Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          vy4OCpD4AQhJ5YTFK/RpuxYafKIk9okQPJNh6jh1DZw=
Subject key identifier:   92:CB:B3:E0:E0:6A:70:A3:F2:B1:18:F8:6F:33:36:E6:9C:5D:83:60
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       019858D8D9EA2A780C8CFA692F9DBE422F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0BED
Signing time:             Wed 30 Jul 2025 01:01:03 +0000
Manifest this update:     Wed 30 Jul 2025 01:01:03 +0000
Manifest next update:     Thu 31 Jul 2025 01:01:03 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: plnI0MPfZiwaW3vcEN51RdgdhIjqaObzT+Idt4X1Fg4=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:58:d8:d9:ea:2a:78:0c:8c:fa:69:2f:9d:be:42:2f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Jul 30 01:01:03 2025 GMT
            Not After : Jul 31 01:01:03 2025 GMT
        Subject: CN=92cbb3e0e06a70a3f2b118f86f3336e69c5d8360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:1f:58:46:ea:68:8f:82:82:4f:09:a8:40:
                    68:c7:33:a7:7a:e4:ac:86:c1:ba:78:17:4d:71:42:
                    62:66:27:b0:57:cb:4a:c0:c2:7e:14:aa:3e:86:a0:
                    26:b5:ec:a0:17:c0:a9:0c:4e:2a:3c:ac:96:88:45:
                    d9:5c:03:4d:b7:3f:62:47:51:ec:24:dd:1e:8d:40:
                    3f:21:87:34:a0:b5:ea:62:24:5c:f7:04:3f:31:07:
                    86:4e:97:cf:2c:f4:83:08:b3:1f:f9:48:8a:51:3e:
                    da:10:ee:4c:f8:fe:5c:a8:50:e2:30:bf:9a:63:8f:
                    f4:94:67:8f:ca:c5:9f:83:f6:88:e6:42:dd:43:f4:
                    c0:39:27:60:7b:1c:53:93:8d:2e:5c:fe:1c:75:f2:
                    13:b9:94:3f:60:77:4f:9f:59:27:fd:1f:00:fc:74:
                    be:36:b8:67:64:48:97:96:dc:7f:c1:c4:ca:05:4d:
                    e7:5d:14:8a:5c:97:ef:6d:95:d8:31:be:c7:07:c3:
                    75:a0:be:8e:56:e5:ee:68:8b:5f:d0:7c:5a:ff:44:
                    0d:f5:b0:a4:ed:57:81:c4:c5:7f:69:97:01:ce:f0:
                    8a:64:9e:f2:7e:44:80:b5:39:4b:88:dc:7f:82:13:
                    ff:51:c3:6d:63:ec:f0:b5:66:c1:42:db:b3:bb:f2:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CB:B3:E0:E0:6A:70:A3:F2:B1:18:F8:6F:33:36:E6:9C:5D:83:60
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:9a:7c:66:03:3e:53:89:39:5b:b7:80:09:ea:6a:92:4f:
         91:38:f7:a0:5c:98:a1:2b:1d:76:f3:7f:58:b7:51:88:db:a2:
         49:03:32:02:ff:a8:e6:6b:0a:e1:4d:fe:ff:2d:01:d8:d6:0f:
         be:89:55:ce:1b:98:00:86:5e:f6:b8:cb:3c:94:c3:e0:0f:17:
         a3:32:2d:e3:e3:3e:d4:30:42:b7:38:cb:13:b6:28:c6:dc:f2:
         b1:7a:db:10:23:8c:47:67:dd:4d:2d:3f:24:40:29:fa:60:85:
         aa:4c:25:fd:91:38:d5:b5:87:8d:a2:91:89:1e:d5:a4:52:84:
         55:3f:78:a8:aa:e6:87:ee:63:bc:4d:23:77:8d:94:2a:97:36:
         d1:34:95:84:d0:2d:6b:b4:78:7f:0c:d1:6f:c0:bd:65:14:de:
         f1:19:3f:9a:90:0a:35:b1:6f:9a:78:2b:a1:6a:39:d1:28:0b:
         06:ae:85:58:69:e2:74:74:96:64:8c:e1:28:34:55:de:22:e2:
         9e:90:81:c4:58:36:51:a9:53:5b:79:69:1f:09:58:07:5b:a7:
         d5:b4:b7:94:f9:39:a5:db:e4:de:88:62:3b:45:04:de:99:d2:
         2d:3c:3d:72:2e:13:4b:0c:00:66:65:c0:ff:75:4c:6f:96:73:
         5f:75:6a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2NnqKngMjPppL52+Qi+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjUwNzMwMDEwMTAzWhcNMjUwNzMxMDEwMTAzWjAzMTEwLwYDVQQD
Eyg5MmNiYjNlMGUwNmE3MGEzZjJiMTE4Zjg2ZjMzMzZlNjljNWQ4MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwofWEbqaI+Cgk8JqEBoxzOneuSs
hsG6eBdNcUJiZiewV8tKwMJ+FKo+hqAmteygF8CpDE4qPKyWiEXZXANNtz9iR1Hs
JN0ejUA/IYc0oLXqYiRc9wQ/MQeGTpfPLPSDCLMf+UiKUT7aEO5M+P5cqFDiML+a
Y4/0lGePysWfg/aI5kLdQ/TAOSdgexxTk40uXP4cdfITuZQ/YHdPn1kn/R8A/HS+
NrhnZEiXltx/wcTKBU3nXRSKXJfvbZXYMb7HB8N1oL6OVuXuaItf0Hxa/0QN9bCk
7VeBxMV/aZcBzvCKZJ7yfkSAtTlLiNx/ghP/UcNtY+zwtWbBQtuzu/KFNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLLs+DganCj8rEY+G8zNuacXYNgMB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDyafGYD
PlOJOVu3gAnqapJPkTj3oFyYoSsddvN/WLdRiNuiSQMyAv+o5msK4U3+/y0B2NYP
volVzhuYAIZe9rjLPJTD4A8XozIt4+M+1DBCtzjLE7YoxtzysXrbECOMR2fdTS0/
JEAp+mCFqkwl/ZE41bWHjaKRiR7VpFKEVT94qKrmh+5jvE0jd42UKpc20TSVhNAt
a7R4fwzRb8C9ZRTe8Rk/mpAKNbFvmngroWo50SgLBq6FWGnidHSWZIzhKDRV3iLi
npCBxFg2UalTW3lpHwlYB1un1bS3lPk5pdvk3ohiO0UE3pnSLTw9ci4TSwwAZmXA
/3VMb5ZzX3Vq0w==
-----END CERTIFICATE-----
Generated at Wed Jul 30 09:06:26 2025 by rpki-client