Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
File:                     _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json)
Hash identifier:          zFKqOttE+b5QR09WnH5yDQPgrctLJMm5CYixe8hohvE=
Subject key identifier:   44:80:C8:65:B2:3C:AB:06:B2:B6:5A:4E:C3:1F:5A:3E:E2:08:03:22
Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Certificate issuer:       /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Certificate serial:       01975CB7B815D1C1677214860368EDFB0E3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
Manifest number:          B7
Signing time:             Wed 11 Jun 2025 02:00:33 +0000
Manifest this update:     Wed 11 Jun 2025 02:00:33 +0000
Manifest next update:     Thu 12 Jun 2025 02:00:33 +0000
Files and hashes:         1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: OILcDmlnsFSHRLD+JiKOiRcpd7v+p85m59FR9tmaM7U=)
                          2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b7:b8:15:d1:c1:67:72:14:86:03:68:ed:fb:0e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
        Validity
            Not Before: Jun 11 02:00:33 2025 GMT
            Not After : Jun 12 02:00:33 2025 GMT
        Subject: CN=4480c865b23cab06b2b65a4ec31f5a3ee2080322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:44:e3:a2:cd:70:b7:9c:d0:66:a6:66:52:
                    cb:c6:ce:13:b0:ff:bc:0a:b2:b7:33:db:3f:b0:16:
                    1a:63:4c:7c:93:ad:75:0c:6c:74:b0:1a:84:a9:d6:
                    09:95:6c:93:de:10:0a:b1:69:96:bf:41:2e:57:5d:
                    69:48:21:20:8c:46:45:c1:3d:03:03:44:f4:04:4f:
                    21:57:a7:3a:cd:42:31:18:71:17:ce:de:db:b3:e3:
                    32:ca:32:d5:45:6a:a1:88:84:8a:6d:59:b0:4f:a9:
                    7d:cf:68:5d:f4:9d:67:ac:94:39:54:d7:26:3a:2e:
                    ec:9f:c2:5d:d6:5b:fa:b8:e1:0d:dc:d8:95:6d:19:
                    28:67:99:93:53:be:1e:39:87:e9:59:c2:9b:57:c7:
                    87:47:c0:db:12:5f:a8:f9:a4:1f:65:2c:6f:0d:68:
                    d7:d2:b8:41:5f:cb:fb:b7:4e:e4:68:12:f0:f9:65:
                    63:f0:cd:c9:dc:4e:33:33:7b:48:94:1c:c8:4c:06:
                    f5:8b:50:dd:3b:7d:67:c1:84:d6:9f:a9:5a:ed:ca:
                    03:47:72:ac:60:10:5d:aa:14:86:d4:4b:f1:60:5e:
                    af:67:80:9a:60:0c:36:a5:f8:06:a5:6b:50:52:f0:
                    00:3d:d6:00:37:73:16:41:c7:6d:0e:40:bc:db:42:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:C8:65:B2:3C:AB:06:B2:B6:5A:4E:C3:1F:5A:3E:E2:08:03:22
            X509v3 Authority Key Identifier:
                keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:68:fe:6b:2b:69:30:94:46:bc:04:04:5b:6d:30:33:33:c1:
         93:8f:70:51:93:51:e4:0c:39:29:af:29:4d:8a:88:85:85:8c:
         54:84:b0:69:94:cc:a6:3d:d1:37:31:7c:1d:8a:e4:21:e1:89:
         a8:bc:e9:40:5b:d7:dc:d2:8d:f3:70:d2:17:7c:7b:b3:e3:38:
         6b:05:d9:0d:fb:bd:62:79:bd:9c:37:ae:91:62:f2:6a:29:f9:
         b9:2e:ae:57:97:7b:00:63:90:b3:a8:91:ae:6e:50:68:46:a8:
         20:5f:24:23:bf:6f:ab:13:c2:04:5a:4c:44:aa:6a:f2:ae:f1:
         e6:58:14:d9:7a:e5:7e:aa:ef:7a:47:1f:23:47:43:d8:9b:1c:
         bf:05:cf:f1:7c:c8:ad:d6:6c:69:19:60:60:c7:bb:eb:a8:af:
         0a:ab:76:3e:84:6b:17:9b:c1:56:bd:2b:0b:29:da:d7:46:6d:
         1b:b0:49:a0:c2:a7:c9:99:32:95:a7:1a:e4:54:7d:53:fe:b7:
         02:31:a6:c8:83:db:d1:3b:ca:7d:9f:08:a7:3d:51:f1:e5:23:
         73:73:8b:ff:83:a9:eb:71:0b:5b:71:85:9b:ad:a0:a3:4a:a3:
         e2:b2:f9:32:54:52:1c:f5:2a:22:7a:99:86:c8:ad:ce:d6:7e:
         b2:09:5a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdct7gV0cFnchSGA2jt+w4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGI3YmE1YTc2YzEzNzE1MmQwZDBmMzUyNGZkNjIwMWI4
MTViZWYwHhcNMjUwNjExMDIwMDMzWhcNMjUwNjEyMDIwMDMzWjAzMTEwLwYDVQQD
Eyg0NDgwYzg2NWIyM2NhYjA2YjJiNjVhNGVjMzFmNWEzZWUyMDgwMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQNE46LNcLec0GamZlLLxs4TsP+8
CrK3M9s/sBYaY0x8k611DGx0sBqEqdYJlWyT3hAKsWmWv0EuV11pSCEgjEZFwT0D
A0T0BE8hV6c6zUIxGHEXzt7bs+MyyjLVRWqhiISKbVmwT6l9z2hd9J1nrJQ5VNcm
Oi7sn8Jd1lv6uOEN3NiVbRkoZ5mTU74eOYfpWcKbV8eHR8DbEl+o+aQfZSxvDWjX
0rhBX8v7t07kaBLw+WVj8M3J3E4zM3tIlBzITAb1i1DdO31nwYTWn6la7coDR3Ks
YBBdqhSG1EvxYF6vZ4CaYAw2pfgGpWtQUvAAPdYAN3MWQcdtDkC820JbHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESAyGWyPKsGsrZaTsMfWj7iCAMiMB8GA1UdIwQY
MBaAFP9Le6WnbBNxUtDQ81JP1iAbgVvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt
OGY5NWI4NTI0YzM1LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1
LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmj+aytp
MJRGvAQEW20wMzPBk49wUZNR5Aw5Ka8pTYqIhYWMVISwaZTMpj3RNzF8HYrkIeGJ
qLzpQFvX3NKN83DSF3x7s+M4awXZDfu9Ynm9nDeukWLyain5uS6uV5d7AGOQs6iR
rm5QaEaoIF8kI79vqxPCBFpMRKpq8q7x5lgU2XrlfqrvekcfI0dD2JscvwXP8XzI
rdZsaRlgYMe766ivCqt2PoRrF5vBVr0rCyna10ZtG7BJoMKnyZkylaca5FR9U/63
AjGmyIPb0TvKfZ8Ipz1R8eUjc3OL/4Op63ELW3GFm62go0qj4rL5MlRSHPUqInqZ
hsitztZ+sglaoQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:32:35 2025 by rpki-client