Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File:                     d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier:          Dxrk1WEkMe1zoXLXxaUeV8yBgcPPIF5uQJT5LszfNnw=
Subject key identifier:   C8:BE:76:23:95:85:BC:F2:CC:D6:81:4F:9A:1E:46:FE:B1:57:61:9B
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer:       /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial:       01988543B3B7209C6CBAC8289EDEB41C8917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number:          1622
Signing time:             Thu 07 Aug 2025 16:01:03 +0000
Manifest this update:     Thu 07 Aug 2025 16:01:03 +0000
Manifest next update:     Fri 08 Aug 2025 16:01:03 +0000
Files and hashes:         1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: 94SFEtQbvAub1x4v/549uCprCnAnCh6nSFHLuT2ccnY=)
                          2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
                          3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:43:b3:b7:20:9c:6c:ba:c8:28:9e:de:b4:1c:89:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
        Validity
            Not Before: Aug  7 16:01:03 2025 GMT
            Not After : Aug  8 16:01:03 2025 GMT
        Subject: CN=c8be76239585bcf2ccd6814f9a1e46feb157619b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:86:59:e5:2f:2b:4a:9d:c9:a7:87:60:7a:
                    a1:29:ff:a8:b5:50:42:08:35:13:e8:e1:2f:24:5e:
                    1a:77:e5:a4:94:fa:c6:b6:ee:a1:be:33:f1:95:b9:
                    11:a0:5c:cc:7f:e3:01:fc:d4:e4:8d:9c:0f:ff:ed:
                    8d:17:ad:84:cb:c2:54:ea:3d:29:a7:f3:ae:1c:a5:
                    75:61:74:d8:95:2b:41:a4:16:54:f8:31:91:17:fc:
                    93:3f:d3:ff:a6:c1:40:a1:f9:88:7e:a6:89:d9:36:
                    ec:fb:90:7c:55:f0:c2:bb:f1:9f:c9:49:6d:8c:4b:
                    e1:6a:0d:33:0d:14:28:ab:9b:a2:a7:bc:0f:3d:91:
                    ed:3e:0c:b3:6b:bc:a3:d7:61:44:20:22:c0:6d:c9:
                    f5:e2:4c:57:94:0b:a6:be:5b:0a:1d:13:de:a7:0c:
                    d7:7c:b5:47:a6:9b:bc:48:84:44:28:84:dd:96:58:
                    6d:63:ec:3f:de:ba:2b:2f:67:fa:bf:9f:28:b6:32:
                    55:62:a5:b8:bf:b0:2e:84:8a:c9:88:20:2f:47:ee:
                    cb:c0:dd:a4:ab:14:e0:9b:02:89:75:bf:66:e2:b2:
                    66:84:b2:8a:10:3f:49:31:5e:32:01:e7:7c:20:eb:
                    ea:00:94:23:d3:31:ab:8a:0a:1b:55:3e:cf:92:b5:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BE:76:23:95:85:BC:F2:CC:D6:81:4F:9A:1E:46:FE:B1:57:61:9B
            X509v3 Authority Key Identifier:
                keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:42:9a:e2:32:68:5e:59:7e:ca:f5:25:66:93:40:4b:f0:
         08:75:ec:af:8c:ee:60:ce:47:c8:b0:f3:2c:f9:fc:88:03:da:
         82:2d:2d:50:22:5c:5b:89:60:86:8c:69:cf:33:ad:44:e5:f0:
         4a:8e:6a:be:a1:02:37:2b:75:f7:16:81:69:d8:b2:ce:eb:3d:
         7b:66:7a:f8:d2:4d:ba:c3:11:d4:19:f9:59:da:82:d6:bf:65:
         96:be:b5:50:ff:46:6c:2d:a2:1a:a1:22:b1:14:1e:f5:9a:9f:
         97:e9:d9:76:84:2f:73:79:78:85:70:9c:87:7e:59:e7:a2:00:
         86:d0:03:c5:3f:72:ff:bb:1e:e7:ef:d7:62:49:d2:c6:d1:5a:
         e0:b8:09:d3:4d:ff:86:66:da:ea:14:6f:ac:f0:45:01:f6:9d:
         97:f6:a3:7f:6a:25:fa:20:71:2d:ea:5a:b5:5f:ba:52:85:4f:
         35:6a:13:db:b3:52:c1:ee:75:3a:aa:1e:7a:d7:da:9a:9b:90:
         7b:d9:25:e4:9f:59:59:05:4f:54:c4:47:4c:98:87:89:b4:3b:
         ea:4a:eb:89:fe:f4:60:a9:f2:36:1e:1b:25:9c:01:84:4a:b1:
         9e:5b:e5:53:4f:84:25:91:5a:3f:f8:81:06:72:6e:f3:54:9c:
         86:8f:b9:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQ7O3IJxsusgont60HIkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx
ZmQ4YTMwHhcNMjUwODA3MTYwMTAzWhcNMjUwODA4MTYwMTAzWjAzMTEwLwYDVQQD
EyhjOGJlNzYyMzk1ODViY2YyY2NkNjgxNGY5YTFlNDZmZWIxNTc2MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSuGWeUvK0qdyaeHYHqhKf+otVBC
CDUT6OEvJF4ad+WklPrGtu6hvjPxlbkRoFzMf+MB/NTkjZwP/+2NF62Ey8JU6j0p
p/OuHKV1YXTYlStBpBZU+DGRF/yTP9P/psFAofmIfqaJ2Tbs+5B8VfDCu/GfyUlt
jEvhag0zDRQoq5uip7wPPZHtPgyza7yj12FEICLAbcn14kxXlAumvlsKHRPepwzX
fLVHppu8SIREKITdllhtY+w/3rorL2f6v58otjJVYqW4v7AuhIrJiCAvR+7LwN2k
qxTgmwKJdb9m4rJmhLKKED9JMV4yAed8IOvqAJQj0zGrigobVT7PkrXqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi+diOVhbzyzNaBT5oeRv6xV2GbMB8GA1UdIwQY
MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt
NGRkMzg1M2EyMjQxLzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx
LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrpCmuIy
aF5Zfsr1JWaTQEvwCHXsr4zuYM5HyLDzLPn8iAPagi0tUCJcW4lghoxpzzOtROXw
So5qvqECNyt19xaBadiyzus9e2Z6+NJNusMR1Bn5WdqC1r9llr61UP9GbC2iGqEi
sRQe9Zqfl+nZdoQvc3l4hXCch35Z56IAhtADxT9y/7se5+/XYknSxtFa4LgJ003/
hmba6hRvrPBFAfadl/ajf2ol+iBxLepatV+6UoVPNWoT27NSwe51OqoeetfampuQ
e9kl5J9ZWQVPVMRHTJiHibQ76krrif70YKnyNh4bJZwBhEqxnlvlU0+EJZFaP/iB
BnJu81Scho+5Lg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:27:56 2025 by rpki-client