Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File:                     DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier:          ri8SIBFYWmSbygMmzuLY/DLlAkgwxgiRunBs30lu4ns=
Subject key identifier:   D5:1F:D4:04:C4:E6:E9:52:EC:C2:D7:55:82:20:F7:68:78:ED:E0:D6
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer:       /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial:       019880C2827CB707598182DCCB421718DD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number:          1350
Signing time:             Wed 06 Aug 2025 19:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:27 +0000
Files and hashes:         1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: 92vKdoWzWOnmzUPpkKH0vy+0CHgbm1roZcigPcefo90=)
                          2: p1mXcIQxL77L_jQGXA_KIyns_RU.roa (hash: z0OqGXTq8kuCQJixhA0eSGU0mlbhHaHOLMCmElSbQgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:82:7c:b7:07:59:81:82:dc:cb:42:17:18:dd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
        Validity
            Not Before: Aug  6 19:01:27 2025 GMT
            Not After : Aug  7 19:01:27 2025 GMT
        Subject: CN=d51fd404c4e6e952ecc2d7558220f76878ede0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:80:c7:36:1c:4f:1e:03:5e:35:22:49:fb:
                    ba:3e:d5:07:8b:6d:38:7e:95:2e:71:8e:1e:e7:9e:
                    a4:a5:73:b6:c6:c0:69:2b:64:45:17:6c:75:4d:57:
                    1e:f1:4b:78:92:0b:a4:f4:43:93:92:9f:d6:b9:ca:
                    0e:86:08:3c:4f:39:e9:cf:fb:ce:01:0a:49:31:a9:
                    08:4c:00:fe:42:b2:c2:38:fd:55:80:a4:8c:b1:3c:
                    5e:8e:b8:38:1a:05:39:48:ce:1b:fa:43:62:c6:b8:
                    42:be:22:a3:34:69:5b:6b:10:40:9e:9d:10:9a:a0:
                    75:60:82:52:af:a3:11:3a:81:09:65:5d:25:3a:a8:
                    87:03:6f:16:96:42:a1:47:a3:81:dc:35:10:86:08:
                    6c:91:c1:30:99:44:60:48:c1:f2:18:9b:00:83:9a:
                    c9:c5:38:df:27:24:60:ca:41:c8:e8:67:f3:c0:40:
                    ec:06:e3:1f:87:67:2e:29:ea:a3:df:23:dd:a9:14:
                    e8:09:3b:b6:81:84:c3:96:1c:0b:89:af:25:0a:15:
                    c1:03:60:02:57:6a:3b:47:44:7f:3b:d6:1c:6d:6b:
                    83:07:77:ca:8f:bb:fd:cf:82:f5:ee:e0:a9:1f:e8:
                    fe:af:55:4e:99:3b:8b:15:44:f8:b5:8c:0a:28:28:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1F:D4:04:C4:E6:E9:52:EC:C2:D7:55:82:20:F7:68:78:ED:E0:D6
            X509v3 Authority Key Identifier:
                keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:f6:ad:a5:51:4f:6c:c2:9f:d8:64:08:4d:92:31:4d:8f:
         c4:32:88:32:b1:f3:05:e3:f8:20:28:83:f4:73:b6:2e:ea:6b:
         27:e5:ae:bf:6c:33:4a:92:2c:1e:1b:f8:98:bd:57:5d:03:d3:
         a1:e9:20:0a:a7:4e:ef:60:a2:c1:84:4a:5d:04:d5:db:3b:35:
         75:d7:af:ff:73:43:e6:13:0b:05:3b:97:b1:7b:f1:04:44:aa:
         e2:e1:45:cc:f6:24:07:cd:35:ea:4b:cf:91:ae:fe:d3:9e:a7:
         10:d1:e8:59:fe:e9:8a:62:d3:24:b9:d7:7b:f9:a2:73:a5:eb:
         06:01:5d:88:4b:62:18:0f:d7:14:6e:00:d3:c5:ca:db:d2:7c:
         13:7b:cd:75:61:7a:f7:29:4d:1a:50:eb:81:ea:b5:4d:5a:63:
         e9:f9:37:3e:61:99:e1:e0:2a:c5:93:76:97:49:29:fe:85:3c:
         f7:58:36:ae:40:1f:38:ad:b9:9d:45:c8:08:9d:6e:33:6d:f2:
         d8:74:c6:88:04:d2:64:09:e4:4a:a5:09:0d:43:cd:48:55:30:
         62:b2:c8:fd:9b:98:13:36:76:3d:0c:ca:f7:f9:7c:3a:27:9a:
         a0:96:2d:03:bd:af:67:f2:df:61:10:cf:6c:22:a4:28:cd:4c:
         d5:14:ac:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwoJ8twdZgYLcy0IXGN18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGMwN2ZkYTZmNGQ1NWI3YzgxODJjOTI5YTNjNGFjM2Mw
YTgyZmQwHhcNMjUwODA2MTkwMTI3WhcNMjUwODA3MTkwMTI3WjAzMTEwLwYDVQQD
EyhkNTFmZDQwNGM0ZTZlOTUyZWNjMmQ3NTU4MjIwZjc2ODc4ZWRlMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0+AxzYcTx4DXjUiSfu6PtUHi204
fpUucY4e556kpXO2xsBpK2RFF2x1TVce8Ut4kguk9EOTkp/WucoOhgg8Tznpz/vO
AQpJMakITAD+QrLCOP1VgKSMsTxejrg4GgU5SM4b+kNixrhCviKjNGlbaxBAnp0Q
mqB1YIJSr6MROoEJZV0lOqiHA28WlkKhR6OB3DUQhghskcEwmURgSMHyGJsAg5rJ
xTjfJyRgykHI6GfzwEDsBuMfh2cuKeqj3yPdqRToCTu2gYTDlhwLia8lChXBA2AC
V2o7R0R/O9YcbWuDB3fKj7v9z4L17uCpH+j+r1VOmTuLFUT4tYwKKCiZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUf1ATE5ulS7MLXVYIg92h47eDWMB8GA1UdIwQY
MBaAFAzcB/2m9NVbfIGCySmjxKw8CoL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZjEwNzgtZDE5Ni00NmE1LWE3NDEt
ZWQzMWU0M2YxZTA4LzEvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mZjEwNzgtZDE5Ni00NmE1LWE3NDEtZWQzMWU0M2YxZTA4
LzEvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITj2raVR
T2zCn9hkCE2SMU2PxDKIMrHzBeP4ICiD9HO2LuprJ+Wuv2wzSpIsHhv4mL1XXQPT
oekgCqdO72CiwYRKXQTV2zs1ddev/3ND5hMLBTuXsXvxBESq4uFFzPYkB8016kvP
ka7+056nENHoWf7pimLTJLnXe/mic6XrBgFdiEtiGA/XFG4A08XK29J8E3vNdWF6
9ylNGlDrgeq1TVpj6fk3PmGZ4eAqxZN2l0kp/oU891g2rkAfOK25nUXICJ1uM23y
2HTGiATSZAnkSqUJDUPNSFUwYrLI/ZuYEzZ2PQzK9/l8OieaoJYtA72vZ/LfYRDP
bCKkKM1M1RSssg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:02 2025 by rpki-client