Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
File:                     sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json)
Hash identifier:          HVUU1+fDstQ+mojr2N8oEPp+p5B4j1/+ltin3MeeVkY=
Subject key identifier:   77:C7:5B:84:D5:F1:FC:24:B0:7E:DE:D4:51:A5:F9:EF:14:5A:23:9B
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Certificate issuer:       /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial:       019889C5222B46B016640F9A311EC5BFA3FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
Manifest number:          120A
Signing time:             Fri 08 Aug 2025 13:00:54 +0000
Manifest this update:     Fri 08 Aug 2025 13:00:54 +0000
Manifest next update:     Sat 09 Aug 2025 13:00:54 +0000
Files and hashes:         1: 3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa (hash: Jx3hDEYSWvyg0teai/myn3+xGqI2AFge39hcH66bs6U=)
                          2: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: SJN5+Jmg66w6vVNytUOjErDJxEvgKaD7L85p1Syu+xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c5:22:2b:46:b0:16:64:0f:9a:31:1e:c5:bf:a3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
        Validity
            Not Before: Aug  8 13:00:54 2025 GMT
            Not After : Aug  9 13:00:54 2025 GMT
        Subject: CN=77c75b84d5f1fc24b07eded451a5f9ef145a239b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:c9:9d:60:ca:a6:d5:f0:75:92:63:ee:12:
                    de:84:c0:33:41:54:2c:3a:b5:c4:19:b4:47:51:40:
                    27:3f:de:42:dd:2b:85:d3:d4:0c:7b:5b:cc:36:56:
                    ef:c5:da:75:70:6c:fc:59:ae:5b:8d:3e:0e:d8:15:
                    b7:aa:71:21:2e:cf:a9:18:4a:a6:ca:b3:35:be:d5:
                    96:4a:92:db:fa:94:7e:d6:17:ab:ce:ca:20:da:3b:
                    53:3a:ab:0f:2a:cd:2f:22:e8:8e:72:ad:64:83:c1:
                    14:67:05:e7:33:2c:78:80:00:c9:87:a2:c8:0b:4e:
                    08:02:97:5b:99:07:51:41:97:15:09:b7:41:af:83:
                    eb:ea:cc:c9:08:b1:5c:6d:2b:06:58:50:0e:ab:08:
                    99:3c:86:25:79:7b:f0:64:4b:00:8a:0e:1d:09:48:
                    df:3c:68:46:f4:fe:5d:d0:8e:1c:4d:26:1a:93:d8:
                    76:7f:eb:a9:0a:e5:88:54:c5:89:1f:30:90:bb:25:
                    c3:e3:81:5b:36:19:e6:00:06:1b:9c:c3:ee:c0:cd:
                    c1:3e:d5:d3:d1:eb:a6:1d:14:53:97:0d:99:2d:4b:
                    ed:b5:9d:b7:9a:96:ae:52:57:90:16:25:af:e0:da:
                    23:7f:b5:83:88:8b:c3:0a:70:fc:03:06:b4:38:ab:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C7:5B:84:D5:F1:FC:24:B0:7E:DE:D4:51:A5:F9:EF:14:5A:23:9B
            X509v3 Authority Key Identifier:
                keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:90:d4:c9:93:ac:ed:31:cd:20:8a:ae:aa:38:ce:04:de:
         7e:78:f5:6e:05:58:0a:65:65:24:ca:e1:07:3f:ea:8a:2c:1f:
         5f:60:a2:06:4b:8e:21:e7:27:a5:ba:2b:a6:5d:ac:a2:a4:50:
         89:8b:1c:0d:5a:0d:96:51:15:6a:b0:d7:67:05:21:2b:66:85:
         2b:3d:62:14:96:03:be:21:d4:dc:db:40:a3:68:96:70:35:7e:
         85:89:a6:23:95:c9:65:6b:99:e8:8b:e3:21:d8:1a:72:7d:5b:
         de:86:70:b1:29:9a:40:8b:43:83:68:c4:0b:4c:f0:47:fb:58:
         7c:64:35:c8:7a:00:0b:15:a3:dd:fe:40:33:ba:8f:76:18:b6:
         6a:c7:b5:45:92:02:dd:7c:ea:51:4d:f0:36:97:d9:7f:f2:f8:
         b2:21:f3:27:8b:a0:1d:40:9d:e5:e2:30:a5:37:36:05:88:af:
         f7:5b:19:aa:b2:1f:3d:4d:3f:6c:2d:62:db:63:93:93:5f:47:
         25:ca:8d:91:96:8c:39:77:60:b0:01:d8:f5:f8:f8:2a:94:de:
         84:36:0b:b2:91:c7:05:69:b0:57:73:0a:b9:57:19:7d:2c:82:
         6d:58:a3:39:88:a9:fe:c7:b0:02:06:8b:23:52:d0:71:78:6f:
         8d:19:0f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJxSIrRrAWZA+aMR7Fv6P8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNWY2YTUwZTZhNDg4N2UxN2M1M2IwZmMxMGU0YjdlMTQ5
M2VlYjUwHhcNMjUwODA4MTMwMDU0WhcNMjUwODA5MTMwMDU0WjAzMTEwLwYDVQQD
Eyg3N2M3NWI4NGQ1ZjFmYzI0YjA3ZWRlZDQ1MWE1ZjllZjE0NWEyMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAnJnWDKptXwdZJj7hLehMAzQVQs
OrXEGbRHUUAnP95C3SuF09QMe1vMNlbvxdp1cGz8Wa5bjT4O2BW3qnEhLs+pGEqm
yrM1vtWWSpLb+pR+1herzsog2jtTOqsPKs0vIuiOcq1kg8EUZwXnMyx4gADJh6LI
C04IApdbmQdRQZcVCbdBr4Pr6szJCLFcbSsGWFAOqwiZPIYleXvwZEsAig4dCUjf
PGhG9P5d0I4cTSYak9h2f+upCuWIVMWJHzCQuyXD44FbNhnmAAYbnMPuwM3BPtXT
0eumHRRTlw2ZLUvttZ23mpauUleQFiWv4Nojf7WDiIvDCnD8Awa0OKtP/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfHW4TV8fwksH7e1FGl+e8UWiObMB8GA1UdIwQY
MBaAFLFfalDmpIh+F8U7D8EOS34Uk+61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2Ut
Mjk4NDJiYzI3MTQ1LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2UtMjk4NDJiYzI3MTQ1
LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzyQ1MmT
rO0xzSCKrqo4zgTefnj1bgVYCmVlJMrhBz/qiiwfX2CiBkuOIecnpborpl2soqRQ
iYscDVoNllEVarDXZwUhK2aFKz1iFJYDviHU3NtAo2iWcDV+hYmmI5XJZWuZ6Ivj
Idgacn1b3oZwsSmaQItDg2jEC0zwR/tYfGQ1yHoACxWj3f5AM7qPdhi2ase1RZIC
3XzqUU3wNpfZf/L4siHzJ4ugHUCd5eIwpTc2BYiv91sZqrIfPU0/bC1i22OTk19H
JcqNkZaMOXdgsAHY9fj4KpTehDYLspHHBWmwV3MKuVcZfSyCbVijOYip/sewAgaL
I1LQcXhvjRkPjA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:33 2025 by rpki-client