Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          NX1pbyRQ3cemliWqmk5xofpIII8cjD19jMi8ztalQa8=
Subject key identifier:   E2:28:05:F2:1D:F6:8A:43:AF:31:AC:24:28:A8:71:10:F3:5E:ED:DA
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       019771F6201F9C43057B8BA3EA8738EDFC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 05:00:44 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:44 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:44 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: V3MQ19qSTM729HwFNxauvbTrtQ9/KZG13A57sttXAw8=)
                          2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:20:1f:9c:43:05:7b:8b:a3:ea:87:38:ed:fc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Jun 15 05:00:44 2025 GMT
            Not After : Jun 16 05:00:44 2025 GMT
        Subject: CN=e22805f21df68a43af31ac2428a87110f35eedda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:8c:3c:21:e8:34:c1:bc:81:e4:ef:b7:fd:
                    9e:a3:60:2b:35:78:71:ea:68:a5:bb:08:db:2a:d5:
                    f9:2d:85:53:59:cb:1f:96:70:33:d1:d8:0a:db:49:
                    56:b1:35:d8:f1:ad:58:a1:d1:19:0d:fb:25:ed:5d:
                    9b:5c:15:c0:10:35:89:8d:63:88:46:e6:5c:71:33:
                    35:f9:02:f4:ec:d3:0e:b7:3c:b5:eb:60:e3:75:31:
                    2c:78:0c:cf:fc:bb:b6:8f:19:0f:19:c0:fa:70:66:
                    25:68:48:78:de:08:8c:d2:b0:ae:4b:eb:f0:4c:86:
                    f9:31:2c:9c:fe:00:9b:36:77:9e:b3:e1:c9:1f:23:
                    f8:eb:87:50:34:82:ec:56:fa:2d:be:67:f5:ac:74:
                    c7:7e:8d:16:fe:a0:5c:d6:4b:8e:7c:11:65:d5:52:
                    27:8d:c3:fa:8d:ad:c4:4b:5e:1e:e8:b7:91:b5:ed:
                    fe:f6:c2:cc:32:9c:a7:20:0e:8f:37:dc:60:1e:58:
                    6c:80:c0:57:8a:d0:b9:a7:77:05:b2:f3:49:7e:02:
                    d9:03:89:f9:3a:1f:31:3a:7c:da:f5:9c:13:59:82:
                    be:60:02:1c:7d:df:dc:3e:86:63:e6:2b:26:b1:33:
                    d0:47:32:99:a3:c3:ea:4c:70:c5:9c:3d:f0:6c:36:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:05:F2:1D:F6:8A:43:AF:31:AC:24:28:A8:71:10:F3:5E:ED:DA
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9f:e7:a1:ee:ea:ed:d4:14:8a:78:c6:e2:d5:82:7b:a5:47:
         f0:a8:cb:d7:f3:c3:29:68:30:77:62:6e:c2:35:c6:87:50:57:
         e3:fd:d4:89:9a:76:5c:af:f9:3c:fe:95:8d:3c:28:68:47:64:
         18:f7:28:79:7a:ee:b4:09:9b:8e:1c:9c:49:f8:82:2c:ab:56:
         9a:dd:70:3f:ba:72:6b:17:d7:76:d4:7d:a3:b8:2b:c8:d9:85:
         f2:5e:63:03:7f:f1:48:2a:e5:41:e4:b8:61:19:d3:ec:fd:ec:
         1c:5f:bc:f2:85:21:be:d4:6d:63:35:91:d6:d8:c8:be:9f:98:
         94:6f:c6:36:a4:52:10:f5:7a:d1:35:46:a2:aa:c9:28:4d:64:
         72:cf:0a:fe:3a:0b:19:29:0a:18:dc:75:b6:87:5b:64:da:93:
         49:d0:b5:71:b4:e9:35:d1:bb:e6:b2:66:72:73:ee:40:90:13:
         dc:36:6c:2a:b9:ca:de:3d:3d:f4:c9:ff:7a:55:ff:4f:2d:64:
         49:71:f7:ef:af:a7:bd:1a:8e:f8:ef:49:3f:5d:5e:02:0f:f4:
         8a:11:22:7b:04:f8:43:b2:a3:f8:27:58:5d:ee:1f:07:2f:46:
         6a:39:2b:61:a9:7d:e9:5d:a6:ea:48:f0:a6:a6:dd:96:75:6e:
         66:20:d2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9iAfnEMFe4uj6oc47fxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0
ZTE1NDEwHhcNMjUwNjE1MDUwMDQ0WhcNMjUwNjE2MDUwMDQ0WjAzMTEwLwYDVQQD
EyhlMjI4MDVmMjFkZjY4YTQzYWYzMWFjMjQyOGE4NzExMGYzNWVlZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VOMPCHoNMG8geTvt/2eo2ArNXhx
6miluwjbKtX5LYVTWcsflnAz0dgK20lWsTXY8a1YodEZDfsl7V2bXBXAEDWJjWOI
RuZccTM1+QL07NMOtzy162DjdTEseAzP/Lu2jxkPGcD6cGYlaEh43giM0rCuS+vw
TIb5MSyc/gCbNnees+HJHyP464dQNILsVvotvmf1rHTHfo0W/qBc1kuOfBFl1VIn
jcP6ja3ES14e6LeRte3+9sLMMpynIA6PN9xgHlhsgMBXitC5p3cFsvNJfgLZA4n5
Oh8xOnza9ZwTWYK+YAIcfd/cPoZj5ismsTPQRzKZo8PqTHDFnD3wbDYRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIoBfId9opDrzGsJCiocRDzXu3aMB8GA1UdIwQY
MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt
YWUxYjBhY2QyOGE4LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4
LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5/noe7q
7dQUinjG4tWCe6VH8KjL1/PDKWgwd2JuwjXGh1BX4/3UiZp2XK/5PP6VjTwoaEdk
GPcoeXrutAmbjhycSfiCLKtWmt1wP7pyaxfXdtR9o7gryNmF8l5jA3/xSCrlQeS4
YRnT7P3sHF+88oUhvtRtYzWR1tjIvp+YlG/GNqRSEPV60TVGoqrJKE1kcs8K/joL
GSkKGNx1todbZNqTSdC1cbTpNdG75rJmcnPuQJAT3DZsKrnK3j099Mn/elX/Ty1k
SXH376+nvRqO+O9JP11eAg/0ihEiewT4Q7Kj+CdYXe4fBy9GajkrYal96V2m6kjw
pqbdlnVuZiDSIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:50 2025 by rpki-client