Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
File:                     SVx0J6902pRU8eKHwW-aXzp3gx8.mft (raw, json)
Hash identifier:          RE2GIQ4bgLQMdbj8PUw+B2njtotu93fqn1gPXT9NYVA=
Subject key identifier:   BD:3C:98:EE:C0:21:C8:47:F5:5A:45:79:BD:6D:C2:69:9A:8D:8D:1F
Authority key identifier: 49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F
Certificate issuer:       /CN=495c7427af74da9454f1e287c16f9a5f3a77831f
Certificate serial:       01989893A7C26E04E428CEAA8FF60EA61E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
Manifest number:          1432
Signing time:             Mon 11 Aug 2025 10:01:10 +0000
Manifest this update:     Mon 11 Aug 2025 10:01:10 +0000
Manifest next update:     Tue 12 Aug 2025 10:01:10 +0000
Files and hashes:         1: SVx0J6902pRU8eKHwW-aXzp3gx8.crl (hash: PHujEX+55y6NFx45Cy/QfcqU5nDyjBWHTUoNM3BPq3g=)
                          2: yGC5sIb3srVUEq8Qa2rFq7sGg3Y.roa (hash: C8hFdKgoa42ll+QkfetAIjLLM5z2fVcdANN2iM3elfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:98:93:a7:c2:6e:04:e4:28:ce:aa:8f:f6:0e:a6:1e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495c7427af74da9454f1e287c16f9a5f3a77831f
        Validity
            Not Before: Aug 11 10:01:10 2025 GMT
            Not After : Aug 12 10:01:10 2025 GMT
        Subject: CN=bd3c98eec021c847f55a4579bd6dc2699a8d8d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:17:a6:9e:e0:4e:85:26:78:da:7b:f4:53:
                    e8:f7:6e:35:0e:05:9a:8b:13:36:f0:b9:a6:a1:56:
                    e3:04:a2:75:50:7b:ca:fb:d6:2d:e7:de:f8:31:51:
                    a8:b2:85:e0:99:2d:bd:c3:f3:07:20:30:6b:62:95:
                    88:49:6d:c8:13:cc:21:1d:df:07:75:7a:f5:78:4b:
                    9b:d8:0d:11:48:53:ef:b4:5b:bc:ad:fd:28:73:da:
                    af:07:68:ed:f5:04:6f:d4:1f:40:84:d5:9d:19:fd:
                    5b:52:96:5d:73:fc:1d:4a:10:4a:d7:c1:ff:ac:11:
                    eb:b8:cd:4d:27:c0:8a:f3:53:15:0e:f0:ac:b2:95:
                    b8:c7:15:e5:64:af:72:94:f5:7b:83:b4:db:46:6c:
                    24:fa:17:c7:86:7b:dc:87:7e:3f:7d:eb:0f:df:f0:
                    18:ac:33:a9:57:e3:2f:f4:73:eb:63:61:e3:81:a8:
                    2a:be:9b:93:ed:65:10:f0:43:a3:ed:53:2c:26:e9:
                    02:56:9f:d6:f7:e6:4c:e9:44:2e:e0:2e:38:52:d9:
                    17:8e:2c:5d:6d:49:d4:26:52:b7:de:7b:ba:31:10:
                    45:b3:03:7b:00:c8:1f:bd:f1:31:4a:38:f5:5f:06:
                    97:e0:db:dc:c8:1b:e0:d8:26:f0:c3:ff:b1:07:3e:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3C:98:EE:C0:21:C8:47:F5:5A:45:79:BD:6D:C2:69:9A:8D:8D:1F
            X509v3 Authority Key Identifier:
                keyid:49:5C:74:27:AF:74:DA:94:54:F1:E2:87:C1:6F:9A:5F:3A:77:83:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVx0J6902pRU8eKHwW-aXzp3gx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/64773f-7c7e-4898-b193-08d8e50fc9c5/1/SVx0J6902pRU8eKHwW-aXzp3gx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:8a:11:97:a1:3d:b3:be:f3:ed:f4:2e:65:bb:be:1e:0f:
         bb:ef:b4:b6:95:a4:57:f1:c6:74:16:ca:f7:2d:8f:11:63:9a:
         92:9f:ad:65:42:af:2b:48:81:21:3c:c8:ed:05:12:49:b5:62:
         95:c2:db:35:a3:40:c6:04:91:81:d0:d8:3e:d4:c1:c3:66:ba:
         51:79:8c:27:aa:2d:22:d2:58:dc:43:de:6d:1e:0e:70:b3:70:
         e3:2e:e2:aa:c1:9c:3a:4f:b4:2a:07:09:4f:b5:ed:70:6e:b8:
         3d:7a:dc:3b:50:87:ba:ac:9e:8a:2a:bc:a8:3f:d0:c9:e5:b8:
         fd:d9:f5:4f:58:b7:de:42:21:4e:42:84:0b:8d:9c:20:2f:63:
         11:a6:50:4e:f7:ef:ee:4e:d3:b6:94:0c:69:10:13:49:94:15:
         78:8c:e4:c6:64:ea:46:cd:bb:e3:61:d9:de:e4:d9:d7:55:44:
         aa:fd:3f:54:bb:b2:47:0e:e4:ae:7a:03:ca:82:f6:bc:e1:c3:
         ba:99:b3:6c:4e:36:d2:8d:d9:2a:9e:32:50:3b:5d:66:30:f9:
         32:f3:af:ec:05:3a:8f:b8:18:94:c7:88:2a:b3:68:aa:c5:85:
         d7:52:cc:1a:af:f6:ea:5b:62:11:2c:d8:07:f1:16:ca:77:78:
         ee:10:65:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiYk6fCbgTkKM6qj/YOph4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NWM3NDI3YWY3NGRhOTQ1NGYxZTI4N2MxNmY5YTVmM2E3
NzgzMWYwHhcNMjUwODExMTAwMTEwWhcNMjUwODEyMTAwMTEwWjAzMTEwLwYDVQQD
EyhiZDNjOThlZWMwMjFjODQ3ZjU1YTQ1NzliZDZkYzI2OTlhOGQ4ZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDoXpp7gToUmeNp79FPo9241DgWa
ixM28LmmoVbjBKJ1UHvK+9Yt5974MVGosoXgmS29w/MHIDBrYpWISW3IE8whHd8H
dXr1eEub2A0RSFPvtFu8rf0oc9qvB2jt9QRv1B9AhNWdGf1bUpZdc/wdShBK18H/
rBHruM1NJ8CK81MVDvCsspW4xxXlZK9ylPV7g7TbRmwk+hfHhnvch34/fesP3/AY
rDOpV+Mv9HPrY2HjgagqvpuT7WUQ8EOj7VMsJukCVp/W9+ZM6UQu4C44UtkXjixd
bUnUJlK33nu6MRBFswN7AMgfvfExSjj1XwaX4NvcyBvg2Cbww/+xBz70NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL08mO7AIchH9VpFeb1twmmajY0fMB8GA1UdIwQY
MBaAFElcdCevdNqUVPHih8Fvml86d4MfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMt
MDhkOGU1MGZjOWM1LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82NDc3M2YtN2M3ZS00ODk4LWIxOTMtMDhkOGU1MGZjOWM1
LzEvU1Z4MEo2OTAycFJVOGVLSHdXLWFYenAzZ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9mKEZeh
PbO+8+30LmW7vh4Pu++0tpWkV/HGdBbK9y2PEWOakp+tZUKvK0iBITzI7QUSSbVi
lcLbNaNAxgSRgdDYPtTBw2a6UXmMJ6otItJY3EPebR4OcLNw4y7iqsGcOk+0KgcJ
T7XtcG64PXrcO1CHuqyeiiq8qD/QyeW4/dn1T1i33kIhTkKEC42cIC9jEaZQTvfv
7k7TtpQMaRATSZQVeIzkxmTqRs2742HZ3uTZ11VEqv0/VLuyRw7krnoDyoL2vOHD
upmzbE420o3ZKp4yUDtdZjD5MvOv7AU6j7gYlMeIKrNoqsWF11LMGq/26ltiESzY
B/EWynd47hBlqQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:06 2025 by rpki-client