Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File:                     7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier:          rwJ6IbdgB00hIk7Hb7zrcyyzNwkNxsNf3rplLSOTXSc=
Subject key identifier:   02:55:8A:27:65:F5:FA:DB:60:3B:DA:67:F1:66:4E:BF:3A:61:25:39
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       0198884467A88375BAC05651F661A84CEB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number:          0A85
Signing time:             Fri 08 Aug 2025 06:00:41 +0000
Manifest this update:     Fri 08 Aug 2025 06:00:41 +0000
Manifest next update:     Sat 09 Aug 2025 06:00:41 +0000
Files and hashes:         1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: jHuWlPQi1fJj/kvEytnEo2Nu4hpWkT1vw6EbtL2LDmM=)
                          2: UVCnnFZZjUR9w6yDQp9NPqjljfo.roa (hash: f6rKRc94PJnhp1qRU3+PGFxmR5pPPhe+G7K5mMW7jGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:44:67:a8:83:75:ba:c0:56:51:f6:61:a8:4c:eb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Aug  8 06:00:41 2025 GMT
            Not After : Aug  9 06:00:41 2025 GMT
        Subject: CN=02558a2765f5fadb603bda67f1664ebf3a612539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:bf:4f:20:fe:a4:4a:00:8f:06:5e:6c:ca:
                    94:88:9d:47:89:8d:45:0a:41:ba:9e:43:07:bb:61:
                    67:2b:2d:b2:85:59:92:13:db:94:08:6c:49:4c:2f:
                    69:88:20:36:10:fb:25:2d:77:f6:6a:69:1d:9c:18:
                    c1:3f:1f:0f:02:59:c4:92:26:80:53:50:76:cd:d3:
                    80:d1:9c:47:2c:fe:69:f6:8a:83:d3:0a:0b:34:d8:
                    45:41:b7:08:68:58:08:9f:17:bb:2e:2a:8e:23:1a:
                    e4:73:bb:a3:69:1f:32:a9:c2:39:a0:d6:fd:1f:24:
                    00:95:c4:69:30:bb:13:2a:d9:f7:e6:2b:59:03:d3:
                    8c:13:4a:8e:af:de:41:19:12:fc:09:1d:b7:36:92:
                    77:50:9b:52:e7:bb:7a:53:2b:83:92:41:29:18:0d:
                    f5:5c:45:21:2b:af:d9:a8:2f:1f:70:45:12:4c:e9:
                    f2:37:d0:85:bd:e2:03:18:99:36:54:76:da:75:33:
                    74:77:54:f1:b1:ef:6b:b2:35:0b:e9:77:91:21:a6:
                    fd:55:34:86:d4:95:a7:5b:8c:dc:4a:e0:f5:96:e4:
                    3d:13:b2:9b:36:ba:5d:88:b8:04:33:d6:b9:52:7c:
                    f0:f3:c2:36:1b:1e:0f:3e:e1:05:53:04:87:07:35:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:55:8A:27:65:F5:FA:DB:60:3B:DA:67:F1:66:4E:BF:3A:61:25:39
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:59:77:c4:a2:6c:22:ec:d4:64:9e:91:ca:1c:56:e4:e0:
         3d:ad:44:85:ee:cd:cc:13:e2:7e:93:6d:d3:b0:6b:81:57:f3:
         01:8f:8d:9c:aa:46:15:cc:b3:d8:e7:c3:32:8c:8f:f5:5f:aa:
         59:ef:9d:5b:31:f1:52:76:99:cf:73:54:7d:05:fd:56:96:1a:
         08:b2:70:4a:75:76:6b:96:d0:7c:9c:c4:ca:fc:10:fd:53:5b:
         96:95:02:26:91:ef:ee:e5:ff:9e:19:1c:05:9d:5a:50:51:3d:
         31:3f:50:0a:0d:26:e3:48:72:ef:ad:7f:c2:5b:12:80:65:6b:
         7b:0b:cb:2c:b3:0f:5c:a3:1c:b7:91:67:4c:a7:c1:4d:bb:fc:
         1b:a5:19:0a:3d:ff:57:8d:ea:1c:67:37:42:25:8c:32:70:29:
         09:fa:49:ab:a5:76:35:20:76:15:3a:66:b9:24:42:24:8c:0c:
         b2:57:0f:73:0f:18:d8:08:b8:e1:49:85:38:de:e0:25:73:bc:
         f9:bf:4c:e3:e8:e7:9f:31:b9:0d:fd:c6:2b:7c:e3:6d:3b:b0:
         de:ff:37:8f:df:e7:5c:68:e4:21:61:fe:38:f9:46:94:43:e8:
         61:dc:dc:e5:93:ec:df:5e:cc:2d:da:75:5d:a6:38:09:6f:8e:
         0d:c2:1e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIRGeog3W6wFZR9mGoTOsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWJhMmU2NTk3OTRiMTIyMTVkZjFmYThhYmUzZmNiZDY2
ODZkZjcwHhcNMjUwODA4MDYwMDQxWhcNMjUwODA5MDYwMDQxWjAzMTEwLwYDVQQD
EygwMjU1OGEyNzY1ZjVmYWRiNjAzYmRhNjdmMTY2NGViZjNhNjEyNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1i/TyD+pEoAjwZebMqUiJ1HiY1F
CkG6nkMHu2FnKy2yhVmSE9uUCGxJTC9piCA2EPslLXf2amkdnBjBPx8PAlnEkiaA
U1B2zdOA0ZxHLP5p9oqD0woLNNhFQbcIaFgInxe7LiqOIxrkc7ujaR8yqcI5oNb9
HyQAlcRpMLsTKtn35itZA9OME0qOr95BGRL8CR23NpJ3UJtS57t6UyuDkkEpGA31
XEUhK6/ZqC8fcEUSTOnyN9CFveIDGJk2VHbadTN0d1Txse9rsjUL6XeRIab9VTSG
1JWnW4zcSuD1luQ9E7KbNrpdiLgEM9a5Unzw88I2Gx4PPuEFUwSHBzV8OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJViidl9frbYDvaZ/FmTr86YSU5MB8GA1UdIwQY
MBaAFOzrouZZeUsSIV3x+oq+P8vWaG33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2Qt
ZWJlMmRjNDAxNjE2LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2QtZWJlMmRjNDAxNjE2
LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABc5Zd8Si
bCLs1GSekcocVuTgPa1Ehe7NzBPifpNt07BrgVfzAY+NnKpGFcyz2OfDMoyP9V+q
We+dWzHxUnaZz3NUfQX9VpYaCLJwSnV2a5bQfJzEyvwQ/VNblpUCJpHv7uX/nhkc
BZ1aUFE9MT9QCg0m40hy761/wlsSgGVrewvLLLMPXKMct5FnTKfBTbv8G6UZCj3/
V43qHGc3QiWMMnApCfpJq6V2NSB2FTpmuSRCJIwMslcPcw8Y2Ai44UmFON7gJXO8
+b9M4+jnnzG5Df3GK3zjbTuw3v83j9/nXGjkIWH+OPlGlEPoYdzc5ZPs317MLdp1
XaY4CW+ODcIeCQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:05 2025 by rpki-client