Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          6VR1W5BaVu4entIbDp6f6pCgdZ510xEVEXSebBFyZNI=
Subject key identifier:   17:EE:85:BA:69:83:98:C6:34:B9:AE:E3:D0:D4:4E:66:AF:C8:7F:4D
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       0198277E9B65A7A5EB8982C7507AA81BBE7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          15D7
Signing time:             Sun 20 Jul 2025 11:01:05 +0000
Manifest this update:     Sun 20 Jul 2025 11:01:05 +0000
Manifest next update:     Mon 21 Jul 2025 11:01:05 +0000
Files and hashes:         1: 8GYAexsjvmr0ISLsQKryGmpLtTs.roa (hash: SQMUuzA/SYQZuwCfc0e9iAWXVLPmE3XP9dpG659uDkI=)
                          2: GX0hRHwpO_GFAf_Dl8eMW3z_248.roa (hash: HctIB8ovJUFcdq28I1mZn+xQVZZMOfz92Vt9MrUaS78=)
                          3: WKensdemy_AXuee8qERPXAv7WQQ.roa (hash: 5h5e2Cjl6Y6xTdpx1Uogj/kqIPDJsoW5m77rPfpWD30=)
                          4: Yp8Y2f-rm0XFP0JksYyQiIn5YI4.roa (hash: zUTWYSFUC05+hAZt14a3XZJms6iqhzhaVnj/uuxFKy0=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: kEjLaZpvbeVUcx8VEMFdNI9/mn+6d4Ha3jmb/YCc4c4=)
                          6: p78TdZM7jp7r56ACoeEx_vocT4c.roa (hash: GFGeQudO2jovI4snICeqKAiASNPKMGJsocJeu39JBto=)
                          7: tXVRXa1qJjFTp7ESN89vh6T8E94.roa (hash: 0lv9VjdN51nQRf36Hx017s+uMUMF9eBDdjJHsff15ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:9b:65:a7:a5:eb:89:82:c7:50:7a:a8:1b:be:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Jul 20 11:01:05 2025 GMT
            Not After : Jul 21 11:01:05 2025 GMT
        Subject: CN=17ee85ba698398c634b9aee3d0d44e66afc87f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:45:09:52:9f:e1:57:2c:25:a8:5e:6c:31:
                    f5:b0:c5:5f:ce:b5:57:06:7a:1b:ed:30:5b:af:6c:
                    1c:22:71:7e:80:01:6a:2f:1b:c0:29:c0:a1:67:e5:
                    4f:6b:c9:62:c9:ac:f8:f6:87:da:73:e6:d0:c5:e1:
                    4c:c1:75:c4:ff:ec:2f:57:e5:9f:06:fd:54:00:fd:
                    da:7f:f9:f1:08:d7:25:7b:5f:c4:ed:b3:63:2d:3a:
                    45:f6:0c:0a:00:c9:99:db:fc:d5:87:34:f3:55:39:
                    41:33:51:da:45:a0:91:f8:b7:9c:a6:af:97:a0:fe:
                    3f:6e:07:88:67:da:80:46:bf:54:3a:15:d6:a2:69:
                    dc:9f:05:74:c7:36:54:27:37:9c:6f:22:d9:d1:5b:
                    f5:ce:57:16:1c:7e:d0:4a:1f:dc:1c:68:30:6f:66:
                    0a:93:72:0e:98:2e:33:96:73:ad:0e:fc:b7:1e:e0:
                    fe:53:76:43:1d:12:bc:f9:7a:2c:14:25:42:79:3c:
                    f1:99:48:c8:fe:8b:6f:46:c6:80:f7:a9:ee:91:82:
                    c7:c1:12:34:60:06:d6:a3:03:68:89:86:b2:3f:76:
                    1c:d6:18:9a:30:0a:b2:9d:0d:78:ec:a5:d1:3b:60:
                    d8:bd:13:c0:ea:bd:54:46:fe:bb:9c:e7:87:1a:18:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EE:85:BA:69:83:98:C6:34:B9:AE:E3:D0:D4:4E:66:AF:C8:7F:4D
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:de:92:94:0a:67:bf:9e:b9:47:e3:a8:71:a8:78:1b:2a:d2:
         52:76:2a:56:32:9a:06:33:19:55:c1:7a:e4:0f:e7:28:6e:79:
         47:0c:8c:b3:38:6f:59:43:0a:38:cd:8f:8c:f9:90:87:eb:f5:
         9f:54:36:c4:72:88:02:f6:23:22:aa:69:44:ad:92:e9:e8:4c:
         f7:a5:cb:90:d8:8a:d4:7d:55:03:be:1e:b2:5e:b1:98:1d:95:
         f4:80:97:b5:90:1a:ad:f3:50:b1:81:88:23:89:90:b6:86:8d:
         0d:4f:a3:15:10:29:76:6d:b6:5b:59:5a:1e:47:be:e6:1d:8d:
         7e:44:49:71:10:55:cb:f1:2a:47:53:1a:d1:d9:64:ff:1c:5c:
         5b:9f:43:6e:43:6e:0c:81:2a:e1:a9:9a:a7:bc:fe:73:6d:df:
         cb:68:ac:e6:d5:81:12:e3:ac:63:f7:6c:a0:86:27:a7:16:36:
         f0:79:e2:3c:89:90:d7:15:74:c8:37:dc:5a:1f:f7:d7:52:78:
         f7:56:72:6f:ab:f6:93:ca:5d:1c:81:27:85:6d:cf:d4:ec:52:
         87:d0:ea:21:4d:a3:fd:75:71:89:4c:b7:9f:dd:6d:f6:a2:87:
         a4:fb:c1:50:31:eb:ad:4c:3b:db:c9:87:76:7f:e5:b3:46:f8:
         59:89:1a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnfptlp6XriYLHUHqoG756MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjUwNzIwMTEwMTA1WhcNMjUwNzIxMTEwMTA1WjAzMTEwLwYDVQQD
EygxN2VlODViYTY5ODM5OGM2MzRiOWFlZTNkMGQ0NGU2NmFmYzg3ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6BFCVKf4VcsJahebDH1sMVfzrVX
Bnob7TBbr2wcInF+gAFqLxvAKcChZ+VPa8liyaz49ofac+bQxeFMwXXE/+wvV+Wf
Bv1UAP3af/nxCNcle1/E7bNjLTpF9gwKAMmZ2/zVhzTzVTlBM1HaRaCR+Lecpq+X
oP4/bgeIZ9qARr9UOhXWomncnwV0xzZUJzecbyLZ0Vv1zlcWHH7QSh/cHGgwb2YK
k3IOmC4zlnOtDvy3HuD+U3ZDHRK8+XosFCVCeTzxmUjI/otvRsaA96nukYLHwRI0
YAbWowNoiYayP3Yc1hiaMAqynQ147KXRO2DYvRPA6r1URv67nOeHGhghfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfuhbppg5jGNLmu49DUTmavyH9NMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt6SlApn
v565R+Oocah4GyrSUnYqVjKaBjMZVcF65A/nKG55RwyMszhvWUMKOM2PjPmQh+v1
n1Q2xHKIAvYjIqppRK2S6ehM96XLkNiK1H1VA74esl6xmB2V9ICXtZAarfNQsYGI
I4mQtoaNDU+jFRApdm22W1laHke+5h2NfkRJcRBVy/EqR1Ma0dlk/xxcW59DbkNu
DIEq4amap7z+c23fy2is5tWBEuOsY/dsoIYnpxY28HniPImQ1xV0yDfcWh/311J4
91Zyb6v2k8pdHIEnhW3P1OxSh9DqIU2j/XVxiUy3n91t9qKHpPvBUDHrrUw728mH
dn/ls0b4WYkaMg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:21:28 2025 by rpki-client