Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          w+266ZTW89IKSFM1vZgB96KKfI9XpouO7Ke0jDDXOjw=
Subject key identifier:   5D:55:E3:C7:91:1A:25:05:9A:3B:89:6B:98:3A:21:2D:14:8E:97:96
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       01988B0E57DA037C2C59AD21541B0AF1C66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          15B3
Signing time:             Fri 08 Aug 2025 19:00:29 +0000
Manifest this update:     Fri 08 Aug 2025 19:00:29 +0000
Manifest next update:     Sat 09 Aug 2025 19:00:29 +0000
Files and hashes:         1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: Oo9Y4wJ8aeo1jsUsu6Qg7MBvuvIm/jGkF6n5Y1YEGRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:57:da:03:7c:2c:59:ad:21:54:1b:0a:f1:c6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Aug  8 19:00:29 2025 GMT
            Not After : Aug  9 19:00:29 2025 GMT
        Subject: CN=5d55e3c7911a25059a3b896b983a212d148e9796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:52:27:bf:87:a6:b7:2c:e3:43:2d:02:18:
                    73:c7:8a:ee:e4:7b:14:70:27:53:fe:97:30:e4:7c:
                    3a:ba:ef:14:53:ec:d1:65:7e:af:68:fb:bd:d9:c8:
                    24:c1:73:ed:d9:29:52:80:b0:15:32:cd:79:1f:38:
                    64:71:f6:1e:e9:45:95:3e:1f:5c:84:b8:d4:04:a5:
                    05:26:b0:00:e9:8c:72:b0:79:66:35:94:69:81:de:
                    fa:d7:21:b9:0d:f3:af:96:a3:64:a5:c8:97:88:0e:
                    4b:b3:db:bb:f7:3a:00:3f:84:62:7b:ce:c4:3c:3b:
                    ce:9e:16:d6:6c:c5:fb:e0:ab:08:f9:0f:b2:fd:7d:
                    51:23:64:60:f1:aa:0b:37:54:d5:9b:1c:c3:59:13:
                    05:77:05:84:8a:08:f0:61:04:04:cd:e4:96:96:e0:
                    55:bd:49:76:dc:75:c8:7a:f5:0a:71:31:ce:47:97:
                    ec:7f:81:f0:19:43:9c:5a:f5:68:f8:b6:b9:49:1c:
                    a5:0f:9b:ea:0a:fd:90:29:35:e4:0f:2f:d1:00:92:
                    44:0f:83:c1:88:93:b0:4a:79:ea:43:77:eb:3b:68:
                    de:6c:44:5e:90:ef:fb:30:ca:01:7a:cc:9d:b2:01:
                    d2:8d:d7:36:3b:54:f2:6d:9d:f4:23:cb:3b:d1:77:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:E3:C7:91:1A:25:05:9A:3B:89:6B:98:3A:21:2D:14:8E:97:96
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7a:bd:1c:3c:b2:82:06:38:b4:77:88:ea:da:cc:1a:34:32:
         53:b6:02:2a:4e:65:39:cb:3a:91:51:5c:b6:e9:21:cd:a5:16:
         be:ed:df:94:5b:af:b2:04:fc:5d:e9:4e:15:34:28:52:3a:98:
         fd:4c:00:59:c3:14:56:80:4f:e6:1f:b9:c0:bd:ca:2c:75:7e:
         bd:1e:16:ba:33:84:f5:7f:56:b9:a8:56:0a:61:f1:91:53:89:
         3c:5f:f2:b9:c0:a5:c9:8a:68:93:05:a0:e2:b6:bf:61:53:1b:
         cb:b7:31:26:41:fe:5f:65:f1:39:25:d6:29:32:10:20:c6:9d:
         c7:7a:69:26:03:0d:75:0e:0a:aa:f7:16:13:00:1c:71:77:9f:
         66:c9:5a:2e:a1:f4:05:1b:7e:e1:f8:30:30:77:dd:54:02:a7:
         a5:82:20:33:cf:3a:b4:51:7e:2f:2f:95:dc:50:df:de:72:51:
         03:0a:b2:93:5e:86:7a:15:dd:b8:4a:f1:01:3b:b4:fc:85:1f:
         da:e9:88:5d:02:bc:84:28:b8:6e:16:8a:f0:15:db:d6:78:6d:
         e3:cb:d8:ae:af:6c:f2:a0:d2:18:45:37:43:44:f1:11:05:6a:
         bd:6c:42:7d:09:0f:fc:83:7e:ea:62:ca:2e:16:52:bf:a2:61:
         cd:16:6c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDlfaA3wsWa0hVBsK8cZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjUwODA4MTkwMDI5WhcNMjUwODA5MTkwMDI5WjAzMTEwLwYDVQQD
Eyg1ZDU1ZTNjNzkxMWEyNTA1OWEzYjg5NmI5ODNhMjEyZDE0OGU5Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZNSJ7+Hprcs40MtAhhzx4ru5HsU
cCdT/pcw5Hw6uu8UU+zRZX6vaPu92cgkwXPt2SlSgLAVMs15HzhkcfYe6UWVPh9c
hLjUBKUFJrAA6YxysHlmNZRpgd761yG5DfOvlqNkpciXiA5Ls9u79zoAP4Rie87E
PDvOnhbWbMX74KsI+Q+y/X1RI2Rg8aoLN1TVmxzDWRMFdwWEigjwYQQEzeSWluBV
vUl23HXIevUKcTHOR5fsf4HwGUOcWvVo+La5SRylD5vqCv2QKTXkDy/RAJJED4PB
iJOwSnnqQ3frO2jebERekO/7MMoBesydsgHSjdc2O1TybZ30I8s70XfxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1V48eRGiUFmjuJa5g6IS0UjpeWMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3q9HDyy
ggY4tHeI6trMGjQyU7YCKk5lOcs6kVFctukhzaUWvu3flFuvsgT8XelOFTQoUjqY
/UwAWcMUVoBP5h+5wL3KLHV+vR4WujOE9X9WuahWCmHxkVOJPF/yucClyYpokwWg
4ra/YVMby7cxJkH+X2XxOSXWKTIQIMadx3ppJgMNdQ4KqvcWEwAccXefZslaLqH0
BRt+4fgwMHfdVAKnpYIgM886tFF+Ly+V3FDf3nJRAwqyk16GehXduErxATu0/IUf
2umIXQK8hCi4bhaK8BXb1nht48vYrq9s8qDSGEU3Q0TxEQVqvWxCfQkP/IN+6mLK
LhZSv6JhzRZs9w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:39 2025 by rpki-client