Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File:                     qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier:          or29FdETLaDBDv7++k1L9DvNizwttLkNMv5/u0Bhz4E=
Subject key identifier:   7F:5D:C9:E3:6C:1E:F6:7E:B2:12:DF:F4:62:EA:EC:F8:5C:65:DB:D4
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer:       /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial:       019880C20E1A765382D6D729B15A2ADBE0BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number:          15B0
Signing time:             Wed 06 Aug 2025 19:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:57 +0000
Files and hashes:         1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
                          2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: S50Jic7Bh5c7IoMNVEIxNWe7SxAE7GETQ6MvB+EhO/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:0e:1a:76:53:82:d6:d7:29:b1:5a:2a:db:e0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
        Validity
            Not Before: Aug  6 19:00:57 2025 GMT
            Not After : Aug  7 19:00:57 2025 GMT
        Subject: CN=7f5dc9e36c1ef67eb212dff462eaecf85c65dbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:51:14:7a:39:c4:38:d5:2b:31:15:87:15:
                    62:6b:6d:f9:53:f5:04:d8:21:72:ea:7c:ff:6b:5d:
                    9e:1b:43:1c:e2:0d:81:03:13:17:28:8f:f9:13:ba:
                    f7:e4:28:32:03:2d:37:c6:24:3c:54:38:6c:9f:c5:
                    48:e1:5a:58:b8:50:07:29:57:a5:25:2a:6b:79:3f:
                    85:98:73:f9:40:0d:4b:23:24:4b:c9:8a:2b:d1:03:
                    e8:ac:f9:71:6d:d5:d1:29:ba:79:dd:c6:93:24:84:
                    30:67:ce:57:b8:80:79:bb:7f:bf:11:bb:1b:f8:28:
                    0c:5f:81:0c:6d:29:73:ad:76:6b:21:b3:8d:09:a1:
                    b6:78:cc:fb:07:a3:be:cf:b6:84:cd:78:a2:8a:f6:
                    5d:c0:d6:44:0b:74:77:cd:0c:6a:74:ce:3a:da:ac:
                    5f:08:5a:18:4f:3a:84:a1:86:68:99:10:e0:4a:58:
                    49:30:54:26:19:f0:5b:67:1d:2c:99:40:e6:3f:e0:
                    7b:36:11:ca:80:55:eb:13:25:b0:1e:e7:f4:4c:64:
                    7d:72:1f:88:54:e6:34:a5:b0:0c:a0:04:85:c7:e0:
                    93:67:6d:b3:bd:91:83:97:ee:b2:19:f0:29:48:a5:
                    2b:29:89:f7:5a:20:ee:93:df:bb:c5:bb:e3:1e:b5:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:C9:E3:6C:1E:F6:7E:B2:12:DF:F4:62:EA:EC:F8:5C:65:DB:D4
            X509v3 Authority Key Identifier:
                keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:31:2a:58:17:a1:98:64:5f:ac:bb:1e:b3:8d:11:3d:df:79:
         27:65:6f:9d:3c:b8:67:46:f9:4a:8e:e7:26:e8:b5:df:a5:1c:
         10:04:f2:b9:39:f6:0b:92:be:1e:a9:07:49:64:1f:86:4e:ca:
         cb:f7:4d:c1:ed:c9:4a:a6:47:37:11:ad:1c:20:df:1a:4a:e6:
         3c:53:88:9e:0e:fb:67:84:e6:c7:50:23:5e:73:72:e9:23:36:
         91:58:99:56:f6:9a:48:c8:73:ef:d4:84:4d:cc:0b:7e:ad:0f:
         2d:80:1c:a7:45:f8:44:ff:7a:56:45:9e:83:1a:40:1c:83:b0:
         27:89:da:ed:d1:ee:8a:89:06:0c:d2:79:d1:1f:d3:ea:40:89:
         ef:a4:f5:d3:ea:3c:eb:dd:ae:67:3f:6d:64:a2:8a:52:43:30:
         d6:da:51:5b:36:1d:0c:cf:71:93:19:94:16:60:bd:fd:1b:68:
         dc:df:90:39:85:4a:94:6e:d2:5f:ee:af:4e:3b:59:08:22:6c:
         98:05:3c:13:05:dc:f7:2f:49:39:12:2a:6c:b0:d4:03:c9:f5:
         78:34:4d:fa:ac:41:01:b6:65:6e:ae:0d:a4:50:3f:3a:1b:c9:
         7e:6a:70:6f:71:93:5b:78:15:2d:31:e6:43:f9:fe:62:3e:6e:
         eb:1f:fb:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwg4adlOC1tcpsVoq2+C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDU3MDg1NGZlODg2Yjk0YWU2MjUzNjNjNjI1ZGRhNjBi
YjNlZmMwHhcNMjUwODA2MTkwMDU3WhcNMjUwODA3MTkwMDU3WjAzMTEwLwYDVQQD
Eyg3ZjVkYzllMzZjMWVmNjdlYjIxMmRmZjQ2MmVhZWNmODVjNjVkYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z9RFHo5xDjVKzEVhxVia235U/UE
2CFy6nz/a12eG0Mc4g2BAxMXKI/5E7r35CgyAy03xiQ8VDhsn8VI4VpYuFAHKVel
JSpreT+FmHP5QA1LIyRLyYor0QPorPlxbdXRKbp53caTJIQwZ85XuIB5u3+/Ebsb
+CgMX4EMbSlzrXZrIbONCaG2eMz7B6O+z7aEzXiiivZdwNZEC3R3zQxqdM462qxf
CFoYTzqEoYZomRDgSlhJMFQmGfBbZx0smUDmP+B7NhHKgFXrEyWwHuf0TGR9ch+I
VOY0pbAMoASFx+CTZ22zvZGDl+6yGfApSKUrKYn3WiDuk9+7xbvjHrWSiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9dyeNsHvZ+shLf9GLq7PhcZdvUMB8GA1UdIwQY
MBaAFKhFcIVP6Ia5SuYlNjxiXdpguz78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUt
NWJjODc5NWMyY2JhLzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUtNWJjODc5NWMyY2Jh
LzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTEqWBeh
mGRfrLses40RPd95J2VvnTy4Z0b5So7nJui136UcEATyuTn2C5K+HqkHSWQfhk7K
y/dNwe3JSqZHNxGtHCDfGkrmPFOIng77Z4Tmx1AjXnNy6SM2kViZVvaaSMhz79SE
TcwLfq0PLYAcp0X4RP96VkWegxpAHIOwJ4na7dHuiokGDNJ50R/T6kCJ76T10+o8
692uZz9tZKKKUkMw1tpRWzYdDM9xkxmUFmC9/Rto3N+QOYVKlG7SX+6vTjtZCCJs
mAU8EwXc9y9JORIqbLDUA8n1eDRN+qxBAbZlbq4NpFA/OhvJfmpwb3GTW3gVLTHm
Q/n+Yj5u6x/7zw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:13 2025 by rpki-client