Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File:                     2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier:          7ZhXnClKwExWEr2Gfs68lD9WLsnJaB5UeQzDsg+4y1o=
Subject key identifier:   09:25:10:55:24:6E:BC:61:D3:ED:98:74:09:D9:DB:03:EB:6C:42:9D
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer:       /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial:       01987BD2849939A8917EB7998F7F657923C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number:          0E9A
Signing time:             Tue 05 Aug 2025 20:00:50 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:50 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:50 +0000
Files and hashes:         1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: F7Mi3XSNT2uPU9g0FqHv+s0aWhdNYMn+9Td0mgbsF6I=)
                          2: eiMs1L-2oXZyMFT4lsivxnF_7rI.roa (hash: 0CKxvXKh07lSdtj09xAAc1IiwY6cm22Ml7wMgfzveTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:84:99:39:a8:91:7e:b7:99:8f:7f:65:79:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
        Validity
            Not Before: Aug  5 20:00:50 2025 GMT
            Not After : Aug  6 20:00:50 2025 GMT
        Subject: CN=09251055246ebc61d3ed987409d9db03eb6c429d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:7e:0b:bc:42:e5:41:7f:5f:c9:2d:75:64:
                    42:0f:b5:63:d0:52:71:0b:3a:a9:09:07:19:8e:a0:
                    01:70:29:f8:49:ce:cf:37:91:23:cf:c8:c1:34:a4:
                    f1:77:05:45:4c:f8:f5:bb:c8:f1:4d:a2:18:10:fb:
                    41:b7:16:a9:09:aa:59:67:b3:4b:88:9b:58:37:79:
                    01:d2:3f:75:da:c7:c2:05:84:44:27:37:26:5c:fc:
                    a2:b0:4c:bf:1a:83:64:6c:67:9e:b8:39:fc:50:52:
                    79:30:5f:a3:f6:ea:3e:20:d6:ce:a4:bf:dc:6c:49:
                    5a:2e:d8:28:14:7f:3b:e9:83:2a:db:b9:85:47:d0:
                    d0:7a:da:54:94:3e:24:ce:35:cf:87:9f:9e:26:2c:
                    19:41:75:b3:16:b9:46:72:c2:89:28:57:d5:b0:16:
                    7d:8d:69:70:8d:41:4a:1f:05:a9:04:c2:4f:79:03:
                    c6:1e:bf:af:9e:c1:19:e5:6d:6d:90:34:2a:dd:48:
                    c4:10:3b:a3:15:d2:d4:c3:aa:40:b5:2b:6e:3b:38:
                    6f:44:40:20:c5:51:35:5e:e4:56:f9:4f:19:2a:bc:
                    8b:f7:38:87:d7:43:6a:f8:00:e3:66:4d:48:d2:c7:
                    50:3a:db:8b:df:a4:39:ef:87:d2:ec:ea:d3:63:9d:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:10:55:24:6E:BC:61:D3:ED:98:74:09:D9:DB:03:EB:6C:42:9D
            X509v3 Authority Key Identifier:
                keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:17:c6:60:5c:2e:e8:f8:b9:73:8b:2c:52:c3:98:61:e2:
         4f:98:4c:c8:1d:82:0d:29:b4:e3:bb:f5:43:c0:5b:39:7f:04:
         8f:46:b4:27:3f:55:69:ed:e7:14:a7:14:bf:0e:2d:bd:5d:94:
         6b:06:76:66:d0:f1:b6:ce:9d:4f:a4:8f:0e:d3:f0:12:37:a4:
         ed:75:cd:a8:ba:45:cc:23:2b:c2:85:79:55:76:29:e1:42:59:
         09:fa:ea:e9:06:4a:05:71:ac:e4:4f:44:ed:c4:d8:2b:3a:55:
         7f:34:45:eb:4c:56:26:57:80:ed:82:32:00:17:d1:cc:c2:60:
         c7:92:4d:f8:fa:01:99:c0:73:97:ba:eb:62:9d:32:02:e3:4e:
         6b:3a:4a:95:0a:3b:f5:37:f7:1a:81:bc:2b:52:12:30:d3:e0:
         82:cf:4b:d1:25:7f:ae:f9:3d:bc:34:01:14:50:bc:99:bd:02:
         a2:ae:ed:57:48:ea:ac:8f:0a:ff:10:8c:23:20:f8:54:f3:d2:
         d8:1d:35:4c:5b:47:81:ff:2d:db:f0:5c:98:11:a3:96:4d:5a:
         01:72:99:1d:f6:60:53:c0:87:e4:34:9b:6f:d9:35:de:df:d7:
         ff:e6:de:19:09:8d:19:a1:36:b5:8f:ca:55:62:58:c2:df:04:
         d5:46:a2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70oSZOaiRfreZj39leSPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDY0OTE4OGFhYTQzOWQ4NTExZjcwZWJlODJiYTVlNzY2
Yzg1ZDIwHhcNMjUwODA1MjAwMDUwWhcNMjUwODA2MjAwMDUwWjAzMTEwLwYDVQQD
EygwOTI1MTA1NTI0NmViYzYxZDNlZDk4NzQwOWQ5ZGIwM2ViNmM0MjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWt+C7xC5UF/X8ktdWRCD7Vj0FJx
CzqpCQcZjqABcCn4Sc7PN5Ejz8jBNKTxdwVFTPj1u8jxTaIYEPtBtxapCapZZ7NL
iJtYN3kB0j912sfCBYREJzcmXPyisEy/GoNkbGeeuDn8UFJ5MF+j9uo+INbOpL/c
bElaLtgoFH876YMq27mFR9DQetpUlD4kzjXPh5+eJiwZQXWzFrlGcsKJKFfVsBZ9
jWlwjUFKHwWpBMJPeQPGHr+vnsEZ5W1tkDQq3UjEEDujFdLUw6pAtStuOzhvREAg
xVE1XuRW+U8ZKryL9ziH10Nq+ADjZk1I0sdQOtuL36Q574fS7OrTY52CqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAklEFUkbrxh0+2YdAnZ2wPrbEKdMB8GA1UdIwQY
MBaAFNnWSRiKqkOdhRH3Dr6Cul52bIXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMt
MWNjNmEzMWIxNGJmLzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMtMWNjNmEzMWIxNGJm
LzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnMXxmBc
Luj4uXOLLFLDmGHiT5hMyB2CDSm047v1Q8BbOX8Ej0a0Jz9Vae3nFKcUvw4tvV2U
awZ2ZtDxts6dT6SPDtPwEjek7XXNqLpFzCMrwoV5VXYp4UJZCfrq6QZKBXGs5E9E
7cTYKzpVfzRF60xWJleA7YIyABfRzMJgx5JN+PoBmcBzl7rrYp0yAuNOazpKlQo7
9Tf3GoG8K1ISMNPggs9L0SV/rvk9vDQBFFC8mb0Coq7tV0jqrI8K/xCMIyD4VPPS
2B01TFtHgf8t2/BcmBGjlk1aAXKZHfZgU8CH5DSbb9k13t/X/+beGQmNGaE2tY/K
VWJYwt8E1UaiVQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:16 2025 by rpki-client