Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File:                     odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier:          eO4ml9wqgyvB1aHhMFJUM2XtLJrkTKlkgNPfKy+K5kg=
Subject key identifier:   BA:EA:43:59:88:37:A6:47:42:2B:E9:01:57:0D:05:78:1A:E9:97:F8
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer:       /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial:       019879E41C1E1CF88DC535621C17DC06C5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number:          12FE
Signing time:             Tue 05 Aug 2025 11:00:49 +0000
Manifest this update:     Tue 05 Aug 2025 11:00:49 +0000
Manifest next update:     Wed 06 Aug 2025 11:00:49 +0000
Files and hashes:         1: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (hash: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=)
                          2: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=)
                          3: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=)
                          4: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=)
                          5: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=)
                          6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=)
                          7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: BgrYbMOg0eOSOMeLMC04g3WoRagaiDFzbKFjh5cvGUE=)
                          8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=)
                          9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e4:1c:1e:1c:f8:8d:c5:35:62:1c:17:dc:06:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
        Validity
            Not Before: Aug  5 11:00:49 2025 GMT
            Not After : Aug  6 11:00:49 2025 GMT
        Subject: CN=baea43598837a647422be901570d05781ae997f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:0d:58:0b:21:e6:5e:5e:cf:dd:6b:8f:1f:
                    fc:a0:0b:5e:c3:cd:c7:25:60:84:16:20:18:8a:3b:
                    c0:4e:77:fe:c4:68:28:ee:dd:92:f6:33:f6:cd:3e:
                    29:a4:09:e4:9e:55:02:a0:46:7e:27:29:a4:5c:da:
                    61:cb:c6:6e:5d:9c:4b:72:1f:5b:21:c1:6d:a7:b5:
                    06:e4:ca:e5:e4:c5:bc:56:d1:3d:9b:f2:83:90:c0:
                    47:fa:bc:1f:1a:f8:b2:98:94:38:50:f1:20:bd:ee:
                    86:40:6b:00:00:73:df:c4:86:d9:0b:d0:86:d5:4f:
                    a5:64:d4:76:e6:d4:1e:63:bb:f3:e9:c2:be:df:dd:
                    d8:a4:a7:58:f0:ef:52:17:74:3f:2d:39:00:9e:19:
                    05:79:87:55:7d:6b:be:76:ab:85:8a:97:f8:87:1d:
                    70:6d:b3:2e:15:68:5e:fa:94:c2:27:bf:ae:ef:cb:
                    75:bf:e6:67:88:c3:a9:76:53:f8:3a:42:50:ce:16:
                    96:d0:cd:d0:74:f0:6c:49:a5:da:42:56:dc:71:8c:
                    0f:b9:00:eb:b1:61:4d:b3:6a:39:42:0b:2b:5c:a3:
                    65:88:6b:3c:56:dd:58:c7:44:70:64:82:f9:1b:3a:
                    ae:30:d8:96:5e:d3:20:b5:af:30:1b:d0:ad:be:2c:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:43:59:88:37:A6:47:42:2B:E9:01:57:0D:05:78:1A:E9:97:F8
            X509v3 Authority Key Identifier:
                keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:70:83:06:5d:d6:84:7b:10:ac:b5:ba:0d:ff:8e:87:2c:
         59:51:50:a7:ae:8a:26:3d:74:01:4f:9c:14:14:99:4f:d2:b1:
         71:15:c9:0f:bd:75:27:6a:df:b8:4b:e1:14:94:fb:c6:b2:43:
         3c:2e:42:fa:a6:6b:4e:c6:88:79:cd:11:53:d8:28:1a:72:de:
         45:fb:d7:26:43:60:4f:d7:93:d4:f7:d9:1c:09:b5:4f:6c:96:
         74:df:13:5b:2d:47:b6:3c:8a:c8:e7:52:8c:33:89:b4:c5:b7:
         1c:0d:9e:19:75:db:fa:66:fb:a6:78:b1:dc:2c:f6:de:0c:c1:
         47:10:73:e8:66:77:0b:af:75:ee:ad:89:3c:64:d8:20:9c:ec:
         75:bb:2f:e4:ba:6d:47:2e:8b:f7:4f:aa:ba:46:e8:8d:a3:3f:
         5e:75:06:dc:5b:ed:24:da:31:a2:06:13:86:5b:87:18:68:70:
         bd:e0:e6:61:5c:ee:a8:2e:88:84:5c:2f:44:79:6f:4d:0f:a7:
         a4:4d:d9:72:81:5d:00:22:db:82:05:25:ba:97:ef:b3:4b:9e:
         78:b7:8f:87:38:fb:56:15:04:63:0e:fe:28:ee:2a:eb:40:ea:
         27:ed:48:74:a2:13:e9:b4:fd:10:d8:d6:05:37:44:4b:c1:39:
         63:91:1e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55BweHPiNxTViHBfcBsWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjUwODA1MTEwMDQ5WhcNMjUwODA2MTEwMDQ5WjAzMTEwLwYDVQQD
EyhiYWVhNDM1OTg4MzdhNjQ3NDIyYmU5MDE1NzBkMDU3ODFhZTk5N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK0NWAsh5l5ez91rjx/8oAtew83H
JWCEFiAYijvATnf+xGgo7t2S9jP2zT4ppAnknlUCoEZ+JymkXNphy8ZuXZxLch9b
IcFtp7UG5Mrl5MW8VtE9m/KDkMBH+rwfGviymJQ4UPEgve6GQGsAAHPfxIbZC9CG
1U+lZNR25tQeY7vz6cK+393YpKdY8O9SF3Q/LTkAnhkFeYdVfWu+dquFipf4hx1w
bbMuFWhe+pTCJ7+u78t1v+ZniMOpdlP4OkJQzhaW0M3QdPBsSaXaQlbccYwPuQDr
sWFNs2o5QgsrXKNliGs8Vt1Yx0RwZIL5GzquMNiWXtMgta8wG9Ctvixg4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrqQ1mIN6ZHQivpAVcNBXga6Zf4MB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsRwgwZd
1oR7EKy1ug3/jocsWVFQp66KJj10AU+cFBSZT9KxcRXJD711J2rfuEvhFJT7xrJD
PC5C+qZrTsaIec0RU9goGnLeRfvXJkNgT9eT1PfZHAm1T2yWdN8TWy1HtjyKyOdS
jDOJtMW3HA2eGXXb+mb7pnix3Cz23gzBRxBz6GZ3C6917q2JPGTYIJzsdbsv5Lpt
Ry6L90+qukbojaM/XnUG3FvtJNoxogYThluHGGhwveDmYVzuqC6IhFwvRHlvTQ+n
pE3ZcoFdACLbggUlupfvs0ueeLePhzj7VhUEYw7+KO4q60DqJ+1IdKIT6bT9ENjW
BTdES8E5Y5EeVw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:28:01 2025 by rpki-client