Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
File:                     Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft (raw, json)
Hash identifier:          EEaqfbJrPuDnBkhCF9UhlaDSOMJiK8RPuTBVBwXFMjo=
Subject key identifier:   9D:59:F8:92:07:72:47:83:17:32:47:E9:19:39:E3:2B:43:5E:C3:AE
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       019787A248CD3073C5E6DE37535ABEB4E994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
Manifest number:          15B8
Signing time:             Thu 19 Jun 2025 10:00:48 +0000
Manifest this update:     Thu 19 Jun 2025 10:00:48 +0000
Manifest next update:     Fri 20 Jun 2025 10:00:48 +0000
Files and hashes:         1: 2wLUU494Ia20PxAfcxd4SZbY_g0.roa (hash: fvCIqXB/feD7/7NGOTx8qOmkJPy1MIly8nqeUxBI1Xk=)
                          2: BiwLI9VO2_0s8tZyNBhVQqU_iuY.roa (hash: FTx8tgcHKGsWWw5SgToY/5961CHlQFLj7rItVRXBbV8=)
                          3: DQnS1tnQnd97U1BmP1oL5JTufUo.roa (hash: wiUK574UXDBemm+CsOTP5NNyjTNPEWH+aYzA5a9BDb4=)
                          4: TH2OwxnyxuHxSNko_w83dXwWzEQ.roa (hash: e/qYbxQxxwVh/yNiqnyigNpI7FXsrH7HPOwHVHmgcbQ=)
                          5: VAZ3MFih5WSTai0Q44vHUT6D2w4.roa (hash: vzUPtN33HKFnySDbEE3ZOgsXce4oL2RZCBcOFCQUplo=)
                          6: Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl (hash: dz/qtLSPzrbrqukQsUsnOwCfdMErFzSAvM0p3EjVDnA=)
                          7: kVfwRWpWGCdaLYKlxXAo9BahOeE.roa (hash: vJQJdP1v5Z/klqHzrnnFxsprM10eWpnFqcs7vy+a6nU=)
                          8: nzjNgL9vfqj7FcJjaEJmWt_jQiM.roa (hash: llP4NmFewcglSMw9utQmyfOk+VDA5Rn/G2jBkGERWjY=)
                          9: uU_t_lLPvr24v5Pbz0SrTkKY6nY.roa (hash: rwGPe+ujcUEDQ0W4o5koNGMN3c7lcHfvYPIWubsi9Xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:a2:48:cd:30:73:c5:e6:de:37:53:5a:be:b4:e9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: Jun 19 10:00:48 2025 GMT
            Not After : Jun 20 10:00:48 2025 GMT
        Subject: CN=9d59f89207724783173247e91939e32b435ec3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:4b:eb:2c:2d:5e:08:cb:1f:01:e3:10:e1:
                    03:58:57:f5:c4:89:2f:d6:4e:45:c6:25:a7:ec:95:
                    1b:71:78:02:45:a9:7b:28:58:df:a2:5b:e4:d9:2e:
                    36:4a:a6:6e:35:8b:dc:b5:a2:5a:22:dc:85:37:eb:
                    79:25:ad:32:5e:3e:8f:5c:72:ce:f5:13:84:75:e9:
                    44:ff:fd:f8:4a:c6:54:fc:4e:3c:2a:b6:81:6d:43:
                    75:d5:98:b2:fd:94:2d:b4:6d:3a:01:5d:32:33:95:
                    17:b0:28:c4:79:a2:62:64:5d:7e:db:37:2b:ab:f4:
                    8b:35:80:e7:40:04:9b:68:33:90:f8:cd:cc:b1:7e:
                    a2:fc:da:42:c2:3f:77:63:9a:0a:45:32:ba:34:f6:
                    a6:d1:df:c5:d5:73:d9:20:cb:ed:91:83:49:97:d6:
                    33:a5:a7:2e:9f:9f:15:6a:14:0e:8b:ac:b8:d1:a4:
                    31:77:e1:1e:54:a9:20:36:93:b5:bc:0c:49:8f:df:
                    9a:ee:6e:c8:5e:79:ad:4e:68:c6:7e:bd:5f:1c:e1:
                    b7:9a:28:ed:87:f7:57:9c:20:82:51:b1:45:7a:71:
                    ba:80:d7:f8:0d:b1:44:47:f8:61:34:a1:83:54:e7:
                    8c:b6:7b:c1:26:93:85:52:a6:23:02:38:9c:8d:fe:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:59:F8:92:07:72:47:83:17:32:47:E9:19:39:E3:2B:43:5E:C3:AE
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:02:09:12:2d:d2:b3:6a:34:88:79:2b:68:be:bd:03:69:
         59:2d:bb:e6:72:0d:72:80:ed:82:11:cc:58:45:bd:9a:9b:a6:
         55:17:cd:c2:99:4e:52:52:a5:cf:4a:2d:6f:b7:ad:5d:97:9f:
         fc:59:0d:5b:f7:33:41:18:ee:93:ce:03:3f:c6:0b:9f:7d:74:
         ec:5a:3c:fe:14:b1:92:5f:52:5d:dc:ab:1a:ba:ca:f7:4a:36:
         4f:5c:80:f7:d2:1d:2b:9b:a3:23:84:d6:0e:42:7f:29:c2:81:
         d3:62:fe:23:ac:cc:81:06:8f:90:fa:7f:14:8b:c5:c5:0a:ce:
         e4:fe:4d:0b:bc:06:d3:41:f3:51:ec:80:4b:91:0c:2b:34:e2:
         ff:5c:cd:93:fe:23:8f:f4:95:9e:ce:72:78:da:af:90:8b:a5:
         6a:9c:21:68:00:a8:fb:8f:b0:dd:89:80:fe:69:80:3e:cc:80:
         e0:f8:8f:96:3a:4e:65:af:86:6a:f3:18:5f:24:20:75:0b:db:
         14:ee:8a:3d:95:37:c6:9f:66:fb:f6:22:4d:f5:3a:e6:c7:e9:
         a7:fb:b9:12:c0:56:e0:96:dd:ad:10:84:7f:02:3c:1b:a2:de:
         1a:aa:cc:22:b4:8b:96:07:96:e0:3d:4e:b4:ec:87:5d:e8:f4:
         83:6d:65:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeHokjNMHPF5t43U1q+tOmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi
M2Q5MjQwHhcNMjUwNjE5MTAwMDQ4WhcNMjUwNjIwMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZDU5Zjg5MjA3NzI0NzgzMTczMjQ3ZTkxOTM5ZTMyYjQzNWVjM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl1L6ywtXgjLHwHjEOEDWFf1xIkv
1k5FxiWn7JUbcXgCRal7KFjfolvk2S42SqZuNYvctaJaItyFN+t5Ja0yXj6PXHLO
9ROEdelE//34SsZU/E48KraBbUN11Ziy/ZQttG06AV0yM5UXsCjEeaJiZF1+2zcr
q/SLNYDnQASbaDOQ+M3MsX6i/NpCwj93Y5oKRTK6NPam0d/F1XPZIMvtkYNJl9Yz
pacun58VahQOi6y40aQxd+EeVKkgNpO1vAxJj9+a7m7IXnmtTmjGfr1fHOG3mijt
h/dXnCCCUbFFenG6gNf4DbFER/hhNKGDVOeMtnvBJpOFUqYjAjicjf64DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1Z+JIHckeDFzJH6Rk54ytDXsOuMB8GA1UdIwQY
MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt
ODI0NTFmMzNmNGNhLzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh
LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsECCRIt
0rNqNIh5K2i+vQNpWS275nINcoDtghHMWEW9mpumVRfNwplOUlKlz0otb7etXZef
/FkNW/czQRjuk84DP8YLn3107Fo8/hSxkl9SXdyrGrrK90o2T1yA99IdK5ujI4TW
DkJ/KcKB02L+I6zMgQaPkPp/FIvFxQrO5P5NC7wG00HzUeyAS5EMKzTi/1zNk/4j
j/SVns5yeNqvkIulapwhaACo+4+w3YmA/mmAPsyA4PiPljpOZa+GavMYXyQgdQvb
FO6KPZU3xp9m+/YiTfU65sfpp/u5EsBW4JbdrRCEfwI8G6LeGqrMIrSLlgeW4D1O
tOyHXej0g21lbg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 19:32:25 2025 by rpki-client