Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          NYXznTajREqErU3TtrbGDdQ0Fw7g3ccZqh4e2htsNXM=
Subject key identifier:   38:F6:F0:FE:60:90:51:F1:EC:49:D4:94:F2:FF:A4:ED:50:A9:99:4E
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       019853E916BB00A107B282CA10967E8F875B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          062D
Signing time:             Tue 29 Jul 2025 02:00:41 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:41 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:41 +0000
Files and hashes:         1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=)
                          2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: js/4UD5Afyg/UIacx/sNxCd+KYXApqAMzXxIsVye/Hk=)
                          3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=)
                          4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e9:16:bb:00:a1:07:b2:82:ca:10:96:7e:8f:87:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Jul 29 02:00:41 2025 GMT
            Not After : Jul 30 02:00:41 2025 GMT
        Subject: CN=38f6f0fe609051f1ec49d494f2ffa4ed50a9994e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:83:5e:f5:7f:a2:3f:3a:8c:80:7b:f9:89:
                    83:c5:19:39:e8:d5:ce:c7:2a:a4:0f:9f:48:12:dc:
                    06:77:73:7f:16:2f:d3:8a:3e:60:f5:d6:a5:d2:78:
                    be:e3:53:93:09:63:bb:6d:b3:65:69:3b:9b:52:48:
                    7d:5b:fa:fd:4d:02:91:dc:2f:6e:b8:e1:7b:93:08:
                    a7:3c:75:a9:d7:43:d4:15:30:c6:3f:23:ee:be:15:
                    56:93:99:a0:a9:dc:fe:d2:b6:09:0d:09:d3:1a:31:
                    d1:13:73:7c:50:33:4c:bd:ac:74:87:f5:c4:c5:ab:
                    56:d1:90:31:38:18:1d:34:08:9d:4c:fe:a0:09:06:
                    e0:95:d0:eb:44:c7:9e:52:f1:c9:fb:72:76:b9:a4:
                    2b:79:08:e8:24:39:de:36:2f:7d:f2:b7:a9:f3:e8:
                    72:4f:db:b5:1f:6c:cb:4c:93:20:3f:e9:82:1a:af:
                    ea:68:d5:5b:58:77:de:d5:4a:7a:80:2a:67:0c:de:
                    13:dc:94:76:f2:7b:e9:d7:02:55:2a:e0:2f:d1:e5:
                    b9:fc:cb:b6:0d:04:7e:2e:8a:af:54:4c:e8:c8:86:
                    66:65:4f:a6:b0:87:72:1c:7d:a0:57:62:92:84:03:
                    79:bb:ee:09:00:01:95:01:23:4a:4e:4d:cb:43:12:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:F0:FE:60:90:51:F1:EC:49:D4:94:F2:FF:A4:ED:50:A9:99:4E
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:5d:9b:8a:44:ba:48:b8:49:63:0d:27:9f:a0:20:5f:e5:
         8a:5e:fa:60:b2:d7:b2:e3:57:a4:c3:c9:09:32:a2:19:a9:5a:
         96:8b:3e:b7:a8:dd:27:9b:8d:61:fc:d7:91:d4:41:57:9f:6a:
         fb:ed:6d:c0:e6:cc:8f:42:eb:d5:80:34:ff:ef:75:bc:8b:ab:
         3a:e8:ab:48:50:90:ae:69:43:f3:7c:cb:b3:63:29:9c:d8:59:
         fe:f4:ce:83:61:2e:95:39:b0:23:b6:55:a4:06:7f:3d:ce:89:
         fe:7f:35:ee:70:2d:89:71:81:a9:eb:19:4d:87:4c:25:13:7d:
         3d:38:1c:b2:c7:6e:d6:c2:04:fd:51:73:e0:2d:db:66:7e:73:
         27:4d:f0:c4:36:42:39:fe:57:3d:c6:dd:01:92:5e:d5:6e:11:
         be:a3:98:c6:7c:1a:9a:79:6d:30:9a:48:db:51:24:d9:56:60:
         04:3f:77:da:f6:8e:b7:f9:5d:33:81:cc:c7:3f:0a:9a:51:be:
         80:04:8a:99:53:e0:06:da:a2:48:27:e2:e0:68:07:45:50:d5:
         a3:b6:8f:98:2d:d6:39:5c:74:05:8a:44:00:97:bb:a0:4f:88:
         35:55:8b:e4:8b:52:b2:2c:82:55:5a:d7:eb:77:5c:3e:00:92:
         24:31:ac:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6Ra7AKEHsoLKEJZ+j4dbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2
MTE2ZjAwHhcNMjUwNzI5MDIwMDQxWhcNMjUwNzMwMDIwMDQxWjAzMTEwLwYDVQQD
EygzOGY2ZjBmZTYwOTA1MWYxZWM0OWQ0OTRmMmZmYTRlZDUwYTk5OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55ODXvV/oj86jIB7+YmDxRk56NXO
xyqkD59IEtwGd3N/Fi/Tij5g9dal0ni+41OTCWO7bbNlaTubUkh9W/r9TQKR3C9u
uOF7kwinPHWp10PUFTDGPyPuvhVWk5mgqdz+0rYJDQnTGjHRE3N8UDNMvax0h/XE
xatW0ZAxOBgdNAidTP6gCQbgldDrRMeeUvHJ+3J2uaQreQjoJDneNi998rep8+hy
T9u1H2zLTJMgP+mCGq/qaNVbWHfe1Up6gCpnDN4T3JR28nvp1wJVKuAv0eW5/Mu2
DQR+LoqvVEzoyIZmZU+msIdyHH2gV2KShAN5u+4JAAGVASNKTk3LQxJ0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj28P5gkFHx7EnUlPL/pO1QqZlOMB8GA1UdIwQY
MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt
ZTAyMWY4Y2U2YzUxLzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx
LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6Vdm4pE
uki4SWMNJ5+gIF/lil76YLLXsuNXpMPJCTKiGalalos+t6jdJ5uNYfzXkdRBV59q
++1twObMj0Lr1YA0/+91vIurOuirSFCQrmlD83zLs2MpnNhZ/vTOg2EulTmwI7ZV
pAZ/Pc6J/n817nAtiXGBqesZTYdMJRN9PTgcssdu1sIE/VFz4C3bZn5zJ03wxDZC
Of5XPcbdAZJe1W4RvqOYxnwamnltMJpI21Ek2VZgBD932vaOt/ldM4HMxz8KmlG+
gASKmVPgBtqiSCfi4GgHRVDVo7aPmC3WOVx0BYpEAJe7oE+INVWL5ItSsiyCVVrX
63dcPgCSJDGs9A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:16 2025 by rpki-client