Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          IE2y6aqGduleuF7VMnfu5/253vQsf4pYw2Cw7q8qzYE=
Subject key identifier:   B0:15:D4:FC:C4:E0:C0:34:E1:09:97:68:BD:FE:8D:07:AA:E1:6D:9D
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       01987B9D5AAFBFF131C577B026BC7E9F4FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          161B
Signing time:             Tue 05 Aug 2025 19:02:46 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:46 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:46 +0000
Files and hashes:         1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
                          2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: dsEOB4jLtW1MAz4oIdg9Z6sPR54oqwVrP3ARmn2dFMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:5a:af:bf:f1:31:c5:77:b0:26:bc:7e:9f:4f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: Aug  5 19:02:46 2025 GMT
            Not After : Aug  6 19:02:46 2025 GMT
        Subject: CN=b015d4fcc4e0c034e1099768bdfe8d07aae16d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:46:df:5c:3b:4f:97:35:b7:93:59:6e:79:f3:
                    39:e4:a7:17:26:6c:39:0b:fc:4c:de:bf:39:a8:fd:
                    83:2d:e6:09:bf:ab:31:fb:1c:f8:b4:b6:bc:f1:64:
                    50:7c:f1:fd:43:b6:05:61:e7:f1:ad:1d:3e:7f:e4:
                    fb:05:af:a3:07:c6:b3:ad:0a:c2:49:11:a6:ae:c7:
                    c7:48:b8:73:b6:ad:f9:79:41:31:87:cf:c3:de:a6:
                    f7:79:e2:74:fb:d5:af:a6:4a:d3:5a:c6:97:7a:34:
                    64:be:93:ac:eb:a8:4b:e6:f5:1c:98:f2:7f:ba:d6:
                    d8:d3:65:95:5f:c2:f9:ec:da:ba:63:ba:ec:59:75:
                    ec:d4:2e:ad:90:88:6e:3b:c8:b2:48:a3:1f:dc:bb:
                    05:95:38:f1:7d:23:b0:d4:4c:50:57:b3:8b:f7:ee:
                    de:1a:5f:4b:40:5e:b5:61:80:91:a9:bf:8d:77:75:
                    b6:9c:c3:1f:1d:28:37:9e:ee:ef:62:c6:f2:ac:27:
                    18:e3:a7:05:bb:f5:55:6f:e7:18:1f:0f:2b:eb:f2:
                    b9:62:b0:7b:8d:90:fb:f6:6c:e4:fe:0c:7d:37:5f:
                    5d:6b:01:f2:36:9d:a2:eb:c0:d4:70:fc:60:4e:1b:
                    ce:e6:80:78:93:5a:52:42:f0:fe:7a:2e:3c:b3:18:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:D4:FC:C4:E0:C0:34:E1:09:97:68:BD:FE:8D:07:AA:E1:6D:9D
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:85:64:90:f8:b4:11:0b:ba:e0:a2:50:27:2c:1d:c8:65:
         7e:42:4f:42:2e:56:ce:e9:31:9c:90:bc:06:65:a4:f0:99:94:
         1f:ac:f3:6c:13:41:c5:65:4e:f9:78:18:d4:21:fd:b2:4c:19:
         bd:2f:66:1b:1f:8b:18:10:06:92:68:60:b1:74:a1:62:5d:2b:
         05:6d:95:bd:09:d0:38:bf:24:35:92:22:ac:95:5b:08:fc:22:
         d0:cd:b1:85:06:a6:26:31:52:e9:1d:59:f4:a2:1b:7a:fd:a0:
         7d:af:6f:b4:35:1f:cf:85:cb:11:2b:43:8e:2b:17:e0:26:5f:
         49:14:a4:6b:87:2b:82:23:28:5f:15:62:c2:3c:53:f5:57:5f:
         89:d9:44:18:df:5c:79:4c:9d:88:c1:89:ed:b4:21:8b:5a:57:
         62:e5:82:7e:27:1a:3f:73:2e:31:08:23:43:00:38:4c:40:aa:
         25:a2:52:ab:fb:e8:dd:e9:eb:e6:4b:52:1b:dd:ec:74:9b:29:
         49:f0:16:b7:64:8a:e3:33:8c:cb:f5:92:9e:10:1f:36:02:7c:
         3b:23:7f:75:d2:a4:6c:30:eb:be:20:d3:81:4d:06:1b:22:90:
         0a:4e:cd:0e:43:37:71:1b:a0:8f:65:20:88:d2:e2:62:f1:35:
         c5:d1:bf:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nVqvv/ExxXewJrx+n0+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz
YmVhMWQwHhcNMjUwODA1MTkwMjQ2WhcNMjUwODA2MTkwMjQ2WjAzMTEwLwYDVQQD
EyhiMDE1ZDRmY2M0ZTBjMDM0ZTEwOTk3NjhiZGZlOGQwN2FhZTE2ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EbfXDtPlzW3k1luefM55KcXJmw5
C/xM3r85qP2DLeYJv6sx+xz4tLa88WRQfPH9Q7YFYefxrR0+f+T7Ba+jB8azrQrC
SRGmrsfHSLhztq35eUExh8/D3qb3eeJ0+9WvpkrTWsaXejRkvpOs66hL5vUcmPJ/
utbY02WVX8L57Nq6Y7rsWXXs1C6tkIhuO8iySKMf3LsFlTjxfSOw1ExQV7OL9+7e
Gl9LQF61YYCRqb+Nd3W2nMMfHSg3nu7vYsbyrCcY46cFu/VVb+cYHw8r6/K5YrB7
jZD79mzk/gx9N19dawHyNp2i68DUcPxgThvO5oB4k1pSQvD+ei48sxjevQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAV1PzE4MA04QmXaL3+jQeq4W2dMB8GA1UdIwQY
MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt
N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3
LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyKFZJD4
tBELuuCiUCcsHchlfkJPQi5WzukxnJC8BmWk8JmUH6zzbBNBxWVO+XgY1CH9skwZ
vS9mGx+LGBAGkmhgsXShYl0rBW2VvQnQOL8kNZIirJVbCPwi0M2xhQamJjFS6R1Z
9KIbev2gfa9vtDUfz4XLEStDjisX4CZfSRSka4crgiMoXxViwjxT9VdfidlEGN9c
eUydiMGJ7bQhi1pXYuWCficaP3MuMQgjQwA4TECqJaJSq/vo3enr5ktSG93sdJsp
SfAWt2SK4zOMy/WSnhAfNgJ8OyN/ddKkbDDrviDTgU0GGyKQCk7NDkM3cRugj2Ug
iNLiYvE1xdG/Lw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:48 2025 by rpki-client