Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
File:                     7VprotIki8R4KsD9s8ZLlGZAsJw.mft (raw, json)
Hash identifier:          seV+JbMIi0l8NsbuFOCA0BlwrNoAa+iMLWA8B5jGzbk=
Subject key identifier:   61:04:D6:E8:DB:BA:3D:69:62:37:BF:93:8E:5A:96:92:64:6B:0B:8B
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Certificate issuer:       /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial:       0198733D38D2AE71AA491D7B5F88B032CFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
Manifest number:          068C
Signing time:             Mon 04 Aug 2025 04:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:48 +0000
Files and hashes:         1: 314MaBVE3hjtYKkC4-99ME_UBjc.roa (hash: 7UXNIyhk1ejIJ/HGQxCr8shkd1oXUhsfxNUgODxpVqQ=)
                          2: 7VprotIki8R4KsD9s8ZLlGZAsJw.crl (hash: zglx/C8zjHNMolK7NdksawJSh+B3H3RO2qGQTCl6ir4=)
                          3: IIp94GUi2CKDAXo7hzU1qNdLWVg.roa (hash: YmRe6VqQCgI0nMfOZ9MBk1EFIvFG9HxQKfWRMtofors=)
                          4: K2cl5DfywZ2FHhGLEEiE9l1uo7M.roa (hash: ibEDhV+yzuNtZt5ET+zP4p+w29VfnTjyjguslhXO6kQ=)
                          5: UOP1lIUHKVkAuGuqRok1nHBp9I0.roa (hash: saB8XTBnDicn7XtKwdtZ5Dgmto1M/0RTX2q+iuZXS38=)
                          6: tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa (hash: x3MqStSpB4AHpyiqWuAgIrBK5ybLesbTtKI3yKep0ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:38:d2:ae:71:aa:49:1d:7b:5f:88:b0:32:cf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
        Validity
            Not Before: Aug  4 04:00:48 2025 GMT
            Not After : Aug  5 04:00:48 2025 GMT
        Subject: CN=6104d6e8dbba3d696237bf938e5a9692646b0b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:f3:d4:1e:78:fe:73:e0:57:d8:93:45:76:
                    2e:2b:e9:3a:36:5d:f4:cf:c5:be:56:36:50:59:b2:
                    56:4d:8f:b3:f3:8c:6b:92:56:24:d8:a5:1c:b0:97:
                    fb:48:18:d0:c4:fb:9c:dd:fa:ba:7a:55:07:4e:ff:
                    2a:c4:1b:8d:36:a7:e2:a4:70:35:9f:47:5a:ac:23:
                    25:3c:46:20:b9:7f:f7:0a:06:6e:63:bb:7f:52:65:
                    a3:63:b4:97:36:1f:b0:44:35:39:87:65:b3:0b:b6:
                    5f:60:80:ef:c6:9f:b9:f4:18:98:31:33:81:ba:43:
                    a3:bf:cd:bd:e1:bd:ba:f9:3d:82:22:d1:9e:4a:6a:
                    8f:e6:08:78:86:2f:47:bc:fb:ae:74:24:06:9e:56:
                    69:b2:bb:40:d4:4a:f6:86:0f:ea:45:a5:9c:c9:83:
                    27:eb:32:90:9f:47:9f:d3:7e:8b:21:d7:d0:69:68:
                    96:0e:50:f4:30:6d:02:76:4d:0f:c1:07:5b:87:ea:
                    2d:4f:dd:89:90:b1:33:94:93:39:a6:d9:2a:6d:79:
                    29:68:0e:d3:d0:15:1a:ab:26:66:b4:70:c3:3b:bc:
                    aa:7f:13:75:21:90:7b:4c:74:9a:bf:bd:90:a7:27:
                    c4:e5:99:c2:9b:c0:a2:d8:fc:36:a9:9b:23:72:1b:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:D6:E8:DB:BA:3D:69:62:37:BF:93:8E:5A:96:92:64:6B:0B:8B
            X509v3 Authority Key Identifier:
                keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:2a:3d:05:54:ea:36:11:d3:4c:98:03:c8:96:b0:a2:9a:
         80:19:c5:6f:b0:44:c9:55:78:34:75:5e:d5:7a:0b:e8:df:3a:
         67:52:1a:c2:14:a4:f2:4e:45:00:4a:2c:c4:e0:30:75:76:87:
         8f:a9:ce:25:09:22:ef:3c:d5:4d:5e:ea:0a:9a:a2:49:b0:21:
         3d:ea:c5:60:f7:d5:fb:0a:27:cc:80:51:8b:56:b4:4c:5b:1d:
         69:dd:30:34:a7:10:68:50:cb:d7:8d:3b:d3:3b:79:8a:a1:55:
         25:b1:3c:dd:bb:42:72:9e:5b:c9:02:c7:3a:5f:6b:1c:20:2b:
         ba:84:a9:ee:43:0a:24:38:90:30:5f:0f:ea:da:64:1d:ff:c9:
         42:e9:fe:20:45:8e:83:48:5e:9b:44:65:82:f0:2a:0d:1d:02:
         ca:e5:98:5d:94:e9:98:94:00:a5:84:00:24:0b:4b:51:39:22:
         34:bd:db:e3:eb:11:9d:30:dc:88:96:bc:04:cc:40:dd:50:88:
         f5:bf:c1:6f:5f:ee:8c:a5:92:6e:a4:a3:47:6d:bb:39:19:bd:
         a7:92:31:b7:86:ee:8a:aa:e9:5f:17:c2:10:c4:f1:7d:d0:22:
         5a:1e:b7:6a:1f:0f:4b:0c:22:73:55:25:76:82:75:a6:38:34:
         61:14:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:35 2025 by rpki-client