Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File:                     k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier:          Zi2TzUc5MjOE62w30j0uyanJ5a5DXomfw0o3KZWhbWM=
Subject key identifier:   CC:26:CF:84:74:B6:6F:21:52:CB:C5:0B:C0:13:54:E5:72:A4:73:DA
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer:       /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial:       019873745B739DD16603AD9ECF1F513590A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number:          0570
Signing time:             Mon 04 Aug 2025 05:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:02 +0000
Files and hashes:         1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
                          2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: +9jmNmnI7b4Fu4kL/VJlxwwdKHQXWOitzCH0mg6Cgcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:5b:73:9d:d1:66:03:ad:9e:cf:1f:51:35:90:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
        Validity
            Not Before: Aug  4 05:01:02 2025 GMT
            Not After : Aug  5 05:01:02 2025 GMT
        Subject: CN=cc26cf8474b66f2152cbc50bc01354e572a473da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:81:60:06:fd:c5:bd:4c:13:6a:48:65:9e:
                    80:a6:57:7b:0e:4b:51:61:f4:92:fb:b6:ec:07:10:
                    e1:27:1c:56:cf:34:1a:9c:78:53:36:be:f4:43:bf:
                    7d:48:ba:8d:c2:a4:af:0b:24:14:78:8c:82:96:0d:
                    37:c5:83:2b:17:86:6f:20:61:99:cd:ef:54:b8:b3:
                    87:fb:1a:3b:87:eb:84:a0:58:6b:dc:f5:14:bc:34:
                    b3:26:59:2f:d9:eb:50:df:fa:e6:ad:ec:ec:1c:6a:
                    f8:2e:3a:78:2f:75:4f:7d:a4:97:9c:08:de:69:7c:
                    32:cf:95:80:18:62:fd:80:14:af:0f:d7:e4:b9:db:
                    d1:c4:ed:16:da:c8:b9:a6:60:5d:dc:53:2e:b8:68:
                    dd:f8:9e:28:59:11:e3:b4:46:ca:74:35:69:e0:44:
                    d2:93:b3:b4:8c:36:dd:80:c1:b6:35:b6:a0:b1:48:
                    28:03:00:4e:8e:c7:88:e0:e0:8f:73:9a:8d:d2:03:
                    b1:fe:50:28:4b:4d:15:51:69:e2:d0:fe:fe:52:8e:
                    3a:68:14:64:e5:ff:24:03:fc:97:2b:9b:13:34:7d:
                    73:0f:c4:81:3a:12:96:2e:8d:61:bb:31:ba:e8:7b:
                    15:6d:6d:0f:b0:8d:20:0c:08:9f:ff:84:bc:6f:b6:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:CF:84:74:B6:6F:21:52:CB:C5:0B:C0:13:54:E5:72:A4:73:DA
            X509v3 Authority Key Identifier:
                keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:a8:04:5c:ab:ed:99:e3:fa:76:e5:e7:da:ab:99:d8:fe:
         2f:00:64:2c:d7:6c:81:17:73:2c:73:e7:cc:fb:d0:f8:34:f9:
         4c:91:fa:24:12:7d:d4:d4:c5:ad:64:7e:b5:8f:f6:a9:90:3c:
         4d:7f:1b:6b:9a:c6:d6:24:bd:09:10:48:a1:08:cb:e4:14:c7:
         f5:d6:c0:13:34:3f:ee:3b:73:be:92:9b:7d:9d:ff:9e:79:52:
         a2:2a:db:1b:fd:a1:0d:5d:74:a2:3c:cb:6e:f0:f6:0a:07:44:
         90:33:af:19:71:2d:a5:59:37:6c:59:c9:be:13:f6:e5:57:16:
         d6:25:4b:81:30:15:e3:dd:f1:0b:0b:f5:1c:87:6d:4f:a5:5e:
         2f:0f:00:8c:5e:36:51:93:0f:df:eb:3d:1a:29:0a:30:d7:17:
         5a:cf:f6:47:b5:0c:9c:f2:f5:b8:01:46:b6:42:90:c5:29:0c:
         aa:08:92:9f:68:d1:5f:57:96:ae:d8:ed:a3:03:5c:a9:09:82:
         f0:4c:22:44:9f:33:96:95:b8:ab:2e:72:96:e2:9b:0f:e7:66:
         81:2c:62:66:63:af:26:fb:b0:b4:fc:2b:11:88:f9:53:34:86:
         58:c9:88:27:f1:86:07:2e:d3:6c:61:49:d2:67:5a:47:bb:68:
         47:31:4c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdFtzndFmA62ezx9RNZCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmExYTFkOTE3YTMwNDE3MzlhMmRlZTBmNDFjY2Y4MGM1
NTRkZGUwHhcNMjUwODA0MDUwMTAyWhcNMjUwODA1MDUwMTAyWjAzMTEwLwYDVQQD
EyhjYzI2Y2Y4NDc0YjY2ZjIxNTJjYmM1MGJjMDEzNTRlNTcyYTQ3M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVeBYAb9xb1ME2pIZZ6Apld7DktR
YfSS+7bsBxDhJxxWzzQanHhTNr70Q799SLqNwqSvCyQUeIyClg03xYMrF4ZvIGGZ
ze9UuLOH+xo7h+uEoFhr3PUUvDSzJlkv2etQ3/rmrezsHGr4Ljp4L3VPfaSXnAje
aXwyz5WAGGL9gBSvD9fkudvRxO0W2si5pmBd3FMuuGjd+J4oWRHjtEbKdDVp4ETS
k7O0jDbdgMG2NbagsUgoAwBOjseI4OCPc5qN0gOx/lAoS00VUWni0P7+Uo46aBRk
5f8kA/yXK5sTNH1zD8SBOhKWLo1huzG66HsVbW0PsI0gDAif/4S8b7bgCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwmz4R0tm8hUsvFC8ATVOVypHPaMB8GA1UdIwQY
MBaAFJP6Gh2RejBBc5ot7g9BzPgMVU3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYt
ZmVkMjFlZmYyMzM4LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYtZmVkMjFlZmYyMzM4
LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6KoBFyr
7Znj+nbl59qrmdj+LwBkLNdsgRdzLHPnzPvQ+DT5TJH6JBJ91NTFrWR+tY/2qZA8
TX8ba5rG1iS9CRBIoQjL5BTH9dbAEzQ/7jtzvpKbfZ3/nnlSoirbG/2hDV10ojzL
bvD2CgdEkDOvGXEtpVk3bFnJvhP25VcW1iVLgTAV493xCwv1HIdtT6VeLw8AjF42
UZMP3+s9GikKMNcXWs/2R7UMnPL1uAFGtkKQxSkMqgiSn2jRX1eWrtjtowNcqQmC
8EwiRJ8zlpW4qy5yluKbD+dmgSxiZmOvJvuwtPwrEYj5UzSGWMmIJ/GGBy7TbGFJ
0mdaR7toRzFMSA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:44 2025 by rpki-client