Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          cHBV71IEwwbZxIY3sQ/ZXKQw7LyJdEwFir9Eohu+qhE=
Subject key identifier:   55:51:72:B3:9F:BF:4D:2E:B4:E2:56:C2:F6:80:46:62:47:E2:76:7E
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       019842195D96BF84CCDE089BCC19E423FEB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          134F
Signing time:             Fri 25 Jul 2025 15:00:15 +0000
Manifest this update:     Fri 25 Jul 2025 15:00:15 +0000
Manifest next update:     Sat 26 Jul 2025 15:00:15 +0000
Files and hashes:         1: FIr_oRpmQFUIT6cxtQe7GHGmoAA.roa (hash: 2GgPUgLEEuhVk0MSxFLT+LbEd2G3F3hNCc8xhLO7cXs=)
                          2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
                          3: HIF_dDhlW9UGjpCh7e5JQg2Sx1M.roa (hash: POCLCGfYMh6nvgW/t/CwlWH1wc57PzDL2vDMBxMdZBc=)
                          4: Hi1JfNmrlGgkq8LJThdNJ2H_9RU.roa (hash: nAKWDljPkM7VVe7jEP7DxUoFbACMfs6GDVOQi/f8q5s=)
                          5: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: L/le5rIDX8XIuBw9h4mAtt6t6xaBj44cJjSRQJE4L6Q=)
                          6: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:19:5d:96:bf:84:cc:de:08:9b:cc:19:e4:23:fe:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Jul 25 15:00:15 2025 GMT
            Not After : Jul 26 15:00:15 2025 GMT
        Subject: CN=555172b39fbf4d2eb4e256c2f680466247e2767e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:12:88:2f:0e:29:28:ff:cb:c8:79:89:75:
                    74:66:9e:e0:3d:f7:ac:ee:d0:f6:45:4b:c8:2c:d7:
                    02:07:e3:9d:5a:29:85:c3:ac:f0:98:bd:a8:df:ff:
                    63:16:f5:df:ef:a9:93:f6:8c:08:58:af:7f:e6:6c:
                    9f:d6:4f:d9:20:99:4e:ab:87:bb:90:12:61:17:55:
                    59:50:b0:52:32:a0:2e:02:bc:ca:30:9b:f6:07:fa:
                    bd:fd:db:74:c1:db:66:1a:19:1e:96:4c:78:14:ec:
                    7f:ae:4c:58:1b:99:d2:c1:5d:6c:98:e5:df:b3:f0:
                    3f:a1:db:40:db:2e:ac:4a:53:63:7f:3b:53:fd:c4:
                    42:60:93:f8:92:64:eb:ac:bb:c6:2a:aa:95:50:55:
                    3c:5f:3c:8d:29:64:ba:64:c7:34:01:72:ef:28:92:
                    1d:46:32:bb:a7:9c:86:00:f7:86:ea:50:3f:7c:7e:
                    ac:cf:97:fe:9f:b1:2d:f8:d5:1b:56:56:1c:8f:a4:
                    1d:f1:40:6f:37:14:43:a6:c6:8e:b1:cf:0b:57:57:
                    95:de:1b:10:c7:13:b1:08:18:2b:ba:cd:61:89:cd:
                    74:fa:ad:ba:5a:7e:48:e3:05:54:04:63:e1:cb:88:
                    ca:05:0a:49:f4:6b:7d:f5:60:88:9b:73:80:dc:a1:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:51:72:B3:9F:BF:4D:2E:B4:E2:56:C2:F6:80:46:62:47:E2:76:7E
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1e:0b:e2:d2:b5:e7:0d:27:f2:9f:e0:a6:7f:56:e8:41:21:
         db:25:28:40:b8:10:96:ff:ac:e5:d7:bd:49:92:69:00:4b:3a:
         36:06:58:de:cc:a3:01:35:c6:71:b3:96:87:89:99:72:a4:44:
         f7:0b:ba:58:d8:c5:11:db:fb:ce:b5:a6:74:d5:54:2b:84:8e:
         59:2d:60:bd:7e:3f:63:e1:6c:60:48:fa:27:a4:02:6f:35:8a:
         7a:01:4d:64:05:db:d5:e4:4b:e2:a0:06:83:86:7c:e6:51:31:
         a9:ef:33:a6:be:91:0b:b4:6d:49:4a:2f:1e:6f:51:3a:71:55:
         72:29:97:45:2c:d9:9b:61:81:ae:1c:13:e9:8f:f0:2c:c8:43:
         d4:b2:f6:62:ee:a9:24:cf:0b:9a:b5:c2:a0:5c:af:24:54:a0:
         fe:be:cc:f8:78:e7:ee:38:ce:e6:a3:f0:1c:ec:f7:fa:72:7a:
         00:a0:a1:4e:3a:2d:54:c9:ad:22:f4:ca:60:b0:1e:fe:5a:e5:
         14:6d:b0:bc:d4:23:16:50:5f:31:c4:1b:1d:2f:61:9c:20:93:
         b8:25:16:ba:8c:ab:24:01:1e:5b:21:83:97:a6:a3:76:34:e7:
         9d:15:87:d0:48:d7:6a:54:28:67:a6:07:66:b0:14:74:17:08:
         cb:e1:cc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCGV2Wv4TM3gibzBnkI/6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjZhNDliY2MxMGRlMzQwZTM5ZDIwM2Y1NjY1OGJkN2Q2
NDhkZGYwHhcNMjUwNzI1MTUwMDE1WhcNMjUwNzI2MTUwMDE1WjAzMTEwLwYDVQQD
Eyg1NTUxNzJiMzlmYmY0ZDJlYjRlMjU2YzJmNjgwNDY2MjQ3ZTI3NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYESiC8OKSj/y8h5iXV0Zp7gPfes
7tD2RUvILNcCB+OdWimFw6zwmL2o3/9jFvXf76mT9owIWK9/5myf1k/ZIJlOq4e7
kBJhF1VZULBSMqAuArzKMJv2B/q9/dt0wdtmGhkelkx4FOx/rkxYG5nSwV1smOXf
s/A/odtA2y6sSlNjfztT/cRCYJP4kmTrrLvGKqqVUFU8XzyNKWS6ZMc0AXLvKJId
RjK7p5yGAPeG6lA/fH6sz5f+n7Et+NUbVlYcj6Qd8UBvNxRDpsaOsc8LV1eV3hsQ
xxOxCBgrus1hic10+q26Wn5I4wVUBGPhy4jKBQpJ9Gt99WCIm3OA3KEizQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVRcrOfv00utOJWwvaARmJH4nZ+MB8GA1UdIwQY
MBaAFLC2pJvMEN40DjnSA/VmWL19ZI3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYt
ZWU0NmFjMDE4NjAwLzEvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYtZWU0NmFjMDE4NjAw
LzEvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR4L4tK1
5w0n8p/gpn9W6EEh2yUoQLgQlv+s5de9SZJpAEs6NgZY3syjATXGcbOWh4mZcqRE
9wu6WNjFEdv7zrWmdNVUK4SOWS1gvX4/Y+FsYEj6J6QCbzWKegFNZAXb1eRL4qAG
g4Z85lExqe8zpr6RC7RtSUovHm9ROnFVcimXRSzZm2GBrhwT6Y/wLMhD1LL2Yu6p
JM8LmrXCoFyvJFSg/r7M+Hjn7jjO5qPwHOz3+nJ6AKChTjotVMmtIvTKYLAe/lrl
FG2wvNQjFlBfMcQbHS9hnCCTuCUWuoyrJAEeWyGDl6ajdjTnnRWH0EjXalQoZ6YH
ZrAUdBcIy+HMeg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 17:24:11 2025 by rpki-client