Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
File:                     faMe6cmJpjEaCP8jIomXhAFBXpE.mft (raw, json)
Hash identifier:          gCoQKU/RjC70hnC0J0n4GCA6TxSTSgh0sB9hWJxZQJ8=
Subject key identifier:   D1:17:D1:DC:C8:81:E1:C8:B1:DA:34:77:85:A6:7D:D4:E8:5B:E0:61
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Certificate issuer:       /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial:       019848F7A109BE5DD40979197D79375DCBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
Manifest number:          0B8E
Signing time:             Sat 26 Jul 2025 23:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:44 +0000
Files and hashes:         1: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (hash: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=)
                          2: faMe6cmJpjEaCP8jIomXhAFBXpE.crl (hash: 04YIqoncaenznlArlCHFYWx/QDTfXrJtLzaxPLh15DI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:a1:09:be:5d:d4:09:79:19:7d:79:37:5d:cb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
        Validity
            Not Before: Jul 26 23:00:44 2025 GMT
            Not After : Jul 27 23:00:44 2025 GMT
        Subject: CN=d117d1dcc881e1c8b1da347785a67dd4e85be061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:62:a7:50:a3:c4:b2:22:ba:44:5e:c4:9f:
                    94:b7:d1:db:1c:0b:55:a8:3e:b2:6a:7f:7e:81:a8:
                    f1:f8:57:a5:ee:38:12:25:dc:16:77:a0:f3:0d:b1:
                    1d:46:43:d5:7d:83:57:5b:aa:cb:5a:ce:2b:3a:ef:
                    19:fc:d2:d3:8f:f9:9c:35:bf:03:86:75:d8:5e:7e:
                    66:47:8a:96:0e:5d:df:8f:ff:53:82:80:99:0e:ec:
                    03:fe:0c:11:c4:62:ee:ae:b2:20:57:0a:2a:1a:70:
                    d0:bd:04:13:48:b4:7e:e4:18:43:77:97:b2:fa:19:
                    1f:6c:80:c8:a3:42:6f:f3:46:1a:72:f2:5e:26:0a:
                    0f:e7:80:b3:5c:0a:a7:d0:7c:db:db:68:26:5a:fc:
                    18:d1:44:93:76:4a:0a:f3:cf:97:3a:f9:ea:9b:da:
                    83:d0:c5:73:4b:8f:b6:52:08:c4:24:a6:a8:d8:1b:
                    f8:a5:64:cf:95:38:fb:ff:63:bd:5d:27:49:51:7a:
                    e6:bc:06:fd:08:96:0c:f4:50:06:5b:87:2e:62:73:
                    c3:c6:f0:5d:20:31:88:e3:e1:9b:c8:92:c3:39:d9:
                    84:02:b0:ca:fb:c4:93:46:b7:f5:c6:26:fe:a2:f0:
                    72:42:64:02:5f:a2:46:ad:c1:f9:d5:0e:dc:f0:5b:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:17:D1:DC:C8:81:E1:C8:B1:DA:34:77:85:A6:7D:D4:E8:5B:E0:61
            X509v3 Authority Key Identifier:
                keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:14:54:85:c7:1f:2f:7c:4c:a2:bf:3d:66:da:bb:09:9f:fc:
         21:97:63:30:fb:6e:de:bf:72:34:4a:7f:05:70:a0:25:51:c9:
         30:86:cb:77:30:35:2f:c9:6d:2d:6a:26:50:16:c5:81:70:bc:
         66:b0:fe:5b:71:83:eb:34:c7:67:60:2d:19:fd:0e:93:06:de:
         6d:ff:06:15:5c:31:b3:61:c0:7f:a5:89:ca:f8:f9:83:b1:63:
         0a:a1:26:f0:ae:cf:85:24:09:2a:ff:79:28:28:c4:87:5e:01:
         3d:cb:11:3c:8a:65:41:a4:f7:5a:ad:a2:49:73:41:43:43:7f:
         af:2b:f4:01:f0:11:45:30:cc:ef:f2:fd:26:a8:ff:28:20:54:
         14:79:5d:d7:95:66:5e:7a:30:7f:34:3e:70:80:1d:9d:29:f5:
         90:28:9f:b6:41:e2:34:47:be:37:ca:f9:15:93:55:9f:03:a1:
         ae:1d:26:b5:01:5c:f6:66:9b:a7:3c:a7:ca:54:11:25:ed:43:
         6c:fc:02:cb:b7:e6:e9:87:23:28:0b:22:a1:01:c8:46:9a:58:
         0b:d1:d6:75:a2:db:54:1d:19:12:1c:b6:f6:f4:70:38:b3:75:
         00:e8:1c:de:31:ef:97:2c:17:7a:6c:6f:ac:19:78:14:c7:ec:
         cb:3c:19:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI96EJvl3UCXkZfXk3XcvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTMxZWU5Yzk4OWE2MzExYTA4ZmYyMzIyODk5Nzg0MDE0
MTVlOTEwHhcNMjUwNzI2MjMwMDQ0WhcNMjUwNzI3MjMwMDQ0WjAzMTEwLwYDVQQD
EyhkMTE3ZDFkY2M4ODFlMWM4YjFkYTM0Nzc4NWE2N2RkNGU4NWJlMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Nip1CjxLIiukRexJ+Ut9HbHAtV
qD6yan9+gajx+Fel7jgSJdwWd6DzDbEdRkPVfYNXW6rLWs4rOu8Z/NLTj/mcNb8D
hnXYXn5mR4qWDl3fj/9TgoCZDuwD/gwRxGLurrIgVwoqGnDQvQQTSLR+5BhDd5ey
+hkfbIDIo0Jv80YacvJeJgoP54CzXAqn0Hzb22gmWvwY0USTdkoK88+XOvnqm9qD
0MVzS4+2UgjEJKao2Bv4pWTPlTj7/2O9XSdJUXrmvAb9CJYM9FAGW4cuYnPDxvBd
IDGI4+GbyJLDOdmEArDK+8STRrf1xib+ovByQmQCX6JGrcH51Q7c8FvN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEX0dzIgeHIsdo0d4WmfdToW+BhMB8GA1UdIwQY
MBaAFH2jHunJiaYxGgj/IyKJl4QBQV6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFNZTZjbUpwakVhQ1A4aklvbVhoQUZCWHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZmI0NzctYThiNy00NTBlLWI1MzMt
MTFlNmMwYTNhODA4LzEvZmFNZTZjbUpwakVhQ1A4aklvbVhoQUZCWHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yZmI0NzctYThiNy00NTBlLWI1MzMtMTFlNmMwYTNhODA4
LzEvZmFNZTZjbUpwakVhQ1A4aklvbVhoQUZCWHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURRUhccf
L3xMor89Ztq7CZ/8IZdjMPtu3r9yNEp/BXCgJVHJMIbLdzA1L8ltLWomUBbFgXC8
ZrD+W3GD6zTHZ2AtGf0Okwbebf8GFVwxs2HAf6WJyvj5g7FjCqEm8K7PhSQJKv95
KCjEh14BPcsRPIplQaT3Wq2iSXNBQ0N/ryv0AfARRTDM7/L9Jqj/KCBUFHld15Vm
XnowfzQ+cIAdnSn1kCiftkHiNEe+N8r5FZNVnwOhrh0mtQFc9mabpzynylQRJe1D
bPwCy7fm6YcjKAsioQHIRppYC9HWdaLbVB0ZEhy29vRwOLN1AOgc3jHvlywXemxv
rBl4FMfsyzwZmA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:43 2025 by rpki-client