Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          zi31bO+VBgFu7gyRJXeaycM7VRNibQzcK01PNYzYb3g=
Subject key identifier:   74:C3:91:7E:BE:F2:10:52:0D:69:AC:F6:A7:9E:09:45:53:17:3D:7C
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       0197846A14790A583CF8ED0C83F9B099CC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          15A5
Signing time:             Wed 18 Jun 2025 19:00:33 +0000
Manifest this update:     Wed 18 Jun 2025 19:00:33 +0000
Manifest next update:     Thu 19 Jun 2025 19:00:33 +0000
Files and hashes:         1: MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa (hash: afWnYJW6s1CaDObkwTU5kA7v+0oYXDgnGB/f5yofQ5k=)
                          2: P7UI9wbXQO7767Ee_OeO-FbHpEk.roa (hash: 3nnbFB8QPYfC95SG+310oNK9akUzhHQ/muxTMob6BTg=)
                          3: U39msWOqgwaliq8DKMspRhKQ3Kg.roa (hash: Z6S+9hFUTMzmzmKnTFgFfim8JmWqS4uAPgj1Z/Z4oQ8=)
                          4: qVuaH5gRKmc-Hd6yIi1BOdblXYY.roa (hash: B5OKBmE3Bc+iBnKhO0BpeQX3SCTA76N/vQW358w2Gs4=)
                          5: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
                          6: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: GCYAFld6qwI3Oo2byP3krGG/kC1jEY/xDboPNOcxE0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:6a:14:79:0a:58:3c:f8:ed:0c:83:f9:b0:99:cc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Jun 18 19:00:33 2025 GMT
            Not After : Jun 19 19:00:33 2025 GMT
        Subject: CN=74c3917ebef210520d69acf6a79e094553173d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:ba:c1:3c:8e:34:ab:ee:f1:fa:ae:ff:23:
                    d8:e0:45:40:e1:44:76:27:28:f3:54:a6:5f:24:5e:
                    bf:a3:4d:ff:08:ff:f4:b7:82:14:bf:db:06:d4:e2:
                    46:ea:e4:6a:30:18:72:79:8c:55:79:57:8b:f7:cb:
                    18:41:5c:61:05:20:0a:2c:7e:5e:9d:16:b7:00:ec:
                    e8:d4:2b:8e:31:ff:36:ac:cc:11:15:2d:5f:6b:d6:
                    b4:04:47:aa:83:5a:c7:e2:af:24:54:97:31:a5:ba:
                    3e:58:83:bf:44:12:b2:3e:09:56:72:8d:51:5c:0d:
                    5b:e3:36:10:5e:2c:bd:68:4b:35:94:91:7f:4a:01:
                    f4:00:ee:3b:0e:49:d3:fe:5e:cb:82:4f:d8:e3:22:
                    30:22:c9:a3:ba:b1:de:52:44:c7:6d:54:7e:3c:50:
                    9b:3c:85:21:45:8b:47:df:ad:81:eb:36:c6:24:fd:
                    11:40:a8:e5:ad:6d:72:f9:13:5a:52:b6:b5:f4:7e:
                    b7:d0:9d:69:e2:6f:33:95:d6:2d:a2:ea:f4:f3:09:
                    b1:f8:7e:f3:41:8c:ed:58:29:b1:27:5b:55:c4:5e:
                    1c:4d:36:41:04:8e:70:16:a0:dc:e4:5f:76:5f:b3:
                    f0:82:46:e2:d6:62:db:58:84:89:01:b9:23:33:80:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C3:91:7E:BE:F2:10:52:0D:69:AC:F6:A7:9E:09:45:53:17:3D:7C
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:a2:f6:b3:96:59:bf:2f:59:46:ed:d8:a4:6b:3a:44:f3:
         b9:e1:49:d9:cf:8b:d5:30:19:2b:6a:72:14:b4:14:5b:e6:5e:
         07:59:93:07:c0:76:4b:1b:19:85:63:c1:8f:1d:19:d1:51:52:
         00:30:a8:5c:5d:87:9b:a7:0e:f8:e7:70:98:53:f2:97:c7:51:
         e7:6b:e5:c6:74:2b:94:04:08:c7:ac:26:9e:95:80:b0:2b:76:
         f4:70:73:fd:27:35:96:38:69:28:fa:1f:ef:80:9e:3f:fb:dd:
         b4:b5:f4:f2:9d:03:d9:29:22:8e:0c:82:eb:78:cb:0e:19:3b:
         10:22:3d:12:f7:58:7d:65:80:43:66:e5:78:1c:f1:da:55:26:
         35:81:5e:d5:f4:31:3a:71:70:1e:41:86:59:66:4d:70:5a:c4:
         f6:a9:26:72:e9:27:07:48:9a:a9:ac:3a:1c:a8:97:94:dc:79:
         31:81:61:92:b5:aa:e2:cb:ec:e5:c7:93:07:26:57:85:33:c1:
         7d:d6:8a:fa:22:4d:a1:5c:1f:c4:b5:26:89:17:05:a5:f7:78:
         30:1a:a2:93:4d:1c:b6:2b:3e:5f:bb:56:b2:a4:35:e6:42:26:
         23:01:7e:78:60:7a:e5:36:2c:12:f1:b1:d1:d6:7c:ba:fa:a1:
         0a:4b:95:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeEahR5Clg8+O0Mg/mwmcwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2
OTY4MWIwHhcNMjUwNjE4MTkwMDMzWhcNMjUwNjE5MTkwMDMzWjAzMTEwLwYDVQQD
Eyg3NGMzOTE3ZWJlZjIxMDUyMGQ2OWFjZjZhNzllMDk0NTUzMTczZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAume6wTyONKvu8fqu/yPY4EVA4UR2
JyjzVKZfJF6/o03/CP/0t4IUv9sG1OJG6uRqMBhyeYxVeVeL98sYQVxhBSAKLH5e
nRa3AOzo1CuOMf82rMwRFS1fa9a0BEeqg1rH4q8kVJcxpbo+WIO/RBKyPglWco1R
XA1b4zYQXiy9aEs1lJF/SgH0AO47DknT/l7Lgk/Y4yIwIsmjurHeUkTHbVR+PFCb
PIUhRYtH362B6zbGJP0RQKjlrW1y+RNaUra19H630J1p4m8zldYtour08wmx+H7z
QYztWCmxJ1tVxF4cTTZBBI5wFqDc5F92X7Pwgkbi1mLbWISJAbkjM4DkkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTDkX6+8hBSDWms9qeeCUVTFz18MB8GA1UdIwQY
MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct
NjNiNTJhYTdmOGRhLzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh
LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq2i9rOW
Wb8vWUbt2KRrOkTzueFJ2c+L1TAZK2pyFLQUW+ZeB1mTB8B2SxsZhWPBjx0Z0VFS
ADCoXF2Hm6cO+OdwmFPyl8dR52vlxnQrlAQIx6wmnpWAsCt29HBz/Sc1ljhpKPof
74CeP/vdtLX08p0D2SkijgyC63jLDhk7ECI9EvdYfWWAQ2bleBzx2lUmNYFe1fQx
OnFwHkGGWWZNcFrE9qkmcuknB0iaqaw6HKiXlNx5MYFhkrWq4svs5ceTByZXhTPB
fdaK+iJNoVwfxLUmiRcFpfd4MBqik00ctis+X7tWsqQ15kImIwF+eGB65TYsEvGx
0dZ8uvqhCkuVWw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 22:48:15 2025 by rpki-client