Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          w2I8VO6MmvfPwINDSdJ6jyit/LPj36DLkTwE3qHR76Y=
Subject key identifier:   8A:F0:6F:A3:C3:7D:EC:42:1F:CF:D8:B1:CF:B6:18:0D:B8:83:C8:F4
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019846642DA80BF495622A64FB69A03B98F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          0FBD
Signing time:             Sat 26 Jul 2025 11:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:27 +0000
Files and hashes:         1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: EaNjH+ssBFfkgXDmV/3Y2KQQSq0mGlgAPpoce5yA2Yw=)
                          3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=)
                          4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:2d:a8:0b:f4:95:62:2a:64:fb:69:a0:3b:98:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Jul 26 11:00:27 2025 GMT
            Not After : Jul 27 11:00:27 2025 GMT
        Subject: CN=8af06fa3c37dec421fcfd8b1cfb6180db883c8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:5b:0e:93:9f:d8:3e:0f:05:6f:4a:32:d5:
                    f2:42:e4:08:62:e2:bb:e8:bc:2c:58:9d:8e:9c:74:
                    7d:aa:70:a3:1e:14:a9:22:b6:3d:44:c4:3a:fd:c1:
                    16:82:e9:7c:cb:28:82:35:e8:a5:af:d5:2b:7d:d9:
                    4f:a8:70:ae:0e:60:c8:ab:4a:6f:ee:55:ff:68:42:
                    8e:b9:26:e6:28:ee:93:31:aa:fb:a4:58:cd:53:c4:
                    42:07:58:41:8a:5f:1b:f6:a3:86:29:ab:90:b5:f0:
                    f9:c7:29:49:e3:f3:6b:03:df:60:38:10:c7:f6:53:
                    ee:9b:40:42:99:80:3b:9c:67:5f:0a:62:af:36:de:
                    f5:c2:b7:23:c4:8b:38:7e:78:6f:b6:91:3f:36:94:
                    65:8f:e2:f6:dc:e4:85:92:11:b1:a1:55:9e:dc:89:
                    c1:f9:52:05:84:a0:2b:2a:44:d1:3a:ec:bf:19:c9:
                    73:c4:bb:cc:94:b1:1f:2b:04:e7:bd:c7:22:d8:6e:
                    be:1f:11:79:8b:ee:aa:2b:94:d8:d1:e0:02:87:47:
                    14:c6:14:fb:d4:bb:a4:9c:dc:0d:42:9a:e7:e1:b2:
                    e9:10:87:55:69:7d:19:31:c1:f2:a8:83:36:ae:4a:
                    d8:a7:66:f1:b5:11:16:dd:5e:3f:5e:33:83:62:c7:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:6F:A3:C3:7D:EC:42:1F:CF:D8:B1:CF:B6:18:0D:B8:83:C8:F4
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b3:66:32:46:43:37:b4:75:28:ea:23:27:17:d9:0e:df:f0:
         c8:9d:22:82:b6:af:3e:8c:b1:55:74:e3:d7:ea:59:36:d1:f1:
         e3:82:1d:a8:90:52:d9:3e:b3:50:fa:c9:da:ff:91:88:08:9f:
         e5:75:0f:3d:e8:0c:ab:bd:cf:e4:d7:63:ae:d2:d5:e7:33:e9:
         48:2e:28:d1:ec:b4:ef:ea:e6:ca:91:a2:30:82:77:1e:e3:3d:
         34:74:9a:e0:93:ac:d6:e9:29:e3:e2:50:34:7e:d7:0f:10:58:
         37:6c:24:35:f7:06:5c:80:d6:bf:a2:54:b9:59:73:ba:75:9e:
         e7:71:0a:91:8e:99:12:df:f8:aa:62:12:ba:c6:fd:67:e4:2a:
         bc:4a:37:c7:3a:68:65:03:74:27:71:9d:78:4a:42:d8:ed:f2:
         01:78:f8:be:c8:c2:f6:7e:9d:eb:78:1c:75:da:b1:19:0c:fd:
         9a:73:49:5e:98:78:e0:d8:20:7b:20:08:cc:4b:19:18:a6:54:
         15:ca:6f:ed:87:76:1e:6b:77:57:2e:33:27:87:bc:3a:c2:0a:
         04:a4:02:0c:f9:90:f3:15:e3:ad:3d:6b:fd:b2:c6:d8:02:40:
         66:43:92:75:dc:9b:ea:db:da:88:a8:a4:63:e3:0e:ba:39:88:
         75:a7:80:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZC2oC/SVYipk+2mgO5jwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMDU5ODY4OTdkMDI0ZTQ4YzdjZDI1ZTE4OTFjNDIwOGZm
M2JiYjIwHhcNMjUwNzI2MTEwMDI3WhcNMjUwNzI3MTEwMDI3WjAzMTEwLwYDVQQD
Eyg4YWYwNmZhM2MzN2RlYzQyMWZjZmQ4YjFjZmI2MTgwZGI4ODNjOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQFbDpOf2D4PBW9KMtXyQuQIYuK7
6LwsWJ2OnHR9qnCjHhSpIrY9RMQ6/cEWgul8yyiCNeilr9UrfdlPqHCuDmDIq0pv
7lX/aEKOuSbmKO6TMar7pFjNU8RCB1hBil8b9qOGKauQtfD5xylJ4/NrA99gOBDH
9lPum0BCmYA7nGdfCmKvNt71wrcjxIs4fnhvtpE/NpRlj+L23OSFkhGxoVWe3InB
+VIFhKArKkTROuy/GclzxLvMlLEfKwTnvcci2G6+HxF5i+6qK5TY0eACh0cUxhT7
1LuknNwNQprn4bLpEIdVaX0ZMcHyqIM2rkrYp2bxtREW3V4/XjODYsc4mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrwb6PDfexCH8/Ysc+2GA24g8j0MB8GA1UdIwQY
MBaAFOwFmGiX0CTkjHzSXhiRxCCP87uyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQt
NzY2ZDFmMzI0MzNjLzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQtNzY2ZDFmMzI0MzNj
LzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7NmMkZD
N7R1KOojJxfZDt/wyJ0igravPoyxVXTj1+pZNtHx44IdqJBS2T6zUPrJ2v+RiAif
5XUPPegMq73P5NdjrtLV5zPpSC4o0ey07+rmypGiMIJ3HuM9NHSa4JOs1ukp4+JQ
NH7XDxBYN2wkNfcGXIDWv6JUuVlzunWe53EKkY6ZEt/4qmISusb9Z+QqvEo3xzpo
ZQN0J3GdeEpC2O3yAXj4vsjC9n6d63gcddqxGQz9mnNJXph44NggeyAIzEsZGKZU
Fcpv7Yd2Hmt3Vy4zJ4e8OsIKBKQCDPmQ8xXjrT1r/bLG2AJAZkOSddyb6tvaiKik
Y+MOujmIdaeA7g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:27:18 2025 by rpki-client