Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File:                     h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier:          0VFtHtsJ1EEoa7xC5kVWUIYnl3q4lbrDf2O17Tminyk=
Subject key identifier:   31:48:81:43:4B:9D:2B:33:DB:E2:96:3D:F3:35:D6:B4:21:D8:56:29
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer:       /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial:       01988B103F2E5568C55C1E206A044C5703C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number:          0D17
Signing time:             Fri 08 Aug 2025 19:02:34 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:34 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:34 +0000
Files and hashes:         1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: 5v3N4ZjXGib4x7e1PRv/g9z5VrXPuhOyjvmybCI3pIY=)
                          2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:3f:2e:55:68:c5:5c:1e:20:6a:04:4c:57:03:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
        Validity
            Not Before: Aug  8 19:02:34 2025 GMT
            Not After : Aug  9 19:02:34 2025 GMT
        Subject: CN=314881434b9d2b33dbe2963df335d6b421d85629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:d0:f9:58:02:49:80:22:a4:83:83:eb:02:
                    42:42:d1:b9:d9:80:92:30:e0:95:37:63:6c:b0:36:
                    04:56:32:cf:eb:53:84:3e:c1:1f:cb:94:ae:6e:fd:
                    69:60:2e:a7:f0:72:c5:83:53:15:bb:b7:3c:dc:af:
                    f7:6c:3c:de:c6:47:71:e1:92:15:33:18:f2:eb:4c:
                    db:de:7f:e6:08:69:b9:26:df:c1:50:c5:52:65:d2:
                    a3:b6:bd:f5:9f:a5:f4:9d:92:8b:c6:c5:41:4e:15:
                    dd:79:b5:8b:a2:9d:3a:e4:28:48:4f:0b:a3:3f:ab:
                    21:9d:b2:cb:6b:78:ef:78:62:44:39:7a:5c:d9:2c:
                    43:9f:3c:f4:29:f0:3e:f9:2a:ec:82:fd:3d:8c:9c:
                    ae:aa:8e:65:a1:28:54:4a:ff:36:d9:6c:62:b3:e4:
                    8a:5a:5d:a2:f1:57:11:2e:11:bd:35:49:3b:d6:01:
                    cd:1a:80:a5:b0:95:fd:68:36:2c:f7:23:88:91:1e:
                    90:58:2d:79:6c:8b:96:3c:4b:2c:8e:3a:bc:b5:cb:
                    8e:ab:bd:59:21:d2:03:3b:3a:9b:e9:a2:72:12:2a:
                    66:0a:86:7c:3b:c1:af:d0:88:e9:17:91:9b:29:05:
                    89:4b:78:52:95:49:16:d1:10:be:52:d2:58:fd:d4:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:81:43:4B:9D:2B:33:DB:E2:96:3D:F3:35:D6:B4:21:D8:56:29
            X509v3 Authority Key Identifier:
                keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:38:df:3d:a5:ee:4a:fc:09:bc:42:c3:fe:41:05:aa:18:a3:
         04:6d:62:c0:51:2c:cc:e8:dd:e4:e2:fa:6c:2b:c0:54:71:35:
         7d:38:aa:b7:c6:b1:d8:c5:b8:da:06:80:b9:e3:c3:43:0e:06:
         65:27:38:07:35:3a:a6:51:bd:ca:c5:7e:40:af:a4:8e:fe:b9:
         36:9a:34:a1:e3:5b:11:87:79:2e:cc:31:56:97:10:cb:d9:19:
         98:36:d8:cd:c8:64:64:57:0d:14:6b:89:77:f1:c1:01:e3:85:
         1b:fc:2e:ec:f1:2a:79:92:a9:6c:e3:be:6f:aa:73:93:7f:8f:
         15:f4:7d:dc:75:77:54:6d:e1:c4:86:af:44:4d:b2:17:da:8d:
         78:d2:7e:3f:d6:87:9d:1a:a4:44:db:fd:0c:cc:dd:d6:c1:07:
         60:96:62:ab:31:90:2b:84:ce:fb:8f:27:8f:72:47:64:b9:5b:
         16:2e:09:1f:f1:1b:7a:d5:88:65:17:97:e9:13:47:57:83:38:
         2d:58:cf:26:49:75:0c:b5:d6:0a:7b:5f:76:36:93:b8:31:50:
         75:e3:20:c2:69:da:b5:26:d4:8f:21:da:7f:bd:0e:89:64:0a:
         85:4a:7c:64:31:6b:af:fa:68:fc:a1:82:09:bb:a2:81:7e:73:
         9c:26:39:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLED8uVWjFXB4gagRMVwPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjUwODA4MTkwMjM0WhcNMjUwODA5MTkwMjM0WjAzMTEwLwYDVQQD
EygzMTQ4ODE0MzRiOWQyYjMzZGJlMjk2M2RmMzM1ZDZiNDIxZDg1NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLjQ+VgCSYAipIOD6wJCQtG52YCS
MOCVN2NssDYEVjLP61OEPsEfy5Subv1pYC6n8HLFg1MVu7c83K/3bDzexkdx4ZIV
Mxjy60zb3n/mCGm5Jt/BUMVSZdKjtr31n6X0nZKLxsVBThXdebWLop065ChITwuj
P6shnbLLa3jveGJEOXpc2SxDnzz0KfA++Srsgv09jJyuqo5loShUSv822Wxis+SK
Wl2i8VcRLhG9NUk71gHNGoClsJX9aDYs9yOIkR6QWC15bIuWPEssjjq8tcuOq71Z
IdIDOzqb6aJyEipmCoZ8O8Gv0IjpF5GbKQWJS3hSlUkW0RC+UtJY/dQMxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFIgUNLnSsz2+KWPfM11rQh2FYpMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDjfPaXu
SvwJvELD/kEFqhijBG1iwFEszOjd5OL6bCvAVHE1fTiqt8ax2MW42gaAuePDQw4G
ZSc4BzU6plG9ysV+QK+kjv65Npo0oeNbEYd5LswxVpcQy9kZmDbYzchkZFcNFGuJ
d/HBAeOFG/wu7PEqeZKpbOO+b6pzk3+PFfR93HV3VG3hxIavRE2yF9qNeNJ+P9aH
nRqkRNv9DMzd1sEHYJZiqzGQK4TO+48nj3JHZLlbFi4JH/EbetWIZReX6RNHV4M4
LVjPJkl1DLXWCntfdjaTuDFQdeMgwmnatSbUjyHaf70OiWQKhUp8ZDFrr/po/KGC
CbuigX5znCY58g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:38 2025 by rpki-client