Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File:                     9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier:          FX3GOd0wPafDIsHMvSjZAxlVjZgRHBmqdtNcWUV0tEU=
Subject key identifier:   96:B0:31:4F:2D:D0:EA:A7:5E:B0:6D:D2:C3:B6:3C:7C:E0:A6:AE:F1
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       01987E6677D18DE7BDB395FD3F518D28011E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number:          1492
Signing time:             Wed 06 Aug 2025 08:01:41 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:41 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:41 +0000
Files and hashes:         1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: H40bPPOfLdy0116hs/8DDH0JyiTyjs7szRmK/2LTiA4=)
                          2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:77:d1:8d:e7:bd:b3:95:fd:3f:51:8d:28:01:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Aug  6 08:01:41 2025 GMT
            Not After : Aug  7 08:01:41 2025 GMT
        Subject: CN=96b0314f2dd0eaa75eb06dd2c3b63c7ce0a6aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:e1:4f:43:00:7b:ef:cb:41:49:f2:38:74:
                    bc:ee:e7:88:0f:c2:ff:64:dd:24:90:cf:66:26:9c:
                    da:aa:d5:bf:73:eb:32:e7:a3:1d:c0:9e:a5:20:d4:
                    6b:47:49:88:31:c1:3e:03:e4:d2:cf:d2:87:34:6a:
                    82:8d:49:d4:62:18:9d:ed:8c:52:44:78:4c:96:10:
                    2a:8b:65:19:45:54:39:10:56:d0:6f:81:70:a1:67:
                    f0:85:fb:47:7d:ba:c5:4f:3d:f4:d3:c5:43:20:4d:
                    dc:bc:72:32:fd:41:cb:25:5d:0d:02:62:bd:3d:2b:
                    72:bb:d3:fa:52:d1:89:90:da:19:f8:1e:48:bd:62:
                    15:25:15:b9:2f:68:72:29:a3:8a:c6:38:a5:6a:0f:
                    ba:03:0c:b0:4f:af:ef:b4:9b:6c:d5:b2:5a:14:f8:
                    f2:49:32:22:f0:e0:d8:88:37:fc:bd:34:dc:da:53:
                    89:97:f8:ee:33:24:8b:a6:8f:75:c3:bc:ae:97:5c:
                    57:71:5a:e6:a8:b1:f4:3a:5e:d9:91:1f:e3:bc:b6:
                    7e:d2:91:48:39:c5:b0:b1:e3:ee:ef:29:d7:a4:40:
                    69:f5:1f:eb:a1:38:8a:54:bf:7a:5b:65:c9:77:dd:
                    10:11:a1:40:35:de:68:e9:0e:24:5d:ad:99:49:9f:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B0:31:4F:2D:D0:EA:A7:5E:B0:6D:D2:C3:B6:3C:7C:E0:A6:AE:F1
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:14:f0:0f:64:ec:b9:fb:54:8a:fd:91:fe:d5:98:eb:b0:
         b5:24:b5:15:bf:6f:0b:72:42:ea:aa:ae:58:16:08:71:fc:77:
         b1:80:f7:1b:0e:d5:39:98:c5:eb:a6:95:1b:a4:59:6d:3e:ed:
         5c:68:25:d3:db:52:70:ad:7d:06:5d:69:ba:a7:16:f7:d0:57:
         3c:47:06:16:98:b8:06:a8:ea:75:14:5a:9b:18:f9:16:f0:2d:
         13:e6:b3:d3:30:b1:b3:bb:29:bc:43:d3:4c:a1:5f:99:c8:b7:
         10:4d:81:92:5b:7c:5c:1f:bd:75:13:d7:0f:d2:ec:3b:df:f1:
         cb:ae:ab:fc:43:f1:2c:bb:50:0b:bf:25:f2:71:a6:bd:c8:08:
         ec:c1:d0:71:58:2c:b9:bb:4c:a6:ef:23:4d:7a:0d:74:28:35:
         5d:84:f5:33:0b:a3:68:f0:e9:55:88:e3:13:5e:b7:06:27:ef:
         2f:fb:10:ce:80:d4:71:7c:04:a0:f5:d0:fc:f7:9d:b4:a1:b8:
         dd:09:c8:d7:13:58:eb:9c:b8:ba:f6:cb:be:2b:ed:33:bc:86:
         d9:04:e5:85:38:09:20:8f:bf:a5:0a:b1:c7:18:c9:df:af:5b:
         cb:20:36:83:8f:2b:49:e8:00:bf:9c:7c:59:11:93:ab:b2:7a:
         a9:46:3c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZnfRjee9s5X9P1GNKAEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw
ODgzOTEwHhcNMjUwODA2MDgwMTQxWhcNMjUwODA3MDgwMTQxWjAzMTEwLwYDVQQD
Eyg5NmIwMzE0ZjJkZDBlYWE3NWViMDZkZDJjM2I2M2M3Y2UwYTZhZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCThT0MAe+/LQUnyOHS87ueID8L/
ZN0kkM9mJpzaqtW/c+sy56MdwJ6lINRrR0mIMcE+A+TSz9KHNGqCjUnUYhid7YxS
RHhMlhAqi2UZRVQ5EFbQb4FwoWfwhftHfbrFTz3008VDIE3cvHIy/UHLJV0NAmK9
PStyu9P6UtGJkNoZ+B5IvWIVJRW5L2hyKaOKxjilag+6AwywT6/vtJts1bJaFPjy
STIi8ODYiDf8vTTc2lOJl/juMySLpo91w7yul1xXcVrmqLH0Ol7ZkR/jvLZ+0pFI
OcWwsePu7ynXpEBp9R/roTiKVL96W2XJd90QEaFANd5o6Q4kXa2ZSZ8miwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJawMU8t0OqnXrBt0sO2PHzgpq7xMB8GA1UdIwQY
MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt
YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy
LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqkU8A9k
7Ln7VIr9kf7VmOuwtSS1Fb9vC3JC6qquWBYIcfx3sYD3Gw7VOZjF66aVG6RZbT7t
XGgl09tScK19Bl1puqcW99BXPEcGFpi4BqjqdRRamxj5FvAtE+az0zCxs7spvEPT
TKFfmci3EE2Bklt8XB+9dRPXD9LsO9/xy66r/EPxLLtQC78l8nGmvcgI7MHQcVgs
ubtMpu8jTXoNdCg1XYT1MwujaPDpVYjjE163BifvL/sQzoDUcXwEoPXQ/PedtKG4
3QnI1xNY65y4uvbLvivtM7yG2QTlhTgJII+/pQqxxxjJ369byyA2g48rSegAv5x8
WRGTq7J6qUY8sA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:09 2025 by rpki-client