Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File:                     z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier:          Ih36pUUtn7+BoMEaQdvGisc3doV7buoVicwF9WutX1g=
Subject key identifier:   04:C3:96:0E:D5:B0:F1:9B:BA:F3:C8:0B:82:FA:B9:16:3C:5A:26:F7
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer:       /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial:       01977DC35AD81C86BA0E2C119CCD6F971D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number:          07FC
Signing time:             Tue 17 Jun 2025 12:00:44 +0000
Manifest this update:     Tue 17 Jun 2025 12:00:44 +0000
Manifest next update:     Wed 18 Jun 2025 12:00:44 +0000
Files and hashes:         1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
                          2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
                          3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: BSNs8pty33qxRetNx92K5On0wu0J2tbQU8cYNf3yZ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:c3:5a:d8:1c:86:ba:0e:2c:11:9c:cd:6f:97:1d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
        Validity
            Not Before: Jun 17 12:00:44 2025 GMT
            Not After : Jun 18 12:00:44 2025 GMT
        Subject: CN=04c3960ed5b0f19bbaf3c80b82fab9163c5a26f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bd:44:09:49:8e:47:ec:ca:ad:08:eb:02:d7:
                    13:4a:6d:3a:35:9f:38:82:75:a1:08:aa:e3:8e:b2:
                    c5:be:f0:9b:aa:15:47:78:4e:bc:81:18:3d:f7:0b:
                    3e:aa:80:82:16:2a:cb:c0:f6:17:f2:8c:80:c1:c1:
                    6e:92:94:3b:37:63:c6:f4:e9:45:a0:11:00:22:5e:
                    81:ec:a2:8b:b7:55:06:d0:06:f6:c3:70:dc:4e:f5:
                    4d:4a:33:05:73:4f:f2:60:f6:a8:e0:8c:44:6b:ed:
                    8c:44:99:e5:fc:7e:60:40:d6:4e:28:e6:0d:80:e1:
                    84:f5:47:6f:a8:aa:f5:e1:39:21:2d:62:a9:2c:b9:
                    e3:44:fc:22:17:85:b3:76:c5:c3:73:87:22:39:0c:
                    25:61:bb:53:85:de:e7:24:a4:af:c2:22:98:44:5e:
                    80:24:32:cd:af:5f:21:6e:eb:96:fc:c6:21:27:7d:
                    33:6b:ba:59:29:95:ba:70:2e:73:c1:45:6b:b5:d6:
                    a9:c5:0e:74:2a:64:92:c7:04:8f:ac:e1:b2:c3:b0:
                    37:3f:11:e4:35:0a:01:8b:47:f7:56:1d:f0:3a:f5:
                    de:5c:cf:c3:e5:2f:bf:94:5d:17:5c:99:7c:6a:b2:
                    43:de:7d:c4:56:d0:8f:d1:b4:18:36:e5:b7:12:f4:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:96:0E:D5:B0:F1:9B:BA:F3:C8:0B:82:FA:B9:16:3C:5A:26:F7
            X509v3 Authority Key Identifier:
                keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:78:d7:b2:07:d3:76:39:63:b9:b6:34:c0:60:99:fa:58:9d:
         0c:b2:4e:0f:3c:63:01:6e:9a:0e:6f:d8:fd:2e:6d:83:89:f4:
         a2:69:dd:de:c7:67:62:2f:fa:b0:74:18:f0:14:c7:5d:11:92:
         da:3d:86:fa:7b:07:4c:67:f7:f5:2f:21:3f:fd:a1:71:56:2e:
         c1:e5:a7:c2:83:f2:a2:c3:fd:56:73:4a:8d:b6:c5:61:ed:fe:
         26:61:d3:c8:77:3b:9c:b6:c5:86:e5:b6:74:ca:5a:72:1f:a2:
         dd:2e:41:c2:74:70:17:e3:2f:8d:fe:f6:15:20:34:bc:7d:94:
         17:f0:3a:25:43:4e:50:4e:c5:38:ca:43:c0:45:55:42:9f:2d:
         bd:70:8e:61:8a:45:8e:51:e2:cc:b1:33:44:06:ba:34:df:01:
         e7:a8:39:da:6c:14:f6:2a:54:fc:f9:a4:0d:1e:16:d1:90:1e:
         6e:29:30:07:67:7e:6f:f6:6b:a9:68:5f:2b:d3:e0:1f:27:c5:
         e6:fa:b6:a8:43:b7:28:0d:14:36:c4:93:ea:d6:b2:18:11:1c:
         50:36:92:33:bd:67:e9:e7:8a:27:f0:e3:e8:c9:16:2f:eb:97:
         f7:02:89:02:cc:6c:c5:0d:91:cf:2d:0c:e0:04:df:57:54:b7:
         20:47:bd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9w1rYHIa6DiwRnM1vlx1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy
ZDBmM2IwHhcNMjUwNjE3MTIwMDQ0WhcNMjUwNjE4MTIwMDQ0WjAzMTEwLwYDVQQD
EygwNGMzOTYwZWQ1YjBmMTliYmFmM2M4MGI4MmZhYjkxNjNjNWEyNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b1ECUmOR+zKrQjrAtcTSm06NZ84
gnWhCKrjjrLFvvCbqhVHeE68gRg99ws+qoCCFirLwPYX8oyAwcFukpQ7N2PG9OlF
oBEAIl6B7KKLt1UG0Ab2w3DcTvVNSjMFc0/yYPao4IxEa+2MRJnl/H5gQNZOKOYN
gOGE9UdvqKr14TkhLWKpLLnjRPwiF4WzdsXDc4ciOQwlYbtThd7nJKSvwiKYRF6A
JDLNr18hbuuW/MYhJ30za7pZKZW6cC5zwUVrtdapxQ50KmSSxwSPrOGyw7A3PxHk
NQoBi0f3Vh3wOvXeXM/D5S+/lF0XXJl8arJD3n3EVtCP0bQYNuW3EvSh8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATDlg7VsPGbuvPIC4L6uRY8Wib3MB8GA1UdIwQY
MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt
ODBjYzg2ZTUxODIyLzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy
LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXjXsgfT
djljubY0wGCZ+lidDLJODzxjAW6aDm/Y/S5tg4n0omnd3sdnYi/6sHQY8BTHXRGS
2j2G+nsHTGf39S8hP/2hcVYuweWnwoPyosP9VnNKjbbFYe3+JmHTyHc7nLbFhuW2
dMpach+i3S5BwnRwF+Mvjf72FSA0vH2UF/A6JUNOUE7FOMpDwEVVQp8tvXCOYYpF
jlHizLEzRAa6NN8B56g52mwU9ipU/PmkDR4W0ZAebikwB2d+b/ZrqWhfK9PgHyfF
5vq2qEO3KA0UNsST6tayGBEcUDaSM71n6eeKJ/Dj6MkWL+uX9wKJAsxsxQ2Rzy0M
4ATfV1S3IEe9kA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:26:57 2025 by rpki-client