Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File:                     7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier:          OLfclrK9uJ0SIZTa63jGh6/I0AJhhBZF/jfXYiR7+xg=
Subject key identifier:   DF:48:C9:8F:72:C7:B6:77:63:FA:92:9C:F0:99:6F:0F:24:01:64:D8
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer:       /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial:       0197700817E82FB2EB4AE671CA510001D4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number:          13D1
Signing time:             Sat 14 Jun 2025 20:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:07 +0000
Files and hashes:         1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
                          2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: avOdlqgqX55RoOLBHzGetxEaeV6q8Muj4zldebF2NOg=)
                          3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:17:e8:2f:b2:eb:4a:e6:71:ca:51:00:01:d4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
        Validity
            Not Before: Jun 14 20:01:07 2025 GMT
            Not After : Jun 15 20:01:07 2025 GMT
        Subject: CN=df48c98f72c7b67763fa929cf0996f0f240164d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9c:71:4f:fd:23:5c:b5:b5:91:62:66:ee:57:
                    6b:04:fe:cd:30:e6:44:f1:7f:51:c1:4c:63:ff:df:
                    bf:41:3f:83:cd:db:c8:c5:73:68:11:e1:00:63:34:
                    ba:94:bb:91:3a:ce:2e:f4:32:25:d9:87:bb:03:bf:
                    83:03:7b:ca:23:69:06:d6:00:99:09:2b:11:55:f4:
                    38:11:bb:00:14:2c:25:53:3b:a4:07:27:f8:1e:1a:
                    e8:3b:11:89:c8:7d:5b:87:25:ca:9b:cb:91:d4:e1:
                    84:14:6f:4b:4f:83:e7:9b:aa:37:b8:ee:b4:be:2e:
                    76:af:60:7f:ae:f6:39:7b:58:8d:b0:66:bd:97:60:
                    ee:77:19:4d:24:73:b8:8e:85:1c:99:01:2d:7f:b9:
                    ed:04:db:4c:d6:ee:b9:9b:e0:78:d8:18:8f:20:00:
                    b8:a3:18:b9:25:b4:2c:6c:8c:a1:9a:c8:95:43:ca:
                    cc:1d:0d:0f:85:e4:1e:a5:19:e4:e8:98:16:84:44:
                    42:66:09:9d:31:81:66:68:37:81:82:c8:fc:6c:c0:
                    4a:2a:4c:64:1d:4e:9f:a5:f6:92:fe:6f:f3:07:be:
                    f7:0f:b0:cc:40:fd:39:8b:66:f7:18:b0:1a:fb:ed:
                    c8:b7:11:fa:5f:12:57:2b:49:49:33:3d:a6:97:43:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:C9:8F:72:C7:B6:77:63:FA:92:9C:F0:99:6F:0F:24:01:64:D8
            X509v3 Authority Key Identifier:
                keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:4d:ab:95:e6:ce:78:88:e1:8b:58:f4:7b:ef:36:c3:ce:
         d6:34:de:8e:25:87:59:ee:fc:68:eb:76:af:2b:c3:84:32:aa:
         a4:67:8b:39:f5:b7:69:71:3c:70:f1:6f:5b:31:f8:4b:19:77:
         fc:4a:2d:53:63:d1:55:eb:80:5a:4d:fc:e8:a6:68:f5:75:60:
         58:47:b1:f7:63:7d:ac:f6:e1:35:4a:60:16:bd:1a:d6:39:ff:
         00:b4:ac:67:4e:92:c1:b8:db:69:16:a2:a2:8a:be:33:0b:f2:
         d9:db:bb:90:cc:da:89:50:06:57:aa:31:67:66:6d:12:65:54:
         79:46:b1:3c:b1:0e:03:4f:a9:60:7e:09:55:a6:ad:22:82:6e:
         d7:52:bd:9f:0c:29:71:bf:1e:4e:86:bf:e8:93:95:fc:75:d4:
         dc:bf:e0:aa:2e:31:1f:49:4a:92:a3:5e:c4:26:de:56:a8:23:
         42:d2:ff:94:82:c6:bb:62:af:54:35:4f:20:f7:55:a4:79:47:
         b7:73:66:59:92:03:a3:49:bf:cd:ab:85:ad:5f:ff:f8:12:8c:
         81:d7:71:9f:66:50:c8:81:76:52:79:4d:f1:d0:76:a5:e8:bc:
         54:55:e0:ef:8f:54:20:eb:98:e6:6f:81:7c:a7:63:ef:5b:f2:
         8b:4c:0f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwCBfoL7LrSuZxylEAAdT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmJmMmJhNWIzMmU0MmU4YjZjMDNiODM2ZDc2NGY5NzVi
NTg5OGYwHhcNMjUwNjE0MjAwMTA3WhcNMjUwNjE1MjAwMTA3WjAzMTEwLwYDVQQD
EyhkZjQ4Yzk4ZjcyYzdiNjc3NjNmYTkyOWNmMDk5NmYwZjI0MDE2NGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZxxT/0jXLW1kWJm7ldrBP7NMOZE
8X9RwUxj/9+/QT+DzdvIxXNoEeEAYzS6lLuROs4u9DIl2Ye7A7+DA3vKI2kG1gCZ
CSsRVfQ4EbsAFCwlUzukByf4HhroOxGJyH1bhyXKm8uR1OGEFG9LT4Pnm6o3uO60
vi52r2B/rvY5e1iNsGa9l2DudxlNJHO4joUcmQEtf7ntBNtM1u65m+B42BiPIAC4
oxi5JbQsbIyhmsiVQ8rMHQ0PheQepRnk6JgWhERCZgmdMYFmaDeBgsj8bMBKKkxk
HU6fpfaS/m/zB773D7DMQP05i2b3GLAa++3ItxH6XxJXK0lJMz2ml0Om8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9IyY9yx7Z3Y/qSnPCZbw8kAWTYMB8GA1UdIwQY
MBaAFOy78rpbMuQui2wDuDbXZPl1tYmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAt
ODNmZmM4MDA3M2IyLzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAtODNmZmM4MDA3M2Iy
LzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvtNq5Xm
zniI4YtY9HvvNsPO1jTejiWHWe78aOt2ryvDhDKqpGeLOfW3aXE8cPFvWzH4Sxl3
/EotU2PRVeuAWk386KZo9XVgWEex92N9rPbhNUpgFr0a1jn/ALSsZ06SwbjbaRai
ooq+Mwvy2du7kMzaiVAGV6oxZ2ZtEmVUeUaxPLEOA0+pYH4JVaatIoJu11K9nwwp
cb8eToa/6JOV/HXU3L/gqi4xH0lKkqNexCbeVqgjQtL/lILGu2KvVDVPIPdVpHlH
t3NmWZIDo0m/zauFrV//+BKMgddxn2ZQyIF2UnlN8dB2pei8VFXg749UIOuY5m+B
fKdj71vyi0wPdA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:43:47 2025 by rpki-client