Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File:                     fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier:          w+TwJJNKCUzFCy65dfSkuS1Xu0l0ghc1YACevLxq8KY=
Subject key identifier:   03:05:E8:35:53:C4:CD:DA:D3:C5:E9:FA:03:1B:A9:31:CE:FC:5B:A8
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer:       /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial:       0198752C070E41EFF206971C4EBE31D9683E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number:          0964
Signing time:             Mon 04 Aug 2025 13:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:16 +0000
Files and hashes:         1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
                          2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: 983vStpfR+JYp1NAvYxkdn0wKmLcC8JjZc9P1UUCJMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:07:0e:41:ef:f2:06:97:1c:4e:be:31:d9:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
        Validity
            Not Before: Aug  4 13:01:16 2025 GMT
            Not After : Aug  5 13:01:16 2025 GMT
        Subject: CN=0305e83553c4cddad3c5e9fa031ba931cefc5ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:54:5c:0a:6b:53:9c:93:91:4f:41:60:84:
                    42:35:70:ac:e3:d7:90:e8:9f:3d:43:4f:fe:0c:a8:
                    1a:69:bc:7b:ef:cd:47:0b:12:b5:67:f6:90:39:93:
                    a4:60:db:78:25:b3:3e:d8:6b:6a:3d:a8:82:ac:e5:
                    79:29:31:e8:08:61:32:20:a5:b0:57:e2:12:75:cc:
                    a0:34:21:4c:4d:aa:3f:91:31:22:c6:d1:df:77:04:
                    60:db:36:b0:79:30:a8:51:9f:f9:b6:02:29:8c:5a:
                    d5:db:cb:5a:8e:e2:38:64:a4:8b:3a:c2:e6:99:f8:
                    20:02:77:f9:73:ea:1b:4e:2e:6d:f1:52:2f:60:c6:
                    d1:73:aa:88:92:5c:4a:0b:ca:fa:26:e9:45:67:72:
                    7d:46:61:8b:b8:68:d8:0c:c0:85:7a:39:e5:18:ec:
                    c2:82:4e:7f:41:8f:78:c5:1a:b9:29:85:68:76:a2:
                    09:96:d9:39:18:f8:b6:3b:80:6c:68:50:8b:14:b7:
                    07:d7:26:3e:1f:4e:38:ff:bd:14:6c:52:7f:02:8b:
                    ee:91:08:cd:d5:c9:49:a2:91:e7:33:8a:df:b9:be:
                    15:71:a8:41:78:59:10:3d:06:e6:b2:73:9d:66:fc:
                    0b:49:9d:05:81:c2:84:0e:ee:46:65:69:1e:51:df:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:E8:35:53:C4:CD:DA:D3:C5:E9:FA:03:1B:A9:31:CE:FC:5B:A8
            X509v3 Authority Key Identifier:
                keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:65:18:5f:a6:e7:4f:a8:2f:a6:26:3e:63:dd:b3:10:ff:
         4d:24:e2:f6:32:65:7e:61:96:92:3a:93:82:bf:0d:33:53:7c:
         e6:8b:0f:94:91:94:8b:f5:b3:ae:28:6a:97:c5:7d:10:31:f6:
         37:04:23:cc:e7:08:96:44:37:8d:6c:b0:3e:d9:de:51:65:69:
         b8:2f:0f:49:3c:e4:83:b7:d9:7b:ee:6c:47:83:04:20:11:d9:
         01:46:fe:2e:03:92:82:19:cb:eb:a6:1a:d1:69:a6:eb:c3:85:
         94:4e:02:49:17:71:3f:41:78:bb:a4:37:a2:bf:fb:62:21:70:
         d5:55:47:e9:8d:d4:8f:3a:96:3d:ca:84:32:dd:e5:4c:1f:2b:
         10:6f:e3:8a:65:13:da:c0:e0:49:f9:80:1d:46:25:be:db:4b:
         48:12:e3:83:53:e6:ff:57:6e:95:e5:3a:d7:a0:28:6d:e5:1e:
         3f:33:c3:45:45:7a:b7:53:9d:d3:24:26:69:86:63:d2:7f:92:
         6e:9e:0a:7c:d3:af:63:dd:2c:21:1c:e5:0c:48:b1:4d:0e:ba:
         df:cb:eb:b0:1f:3c:3b:23:cc:ce:1b:b7:78:3a:be:e6:9c:d8:
         fe:76:72:ae:9a:0a:fc:b6:10:6a:20:33:1d:cf:6b:92:53:73:
         5b:2d:f6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1LAcOQe/yBpccTr4x2Wg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj
NWFlNDgwHhcNMjUwODA0MTMwMTE2WhcNMjUwODA1MTMwMTE2WjAzMTEwLwYDVQQD
EygwMzA1ZTgzNTUzYzRjZGRhZDNjNWU5ZmEwMzFiYTkzMWNlZmM1YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoilUXAprU5yTkU9BYIRCNXCs49eQ
6J89Q0/+DKgaabx7781HCxK1Z/aQOZOkYNt4JbM+2GtqPaiCrOV5KTHoCGEyIKWw
V+ISdcygNCFMTao/kTEixtHfdwRg2zaweTCoUZ/5tgIpjFrV28tajuI4ZKSLOsLm
mfggAnf5c+obTi5t8VIvYMbRc6qIklxKC8r6JulFZ3J9RmGLuGjYDMCFejnlGOzC
gk5/QY94xRq5KYVodqIJltk5GPi2O4BsaFCLFLcH1yY+H044/70UbFJ/AovukQjN
1clJopHnM4rfub4VcahBeFkQPQbmsnOdZvwLSZ0FgcKEDu5GZWkeUd/fFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMF6DVTxM3a08Xp+gMbqTHO/FuoMB8GA1UdIwQY
MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et
YjhhMjMyZWZmMmY2LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2
LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduZlGF+m
50+oL6YmPmPdsxD/TSTi9jJlfmGWkjqTgr8NM1N85osPlJGUi/Wzrihql8V9EDH2
NwQjzOcIlkQ3jWywPtneUWVpuC8PSTzkg7fZe+5sR4MEIBHZAUb+LgOSghnL66Ya
0Wmm68OFlE4CSRdxP0F4u6Q3or/7YiFw1VVH6Y3UjzqWPcqEMt3lTB8rEG/jimUT
2sDgSfmAHUYlvttLSBLjg1Pm/1duleU616AobeUePzPDRUV6t1Od0yQmaYZj0n+S
bp4KfNOvY90sIRzlDEixTQ6638vrsB88OyPMzhu3eDq+5pzY/nZyrpoK/LYQaiAz
Hc9rklNzWy32Eg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:00 2025 by rpki-client