Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          SSinexUunGMSx9l6YyVwCtlKVou+7biMpDjxysOJpmQ=
Subject key identifier:   8E:CA:23:18:D1:E6:E7:90:5C:8E:22:8C:A6:1D:21:51:8F:E1:E1:60
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       019827110FD31CC447E40B10F0F3FEAF0FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          15EF
Signing time:             Sun 20 Jul 2025 09:01:26 +0000
Manifest this update:     Sun 20 Jul 2025 09:01:26 +0000
Manifest next update:     Mon 21 Jul 2025 09:01:26 +0000
Files and hashes:         1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: Ggt4NTsmmnNSLhl2XXbfJfLvPC57jel1ojVGQ1vj1i0=)
                          2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
                          3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
                          4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
                          5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:11:0f:d3:1c:c4:47:e4:0b:10:f0:f3:fe:af:0f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Jul 20 09:01:26 2025 GMT
            Not After : Jul 21 09:01:26 2025 GMT
        Subject: CN=8eca2318d1e6e7905c8e228ca61d21518fe1e160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:c5:91:f7:e5:17:a1:74:a8:45:eb:1d:60:
                    2a:15:5f:60:9f:6e:dd:97:0a:51:c6:38:60:e4:a2:
                    3a:fa:75:b6:68:76:82:6b:11:0a:07:a4:26:cb:f4:
                    6d:ce:42:c2:5d:f0:7a:26:ed:b0:9b:0b:63:18:e3:
                    e0:e8:5f:aa:7f:2c:3d:1d:4e:3c:c6:c7:4d:13:eb:
                    2f:3d:78:a6:88:3f:1e:01:8a:73:07:de:89:38:6e:
                    32:9c:ee:99:fc:8e:97:0e:d8:c4:0f:60:76:1d:a5:
                    f2:5d:6a:a1:84:11:7d:a7:35:12:1d:61:54:8d:71:
                    2a:54:33:28:c2:03:58:27:b8:07:f7:b0:65:be:e1:
                    81:2b:95:5a:8a:1a:ee:d6:0c:c7:53:ab:5d:15:b0:
                    75:4a:78:ce:9d:23:4b:71:3e:06:01:25:db:03:8b:
                    cb:7e:2d:1b:d7:a4:de:3a:b9:f1:99:dc:ed:ea:94:
                    05:39:bd:db:ff:e1:e9:02:1f:29:51:d7:f5:94:1b:
                    30:f9:cb:07:77:93:24:dc:2d:c1:d1:d2:ec:22:0f:
                    02:43:8f:8c:7e:7f:9e:6c:4c:f4:34:16:3d:44:5a:
                    fe:fe:19:bb:ce:77:28:30:80:4c:71:0a:42:be:a3:
                    d5:0b:00:5b:73:66:5d:8d:0a:db:f2:b9:7d:d9:3b:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:23:18:D1:E6:E7:90:5C:8E:22:8C:A6:1D:21:51:8F:E1:E1:60
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:af:74:af:c4:b6:7d:fb:38:24:6c:f7:d2:8f:c1:ca:ab:33:
         39:12:28:24:b5:ca:30:e5:14:68:db:01:04:28:4f:ed:3b:e9:
         a3:2e:87:7a:8e:3e:90:21:2f:a1:95:89:77:43:69:db:bf:59:
         ab:e7:f4:23:8b:e4:af:17:f4:68:74:f4:e5:6a:1d:d7:89:de:
         e2:a3:91:c7:3a:ab:a9:78:5c:35:57:86:b6:ea:8e:a2:9e:e0:
         95:68:7c:be:e9:16:22:92:bd:62:ab:ff:7d:25:73:4a:4a:43:
         50:8c:a3:7f:f3:cf:07:de:7e:ae:90:f1:4d:8b:ef:c2:9b:5b:
         77:eb:bc:eb:1a:86:8c:6c:d8:1b:52:b0:cc:7c:18:77:c3:d8:
         03:64:59:d4:da:2e:d8:f4:9e:d8:cb:cd:7f:e0:ad:29:6f:fe:
         1b:a0:dd:83:8e:95:29:11:2b:b7:c7:a5:18:70:50:56:1e:7e:
         44:9a:fb:27:24:ea:87:74:a0:ec:45:32:cc:c2:25:96:11:9e:
         75:0d:cd:70:ea:74:da:73:d9:4a:5f:6c:3c:24:e2:47:02:70:
         a6:10:37:16:7d:b5:70:3c:81:de:80:79:c3:6b:cc:2e:b9:30:
         21:0e:19:75:3a:fb:7e:6e:1f:e2:71:38:04:dd:bf:8c:82:e6:
         c5:ad:0e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnEQ/THMRH5AsQ8PP+rw++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjhmZjJmM2EwYmZjNDFlYWRjMThhZjllNTJhY2QxMDA1
MjQxNDkwHhcNMjUwNzIwMDkwMTI2WhcNMjUwNzIxMDkwMTI2WjAzMTEwLwYDVQQD
Eyg4ZWNhMjMxOGQxZTZlNzkwNWM4ZTIyOGNhNjFkMjE1MThmZTFlMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm7FkfflF6F0qEXrHWAqFV9gn27d
lwpRxjhg5KI6+nW2aHaCaxEKB6Qmy/RtzkLCXfB6Ju2wmwtjGOPg6F+qfyw9HU48
xsdNE+svPXimiD8eAYpzB96JOG4ynO6Z/I6XDtjED2B2HaXyXWqhhBF9pzUSHWFU
jXEqVDMowgNYJ7gH97BlvuGBK5Vaihru1gzHU6tdFbB1SnjOnSNLcT4GASXbA4vL
fi0b16TeOrnxmdzt6pQFOb3b/+HpAh8pUdf1lBsw+csHd5Mk3C3B0dLsIg8CQ4+M
fn+ebEz0NBY9RFr+/hm7zncoMIBMcQpCvqPVCwBbc2ZdjQrb8rl92TszKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7KIxjR5ueQXI4ijKYdIVGP4eFgMB8GA1UdIwQY
MBaAFN+4/y86C/xB6twYr55SrNEAUkFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQt
YTNkZjNiNjljZTVhLzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82Yjg3YWYtYTIxMi00ODBkLWE0ZDQtYTNkZjNiNjljZTVh
LzEvMzdqX0x6b0xfRUhxM0Jpdm5sS3MwUUJTUVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJK90r8S2
ffs4JGz30o/ByqszORIoJLXKMOUUaNsBBChP7Tvpoy6Heo4+kCEvoZWJd0Np279Z
q+f0I4vkrxf0aHT05Wod14ne4qORxzqrqXhcNVeGtuqOop7glWh8vukWIpK9Yqv/
fSVzSkpDUIyjf/PPB95+rpDxTYvvwptbd+u86xqGjGzYG1KwzHwYd8PYA2RZ1Nou
2PSe2MvNf+CtKW/+G6Ddg46VKRErt8elGHBQVh5+RJr7JyTqh3Sg7EUyzMIllhGe
dQ3NcOp02nPZSl9sPCTiRwJwphA3Fn21cDyB3oB5w2vMLrkwIQ4ZdTr7fm4f4nE4
BN2/jILmxa0OQA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:30 2025 by rpki-client