Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          fgKSYZou/CnHLCTwYMI3lFrH9cF1O26BDg2MtUBjaHc=
Subject key identifier:   24:B8:2F:A7:7B:58:A6:3F:16:35:ED:83:F3:21:B7:E2:DF:0F:90:B1
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       0198277EB7FF04A771F88BE70C33B6DBA1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          15F7
Signing time:             Sun 20 Jul 2025 11:01:12 +0000
Manifest this update:     Sun 20 Jul 2025 11:01:12 +0000
Manifest next update:     Mon 21 Jul 2025 11:01:12 +0000
Files and hashes:         1: DurIZqoPKpw9LYGIPBrHPFq3LHw.roa (hash: zhg8WLRUrYe0q7NH9Wz8ueiA39mg7KprcnCZzHNNbsw=)
                          2: PnB8IMDITEDpen2OPTOxZTtueZw.roa (hash: qeR+1XSa8d/i/SIsn+15UPdwoIkYRW0OqLmRrfqzRas=)
                          3: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: h0tN738tNLTX7I6MDULrFtxbfXS5XIBPuKWrnXmfc5A=)
                          4: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (hash: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=)
                          5: vTNM4m6CbUwbrvUjHBwBVw0_vYs.roa (hash: 7BbpPre0ZtLQJ0mFYOMZGVaoQeJskvISu8hLB2sHUnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:b7:ff:04:a7:71:f8:8b:e7:0c:33:b6:db:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Jul 20 11:01:12 2025 GMT
            Not After : Jul 21 11:01:12 2025 GMT
        Subject: CN=24b82fa77b58a63f1635ed83f321b7e2df0f90b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:60:52:72:be:7c:7b:e8:70:ed:94:a6:4c:
                    0a:02:f9:66:ac:97:06:fd:12:72:20:72:79:87:ae:
                    f2:6c:3c:d6:ee:a6:8e:ea:bd:14:1c:37:09:8a:39:
                    94:37:41:fa:bf:90:11:9a:f2:cb:ab:29:45:51:66:
                    5f:a0:6d:82:2a:63:74:3b:d9:f1:bb:dc:94:d9:3b:
                    1e:b1:54:c1:e5:14:0e:2b:08:8a:19:a2:09:ca:31:
                    44:2f:a6:70:4f:2a:ae:91:00:3b:ea:32:1e:31:0e:
                    7a:77:d5:30:55:bd:61:44:99:c4:c1:2d:a2:c0:4b:
                    24:7d:a3:fc:8f:4b:2f:10:97:53:be:11:ab:a7:2b:
                    f9:42:d8:e7:d0:3e:64:96:b3:8c:cd:89:67:20:d4:
                    14:9d:70:8e:04:5a:0f:94:3d:0b:64:d3:1a:a6:71:
                    2c:fc:db:f4:82:0e:56:cc:10:62:fc:40:9f:f7:14:
                    c6:7f:bf:7a:69:37:0b:9c:17:9e:8a:5a:83:3b:50:
                    04:da:e3:de:77:09:bf:36:e5:df:94:97:2a:58:7d:
                    20:c2:23:ca:5b:94:c0:a2:35:d9:97:75:2f:9d:36:
                    22:c6:74:69:2f:31:08:f1:c1:9d:c4:ac:ed:c9:22:
                    79:83:08:ea:03:92:83:18:7a:52:4c:4b:5e:49:28:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B8:2F:A7:7B:58:A6:3F:16:35:ED:83:F3:21:B7:E2:DF:0F:90:B1
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e1:c8:6e:5d:a4:69:fc:16:35:62:88:9f:e8:8f:7a:ef:ed:
         cd:8f:6e:13:2b:0e:71:5f:fa:63:6e:b4:2d:ac:38:e6:4c:5e:
         80:31:33:3f:c8:84:a5:d0:a8:91:77:ff:7f:9f:f0:29:39:c1:
         b5:8c:0a:5b:f1:66:cb:be:cc:aa:61:e4:71:7a:5f:5e:cc:d6:
         31:71:68:04:79:27:ac:77:6d:7e:a7:8e:3e:a1:97:d0:de:f8:
         24:42:59:d5:b6:6f:bb:4f:3b:13:4f:24:1f:d4:ac:12:ff:e3:
         f5:43:61:95:df:1b:af:c5:c9:fd:24:42:1b:4f:72:84:8c:0f:
         cc:22:48:73:26:25:f3:14:f8:ec:7d:26:4d:18:9f:f9:3d:b7:
         17:b4:5f:f6:55:52:20:06:93:7b:78:b4:ca:6d:70:7b:fa:f8:
         8a:fa:f3:92:fe:9c:f8:33:61:ba:07:6a:2b:73:91:e2:74:2e:
         4d:6d:9b:f7:09:3b:ca:7b:f1:4d:70:0b:09:bf:37:c5:44:98:
         0e:c3:7d:cf:a8:e3:25:6c:2e:4b:28:b8:76:80:67:66:aa:18:
         df:28:ed:c6:8e:c1:15:55:9e:d4:cc:a0:c3:0f:b8:bf:04:d2:
         51:94:c9:18:b9:b6:e7:68:c1:5e:3f:bc:b2:c5:68:87:e0:30:
         37:c5:e2:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnfrf/BKdx+IvnDDO226HAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh
NDI4YzMwHhcNMjUwNzIwMTEwMTEyWhcNMjUwNzIxMTEwMTEyWjAzMTEwLwYDVQQD
EygyNGI4MmZhNzdiNThhNjNmMTYzNWVkODNmMzIxYjdlMmRmMGY5MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFgUnK+fHvocO2UpkwKAvlmrJcG
/RJyIHJ5h67ybDzW7qaO6r0UHDcJijmUN0H6v5ARmvLLqylFUWZfoG2CKmN0O9nx
u9yU2TsesVTB5RQOKwiKGaIJyjFEL6ZwTyqukQA76jIeMQ56d9UwVb1hRJnEwS2i
wEskfaP8j0svEJdTvhGrpyv5Qtjn0D5klrOMzYlnINQUnXCOBFoPlD0LZNMapnEs
/Nv0gg5WzBBi/ECf9xTGf796aTcLnBeeilqDO1AE2uPedwm/NuXflJcqWH0gwiPK
W5TAojXZl3UvnTYixnRpLzEI8cGdxKztySJ5gwjqA5KDGHpSTEteSSjI/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS4L6d7WKY/FjXtg/Mht+LfD5CxMB8GA1UdIwQY
MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt
YmU5YWQyYmY3MjVmLzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm
LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeHIbl2k
afwWNWKIn+iPeu/tzY9uEysOcV/6Y260Law45kxegDEzP8iEpdCokXf/f5/wKTnB
tYwKW/Fmy77MqmHkcXpfXszWMXFoBHknrHdtfqeOPqGX0N74JEJZ1bZvu087E08k
H9SsEv/j9UNhld8br8XJ/SRCG09yhIwPzCJIcyYl8xT47H0mTRif+T23F7Rf9lVS
IAaTe3i0ym1we/r4ivrzkv6c+DNhugdqK3OR4nQuTW2b9wk7ynvxTXALCb83xUSY
DsN9z6jjJWwuSyi4doBnZqoY3yjtxo7BFVWe1Mygww+4vwTSUZTJGLm252jBXj+8
ssVoh+AwN8Xikg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:49 2025 by rpki-client