Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File:                     Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier:          V8xQhp5hXkvIMBjkgOiAUaFAHNjWS5ooejVoqGGlpT8=
Subject key identifier:   5E:14:16:C8:6D:6A:18:39:33:E7:17:30:F3:19:BE:B2:88:62:80:7D
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer:       /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial:       01989592B349B81D90F89DC9EC4AA6A855A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number:          0B74
Signing time:             Sun 10 Aug 2025 20:01:15 +0000
Manifest this update:     Sun 10 Aug 2025 20:01:15 +0000
Manifest next update:     Mon 11 Aug 2025 20:01:15 +0000
Files and hashes:         1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: T9IG61XH4uYv6lE7LZlvmBh/UD+JL+zjEquOcnHM9q8=)
                          2: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (hash: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:b3:49:b8:1d:90:f8:9d:c9:ec:4a:a6:a8:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
        Validity
            Not Before: Aug 10 20:01:15 2025 GMT
            Not After : Aug 11 20:01:15 2025 GMT
        Subject: CN=5e1416c86d6a183933e71730f319beb28862807d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:b4:6f:92:55:9d:1f:49:ec:20:63:e0:c9:
                    e2:84:b8:a2:b1:e5:d4:4d:9c:df:4a:d5:10:93:f2:
                    91:b2:87:c5:72:37:04:56:03:5c:da:ab:9b:69:35:
                    0b:e8:95:c1:21:0d:8a:81:6b:3e:b4:21:2e:b5:32:
                    17:8c:56:48:06:44:35:88:cf:5a:43:87:f6:86:a7:
                    fa:47:01:eb:c9:9d:53:f9:6b:59:92:9a:af:7a:00:
                    f0:d4:07:6d:92:5f:72:40:da:d7:65:c8:b8:75:21:
                    6c:65:76:ca:5d:c4:eb:dd:5c:01:6a:5b:cd:af:52:
                    b2:72:df:98:1e:a2:c9:33:bc:68:be:89:c1:6a:a7:
                    bb:83:c0:58:50:f3:ba:c1:46:27:a5:ce:31:94:c2:
                    f8:09:ce:26:94:b0:5d:5e:25:0b:0d:01:18:0f:87:
                    d1:49:89:af:43:4a:36:02:ba:cf:c0:fd:e4:be:2d:
                    30:c1:72:94:b1:74:35:44:69:a7:28:64:c5:d3:0b:
                    7b:3e:71:47:7c:9f:f6:05:77:40:9f:72:8d:af:84:
                    8b:9d:06:4d:21:cc:a5:66:5f:11:7b:0f:3a:ac:05:
                    d5:cc:72:7c:c0:dd:9c:4b:94:7d:cf:16:65:f5:c8:
                    a5:a4:2f:f2:f0:65:ae:86:42:d3:84:0c:08:93:28:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:16:C8:6D:6A:18:39:33:E7:17:30:F3:19:BE:B2:88:62:80:7D
            X509v3 Authority Key Identifier:
                keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:30:74:83:cd:5a:d0:fd:d3:c4:07:6e:18:b7:60:f1:43:94:
         2f:36:4d:aa:a2:68:76:03:b4:af:c8:16:db:44:99:58:d1:4f:
         df:7e:22:c8:9c:94:a1:e0:53:8f:ae:18:4f:99:34:8f:76:4b:
         74:41:f8:47:a8:07:ba:9c:c7:ef:0f:7c:f0:62:0e:a1:01:d5:
         46:ba:23:8c:42:c3:fc:b5:53:9a:27:37:df:02:9d:84:05:96:
         c7:56:92:54:fe:ef:f7:41:a8:b6:10:9a:1a:8f:8e:cb:5b:09:
         23:bd:1b:f8:eb:06:c0:53:48:1b:0f:86:da:ba:b8:d0:54:00:
         6e:0c:c0:6b:ec:22:46:16:cd:37:d3:e0:e5:98:a5:34:15:b7:
         ca:ae:72:51:3f:54:e2:ed:d9:88:2c:b4:87:51:32:79:b4:18:
         29:4a:12:77:1a:ed:5a:48:a9:15:da:ce:e2:ad:03:31:0d:8c:
         a4:fa:40:80:9c:b0:86:89:8b:54:fa:e7:89:cc:31:c3:58:55:
         2a:1f:69:56:9d:ec:e9:2c:d2:33:73:5b:d1:76:f2:ba:2f:f1:
         72:39:ec:19:3e:8e:0c:bf:94:ff:0a:a9:de:b0:44:36:a6:2c:
         78:15:17:49:d4:5e:25:98:3f:76:4f:67:86:6c:88:59:71:d5:
         5c:a8:78:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkrNJuB2Q+J3J7EqmqFWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz
YmQyMjIwHhcNMjUwODEwMjAwMTE1WhcNMjUwODExMjAwMTE1WjAzMTEwLwYDVQQD
Eyg1ZTE0MTZjODZkNmExODM5MzNlNzE3MzBmMzE5YmViMjg4NjI4MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/20b5JVnR9J7CBj4MnihLiiseXU
TZzfStUQk/KRsofFcjcEVgNc2qubaTUL6JXBIQ2KgWs+tCEutTIXjFZIBkQ1iM9a
Q4f2hqf6RwHryZ1T+WtZkpqvegDw1Adtkl9yQNrXZci4dSFsZXbKXcTr3VwBalvN
r1Kyct+YHqLJM7xovonBaqe7g8BYUPO6wUYnpc4xlML4Cc4mlLBdXiULDQEYD4fR
SYmvQ0o2ArrPwP3kvi0wwXKUsXQ1RGmnKGTF0wt7PnFHfJ/2BXdAn3KNr4SLnQZN
IcylZl8Rew86rAXVzHJ8wN2cS5R9zxZl9cilpC/y8GWuhkLThAwIkyhD7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4UFshtahg5M+cXMPMZvrKIYoB9MB8GA1UdIwQY
MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt
MDRhMWY5NTQxM2Y3LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3
LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDB0g81a
0P3TxAduGLdg8UOULzZNqqJodgO0r8gW20SZWNFP334iyJyUoeBTj64YT5k0j3ZL
dEH4R6gHupzH7w988GIOoQHVRrojjELD/LVTmic33wKdhAWWx1aSVP7v90GothCa
Go+Oy1sJI70b+OsGwFNIGw+G2rq40FQAbgzAa+wiRhbNN9Pg5ZilNBW3yq5yUT9U
4u3ZiCy0h1EyebQYKUoSdxrtWkipFdrO4q0DMQ2MpPpAgJywhomLVPrnicwxw1hV
Kh9pVp3s6SzSM3Nb0Xbyui/xcjnsGT6ODL+U/wqp3rBENqYseBUXSdReJZg/dk9n
hmyIWXHVXKh4CQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:42 2025 by rpki-client