Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File:                     8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier:          C+M7ZzOPADibcXsWXkbfZs/qk1KlepdsAk/8BiZd7yQ=
Subject key identifier:   D1:58:B3:B4:02:52:E8:99:6C:21:10:A0:97:58:5B:5B:22:91:B7:82
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer:       /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial:       01976D7498B2E3CDDE382A280B5275C3740F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number:          077B
Signing time:             Sat 14 Jun 2025 08:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:47 +0000
Files and hashes:         1: 3yojvf8xLy7Wn7IouQzlSqK0wi8.roa (hash: XkJKLziNIIGZCpFPWVC2bt7aic/Y/irC0qgPRJLIevw=)
                          2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: iNsIlZJ74g7GNGiFniYQXAkkMb4RjJIrVSndxwdd1go=)
                          3: zzDFF83rooq9bozHtYL_dATXTDM.roa (hash: MyfSjNe+EtbThUkyyT8a+4fAUtZTRsF/D/cpjHn7JnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:98:b2:e3:cd:de:38:2a:28:0b:52:75:c3:74:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
        Validity
            Not Before: Jun 14 08:00:47 2025 GMT
            Not After : Jun 15 08:00:47 2025 GMT
        Subject: CN=d158b3b40252e8996c2110a097585b5b2291b782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:b2:7f:e5:97:c5:e4:2b:00:fc:94:2b:97:
                    03:85:dc:53:c3:4e:5f:ea:87:b2:da:c0:91:cd:34:
                    da:05:06:ba:25:96:33:6b:a9:90:98:60:b1:14:94:
                    d2:f1:0c:ae:ab:4c:7f:96:ea:d1:df:81:89:50:03:
                    51:1b:30:9c:fa:0f:b8:fd:33:2b:9a:06:11:27:73:
                    23:f5:4d:1a:40:3f:35:ff:0f:47:09:50:fa:9d:e7:
                    03:34:08:4c:88:52:45:42:5d:5f:dd:e8:2b:6d:f2:
                    50:21:08:d6:1f:52:ba:86:f3:70:0d:7c:0e:91:4c:
                    62:9b:75:22:3f:41:9e:f2:58:3c:b5:46:5d:3b:f6:
                    36:76:47:e2:00:eb:8a:49:06:1e:b0:79:7a:20:31:
                    61:33:61:68:7d:bf:5b:14:2b:d2:e3:7b:21:71:d1:
                    a1:68:65:04:e4:84:e9:99:7e:a5:93:30:5f:4e:02:
                    c1:ab:f4:54:97:d3:ab:a3:d1:d6:ad:bb:35:c6:e5:
                    42:b8:f6:5d:96:fd:ff:53:eb:84:35:86:01:d1:b4:
                    c6:eb:69:f5:67:93:8f:4f:95:4a:b1:b7:9f:72:ee:
                    09:f5:b1:65:05:5f:f0:17:ed:c3:16:4d:a6:b8:e1:
                    69:46:07:e6:48:60:e7:6d:47:73:1e:ce:9c:ee:23:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:58:B3:B4:02:52:E8:99:6C:21:10:A0:97:58:5B:5B:22:91:B7:82
            X509v3 Authority Key Identifier:
                keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:98:ef:24:75:d1:dc:31:61:35:02:75:10:02:ce:bd:dd:
         5a:66:a5:7e:d9:36:36:38:07:3e:35:0d:74:87:4d:e1:b5:43:
         3e:ec:e2:d6:e2:61:b2:ce:d4:d4:74:19:57:ee:bd:e8:50:61:
         ae:c6:f7:c6:3f:a3:b7:47:7d:80:fc:4e:5e:7f:40:71:34:65:
         5b:79:43:49:8b:13:fa:31:6a:f8:78:a8:97:f0:9f:1f:0d:04:
         6a:30:ab:72:9f:21:40:79:e8:b8:7a:d0:b3:95:2a:02:9d:db:
         af:b1:9c:a7:03:6c:c4:8f:59:9c:16:3b:ef:2b:a8:8f:ed:5d:
         6c:c4:0a:4a:16:14:ff:40:63:96:78:f2:05:5e:68:65:c6:e4:
         7e:b6:ca:9c:7d:23:c7:6f:95:3b:ff:fc:a2:02:ae:a9:b6:92:
         62:83:4b:02:c1:6b:e4:bd:74:21:c8:94:05:c2:b7:8e:6e:9d:
         51:90:d0:6f:db:14:69:ef:dd:48:26:bd:ec:b2:4f:a9:ac:1e:
         61:69:17:50:d1:56:41:fe:ec:44:09:bc:df:0f:37:7d:34:5f:
         be:be:66:c4:7b:ea:37:fe:c4:9b:06:d3:dc:10:e7:5d:32:95:
         16:e7:8b:eb:6d:61:68:a4:0c:7c:25:83:e6:e0:c5:87:af:9a:
         38:6f:79:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdJiy483eOCooC1J1w3QPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWZkNDdkODM2ZmNhNmY3NDFjYWEzODIzOTM3ZjRiYjFm
MWIyOTQwHhcNMjUwNjE0MDgwMDQ3WhcNMjUwNjE1MDgwMDQ3WjAzMTEwLwYDVQQD
EyhkMTU4YjNiNDAyNTJlODk5NmMyMTEwYTA5NzU4NWI1YjIyOTFiNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiyyf+WXxeQrAPyUK5cDhdxTw05f
6oey2sCRzTTaBQa6JZYza6mQmGCxFJTS8Qyuq0x/lurR34GJUANRGzCc+g+4/TMr
mgYRJ3Mj9U0aQD81/w9HCVD6necDNAhMiFJFQl1f3egrbfJQIQjWH1K6hvNwDXwO
kUxim3UiP0Ge8lg8tUZdO/Y2dkfiAOuKSQYesHl6IDFhM2Fofb9bFCvS43shcdGh
aGUE5ITpmX6lkzBfTgLBq/RUl9Oro9HWrbs1xuVCuPZdlv3/U+uENYYB0bTG62n1
Z5OPT5VKsbefcu4J9bFlBV/wF+3DFk2muOFpRgfmSGDnbUdzHs6c7iMyGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFYs7QCUuiZbCEQoJdYW1sikbeCMB8GA1UdIwQY
MBaAFPJf1H2Db8pvdByqOCOTf0ux8bKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMt
YmI3YTQzZTU3ZjM4LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMtYmI3YTQzZTU3ZjM4
LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle+Y7yR1
0dwxYTUCdRACzr3dWmalftk2NjgHPjUNdIdN4bVDPuzi1uJhss7U1HQZV+696FBh
rsb3xj+jt0d9gPxOXn9AcTRlW3lDSYsT+jFq+Hiol/CfHw0EajCrcp8hQHnouHrQ
s5UqAp3br7GcpwNsxI9ZnBY77yuoj+1dbMQKShYU/0BjlnjyBV5oZcbkfrbKnH0j
x2+VO//8ogKuqbaSYoNLAsFr5L10IciUBcK3jm6dUZDQb9sUae/dSCa97LJPqawe
YWkXUNFWQf7sRAm83w83fTRfvr5mxHvqN/7EmwbT3BDnXTKVFueL621haKQMfCWD
5uDFh6+aOG95ow==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:52 2025 by rpki-client