Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          +Y0btogRs0DhnO220qxuPgXMTi/o3F1jLwCkoYYzrE4=
Subject key identifier:   15:0A:42:41:61:4C:67:10:47:17:D6:94:BC:BC:13:10:2B:B9:3E:8A
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       01985BD9C5392B830A69F1A6E3D533186A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          058E
Signing time:             Wed 30 Jul 2025 15:00:55 +0000
Manifest this update:     Wed 30 Jul 2025 15:00:55 +0000
Manifest next update:     Thu 31 Jul 2025 15:00:55 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: CLAkM3nHR9/GJjpf3RNMVOahUvNFjx+5ihAap1s5b90=)
                          2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5b:d9:c5:39:2b:83:0a:69:f1:a6:e3:d5:33:18:6a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Jul 30 15:00:55 2025 GMT
            Not After : Jul 31 15:00:55 2025 GMT
        Subject: CN=150a4241614c67104717d694bcbc13102bb93e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:0f:31:eb:bf:c7:6c:3b:84:d6:b7:27:6d:
                    32:33:61:da:ae:ac:ef:22:f5:b9:1e:de:d0:34:05:
                    8d:76:9c:f8:34:81:44:3f:90:89:25:a5:bd:39:f3:
                    0a:be:3c:43:17:68:91:4d:dc:6a:02:34:a0:7d:c6:
                    6b:31:29:0d:d9:9a:a8:39:9c:5f:20:0c:1b:de:e1:
                    58:eb:f6:53:8d:ea:3d:ca:38:91:58:98:b1:ea:d2:
                    4e:f9:3e:d0:4a:0d:dd:83:43:ed:bb:d7:4d:69:bb:
                    22:09:65:6a:e8:b5:c0:47:bf:ee:43:a8:0d:e8:fd:
                    b5:a9:68:19:c2:73:4e:4f:b5:50:72:ce:5d:47:00:
                    6d:aa:e8:57:02:ca:4e:d0:49:f5:61:6c:64:ec:e9:
                    b4:97:f4:9a:47:7d:a9:71:e0:4a:fd:c3:3c:26:c0:
                    be:65:f7:0e:15:53:b0:29:f4:e1:4f:c1:4f:97:4d:
                    3e:8b:da:0e:e7:04:57:36:09:05:88:cc:3b:4a:f1:
                    eb:5c:74:bf:39:79:35:71:67:b5:75:76:36:42:fa:
                    a9:b4:60:8d:c8:1e:79:10:09:cf:2f:4c:23:47:4f:
                    5d:d0:b7:b6:74:75:21:79:03:b7:e1:21:32:c4:14:
                    f8:46:ad:49:6b:65:c4:09:3b:b8:9d:3d:7d:74:cb:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:42:41:61:4C:67:10:47:17:D6:94:BC:BC:13:10:2B:B9:3E:8A
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:98:42:e5:77:f7:b8:b1:04:21:d1:06:43:bb:38:42:97:
         a4:7e:45:54:84:30:b7:b5:08:9d:b1:ff:2f:e2:68:55:38:d2:
         80:bd:72:64:4e:b2:7d:7c:38:bf:71:85:63:ea:91:43:21:31:
         10:c8:4a:e9:50:62:5d:c6:dc:72:01:27:7a:d2:ba:c5:94:41:
         d7:4b:14:e2:16:24:4c:70:36:cc:4e:65:3b:4e:88:4f:5a:e8:
         0a:ef:ea:06:0c:e1:22:7b:fd:88:bf:37:29:18:8f:21:6e:a1:
         87:d7:71:cd:2f:1e:fc:d9:88:e5:fd:c7:3e:92:f0:67:7e:6e:
         9b:20:0b:f2:2e:8e:60:35:68:bb:f8:99:f5:1a:94:cb:bc:2a:
         5f:bc:75:9b:13:e0:93:03:98:91:0c:9f:32:9b:d0:20:c6:80:
         6c:fd:09:b1:ce:5e:1f:f2:70:a3:bc:3f:57:b3:98:97:1c:7a:
         1b:be:b1:57:8e:c9:2b:31:f8:10:88:01:e2:30:40:12:8d:91:
         b1:4a:26:6b:e6:80:ff:4e:7b:c6:94:62:e5:62:f7:d5:5b:f3:
         36:83:a1:9d:b4:bd:b6:d8:c3:5f:7e:cc:27:a7:67:b1:10:97:
         1d:41:6c:97:8b:2a:c6:85:a6:e8:51:af:2d:64:1c:e6:7c:70:
         c9:f0:5d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhb2cU5K4MKafGm49UzGGpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4
OWNlMTEwHhcNMjUwNzMwMTUwMDU1WhcNMjUwNzMxMTUwMDU1WjAzMTEwLwYDVQQD
EygxNTBhNDI0MTYxNGM2NzEwNDcxN2Q2OTRiY2JjMTMxMDJiYjkzZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssYPMeu/x2w7hNa3J20yM2Harqzv
IvW5Ht7QNAWNdpz4NIFEP5CJJaW9OfMKvjxDF2iRTdxqAjSgfcZrMSkN2ZqoOZxf
IAwb3uFY6/ZTjeo9yjiRWJix6tJO+T7QSg3dg0Ptu9dNabsiCWVq6LXAR7/uQ6gN
6P21qWgZwnNOT7VQcs5dRwBtquhXAspO0En1YWxk7Om0l/SaR32pceBK/cM8JsC+
ZfcOFVOwKfThT8FPl00+i9oO5wRXNgkFiMw7SvHrXHS/OXk1cWe1dXY2QvqptGCN
yB55EAnPL0wjR09d0Le2dHUheQO34SEyxBT4Rq1Ja2XECTu4nT19dMvb5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUKQkFhTGcQRxfWlLy8ExAruT6KMB8GA1UdIwQY
MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt
NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx
LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/WYQuV3
97ixBCHRBkO7OEKXpH5FVIQwt7UInbH/L+JoVTjSgL1yZE6yfXw4v3GFY+qRQyEx
EMhK6VBiXcbccgEnetK6xZRB10sU4hYkTHA2zE5lO06IT1roCu/qBgzhInv9iL83
KRiPIW6hh9dxzS8e/NmI5f3HPpLwZ35umyAL8i6OYDVou/iZ9RqUy7wqX7x1mxPg
kwOYkQyfMpvQIMaAbP0Jsc5eH/Jwo7w/V7OYlxx6G76xV47JKzH4EIgB4jBAEo2R
sUoma+aA/057xpRi5WL31VvzNoOhnbS9ttjDX37MJ6dnsRCXHUFsl4sqxoWm6FGv
LWQc5nxwyfBdQw==
-----END CERTIFICATE-----
Generated at Wed Jul 30 22:47:55 2025 by rpki-client