Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          6OslwzhaXoM6dfH+lPXouXW4EFeS6f9rC31B4IfcCBQ=
Subject key identifier:   49:78:9B:94:C0:40:74:20:E1:8B:35:2B:03:50:7E:25:B6:C5:BC:09
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       01988BEAB2D8DD06CF442017A8A2B10876DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          07A0
Signing time:             Fri 08 Aug 2025 23:01:10 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:10 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:10 +0000
Files and hashes:         1: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: W+byXdGNm9C4JGZDRjw5ZzHrvtcu4hzhB4/BNxQ4qfk=)
                          2: Ve7YFtVIJ6oEkkG5DoS-ngCjYv0.roa (hash: shC3WnGXTQpp0bvZL5ZiYYKQZO5PyZEtvwp/+mUAkvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:b2:d8:dd:06:cf:44:20:17:a8:a2:b1:08:76:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: Aug  8 23:01:10 2025 GMT
            Not After : Aug  9 23:01:10 2025 GMT
        Subject: CN=49789b94c0407420e18b352b03507e25b6c5bc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:eb:9a:dd:a5:4b:fa:0c:06:60:00:30:21:
                    3a:c4:f1:0a:ae:4f:87:0a:a5:f7:0d:7b:55:fd:7a:
                    49:e2:b6:19:09:94:fd:d2:c0:7a:d3:ec:59:fa:5a:
                    91:f2:af:8d:f3:36:79:78:cb:cf:e3:7c:c0:35:be:
                    c6:4c:24:43:8b:1c:cc:e4:ee:17:fd:27:d4:a7:e7:
                    04:26:ca:6c:e9:66:61:13:84:26:70:c1:d2:70:1c:
                    3e:f3:c8:54:0e:ba:b2:69:aa:82:bf:d6:2d:76:30:
                    70:94:5b:59:83:0b:95:83:55:b1:0a:4c:5c:b8:75:
                    06:f8:c9:84:94:93:24:14:9b:5e:1e:bb:88:93:33:
                    cb:68:d5:4f:e9:37:12:6c:46:5e:20:7e:55:97:c3:
                    d7:74:ee:52:39:9f:4f:56:31:33:5a:a9:05:ab:50:
                    4f:7d:52:cd:8e:9e:36:fb:2c:e9:0f:5f:ad:1b:2a:
                    a8:cd:a6:a6:80:90:d1:ed:4e:c0:3f:63:2c:49:4b:
                    7c:71:92:02:cc:75:1c:95:4c:dc:3e:ef:c1:1d:9f:
                    ea:50:2f:df:11:91:9c:29:7d:23:a4:7f:da:a2:fe:
                    45:17:d9:09:5b:0b:2c:41:01:48:d0:51:5c:78:f2:
                    87:1d:d4:ae:ef:31:36:d8:c7:37:66:b5:4d:95:c0:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:78:9B:94:C0:40:74:20:E1:8B:35:2B:03:50:7E:25:B6:C5:BC:09
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:99:bf:c0:26:09:0f:11:43:f8:b9:1e:31:a3:ab:ab:ff:31:
         e2:25:e0:74:ee:70:7c:a9:90:60:a7:cb:82:eb:e8:fc:e8:e7:
         56:73:15:92:5d:ca:76:b8:22:5d:c0:cf:fa:a2:40:3a:af:d7:
         f3:84:2e:36:26:b2:ab:81:fd:50:75:15:bf:34:9a:45:4d:08:
         e8:10:25:76:9c:45:73:27:ae:6e:41:22:1f:8a:4b:30:3d:05:
         4f:c3:6d:68:b5:48:62:59:55:58:4c:bd:a8:8b:60:9b:05:96:
         b6:ac:4e:ef:1c:16:82:16:b2:be:11:1a:1a:8b:66:94:f0:c2:
         d3:31:6e:a0:43:b9:aa:bd:75:90:9e:92:29:f8:50:94:26:1e:
         26:5b:9b:21:21:b6:f7:6f:a7:01:35:3a:d5:aa:7d:89:42:9f:
         f1:07:a6:a7:99:d8:ae:ee:56:2c:1b:e5:a1:47:e3:db:ec:e1:
         20:04:3a:b7:69:19:f2:58:c7:96:20:ea:ae:a9:4b:00:ef:49:
         c0:7f:91:b3:c6:aa:1b:99:ca:6c:58:71:81:fe:75:34:2e:45:
         65:ca:55:a2:f9:15:65:56:56:d7:76:ec:fe:79:a0:6c:b5:2a:
         c3:75:be:2a:a2:da:d3:53:15:7a:c3:d0:2f:1e:cc:68:b2:e3:
         c9:d7:4f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6rLY3QbPRCAXqKKxCHbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMWQ3MjkwYmZkMWJlMTIzZmJlMGIwNzVmZDUwZGNmNjQ2
YzRmNzYwHhcNMjUwODA4MjMwMTEwWhcNMjUwODA5MjMwMTEwWjAzMTEwLwYDVQQD
Eyg0OTc4OWI5NGMwNDA3NDIwZTE4YjM1MmIwMzUwN2UyNWI2YzViYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBfrmt2lS/oMBmAAMCE6xPEKrk+H
CqX3DXtV/XpJ4rYZCZT90sB60+xZ+lqR8q+N8zZ5eMvP43zANb7GTCRDixzM5O4X
/SfUp+cEJsps6WZhE4QmcMHScBw+88hUDrqyaaqCv9YtdjBwlFtZgwuVg1WxCkxc
uHUG+MmElJMkFJteHruIkzPLaNVP6TcSbEZeIH5Vl8PXdO5SOZ9PVjEzWqkFq1BP
fVLNjp42+yzpD1+tGyqozaamgJDR7U7AP2MsSUt8cZICzHUclUzcPu/BHZ/qUC/f
EZGcKX0jpH/aov5FF9kJWwssQQFI0FFcePKHHdSu7zE22Mc3ZrVNlcA4kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl4m5TAQHQg4Ys1KwNQfiW2xbwJMB8GA1UdIwQY
MBaAFOwdcpC/0b4SP74LB1/VDc9kbE92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0IxeWtMX1J2aElfdmdzSFg5VU56MlJzVDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iNTI1ZWItY2VhNC00N2ZkLThmN2Qt
NjhlOTQ5MDgyZjliLzEvN0IxeWtMX1J2aElfdmdzSFg5VU56MlJzVDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iNTI1ZWItY2VhNC00N2ZkLThmN2QtNjhlOTQ5MDgyZjli
LzEvN0IxeWtMX1J2aElfdmdzSFg5VU56MlJzVDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Zm/wCYJ
DxFD+LkeMaOrq/8x4iXgdO5wfKmQYKfLguvo/OjnVnMVkl3KdrgiXcDP+qJAOq/X
84QuNiayq4H9UHUVvzSaRU0I6BAldpxFcyeubkEiH4pLMD0FT8NtaLVIYllVWEy9
qItgmwWWtqxO7xwWghayvhEaGotmlPDC0zFuoEO5qr11kJ6SKfhQlCYeJlubISG2
92+nATU61ap9iUKf8Qemp5nYru5WLBvloUfj2+zhIAQ6t2kZ8ljHliDqrqlLAO9J
wH+Rs8aqG5nKbFhxgf51NC5FZcpVovkVZVZW13bs/nmgbLUqw3W+KqLa01MVesPQ
Lx7MaLLjyddPQg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:35 2025 by rpki-client