Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          lURH7C4SddgMdtMccZ41NvcQlNwQxq0ufrcG3Oa/Uu8=
Subject key identifier:   84:A8:2F:9B:16:40:A2:70:94:01:18:B3:C2:65:90:71:35:9C:85:99
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       019847E48F3B2FF6F86481259196F556D3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0A7F
Signing time:             Sat 26 Jul 2025 18:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:17 +0000
Files and hashes:         1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: g8lQLIo4TXIBkBkWNq2BwkyLLRL6YSiY6QlEyLsNiLo=)
                          2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:8f:3b:2f:f6:f8:64:81:25:91:96:f5:56:d3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Jul 26 18:00:17 2025 GMT
            Not After : Jul 27 18:00:17 2025 GMT
        Subject: CN=84a82f9b1640a270940118b3c2659071359c8599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:60:e8:78:04:96:77:45:4e:5b:7e:90:e7:
                    b1:e6:b8:54:0e:cf:4f:51:f6:37:ba:b3:08:a3:46:
                    5c:52:0b:26:15:e2:c8:c3:53:21:82:2e:cb:87:3b:
                    0f:58:ce:56:c5:49:a4:fc:c4:fd:fb:6e:c4:b9:cb:
                    45:18:74:87:c3:fa:42:79:dc:65:81:73:b2:9b:70:
                    9a:04:64:92:6a:73:5f:57:99:df:fc:3b:95:a1:2b:
                    a0:9f:71:8e:a4:a6:fe:01:6f:e2:71:b9:ed:df:48:
                    76:17:93:46:69:f4:03:e6:f8:48:d2:5c:aa:d0:5d:
                    27:55:5f:b5:96:2b:a8:d8:26:8f:ad:cc:32:2d:4f:
                    ab:7f:2f:3d:d6:b2:26:3d:03:a4:3f:a5:ae:a0:a9:
                    5d:c7:be:c0:35:5c:4a:ab:32:3a:6f:d6:16:b6:2e:
                    fd:cd:fb:01:3f:b7:cb:c2:1a:99:c4:25:f6:09:f8:
                    b8:f7:6a:5b:ea:e5:4b:9a:64:33:c8:9f:57:9c:70:
                    28:03:a5:16:34:fa:f5:d0:55:10:ce:0c:5f:e8:3e:
                    6a:9c:39:f3:f9:af:06:84:4c:a0:99:28:ea:41:e9:
                    8b:f5:45:2a:28:73:9e:2e:5a:bc:1f:d6:ec:f2:14:
                    0c:a3:82:aa:9c:ae:54:0c:7c:24:9b:48:ed:17:45:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:2F:9B:16:40:A2:70:94:01:18:B3:C2:65:90:71:35:9C:85:99
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:0f:a8:d4:66:fa:6f:5f:68:87:7b:10:0a:43:aa:fe:8e:
         95:26:c5:6c:20:2c:92:32:16:a9:d9:ea:d6:b8:f4:05:2c:c0:
         a4:a7:fc:76:28:55:c7:63:b0:39:68:7d:4b:08:4e:30:f1:3f:
         25:e4:80:3a:65:2e:83:04:a8:43:db:0d:b5:8f:1d:f1:52:82:
         16:57:8e:00:67:20:e5:c7:55:ff:bd:88:57:18:1d:80:f6:87:
         ab:53:ac:2c:bb:a8:e8:ec:91:92:0f:e2:72:f9:7f:9f:82:d3:
         fa:ff:dd:4d:7f:ab:30:00:74:ef:bb:8d:7b:ab:6a:0d:a1:8d:
         91:24:2f:8c:01:a1:7d:3a:c8:c4:fa:8e:c2:a7:f3:5b:1a:97:
         6c:c5:ed:39:70:4f:ea:ac:17:d8:a6:71:76:80:1f:c8:e4:f9:
         ff:9f:e8:31:5a:10:65:90:5e:91:fa:0e:ea:ec:21:38:0a:29:
         ee:97:8b:8f:90:c9:e1:56:ed:09:b8:1a:3f:fb:9c:d7:ea:87:
         79:82:48:cf:25:58:74:36:86:d2:7c:be:b7:57:dd:ab:ac:31:
         3a:20:00:25:c3:20:00:73:6d:c9:83:75:0a:95:bd:3a:38:c2:
         d3:dc:c8:39:38:5e:41:4a:ef:e6:07:de:11:19:e5:e3:be:8b:
         7c:60:d5:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5I87L/b4ZIElkZb1VtO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll
OTQ3YTQwHhcNMjUwNzI2MTgwMDE3WhcNMjUwNzI3MTgwMDE3WjAzMTEwLwYDVQQD
Eyg4NGE4MmY5YjE2NDBhMjcwOTQwMTE4YjNjMjY1OTA3MTM1OWM4NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyftg6HgElndFTlt+kOex5rhUDs9P
UfY3urMIo0ZcUgsmFeLIw1Mhgi7LhzsPWM5WxUmk/MT9+27EuctFGHSHw/pCedxl
gXOym3CaBGSSanNfV5nf/DuVoSugn3GOpKb+AW/icbnt30h2F5NGafQD5vhI0lyq
0F0nVV+1liuo2CaPrcwyLU+rfy891rImPQOkP6WuoKldx77ANVxKqzI6b9YWti79
zfsBP7fLwhqZxCX2Cfi492pb6uVLmmQzyJ9XnHAoA6UWNPr10FUQzgxf6D5qnDnz
+a8GhEygmSjqQemL9UUqKHOeLlq8H9bs8hQMo4KqnK5UDHwkm0jtF0U6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISoL5sWQKJwlAEYs8JlkHE1nIWZMB8GA1UdIwQY
MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt
ZTBjOTY2YzE1ZDVmLzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm
LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbUPqNRm
+m9faId7EApDqv6OlSbFbCAskjIWqdnq1rj0BSzApKf8dihVx2OwOWh9SwhOMPE/
JeSAOmUugwSoQ9sNtY8d8VKCFleOAGcg5cdV/72IVxgdgPaHq1OsLLuo6OyRkg/i
cvl/n4LT+v/dTX+rMAB077uNe6tqDaGNkSQvjAGhfTrIxPqOwqfzWxqXbMXtOXBP
6qwX2KZxdoAfyOT5/5/oMVoQZZBekfoO6uwhOAop7peLj5DJ4VbtCbgaP/uc1+qH
eYJIzyVYdDaG0ny+t1fdq6wxOiAAJcMgAHNtyYN1CpW9OjjC09zIOTheQUrv5gfe
ERnl476LfGDVCQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:02 2025 by rpki-client