Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File:                     dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier:          24TkyG/fAWEHSbXcTeEEg2QV3oFLzXnAi/EjUrAaUVs=
Subject key identifier:   DD:E7:89:30:84:59:69:15:E7:CA:E1:8A:68:6A:8F:F8:F3:E9:39:14
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer:       /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial:       019872982692DD755EF46307F7D3923D5D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 01:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:30 +0000
Files and hashes:         1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: SkKcnsEtS36fk9ot9qmPdMJ90IvMHQRGDJ+XeF6bt4g=)
                          2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:26:92:dd:75:5e:f4:63:07:f7:d3:92:3d:5d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
        Validity
            Not Before: Aug  4 01:00:30 2025 GMT
            Not After : Aug  5 01:00:30 2025 GMT
        Subject: CN=dde7893084596915e7cae18a686a8ff8f3e93914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:d5:82:52:b8:d2:b8:13:f1:bf:cb:54:ac:
                    9d:90:04:7b:2d:fb:0f:1e:8f:05:75:1a:60:fc:18:
                    6e:6f:0d:ba:67:37:59:1a:88:4c:d4:4d:dd:02:ce:
                    a1:9a:78:04:12:c7:b2:3d:a2:e6:b6:d5:16:10:13:
                    7c:18:32:13:6b:d2:78:8d:15:ee:0e:0e:84:78:32:
                    96:5e:46:6c:27:a3:4a:d6:58:c7:b1:18:72:e4:98:
                    ab:36:b3:95:e6:53:93:df:d8:40:d4:b4:e4:d8:7f:
                    21:d5:53:9b:1f:b2:21:3e:72:fa:75:61:ef:ba:c5:
                    c2:0b:d2:59:62:b9:7e:f7:56:24:3a:84:c8:d1:26:
                    b6:53:ee:87:51:be:b4:3d:3f:5b:22:7c:03:2a:22:
                    72:93:3d:e6:08:95:ed:65:c6:0a:b6:40:3e:1a:4f:
                    79:35:b5:fb:ea:c1:b3:2d:74:ea:01:f6:06:70:8f:
                    69:14:7d:a2:5f:84:f2:a4:d7:de:f1:e1:8a:9e:03:
                    f2:ac:b3:12:11:81:8a:6e:2a:9a:fe:a6:1c:d8:8b:
                    1c:8e:fd:22:30:fb:12:6f:bc:4e:2b:9d:bf:34:6c:
                    f9:51:99:a9:61:df:dd:41:4c:0f:51:b0:b2:d1:f1:
                    b5:fb:91:23:bf:a2:ab:39:a0:d4:39:b7:31:39:6f:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:89:30:84:59:69:15:E7:CA:E1:8A:68:6A:8F:F8:F3:E9:39:14
            X509v3 Authority Key Identifier:
                keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4a:be:7b:2e:b1:96:23:2c:23:84:47:56:78:4e:91:95:33:
         31:86:7d:c9:71:53:2d:b0:21:06:68:58:19:11:fe:f8:fe:53:
         2d:5b:e1:db:27:ae:2c:b8:74:68:d9:92:4f:27:70:49:8d:67:
         30:6c:bf:e9:48:a0:fe:46:03:8a:8a:57:0f:92:41:72:15:4b:
         e5:ef:6c:5b:7f:d8:c5:23:a3:43:51:c2:f9:50:76:92:53:5d:
         18:f5:aa:4e:fa:ef:b7:8c:59:9a:86:b2:04:44:ce:bf:de:ed:
         a1:1a:5d:c4:38:03:ee:ba:a7:a7:a3:30:20:40:1d:37:52:03:
         4a:a4:12:5e:f7:4d:67:99:0a:83:58:ea:5a:df:2f:8e:41:76:
         26:5f:9e:68:c6:13:ee:55:1b:d2:04:be:4f:b8:e1:db:fc:d5:
         3b:08:85:44:4b:a1:b0:11:be:e2:bd:65:2f:4f:b5:5a:d6:d2:
         e7:a3:55:6d:3b:3a:2d:83:db:a6:1f:b7:49:bf:7d:6a:62:fa:
         d0:1b:51:f5:91:9d:78:d5:be:68:b9:64:cb:41:2e:ab:0a:ce:
         66:e8:7d:43:92:24:6f:ab:4c:14:ea:01:79:6b:2d:45:77:84:
         11:ff:c6:90:52:21:ab:d7:54:ad:48:2b:99:73:dd:1f:fb:7b:
         08:19:30:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymCaS3XVe9GMH99OSPV0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MjQ1NDM4YTJiNjIwOWM4MTY3NWVmMzU3ODNkODlhMTli
NzA3ZmEwHhcNMjUwODA0MDEwMDMwWhcNMjUwODA1MDEwMDMwWjAzMTEwLwYDVQQD
EyhkZGU3ODkzMDg0NTk2OTE1ZTdjYWUxOGE2ODZhOGZmOGYzZTkzOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR/VglK40rgT8b/LVKydkAR7LfsP
Ho8FdRpg/Bhubw26ZzdZGohM1E3dAs6hmngEEseyPaLmttUWEBN8GDITa9J4jRXu
Dg6EeDKWXkZsJ6NK1ljHsRhy5JirNrOV5lOT39hA1LTk2H8h1VObH7IhPnL6dWHv
usXCC9JZYrl+91YkOoTI0Sa2U+6HUb60PT9bInwDKiJykz3mCJXtZcYKtkA+Gk95
NbX76sGzLXTqAfYGcI9pFH2iX4TypNfe8eGKngPyrLMSEYGKbiqa/qYc2Iscjv0i
MPsSb7xOK52/NGz5UZmpYd/dQUwPUbCy0fG1+5Ejv6KrOaDUObcxOW/EQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3niTCEWWkV58rhimhqj/jz6TkUMB8GA1UdIwQY
MBaAFHUkVDiitiCcgWde81eD2JoZtwf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAt
NWVlMTg1ODhkZjU5LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAtNWVlMTg1ODhkZjU5
LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0q+ey6x
liMsI4RHVnhOkZUzMYZ9yXFTLbAhBmhYGRH++P5TLVvh2yeuLLh0aNmSTydwSY1n
MGy/6Uig/kYDiopXD5JBchVL5e9sW3/YxSOjQ1HC+VB2klNdGPWqTvrvt4xZmoay
BETOv97toRpdxDgD7rqnp6MwIEAdN1IDSqQSXvdNZ5kKg1jqWt8vjkF2Jl+eaMYT
7lUb0gS+T7jh2/zVOwiFREuhsBG+4r1lL0+1WtbS56NVbTs6LYPbph+3Sb99amL6
0BtR9ZGdeNW+aLlky0EuqwrOZuh9Q5Ikb6tMFOoBeWstRXeEEf/GkFIhq9dUrUgr
mXPdH/t7CBkwiQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:24 2025 by rpki-client