QzNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fvFgH7UuU/vY42WUeqFS4QJXjbN
b0zfRWz+1zPIfMI7rn1XfGBWoMMRXxaL2h8RlxDxNYJaW87HArWUAFfZrikvC9wJ
kkdmCf8RYfMlE2SMzyF8hXRKgrVdHSTKON7qqayEHi+P+Xz9T7bpcGfzgtiPNU7V
o4XZN/pW6xKHGPzXLiozItuZRPzAuFSDM9rCoNVfxg1vQD2sRzEhs2dp0Lw2pf+a
fc3yzkWrsZiCEcLDGjGx5b9DNbe6ao9tMiVFKUqRjctEKjw2nV83hFMnRHBYN2hk
A16cF9AN46hmMXmMrE5q7QJKLckiB2TuAnEL7y7frLccssk/vQFdEL6cXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGrSJq0TvtmsVPBuAWQxoBXzTT1MB8GA1UdIwQY
MBaAFEe813D46j1I7LtMPquJX0Iv+skNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEt
YTZkMDAwMjAzZmI1LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEtYTZkMDAwMjAzZmI1
LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWS6NIwx
YciTUOcyd44mn5x/bfz5JnWL/Gx25ASItiLfRigiQ+PmWwACkzxdbGh/Uxflcc8l
MAJ/eptI0GZIXH1thOkQ28/Aj52Id9cLdGiYV7Cz3YAw0GM5gWOXehMTS7udL9yn
Jk8x4O78bEwL9+EmIpzEouQlqfSRgUVaRdSdCiCK/rJeCYWwExJQqbSSNXQpOQgA
3cAdDvyUoMyrynUmVYDlCzqfqxWI3d8oFwAC1r5+TDKK+MdBObaKEyE1sE8lGflx
g30ygMDcPdysOawIx10jOR7N0X/HWVTJzC7sBUuWelwjpl+1bztY7chQ7YeRojL9
wtgXMdHQwM+1Og==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:55 2025 by rpki-client