Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File:                     7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier:          LVEe9LXSLzX7iUuwoZiGrz90alB9r12v7mM1aJD3hLY=
Subject key identifier:   5A:8A:9A:B7:43:09:13:C9:27:A0:67:77:51:36:75:EE:8A:61:A6:09
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer:       /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial:       019849663A61543DCDCBE7762684D1F354C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number:          0C6D
Signing time:             Sun 27 Jul 2025 01:01:33 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:33 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:33 +0000
Files and hashes:         1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: AWKT6OLTXumNAoMDaXj6tRc/UIyRK4u91h6L6m52lPs=)
                          2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:3a:61:54:3d:cd:cb:e7:76:26:84:d1:f3:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
        Validity
            Not Before: Jul 27 01:01:33 2025 GMT
            Not After : Jul 28 01:01:33 2025 GMT
        Subject: CN=5a8a9ab7430913c927a06777513675ee8a61a609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:dc:0a:a8:f9:c8:7c:a6:68:48:25:b2:6f:
                    bf:51:43:56:1d:bc:f2:ef:b6:ca:86:d5:1c:63:4b:
                    61:2e:5a:04:73:f3:72:2c:2a:e0:65:43:87:87:80:
                    b1:9b:08:cd:6d:5f:4b:e3:a6:36:64:51:da:50:43:
                    f3:11:23:11:02:1d:06:9b:57:58:ee:d0:6a:93:30:
                    62:d4:84:b2:6c:a6:95:c4:d2:66:d5:18:71:70:cc:
                    f8:65:f1:cd:97:d3:85:d5:35:5a:a5:88:75:bf:b8:
                    e5:43:eb:a2:c7:1d:4e:0d:7e:0f:81:e7:10:2f:f1:
                    49:8f:d5:b3:44:9a:ff:12:4c:c0:5f:1f:56:c9:34:
                    f6:1a:70:c0:8d:43:cf:a2:27:92:f8:66:fd:d7:99:
                    fd:bc:f0:cd:1f:da:df:79:b2:0c:e9:1e:64:26:45:
                    c8:8a:35:95:2a:65:78:7f:bf:15:49:a7:5d:78:f3:
                    86:35:9f:25:11:f8:7e:90:c6:bc:c9:23:72:76:cf:
                    c2:b8:82:fc:8d:4a:04:1d:09:57:6c:a5:1b:68:4d:
                    de:d5:db:e5:a4:4e:e1:c4:31:c9:67:46:10:40:3b:
                    80:00:14:81:57:a5:a9:ba:18:4a:29:62:56:de:92:
                    6c:77:cb:d6:32:bb:fc:d1:93:22:88:53:19:bb:b1:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:9A:B7:43:09:13:C9:27:A0:67:77:51:36:75:EE:8A:61:A6:09
            X509v3 Authority Key Identifier:
                keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:4a:04:8b:41:b6:d0:f3:7d:b0:e2:21:e5:74:34:cd:c7:
         48:54:f0:11:b0:c0:17:d6:f6:96:71:00:44:c2:a5:96:73:ba:
         71:49:22:20:37:21:ac:fa:d9:9f:da:91:c6:7c:38:2b:2b:42:
         83:cb:24:f4:ac:46:95:68:d6:d7:1c:9b:05:6d:c9:a2:43:06:
         f3:cc:8e:e0:0d:ec:82:ef:9a:3a:b0:f5:74:4a:cc:de:91:86:
         c3:8c:49:3c:c7:7a:bb:e5:ef:6e:99:44:53:99:4e:2d:00:56:
         8f:6e:03:b4:ef:5b:6c:a0:f2:bd:39:c2:fa:18:70:6e:7d:c9:
         d4:1c:6c:25:e8:18:9f:28:fe:db:b0:e6:b3:8e:a3:64:66:bd:
         c4:9d:29:eb:ae:fb:1d:b9:f3:9e:7f:e0:3a:7e:eb:b7:a4:62:
         ac:0f:c5:3b:7e:d9:bb:d8:b9:35:df:f4:9e:e5:60:c0:6d:26:
         b5:e3:a0:e9:7a:2e:6b:0d:16:6f:02:8b:82:9c:75:c7:0c:0c:
         a9:6d:d9:04:47:f4:4e:20:49:4f:c6:e6:80:0d:b3:9b:cb:c3:
         8d:54:48:ac:09:74:c5:9a:11:8e:c2:5a:bd:55:b4:d6:c3:49:
         88:83:ad:32:7a:b9:22:0a:9b:f7:d5:e9:98:ed:23:5e:cd:37:
         55:ac:2d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZjphVD3Ny+d2JoTR81TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2
NTViZTYwHhcNMjUwNzI3MDEwMTMzWhcNMjUwNzI4MDEwMTMzWjAzMTEwLwYDVQQD
Eyg1YThhOWFiNzQzMDkxM2M5MjdhMDY3Nzc1MTM2NzVlZThhNjFhNjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO7cCqj5yHymaEglsm+/UUNWHbzy
77bKhtUcY0thLloEc/NyLCrgZUOHh4CxmwjNbV9L46Y2ZFHaUEPzESMRAh0Gm1dY
7tBqkzBi1ISybKaVxNJm1RhxcMz4ZfHNl9OF1TVapYh1v7jlQ+uixx1ODX4PgecQ
L/FJj9WzRJr/EkzAXx9WyTT2GnDAjUPPoieS+Gb915n9vPDNH9rfebIM6R5kJkXI
ijWVKmV4f78VSaddePOGNZ8lEfh+kMa8ySNyds/CuIL8jUoEHQlXbKUbaE3e1dvl
pE7hxDHJZ0YQQDuAABSBV6WpuhhKKWJW3pJsd8vWMrv80ZMiiFMZu7HN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqKmrdDCRPJJ6Bnd1E2de6KYaYJMB8GA1UdIwQY
MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt
NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3
LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKpKBItB
ttDzfbDiIeV0NM3HSFTwEbDAF9b2lnEARMKllnO6cUkiIDchrPrZn9qRxnw4KytC
g8sk9KxGlWjW1xybBW3JokMG88yO4A3sgu+aOrD1dErM3pGGw4xJPMd6u+XvbplE
U5lOLQBWj24DtO9bbKDyvTnC+hhwbn3J1BxsJegYnyj+27Dms46jZGa9xJ0p6677
Hbnznn/gOn7rt6RirA/FO37Zu9i5Nd/0nuVgwG0mteOg6Xouaw0WbwKLgpx1xwwM
qW3ZBEf0TiBJT8bmgA2zm8vDjVRIrAl0xZoRjsJavVW01sNJiIOtMnq5Igqb99Xp
mO0jXs03VawtXg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:44 2025 by rpki-client