Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          e8hHrtDPn97p77mG96cicpq+9d61Xe6GUm1JE+Q8LME=
Subject key identifier:   E6:40:C0:54:22:46:4A:C2:02:A7:AF:6A:9D:BE:28:2D:8E:FD:41:A0
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019844AC6E058AB57B41A62A68F7CB306D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 03:00:07 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:07 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:07 +0000
Files and hashes:         1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
                          2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
                          3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
                          4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: kIvrYOtAQutxaHRAeIFRBkp0rwW6JJGzdCjJZNJAPKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:6e:05:8a:b5:7b:41:a6:2a:68:f7:cb:30:6d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Jul 26 03:00:07 2025 GMT
            Not After : Jul 27 03:00:07 2025 GMT
        Subject: CN=e640c05422464ac202a7af6a9dbe282d8efd41a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:7e:af:1e:ba:34:ea:0f:d6:e5:b7:15:a4:
                    de:0d:d8:79:c7:56:fe:b6:76:32:3c:47:db:31:7f:
                    e9:51:ac:79:82:e9:f2:92:1f:33:92:d0:03:27:c4:
                    cd:fe:3a:ea:33:ac:b6:d1:82:73:b6:cc:e3:67:25:
                    03:ac:aa:62:02:94:4a:d4:95:2d:cd:64:f8:98:9d:
                    97:40:27:03:47:1a:68:cb:2b:b3:3b:ee:a8:24:50:
                    ad:1b:cb:79:1e:75:06:9a:34:bd:4a:b9:80:e3:3a:
                    f4:22:93:c6:13:d8:ed:53:ab:80:23:e0:64:e6:0f:
                    36:0d:0d:8b:78:de:d4:bc:5e:62:73:bd:d4:1d:d3:
                    14:86:58:32:31:35:a2:f1:56:2c:45:f4:1e:a5:d8:
                    cb:fb:c0:f0:de:cc:4f:60:cc:71:74:3d:7f:15:04:
                    7e:c7:11:87:fd:92:59:36:8d:86:fc:8c:8d:fa:60:
                    ae:93:6f:73:0c:74:f0:4a:98:74:06:80:6d:98:67:
                    b0:56:31:84:10:7e:29:db:12:af:54:14:90:09:ce:
                    50:34:a2:6a:61:a1:e4:a1:31:31:da:be:07:f2:32:
                    8e:70:fc:47:b1:84:3b:88:17:f3:4c:a4:33:23:b8:
                    5e:34:5c:d2:d8:8f:61:63:77:e7:95:d3:56:3c:fd:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:40:C0:54:22:46:4A:C2:02:A7:AF:6A:9D:BE:28:2D:8E:FD:41:A0
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:60:73:3a:a0:52:58:c3:62:54:f7:e0:33:ac:4e:92:7c:ca:
         a0:d1:44:39:7d:f8:1c:23:0a:94:cb:25:ed:f7:2b:bc:11:b8:
         c0:dc:fb:df:1c:3d:84:78:10:d6:49:b6:38:2f:8c:9e:fd:ee:
         c6:ce:f6:e6:54:3d:57:1f:b3:c4:26:b9:46:6d:b9:a7:58:f2:
         ca:a1:91:f8:e8:3c:6e:e6:83:2a:15:2c:f2:5f:67:70:22:b6:
         06:d4:71:e8:70:2d:77:aa:2c:76:cd:7b:3b:76:f6:55:94:45:
         f7:be:ca:b7:57:2e:ac:36:eb:ff:54:ed:5d:41:ce:e1:45:7a:
         65:bc:04:bc:28:d1:f9:5c:cf:2d:3c:33:25:47:c5:5a:39:5b:
         c6:9b:d3:a9:20:de:79:7a:00:10:ed:a4:85:53:cc:d1:4d:7d:
         05:8e:3e:fb:6f:ec:0d:15:62:57:50:01:b8:37:6e:83:ac:24:
         b2:04:18:a1:0f:ad:45:8b:40:2a:7d:13:03:5f:b2:7c:8d:cb:
         f2:5e:e6:81:f7:45:42:a0:cb:4f:35:8d:35:ba:76:dd:92:f4:
         af:18:0b:36:ac:cd:7c:1b:8a:61:8c:19:85:6b:cf:92:db:49:
         c5:fc:3e:10:0f:66:82:51:26:65:f0:2e:07:90:19:d6:8f:96:
         f1:da:d1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErG4FirV7QaYqaPfLMG1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz
ZDM5MDgwHhcNMjUwNzI2MDMwMDA3WhcNMjUwNzI3MDMwMDA3WjAzMTEwLwYDVQQD
EyhlNjQwYzA1NDIyNDY0YWMyMDJhN2FmNmE5ZGJlMjgyZDhlZmQ0MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoZ+rx66NOoP1uW3FaTeDdh5x1b+
tnYyPEfbMX/pUax5gunykh8zktADJ8TN/jrqM6y20YJztszjZyUDrKpiApRK1JUt
zWT4mJ2XQCcDRxpoyyuzO+6oJFCtG8t5HnUGmjS9SrmA4zr0IpPGE9jtU6uAI+Bk
5g82DQ2LeN7UvF5ic73UHdMUhlgyMTWi8VYsRfQepdjL+8Dw3sxPYMxxdD1/FQR+
xxGH/ZJZNo2G/IyN+mCuk29zDHTwSph0BoBtmGewVjGEEH4p2xKvVBSQCc5QNKJq
YaHkoTEx2r4H8jKOcPxHsYQ7iBfzTKQzI7heNFzS2I9hY3fnldNWPP2jhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZAwFQiRkrCAqevap2+KC2O/UGgMB8GA1UdIwQY
MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt
YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl
LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWBzOqBS
WMNiVPfgM6xOknzKoNFEOX34HCMKlMsl7fcrvBG4wNz73xw9hHgQ1km2OC+Mnv3u
xs725lQ9Vx+zxCa5Rm25p1jyyqGR+Og8buaDKhUs8l9ncCK2BtRx6HAtd6osds17
O3b2VZRF977Kt1curDbr/1TtXUHO4UV6ZbwEvCjR+VzPLTwzJUfFWjlbxpvTqSDe
eXoAEO2khVPM0U19BY4++2/sDRViV1ABuDdug6wksgQYoQ+tRYtAKn0TA1+yfI3L
8l7mgfdFQqDLTzWNNbp23ZL0rxgLNqzNfBuKYYwZhWvPkttJxfw+EA9mglEmZfAu
B5AZ1o+W8drR+Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:54:08 2025 by rpki-client