Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File:                     i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier:          4y7A0MiZWkrh8IBNFZvssOeyYgkvrR8OVGZhEgNintg=
Subject key identifier:   BC:8E:F0:5C:CE:0B:BD:EC:B4:D8:CD:E5:86:E5:78:BC:BA:65:CF:9C
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer:       /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial:       01976D06C5B413F77AB7ECB57EACC0350EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number:          07B4
Signing time:             Sat 14 Jun 2025 06:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:49 +0000
Files and hashes:         1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: dkU2YHCClsuBha320CCf+FOGggH+/v6Vowlyq8XpY6o=)
                          2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:c5:b4:13:f7:7a:b7:ec:b5:7e:ac:c0:35:0e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
        Validity
            Not Before: Jun 14 06:00:49 2025 GMT
            Not After : Jun 15 06:00:49 2025 GMT
        Subject: CN=bc8ef05cce0bbdecb4d8cde586e578bcba65cf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:04:90:1e:e1:67:25:83:7f:77:e7:d0:60:
                    b4:ac:e6:f5:51:b4:3d:66:04:15:c7:17:c1:88:1c:
                    2e:a3:c3:a1:a9:81:e0:e1:8c:21:82:cf:83:33:49:
                    1d:ca:21:aa:f1:70:22:19:a1:b1:ac:17:5e:01:9c:
                    ce:1a:81:47:88:3f:8e:cd:05:64:74:82:d1:bb:18:
                    b8:48:e1:34:3a:22:ab:50:2d:86:92:d7:77:0d:56:
                    23:84:fb:9d:34:5b:83:b2:12:ed:54:01:7f:82:87:
                    06:7a:25:36:b1:1f:4b:77:a6:0e:14:1c:60:eb:17:
                    62:f2:f0:c6:21:11:75:c0:9c:97:ef:22:23:b4:8d:
                    cb:5f:3d:ce:9d:dc:4a:17:34:d9:3c:31:86:8e:5c:
                    47:46:28:dc:27:a9:e7:02:24:ba:7d:44:e1:d0:fb:
                    42:42:0c:48:bf:e0:c7:77:10:e5:fe:54:4d:72:d0:
                    a4:b3:46:d1:16:b5:c3:f0:60:b6:42:d3:05:02:a4:
                    cb:5b:cf:d5:80:a3:a5:65:46:c1:71:21:54:59:9c:
                    18:0d:dc:37:15:77:0d:47:11:cf:54:a8:26:3f:02:
                    05:ca:e4:c3:5e:6a:67:2e:57:f4:59:cd:9b:bf:13:
                    09:3d:8c:27:b8:87:ae:c4:38:0b:bc:2c:6d:11:4a:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8E:F0:5C:CE:0B:BD:EC:B4:D8:CD:E5:86:E5:78:BC:BA:65:CF:9C
            X509v3 Authority Key Identifier:
                keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7f:4a:57:ed:c0:f9:6b:ac:0d:b3:d4:3d:bb:d3:4d:9f:57:
         66:46:1c:30:22:63:91:7b:a6:b7:88:7c:74:7f:12:94:50:85:
         81:70:1f:8e:95:54:96:e7:5d:93:3c:69:dc:62:69:bc:aa:b9:
         e4:df:d3:98:c5:a0:d0:83:c6:eb:a8:57:66:2a:bd:15:4e:23:
         b1:f8:16:26:84:12:d3:8e:37:fb:66:b4:78:a9:ee:e8:1a:1c:
         1f:f5:52:a6:a2:af:b2:de:5f:05:c3:06:03:83:1c:f5:b9:c0:
         94:63:8d:d3:f6:47:d3:2d:05:e2:bd:9f:b0:fe:10:21:a2:40:
         97:29:61:93:4a:33:f2:f5:a0:88:5b:88:61:f5:18:52:da:58:
         a3:ad:91:3f:cd:50:63:5b:4d:de:fa:de:be:0f:16:b0:85:74:
         c7:b8:99:c9:e4:99:2e:fe:ad:94:92:f9:1d:05:d9:1d:0b:51:
         8b:ce:d7:21:86:45:e9:c4:33:d1:32:fc:e3:31:3f:46:98:16:
         bc:d1:bb:21:62:56:36:1e:71:99:0d:fb:45:37:66:21:dc:f1:
         ed:31:f9:55:16:65:d3:30:80:09:3f:f3:2c:5c:39:3f:4c:3f:
         05:02:14:da:aa:a8:ca:02:5d:b1:04:0a:45:32:07:bb:7c:c4:
         14:a5:93:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBsW0E/d6t+y1fqzANQ71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm
ZGU0ZmIwHhcNMjUwNjE0MDYwMDQ5WhcNMjUwNjE1MDYwMDQ5WjAzMTEwLwYDVQQD
EyhiYzhlZjA1Y2NlMGJiZGVjYjRkOGNkZTU4NmU1NzhiY2JhNjVjZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SMEkB7hZyWDf3fn0GC0rOb1UbQ9
ZgQVxxfBiBwuo8OhqYHg4Ywhgs+DM0kdyiGq8XAiGaGxrBdeAZzOGoFHiD+OzQVk
dILRuxi4SOE0OiKrUC2Gktd3DVYjhPudNFuDshLtVAF/gocGeiU2sR9Ld6YOFBxg
6xdi8vDGIRF1wJyX7yIjtI3LXz3OndxKFzTZPDGGjlxHRijcJ6nnAiS6fUTh0PtC
QgxIv+DHdxDl/lRNctCks0bRFrXD8GC2QtMFAqTLW8/VgKOlZUbBcSFUWZwYDdw3
FXcNRxHPVKgmPwIFyuTDXmpnLlf0Wc2bvxMJPYwnuIeuxDgLvCxtEUpdrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyO8FzOC73stNjN5YbleLy6Zc+cMB8GA1UdIwQY
MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt
ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm
LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX9KV+3A
+WusDbPUPbvTTZ9XZkYcMCJjkXumt4h8dH8SlFCFgXAfjpVUluddkzxp3GJpvKq5
5N/TmMWg0IPG66hXZiq9FU4jsfgWJoQS0443+2a0eKnu6BocH/VSpqKvst5fBcMG
A4Mc9bnAlGON0/ZH0y0F4r2fsP4QIaJAlylhk0oz8vWgiFuIYfUYUtpYo62RP81Q
Y1tN3vrevg8WsIV0x7iZyeSZLv6tlJL5HQXZHQtRi87XIYZF6cQz0TL84zE/RpgW
vNG7IWJWNh5xmQ37RTdmIdzx7TH5VRZl0zCACT/zLFw5P0w/BQIU2qqoygJdsQQK
RTIHu3zEFKWTcg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:48 2025 by rpki-client