Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          C3+RCKP4Xw3kCWbwqHSTeLZrvFyrWi9qTrUDMTayQzk=
Subject key identifier:   FD:94:6D:39:7D:C1:2C:0E:AC:BC:1F:60:EE:1D:18:46:2B:0E:CF:63
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       01987261FDBDBFCA2BAC4470D21C31A25A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          0A77
Signing time:             Mon 04 Aug 2025 00:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 00:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 00:01:21 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: OzqIvtEyQK4SSwohaWC8P3BkCDcL+Y1pmPKDZsDKt4c=)
                          2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:61:fd:bd:bf:ca:2b:ac:44:70:d2:1c:31:a2:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Aug  4 00:01:21 2025 GMT
            Not After : Aug  5 00:01:21 2025 GMT
        Subject: CN=fd946d397dc12c0eacbc1f60ee1d18462b0ecf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:59:02:c2:3f:a7:e7:15:ec:d3:db:31:b9:
                    63:85:d5:83:08:00:d3:a9:d6:10:23:77:93:be:1e:
                    f6:29:72:b6:8e:d4:79:4f:28:ca:6a:6a:c5:85:e0:
                    6a:38:41:e1:c6:b9:1d:ac:f9:66:2f:31:43:36:a3:
                    eb:63:f0:99:b2:31:a3:5d:da:3e:bb:a4:8a:2e:58:
                    3c:f7:dd:2d:83:fb:31:53:cc:7a:11:e5:26:d2:67:
                    9f:42:ab:49:f6:f1:e3:1f:26:dc:b0:78:ae:0b:41:
                    93:0a:e1:b5:82:5b:4e:2f:cf:5e:e5:b3:79:3c:4e:
                    ad:ae:e3:65:a9:61:98:ae:27:88:95:99:60:3c:33:
                    5c:5a:8c:9c:81:52:e4:4e:90:13:24:07:14:76:8a:
                    62:31:c4:20:4f:08:1e:6d:4b:80:12:b0:2c:a2:e5:
                    ae:b8:ab:c8:f6:32:2a:73:4d:a2:1b:7b:3c:95:71:
                    e5:1c:53:99:7b:cd:da:92:d5:35:23:68:ed:8d:49:
                    6a:6c:5f:eb:80:3e:37:7d:c1:e0:6d:ba:e0:39:26:
                    43:af:61:65:22:a5:3d:4f:80:d4:d0:11:d3:48:18:
                    71:0b:9c:a5:8d:65:37:c0:07:44:1a:12:7d:3b:89:
                    df:0a:9e:3f:e8:44:eb:b0:28:04:37:4d:7d:91:84:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:94:6D:39:7D:C1:2C:0E:AC:BC:1F:60:EE:1D:18:46:2B:0E:CF:63
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:92:31:ca:46:55:03:e0:04:1b:be:ae:06:87:a0:4c:e8:80:
         ef:08:cf:d1:4d:ac:d4:e0:f0:2a:a8:7b:f7:1c:c9:fa:c2:87:
         75:db:1b:52:c4:0c:9d:3e:0e:c2:12:31:5e:c8:68:cf:1c:ba:
         d3:25:52:38:38:3f:72:6d:79:e6:a7:b4:b7:cd:56:f9:1c:d0:
         e4:0f:f7:2a:54:9d:62:9d:dc:aa:21:2d:cc:0c:8c:54:3a:80:
         c0:51:35:bb:2e:29:ed:ce:5d:72:0f:3c:08:0d:5a:9e:52:e1:
         e9:9d:89:1b:c7:7a:c7:a3:87:5b:1b:4b:e8:11:29:14:df:85:
         53:24:b4:83:59:7b:b6:a7:5d:e4:a7:55:bb:d7:e6:03:7f:cf:
         cb:7f:05:7c:6b:a5:82:f3:07:4d:4e:bd:1e:a1:be:0c:aa:a9:
         30:7c:e5:92:17:3b:81:9b:71:42:99:f2:8d:92:82:c6:03:12:
         9f:55:28:bd:99:3d:33:0d:eb:17:3f:d8:70:8e:be:e0:97:7f:
         97:b8:80:c1:3f:fb:2a:d8:e6:ca:63:bc:0d:49:1a:b7:ba:16:
         25:fc:7b:ae:b0:4f:9c:75:61:73:b9:44:e0:07:e8:23:bc:9d:
         83:14:ec:30:a3:71:e4:2f:5e:88:a6:c2:3c:e1:62:39:3c:36:
         c3:57:5e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYf29v8orrERw0hwxoloKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjUwODA0MDAwMTIxWhcNMjUwODA1MDAwMTIxWjAzMTEwLwYDVQQD
EyhmZDk0NmQzOTdkYzEyYzBlYWNiYzFmNjBlZTFkMTg0NjJiMGVjZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0upZAsI/p+cV7NPbMbljhdWDCADT
qdYQI3eTvh72KXK2jtR5TyjKamrFheBqOEHhxrkdrPlmLzFDNqPrY/CZsjGjXdo+
u6SKLlg8990tg/sxU8x6EeUm0mefQqtJ9vHjHybcsHiuC0GTCuG1gltOL89e5bN5
PE6truNlqWGYrieIlZlgPDNcWoycgVLkTpATJAcUdopiMcQgTwgebUuAErAsouWu
uKvI9jIqc02iG3s8lXHlHFOZe83aktU1I2jtjUlqbF/rgD43fcHgbbrgOSZDr2Fl
IqU9T4DU0BHTSBhxC5yljWU3wAdEGhJ9O4nfCp4/6ETrsCgEN019kYTOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2UbTl9wSwOrLwfYO4dGEYrDs9jMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJIxykZV
A+AEG76uBoegTOiA7wjP0U2s1ODwKqh79xzJ+sKHddsbUsQMnT4OwhIxXshozxy6
0yVSODg/cm155qe0t81W+RzQ5A/3KlSdYp3cqiEtzAyMVDqAwFE1uy4p7c5dcg88
CA1anlLh6Z2JG8d6x6OHWxtL6BEpFN+FUyS0g1l7tqdd5KdVu9fmA3/Py38FfGul
gvMHTU69HqG+DKqpMHzlkhc7gZtxQpnyjZKCxgMSn1UovZk9Mw3rFz/YcI6+4Jd/
l7iAwT/7KtjmymO8DUkat7oWJfx7rrBPnHVhc7lE4AfoI7ydgxTsMKNx5C9eiKbC
POFiOTw2w1dekQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:27 2025 by rpki-client