Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File:                     7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier:          vB4uISzII5h/kXmHZw2G2USedthPV5PUuYZvounhCl4=
Subject key identifier:   03:9E:57:0E:E0:C6:98:8B:12:E2:DC:31:FD:03:E1:10:B9:EF:E9:FD
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer:       /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial:       01968D01FFFF45FCA21562AC77BC58509ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number:          0B87
Signing time:             Thu 01 May 2025 18:00:40 +0000
Manifest this update:     Thu 01 May 2025 18:00:40 +0000
Manifest next update:     Fri 02 May 2025 18:00:40 +0000
Files and hashes:         1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: LyDfGq0HJqdFFx+36VlSg8u3xpeE7ADGa/auZIN6wjc=)
                          2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:01:ff:ff:45:fc:a2:15:62:ac:77:bc:58:50:9e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
        Validity
            Not Before: May  1 18:00:40 2025 GMT
            Not After : May  2 18:00:40 2025 GMT
        Subject: CN=039e570ee0c6988b12e2dc31fd03e110b9efe9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:30:58:60:a9:77:4d:cb:d8:91:8c:44:06:
                    5d:d5:d6:4a:1c:ba:7a:ac:9f:36:ca:77:fe:96:66:
                    05:78:3b:5e:e6:ca:bd:82:31:8c:88:e3:52:74:50:
                    b1:01:23:9f:51:ac:21:35:38:f8:54:cc:fa:3c:b6:
                    a5:3c:98:f1:af:ac:9c:fb:62:b6:c5:af:9b:7e:e3:
                    2e:52:77:04:f6:94:8a:2d:42:7b:70:d8:e3:9f:50:
                    db:00:00:70:24:03:ac:00:6b:24:3a:95:a8:1b:90:
                    20:f8:2a:d4:9d:be:1b:46:24:cc:cf:a7:ca:d0:de:
                    d6:b4:ae:1b:66:d9:6b:e7:97:c8:4d:2b:15:14:f8:
                    f9:d0:02:d5:e7:9e:b9:ce:90:af:81:08:2d:03:72:
                    2a:bf:c9:0f:94:bc:ea:2a:78:bf:1c:c6:65:0c:ca:
                    03:3b:7d:51:cd:8d:f7:c9:70:14:ab:d9:33:f6:1f:
                    e2:40:ec:e6:f2:c0:ad:46:96:6e:d8:be:05:6c:d2:
                    f5:12:a0:f7:4c:49:28:2a:bc:cc:5a:18:c6:45:37:
                    db:44:ee:10:03:48:3d:a5:c1:7d:be:55:e0:87:74:
                    09:1a:49:48:77:82:fe:82:d0:95:8e:94:b3:84:66:
                    8d:35:07:dc:13:98:ef:0c:47:01:8f:0e:07:66:2c:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9E:57:0E:E0:C6:98:8B:12:E2:DC:31:FD:03:E1:10:B9:EF:E9:FD
            X509v3 Authority Key Identifier:
                keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:52:74:58:75:66:b5:21:03:79:3d:d3:b2:14:2d:6e:47:
         0a:56:1a:1e:1b:60:07:eb:b5:9f:a4:01:79:67:ed:30:99:2c:
         9d:43:34:f9:90:c9:26:3c:3d:9f:68:06:f9:1d:61:61:32:ea:
         42:61:45:dd:4e:80:f3:7b:3d:fc:d7:84:24:02:ea:d1:2e:df:
         19:26:1f:d5:73:4d:37:39:b6:6b:8e:a1:05:c6:f3:8c:bb:3e:
         05:ef:ba:07:3b:15:8a:e2:9e:ce:95:ed:9e:09:8e:eb:6f:02:
         21:fe:f1:f5:d4:c2:d6:9d:d3:7d:dc:d5:1a:2e:da:d4:71:e3:
         50:bb:60:2a:8c:14:b0:5d:c4:d2:50:45:3e:4a:81:7f:ec:9e:
         7a:bf:33:07:3a:31:72:21:8c:e4:5c:52:34:7a:df:c1:f5:da:
         47:df:d8:f4:ce:8c:67:fd:ce:f0:91:ad:be:ee:1a:36:70:f6:
         35:10:7e:66:b0:96:95:34:e1:f1:14:4a:0c:66:58:77:6d:a7:
         af:14:e8:5a:11:7a:05:62:29:69:22:5c:54:23:19:02:b7:e6:
         95:45:33:bd:6d:e0:4a:ff:60:5f:f1:2d:14:60:98:40:d4:cc:
         2a:03:a3:ed:b7:fa:e8:69:ca:3f:e7:29:0d:25:56:6b:7a:21:
         aa:08:c1:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNAf//RfyiFWKsd7xYUJ7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2
NTViZTYwHhcNMjUwNTAxMTgwMDQwWhcNMjUwNTAyMTgwMDQwWjAzMTEwLwYDVQQD
EygwMzllNTcwZWUwYzY5ODhiMTJlMmRjMzFmZDAzZTExMGI5ZWZlOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUIwWGCpd03L2JGMRAZd1dZKHLp6
rJ82ynf+lmYFeDte5sq9gjGMiONSdFCxASOfUawhNTj4VMz6PLalPJjxr6yc+2K2
xa+bfuMuUncE9pSKLUJ7cNjjn1DbAABwJAOsAGskOpWoG5Ag+CrUnb4bRiTMz6fK
0N7WtK4bZtlr55fITSsVFPj50ALV5565zpCvgQgtA3Iqv8kPlLzqKni/HMZlDMoD
O31RzY33yXAUq9kz9h/iQOzm8sCtRpZu2L4FbNL1EqD3TEkoKrzMWhjGRTfbRO4Q
A0g9pcF9vlXgh3QJGklId4L+gtCVjpSzhGaNNQfcE5jvDEcBjw4HZiyRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOeVw7gxpiLEuLcMf0D4RC57+n9MB8GA1UdIwQY
MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt
NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3
LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlVSdFh1
ZrUhA3k907IULW5HClYaHhtgB+u1n6QBeWftMJksnUM0+ZDJJjw9n2gG+R1hYTLq
QmFF3U6A83s9/NeEJALq0S7fGSYf1XNNNzm2a46hBcbzjLs+Be+6BzsViuKezpXt
ngmO628CIf7x9dTC1p3TfdzVGi7a1HHjULtgKowUsF3E0lBFPkqBf+yeer8zBzox
ciGM5FxSNHrfwfXaR9/Y9M6MZ/3O8JGtvu4aNnD2NRB+ZrCWlTTh8RRKDGZYd22n
rxToWhF6BWIpaSJcVCMZArfmlUUzvW3gSv9gX/EtFGCYQNTMKgOj7bf66GnKP+cp
DSVWa3ohqgjB8w==
-----END CERTIFICATE-----
Generated at Fri May 2 00:56:39 2025 by rpki-client