Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File:                     FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier:          Wz9KqNtkVS3ov6jVsL2yFReKYfXpw1Y+hj99BUtDhpo=
Subject key identifier:   6B:30:F1:22:A4:4A:E9:FE:63:8F:5C:65:06:8B:A7:D2:F7:8D:C2:74
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer:       /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial:       01987B9CFB6B309DCC3888736E834CB05CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number:          0940
Signing time:             Tue 05 Aug 2025 19:02:22 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:22 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:22 +0000
Files and hashes:         1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: dIcYzdVuuAknJlZkjiJCHFEOM9kGZ3LE8RQyRN/0Oi0=)
                          2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:fb:6b:30:9d:cc:38:88:73:6e:83:4c:b0:5c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
        Validity
            Not Before: Aug  5 19:02:22 2025 GMT
            Not After : Aug  6 19:02:22 2025 GMT
        Subject: CN=6b30f122a44ae9fe638f5c65068ba7d2f78dc274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:06:c3:16:77:e5:5b:58:d9:79:66:37:a5:
                    51:21:38:67:54:2b:92:21:42:fe:49:2a:0a:5c:ac:
                    dd:e6:64:44:e5:8d:f7:e4:d7:92:36:69:64:15:93:
                    ba:c4:dc:0d:65:c8:03:12:06:6d:17:80:89:77:b2:
                    f2:56:e2:bc:8e:c2:18:02:61:18:0f:d3:eb:79:02:
                    ea:68:12:fb:37:11:34:5c:c5:4d:53:18:69:ac:3a:
                    a4:6f:3e:42:39:35:fa:c3:8a:36:2c:6c:d3:95:96:
                    90:28:01:8a:7b:62:bc:ee:07:dd:87:2f:70:55:36:
                    1b:8a:02:83:fe:55:0f:c9:cf:c0:fe:2c:e4:d1:16:
                    fc:7d:bd:51:85:e2:21:88:de:40:28:a6:9f:c5:a7:
                    aa:40:79:14:d8:80:4b:ad:3e:2c:ac:fd:6d:7d:8f:
                    1a:8e:f1:91:e7:6b:94:45:2b:a4:5e:15:81:d1:8f:
                    6f:88:88:c7:10:fa:83:62:66:1e:a7:4d:b4:08:76:
                    51:10:a9:f3:fb:5b:13:6d:b7:3b:67:51:53:48:b9:
                    39:e5:32:5a:39:ea:67:9e:ac:46:e8:a1:00:72:74:
                    a6:62:3c:8b:f4:d0:d4:06:a1:36:29:39:2b:97:e0:
                    ca:42:c4:7d:86:f7:bd:4c:51:d8:f4:53:2d:97:1a:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:F1:22:A4:4A:E9:FE:63:8F:5C:65:06:8B:A7:D2:F7:8D:C2:74
            X509v3 Authority Key Identifier:
                keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:df:6b:b9:35:d2:b4:84:3e:ab:0b:ee:29:34:3a:7a:85:
         19:b4:1a:f8:a9:45:0c:91:3c:3b:1f:de:d1:73:9a:66:51:9c:
         b7:e9:84:7d:0f:a3:83:63:64:18:72:85:db:0c:23:09:81:68:
         f9:9b:73:5f:7a:c7:a8:a6:5e:87:6e:04:ea:32:dc:0e:32:96:
         68:01:29:94:7e:f0:92:e4:0f:88:ad:06:e0:12:4b:43:08:07:
         35:9f:e8:83:8f:e7:2a:cd:89:71:41:e0:4a:f9:92:fa:09:bf:
         a0:98:62:fd:d5:df:95:a7:e7:94:7e:08:ea:f3:74:66:da:9d:
         47:29:c8:78:6c:a6:ea:a5:1a:7f:16:28:e1:f3:86:05:0f:83:
         39:39:0f:b8:14:fe:88:07:3b:b0:48:46:fc:90:9c:55:96:d9:
         8c:34:e9:6e:3a:b7:98:e5:db:81:8e:59:f5:dc:03:84:b6:15:
         f4:ee:e1:6e:06:dd:2e:01:c5:e5:61:4a:a4:f2:76:e1:df:54:
         97:1d:8f:f0:fe:0b:f0:94:68:15:01:23:f7:7a:0f:d9:a0:91:
         2a:cb:42:ad:73:dd:09:a8:6a:7e:0e:d4:02:b3:8b:a3:cc:a5:
         bf:2d:30:1f:d5:7f:3e:5d:4c:08:04:64:36:a8:fc:d0:d9:c1:
         6e:0f:26:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nPtrMJ3MOIhzboNMsFyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz
YzZmZDkwHhcNMjUwODA1MTkwMjIyWhcNMjUwODA2MTkwMjIyWjAzMTEwLwYDVQQD
Eyg2YjMwZjEyMmE0NGFlOWZlNjM4ZjVjNjUwNjhiYTdkMmY3OGRjMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGMGwxZ35VtY2XlmN6VRIThnVCuS
IUL+SSoKXKzd5mRE5Y335NeSNmlkFZO6xNwNZcgDEgZtF4CJd7LyVuK8jsIYAmEY
D9PreQLqaBL7NxE0XMVNUxhprDqkbz5COTX6w4o2LGzTlZaQKAGKe2K87gfdhy9w
VTYbigKD/lUPyc/A/izk0Rb8fb1RheIhiN5AKKafxaeqQHkU2IBLrT4srP1tfY8a
jvGR52uURSukXhWB0Y9viIjHEPqDYmYep020CHZREKnz+1sTbbc7Z1FTSLk55TJa
OepnnqxG6KEAcnSmYjyL9NDUBqE2KTkrl+DKQsR9hve9TFHY9FMtlxpRewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsw8SKkSun+Y49cZQaLp9L3jcJ0MB8GA1UdIwQY
MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt
MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh
LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfETfa7k1
0rSEPqsL7ik0OnqFGbQa+KlFDJE8Ox/e0XOaZlGct+mEfQ+jg2NkGHKF2wwjCYFo
+ZtzX3rHqKZeh24E6jLcDjKWaAEplH7wkuQPiK0G4BJLQwgHNZ/og4/nKs2JcUHg
SvmS+gm/oJhi/dXflafnlH4I6vN0ZtqdRynIeGym6qUafxYo4fOGBQ+DOTkPuBT+
iAc7sEhG/JCcVZbZjDTpbjq3mOXbgY5Z9dwDhLYV9O7hbgbdLgHF5WFKpPJ24d9U
lx2P8P4L8JRoFQEj93oP2aCRKstCrXPdCahqfg7UArOLo8ylvy0wH9V/Pl1MCARk
Nqj80NnBbg8mqQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:40 2025 by rpki-client