Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File:                     7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier:          O5VG7BsUmZL5c/69414MOGPGmF5Sf0lX/Iqyurq0pNY=
Subject key identifier:   69:F8:39:F0:8C:B4:A0:E1:47:B5:71:53:1A:F5:72:01:B7:C6:66:C2
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer:       /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial:       01988B7C6C3ABCA67501BDF3124B1CCDD5BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number:          03E1
Signing time:             Fri 08 Aug 2025 21:00:43 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:43 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:43 +0000
Files and hashes:         1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
                          2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: 836eWMnv0kTwmklSLnv8Xh2I8xsj70Twx6okCnbRnIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:6c:3a:bc:a6:75:01:bd:f3:12:4b:1c:cd:d5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
        Validity
            Not Before: Aug  8 21:00:43 2025 GMT
            Not After : Aug  9 21:00:43 2025 GMT
        Subject: CN=69f839f08cb4a0e147b571531af57201b7c666c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:c3:b6:3c:c5:68:ba:fc:22:b0:6c:6d:a5:
                    5c:28:33:f0:8f:ec:3a:ae:3b:76:95:a4:a9:fe:65:
                    5f:ab:7e:23:5d:93:1e:14:1c:03:ed:fe:c9:fb:66:
                    c4:a7:c3:00:19:99:8d:30:81:c2:f1:65:54:79:b5:
                    94:69:ef:95:61:a9:d8:3b:94:a2:55:1a:5b:fe:c4:
                    b3:ad:b5:f2:47:ff:03:b6:7e:c4:ef:1d:cd:89:3a:
                    5c:dc:46:48:d4:fc:4f:71:82:86:5c:7b:f5:51:6b:
                    78:1e:0b:1f:63:c0:95:63:0b:17:57:bb:d1:87:af:
                    80:b6:46:52:1a:d3:2b:8e:c9:0b:13:dc:46:2a:5d:
                    68:9c:48:da:66:1c:13:b7:c1:b2:6f:15:cc:1b:f8:
                    7b:f7:5e:47:90:d2:30:9b:8f:72:a2:76:a5:03:19:
                    ec:b7:05:08:a6:c9:b9:95:2c:9b:f6:b0:06:b4:26:
                    7b:b0:29:a1:f9:c3:71:e8:7a:82:4b:26:02:ec:c4:
                    0a:87:30:c1:34:c2:3d:af:f3:d8:c2:cc:45:da:32:
                    8f:58:be:ff:59:96:53:81:ee:7f:bd:de:ca:c7:52:
                    2d:88:82:a5:b0:2b:5a:8a:1d:d5:34:bf:44:c9:37:
                    cc:7d:1c:ef:bb:47:da:21:9c:c8:c8:17:46:77:06:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F8:39:F0:8C:B4:A0:E1:47:B5:71:53:1A:F5:72:01:B7:C6:66:C2
            X509v3 Authority Key Identifier:
                keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b3:13:4d:22:24:65:cd:29:dc:0d:44:a2:6b:e5:68:85:be:
         57:d9:48:c3:72:59:86:65:da:26:fc:49:c7:ed:6b:87:d0:1e:
         a7:1f:95:f6:2b:95:60:36:ff:62:13:3a:b3:c2:23:f3:bb:84:
         8c:ac:8d:8f:da:9b:fa:56:af:44:58:e4:70:f4:5e:f2:68:dc:
         cf:af:82:d7:f4:66:3f:af:c0:d2:8b:f1:69:2e:b5:47:ba:f0:
         a6:fd:a5:78:da:3d:c1:bc:53:bb:1f:35:e9:ed:5e:33:ba:bf:
         a1:a8:58:40:4c:61:f8:90:f7:48:18:e0:95:7c:12:1d:59:b2:
         c6:98:46:81:aa:0b:e4:63:4b:22:09:37:fb:89:9a:06:53:e0:
         fa:4f:c7:27:27:1b:0b:87:44:e3:e5:d7:3a:35:81:d1:c2:14:
         0a:80:8f:a1:ba:13:f4:5a:a0:0f:45:5c:9d:11:33:81:45:7a:
         b4:de:75:ce:e8:03:f4:53:a9:11:7f:b2:72:6c:63:84:a2:15:
         cb:c6:29:a5:90:d0:9a:79:ca:cf:21:86:cf:65:1c:bf:48:53:
         20:ef:cb:58:b1:7a:ac:7c:23:53:a5:19:c8:bf:76:05:54:19:
         c4:17:8e:05:63:d7:04:6b:5a:e4:08:85:88:75:d6:4e:df:6f:
         a3:e5:0b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfGw6vKZ1Ab3zEksczdW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOTAwYTU1NTE4YjY3OWVkYzc4ZmFhOTg4M2VjNmU2MDM1
YWU3MWMwHhcNMjUwODA4MjEwMDQzWhcNMjUwODA5MjEwMDQzWjAzMTEwLwYDVQQD
Eyg2OWY4MzlmMDhjYjRhMGUxNDdiNTcxNTMxYWY1NzIwMWI3YzY2NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKbDtjzFaLr8IrBsbaVcKDPwj+w6
rjt2laSp/mVfq34jXZMeFBwD7f7J+2bEp8MAGZmNMIHC8WVUebWUae+VYanYO5Si
VRpb/sSzrbXyR/8Dtn7E7x3NiTpc3EZI1PxPcYKGXHv1UWt4HgsfY8CVYwsXV7vR
h6+AtkZSGtMrjskLE9xGKl1onEjaZhwTt8GybxXMG/h7915HkNIwm49yonalAxns
twUIpsm5lSyb9rAGtCZ7sCmh+cNx6HqCSyYC7MQKhzDBNMI9r/PYwsxF2jKPWL7/
WZZTge5/vd7Kx1ItiIKlsCtaih3VNL9EyTfMfRzvu0faIZzIyBdGdwYHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn4OfCMtKDhR7VxUxr1cgG3xmbCMB8GA1UdIwQY
MBaAFO2QClVRi2ee3Hj6qYg+xuYDWuccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmIt
MGY3MzY2MWQ1ZjM1LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmItMGY3MzY2MWQ1ZjM1
LzEvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbMTTSIk
Zc0p3A1EomvlaIW+V9lIw3JZhmXaJvxJx+1rh9Aepx+V9iuVYDb/YhM6s8Ij87uE
jKyNj9qb+lavRFjkcPRe8mjcz6+C1/RmP6/A0ovxaS61R7rwpv2leNo9wbxTux81
6e1eM7q/oahYQExh+JD3SBjglXwSHVmyxphGgaoL5GNLIgk3+4maBlPg+k/HJycb
C4dE4+XXOjWB0cIUCoCPoboT9FqgD0VcnREzgUV6tN51zugD9FOpEX+ycmxjhKIV
y8YppZDQmnnKzyGGz2Ucv0hTIO/LWLF6rHwjU6UZyL92BVQZxBeOBWPXBGta5AiF
iHXWTt9vo+ULDA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:22 2025 by rpki-client