Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File:                     1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier:          CXydubUCnyq1BW61qvjeQXT1mRJXb6cYT5u32kuH/gc=
Subject key identifier:   00:59:5C:85:9D:FF:47:17:C2:50:B0:1E:EE:97:8F:5F:FB:CF:40:72
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer:       /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial:       01987BD2ABC7AA38B8D5BA2DA347DA09359E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number:          0CBD
Signing time:             Tue 05 Aug 2025 20:01:00 +0000
Manifest this update:     Tue 05 Aug 2025 20:01:00 +0000
Manifest next update:     Wed 06 Aug 2025 20:01:00 +0000
Files and hashes:         1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: CumXqYyrGWrPOj5QcBuw/ZngwSedystNvILzTimFtlU=)
                          2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:ab:c7:aa:38:b8:d5:ba:2d:a3:47:da:09:35:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
        Validity
            Not Before: Aug  5 20:01:00 2025 GMT
            Not After : Aug  6 20:01:00 2025 GMT
        Subject: CN=00595c859dff4717c250b01eee978f5ffbcf4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:05:ca:5f:52:0f:ea:7e:6e:3e:63:cd:91:
                    a6:e0:14:7f:8d:5e:76:01:e8:14:e1:45:0f:61:4f:
                    80:fc:10:6d:bd:1b:e2:88:fa:bd:8a:4c:b9:4d:d8:
                    24:a2:cc:db:b6:ae:40:f7:bb:99:87:99:70:fc:6e:
                    40:e1:5d:1b:71:4c:da:d7:f9:fa:73:b4:8d:04:cc:
                    e2:1c:e0:1a:af:23:cb:59:b8:f8:34:ad:fb:b0:c3:
                    eb:42:0a:f1:f8:73:6a:5e:13:6d:40:eb:7b:dd:96:
                    31:4c:92:90:5e:0f:93:3f:3b:92:b1:5e:db:89:9a:
                    af:b3:1a:3f:7d:d8:88:2d:43:62:cd:0c:fe:e4:88:
                    10:06:6b:45:ad:95:58:3e:75:2a:9d:e9:5c:61:57:
                    01:bb:98:1a:6e:12:9b:58:00:8a:c7:0a:87:d6:b2:
                    0d:f1:82:9a:b2:5e:03:42:4e:db:1a:38:95:1a:85:
                    d7:70:a0:41:e6:18:84:79:02:c7:7c:58:80:a2:21:
                    93:51:fa:51:74:fe:46:16:58:2c:90:14:61:f4:cc:
                    ba:06:d9:12:4c:83:6a:39:b5:c0:7a:9e:7d:e5:a2:
                    20:11:8d:b3:c9:7b:4e:47:57:1b:b3:b2:c4:8f:70:
                    81:1c:18:88:31:d9:eb:bc:61:01:e7:8d:d0:41:08:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:59:5C:85:9D:FF:47:17:C2:50:B0:1E:EE:97:8F:5F:FB:CF:40:72
            X509v3 Authority Key Identifier:
                keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:5a:5f:a5:23:0e:5e:22:a1:36:68:d3:29:9b:59:4b:63:30:
         94:b3:01:f1:51:d5:1a:ba:af:64:17:29:e9:41:c2:49:06:95:
         2d:74:16:ed:48:08:91:0d:2a:98:64:e3:1e:af:ab:03:3b:11:
         b0:5d:6f:af:65:96:76:c3:8b:cf:f6:4b:90:4b:33:53:ff:e5:
         2f:96:0a:4f:7a:59:6d:34:11:8b:b4:d5:40:0c:f4:71:ae:df:
         8c:cc:e1:9e:e6:47:ea:2c:7e:40:74:7a:ca:a5:d8:f9:0f:9a:
         3d:58:f8:76:b9:7d:6d:59:60:72:0b:ff:ae:83:35:36:24:51:
         f7:79:f1:1f:20:f2:fb:3c:84:41:64:9a:92:ff:f5:53:4e:8f:
         1b:15:35:e1:87:0c:a4:5e:f7:98:9c:c1:9b:26:84:b1:86:9c:
         47:02:67:ba:d4:6f:02:cd:58:4a:48:7e:fc:69:07:e8:5e:ab:
         7a:a5:9d:95:ab:a4:4a:f9:45:90:c5:33:94:59:a3:ab:fc:fd:
         56:69:d9:ee:5b:3e:4b:a6:d6:25:53:7d:22:58:0c:6f:44:63:
         c7:6f:71:48:7f:2f:1e:d8:0f:ba:b1:d2:f4:31:bf:22:78:c9:
         92:0f:ad:b1:15:32:01:15:1e:b7:22:30:b0:c4:d5:fd:5a:b4:
         dc:62:14:f1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZh70qvHqji41boto0faCTWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjUwODA1MjAwMTAwWhcNMjUwODA2MjAwMTAwWjAzMTEwLwYDVQQD
EygwMDU5NWM4NTlkZmY0NzE3YzI1MGIwMWVlZTk3OGY1ZmZiY2Y0MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTIFyl9SD+p+bj5jzZGm4BR/jV52
AegU4UUPYU+A/BBtvRviiPq9iky5Tdgkoszbtq5A97uZh5lw/G5A4V0bcUza1/n6
c7SNBMziHOAaryPLWbj4NK37sMPrQgrx+HNqXhNtQOt73ZYxTJKQXg+TPzuSsV7b
iZqvsxo/fdiILUNizQz+5IgQBmtFrZVYPnUqnelcYVcBu5gabhKbWACKxwqH1rIN
8YKasl4DQk7bGjiVGoXXcKBB5hiEeQLHfFiAoiGTUfpRdP5GFlgskBRh9My6BtkS
TINqObXAep595aIgEY2zyXtOR1cbs7LEj3CBHBiIMdnrvGEB543QQQitnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFABZXIWd/0cXwlCwHu6Xj1/7z0ByMB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz1pf
pSMOXiKhNmjTKZtZS2MwlLMB8VHVGrqvZBcp6UHCSQaVLXQW7UgIkQ0qmGTjHq+r
AzsRsF1vr2WWdsOLz/ZLkEszU//lL5YKT3pZbTQRi7TVQAz0ca7fjMzhnuZH6ix+
QHR6yqXY+Q+aPVj4drl9bVlgcgv/roM1NiRR93nxHyDy+zyEQWSakv/1U06PGxU1
4YcMpF73mJzBmyaEsYacRwJnutRvAs1YSkh+/GkH6F6reqWdlaukSvlFkMUzlFmj
q/z9VmnZ7ls+S6bWJVN9IlgMb0Rjx29xSH8vHtgPurHS9DG/InjJkg+tsRUyARUe
tyIwsMTV/Vq03GIU8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:57 2025 by rpki-client