Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          36cA7DUTy6ZbX6NOLP3fqXPQKQZRazul83I6ljJw+1k=
Subject key identifier:   49:04:EB:6F:E7:02:7F:00:55:27:87:D2:FB:37:DB:EE:0B:85:74:F6
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       019875992F6CE32DE47D205567035DFC328A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          10A6
Signing time:             Mon 04 Aug 2025 15:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 15:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 15:00:30 +0000
Files and hashes:         1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
                          2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=)
                          3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
                          4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
                          5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: Ptad9mSArMfIkzHn2xCFNROlbN2KmZqR7jNEDZSY2Sk=)
                          6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
                          7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:99:2f:6c:e3:2d:e4:7d:20:55:67:03:5d:fc:32:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Aug  4 15:00:30 2025 GMT
            Not After : Aug  5 15:00:30 2025 GMT
        Subject: CN=4904eb6fe7027f00552787d2fb37dbee0b8574f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:b7:3c:23:a1:20:b0:85:f6:53:8d:8d:d0:
                    7f:a0:b4:ab:93:b6:bc:d6:21:ec:75:60:19:36:4c:
                    7a:ed:99:ef:64:d6:c4:ea:38:34:4a:58:af:1c:7b:
                    56:48:b9:6c:31:f6:63:4b:21:a8:03:69:89:79:d7:
                    78:d0:47:e3:62:d0:e5:a0:57:3f:3b:0d:89:3d:68:
                    77:1c:8a:77:9e:f7:d5:9c:0f:4a:80:c7:aa:b0:98:
                    da:02:fb:b2:68:46:2c:ed:d3:c4:6a:3d:2e:eb:bb:
                    a4:16:58:40:75:8a:21:79:30:fd:7b:cd:f0:62:22:
                    3f:9f:1d:43:ba:9f:93:32:ed:06:ad:3e:d3:b7:35:
                    22:46:aa:17:4d:12:3f:7b:43:60:bd:fc:c7:09:59:
                    a0:56:db:7a:45:02:86:3b:5f:d5:07:ef:e6:c2:e3:
                    79:e7:75:dd:dc:f1:fc:1c:27:21:f0:19:cf:18:fa:
                    29:48:33:2c:94:02:45:b3:3f:ba:5b:e5:13:cf:60:
                    90:01:e3:3b:14:aa:5d:50:c1:bf:22:a4:a3:ef:73:
                    8f:41:ae:58:92:11:94:2c:3f:66:b8:84:a0:e4:9a:
                    d2:d7:2a:05:13:5a:1e:d6:fe:53:0b:e3:fd:33:c8:
                    71:6d:25:fa:f3:05:43:76:5b:bd:b2:48:70:13:20:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:04:EB:6F:E7:02:7F:00:55:27:87:D2:FB:37:DB:EE:0B:85:74:F6
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e6:22:42:c2:7b:74:3e:af:c7:52:81:e4:20:44:46:a6:0c:
         59:b2:2a:b5:6d:69:53:4f:90:e8:c1:98:82:22:ed:37:c1:53:
         65:20:97:25:f8:55:7e:c5:20:9f:5e:74:fb:e1:60:ad:07:e2:
         6d:c1:07:9f:42:89:30:f5:04:8d:ff:78:8a:07:e5:fc:a2:97:
         24:94:15:4d:45:c9:4e:cc:ae:c1:20:fd:55:f2:b7:d5:69:ea:
         64:b5:4f:e3:05:2f:0c:05:1c:2e:31:bf:8d:95:cd:1f:80:70:
         fc:94:0a:6f:38:47:10:57:be:e7:19:39:0f:d0:11:0a:a5:5d:
         49:21:68:3b:36:60:c4:cf:aa:df:35:a2:6b:d6:8e:81:52:d7:
         87:f6:63:f6:95:14:c7:d6:4a:b0:e6:03:4b:7d:c9:1c:4e:08:
         3d:18:70:94:4c:74:12:94:f5:f4:8b:a0:20:07:51:85:be:dd:
         c2:fb:1c:b9:80:6d:6a:74:fd:43:6a:39:6b:e9:d2:62:fe:92:
         ed:f8:02:b3:ed:ac:78:94:1b:6a:6a:8a:c9:12:87:0d:64:29:
         16:7f:fe:e2:8c:f4:55:ba:81:6c:35:ff:83:2a:56:7a:6f:6b:
         eb:65:54:2c:5b:2e:0b:b8:8d:84:98:c6:62:3e:91:7a:a2:6f:
         ef:9c:63:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1mS9s4y3kfSBVZwNd/DKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz
OGVhYzEwHhcNMjUwODA0MTUwMDMwWhcNMjUwODA1MTUwMDMwWjAzMTEwLwYDVQQD
Eyg0OTA0ZWI2ZmU3MDI3ZjAwNTUyNzg3ZDJmYjM3ZGJlZTBiODU3NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHq3PCOhILCF9lONjdB/oLSrk7a8
1iHsdWAZNkx67ZnvZNbE6jg0SlivHHtWSLlsMfZjSyGoA2mJedd40EfjYtDloFc/
Ow2JPWh3HIp3nvfVnA9KgMeqsJjaAvuyaEYs7dPEaj0u67ukFlhAdYoheTD9e83w
YiI/nx1Dup+TMu0GrT7TtzUiRqoXTRI/e0NgvfzHCVmgVtt6RQKGO1/VB+/mwuN5
53Xd3PH8HCch8BnPGPopSDMslAJFsz+6W+UTz2CQAeM7FKpdUMG/IqSj73OPQa5Y
khGULD9muISg5JrS1yoFE1oe1v5TC+P9M8hxbSX68wVDdlu9skhwEyCAYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkE62/nAn8AVSeH0vs32+4LhXT2MB8GA1UdIwQY
MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt
MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm
LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeYiQsJ7
dD6vx1KB5CBERqYMWbIqtW1pU0+Q6MGYgiLtN8FTZSCXJfhVfsUgn150++FgrQfi
bcEHn0KJMPUEjf94igfl/KKXJJQVTUXJTsyuwSD9VfK31WnqZLVP4wUvDAUcLjG/
jZXNH4Bw/JQKbzhHEFe+5xk5D9ARCqVdSSFoOzZgxM+q3zWia9aOgVLXh/Zj9pUU
x9ZKsOYDS33JHE4IPRhwlEx0EpT19IugIAdRhb7dwvscuYBtanT9Q2o5a+nSYv6S
7fgCs+2seJQbamqKyRKHDWQpFn/+4oz0VbqBbDX/gypWem9r62VULFsuC7iNhJjG
Yj6ReqJv75xjrg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:20 2025 by rpki-client