Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          tRROZS0F7HpXEsNVTevexKqJFrHnBk47ofFgMUAsl2s=
Subject key identifier:   CC:68:83:E4:1E:31:AA:13:1E:60:A0:DB:3E:40:BA:53:9D:28:12:E6
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       0198481BE36E247CEC8D933260705FAF716B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 19:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:43 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: VcFjqqN2uDl1vxfcakZAJBlbAZCK90IrCKl0VwmMD90=)
                          2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:e3:6e:24:7c:ec:8d:93:32:60:70:5f:af:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: Jul 26 19:00:43 2025 GMT
            Not After : Jul 27 19:00:43 2025 GMT
        Subject: CN=cc6883e41e31aa131e60a0db3e40ba539d2812e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:51:41:7f:a8:62:a7:0d:7e:e4:c4:ac:23:
                    da:2f:4c:af:a3:5d:3c:41:44:7b:9e:89:6f:c1:87:
                    e3:d8:cb:5f:e0:ac:72:02:c5:2f:64:40:44:0c:93:
                    15:e2:79:ce:11:08:51:4c:14:df:9d:6c:73:02:e1:
                    ce:a8:00:10:5f:1d:05:31:85:ca:b7:3e:d5:07:9f:
                    f9:f4:2c:74:19:e3:86:66:49:74:b2:8a:1e:ee:22:
                    61:c9:6f:fd:24:b3:a0:60:4a:d3:ed:47:60:43:f5:
                    5a:04:4d:4b:6b:0a:71:f6:7f:69:e4:b0:50:45:09:
                    b9:53:3d:5d:d0:61:e4:4f:88:19:46:d5:9e:1d:b3:
                    e7:93:94:4b:17:de:6e:a8:93:f6:73:6e:37:8e:9e:
                    58:6f:42:d4:62:77:d9:b5:18:eb:93:29:7e:db:68:
                    40:bf:9b:44:21:e0:53:b8:54:10:03:b5:87:0c:cb:
                    36:04:4b:89:de:31:97:32:ce:3e:57:30:dc:5d:00:
                    20:8d:ef:8a:13:db:47:d4:42:60:83:09:87:37:3b:
                    7c:e3:88:5d:ec:78:7d:50:8b:d3:44:79:ab:44:04:
                    98:7a:cb:8e:f0:9a:2b:0c:18:20:96:79:df:1f:95:
                    a6:2b:07:a7:dc:87:ae:c3:d9:a2:8d:3d:c1:99:0a:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:83:E4:1E:31:AA:13:1E:60:A0:DB:3E:40:BA:53:9D:28:12:E6
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:33:ac:93:64:0f:38:a3:cf:13:41:b5:bc:f5:47:1b:3c:48:
         a7:dc:b0:d9:97:44:60:c7:e7:db:ba:40:0a:59:75:1c:5a:6c:
         94:ec:63:47:05:2d:ee:dd:d9:a2:cb:3d:c9:98:5f:54:cf:b9:
         88:55:b6:24:10:ea:93:c7:5d:e6:b7:ce:bc:49:e3:ca:26:69:
         ed:62:6d:89:2e:06:59:4f:9b:01:c6:90:4a:8f:73:16:e0:74:
         60:fe:4d:6b:88:27:6c:b9:ad:23:4a:5a:50:fb:dd:fe:9c:7b:
         73:0c:84:a2:99:e9:bf:3d:f8:07:0d:49:a8:41:3f:18:56:43:
         aa:02:6d:78:11:80:3e:40:c1:f9:c2:e6:d6:c7:fe:4f:45:c2:
         35:c2:89:a8:54:71:ca:69:33:91:e4:2f:0b:fe:34:d5:8a:bf:
         b9:a9:73:34:d0:92:d5:a9:f2:32:6f:8e:1a:4a:76:85:42:df:
         2a:ae:f9:c8:0e:b3:0e:2d:78:db:5f:55:22:01:29:66:89:96:
         8c:2f:1c:9a:54:cf:9d:26:bf:42:6f:29:c3:f0:0c:18:64:fe:
         80:ac:d9:16:c4:e4:0c:c0:34:f3:4b:23:b2:6a:92:f2:f0:e8:
         c6:26:c0:99:4f:13:f7:2b:bb:38:54:0b:30:58:28:3b:fd:ae:
         6f:6a:da:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG+NuJHzsjZMyYHBfr3FrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm
ZDBlYjQwHhcNMjUwNzI2MTkwMDQzWhcNMjUwNzI3MTkwMDQzWjAzMTEwLwYDVQQD
EyhjYzY4ODNlNDFlMzFhYTEzMWU2MGEwZGIzZTQwYmE1MzlkMjgxMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd1RQX+oYqcNfuTErCPaL0yvo108
QUR7nolvwYfj2Mtf4KxyAsUvZEBEDJMV4nnOEQhRTBTfnWxzAuHOqAAQXx0FMYXK
tz7VB5/59Cx0GeOGZkl0sooe7iJhyW/9JLOgYErT7UdgQ/VaBE1Lawpx9n9p5LBQ
RQm5Uz1d0GHkT4gZRtWeHbPnk5RLF95uqJP2c243jp5Yb0LUYnfZtRjrkyl+22hA
v5tEIeBTuFQQA7WHDMs2BEuJ3jGXMs4+VzDcXQAgje+KE9tH1EJggwmHNzt844hd
7Hh9UIvTRHmrRASYesuO8JorDBgglnnfH5WmKwen3Ieuw9mijT3BmQoDKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxog+QeMaoTHmCg2z5AulOdKBLmMB8GA1UdIwQY
MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct
YTYyNTU2ZDI1NDQ3LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3
LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDOsk2QP
OKPPE0G1vPVHGzxIp9yw2ZdEYMfn27pACll1HFpslOxjRwUt7t3Zoss9yZhfVM+5
iFW2JBDqk8dd5rfOvEnjyiZp7WJtiS4GWU+bAcaQSo9zFuB0YP5Na4gnbLmtI0pa
UPvd/px7cwyEopnpvz34Bw1JqEE/GFZDqgJteBGAPkDB+cLm1sf+T0XCNcKJqFRx
ymkzkeQvC/401Yq/ualzNNCS1anyMm+OGkp2hULfKq75yA6zDi14219VIgEpZomW
jC8cmlTPnSa/Qm8pw/AMGGT+gKzZFsTkDMA080sjsmqS8vDoxibAmU8T9yu7OFQL
MFgoO/2ub2radw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:03 2025 by rpki-client