Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          3028wmzK7AlqlBdVlWR66M2hAf7bCta8vVWJYb/8mXo=
Subject key identifier:   87:4A:86:6C:D0:B0:EE:54:E3:D2:05:E2:86:00:3C:3F:A6:8A:5D:53
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       01987ABF8B677D538B95AE0860834497B661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          078A
Signing time:             Tue 05 Aug 2025 15:00:30 +0000
Manifest this update:     Tue 05 Aug 2025 15:00:30 +0000
Manifest next update:     Wed 06 Aug 2025 15:00:30 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: pWpFpKCw3nnP7x1tgUrxyNMsAc6sjzo8zIT6/DQEELE=)
                          2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
                          3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
                          4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:bf:8b:67:7d:53:8b:95:ae:08:60:83:44:97:b6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Aug  5 15:00:30 2025 GMT
            Not After : Aug  6 15:00:30 2025 GMT
        Subject: CN=874a866cd0b0ee54e3d205e286003c3fa68a5d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:73:c8:20:9c:0b:c9:fb:37:90:6d:b6:8b:
                    13:19:f8:78:35:cd:67:9e:1f:96:77:5d:3c:b3:b8:
                    3d:14:25:74:eb:77:0d:72:27:8e:d1:9d:6e:0a:e0:
                    c7:20:f6:69:96:1a:de:48:bf:b3:93:cb:8a:00:3a:
                    75:36:d6:ec:d8:ac:4e:af:73:f8:bc:7e:f4:02:0e:
                    ba:8b:30:0a:dd:51:fe:39:c8:c5:38:b9:18:65:0e:
                    3a:7d:52:f1:2b:58:0a:1c:76:01:ba:ab:99:bf:e2:
                    52:d0:27:42:7f:73:0e:58:40:4b:b2:08:d3:13:42:
                    fd:1c:69:ef:f9:35:fa:7f:d6:8e:4e:51:39:73:ef:
                    6e:22:66:b2:71:f7:2c:f5:c4:fe:98:d8:b7:d8:4d:
                    35:de:8c:f6:ab:2f:50:ec:18:86:72:68:81:37:a3:
                    f1:74:95:c7:8f:5c:e2:ea:9a:78:d1:c0:35:da:83:
                    d2:84:d0:1c:c7:d8:1b:7d:75:4a:70:67:05:98:84:
                    84:0f:7d:3d:ef:b0:a3:35:ed:19:50:a8:40:3e:eb:
                    a1:64:81:68:9a:8a:6e:27:c2:e3:a8:de:a1:51:35:
                    48:e6:36:4e:ad:03:a3:1c:6c:ff:12:d9:07:d3:17:
                    39:ee:89:fc:fd:98:2d:19:35:a5:c2:4d:89:37:7d:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:86:6C:D0:B0:EE:54:E3:D2:05:E2:86:00:3C:3F:A6:8A:5D:53
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:c9:80:83:e3:e3:61:b2:1d:b2:10:b9:aa:bb:c8:95:dc:
         51:1f:cd:8a:b2:50:1b:5b:7d:b0:fd:65:e7:ec:69:cf:1d:49:
         2d:38:71:a5:d9:ef:31:e2:76:fc:13:8a:36:06:a7:10:4d:64:
         e9:14:0b:2b:f3:6d:95:ad:52:9d:7b:a7:ac:91:7c:63:e1:f9:
         0b:b2:8d:ca:0d:c1:a3:ed:5b:ec:00:00:e7:1e:b5:e4:2c:46:
         81:ee:7f:00:43:32:cf:2c:8a:ac:52:92:04:b4:ff:e6:c7:fb:
         c5:a7:ff:c0:48:ec:bc:d6:9f:ee:c3:10:2e:d8:97:4f:b9:96:
         a1:fd:59:54:7a:a4:ba:1d:2b:95:5f:7b:2d:5c:a1:3f:4b:cf:
         dd:3b:27:fd:25:d0:f0:d4:0f:5b:b4:5f:dc:d6:c4:8b:b5:07:
         57:3c:88:8e:18:33:93:61:72:50:5a:ee:da:3c:a5:74:91:41:
         8e:b3:6c:a7:4b:7e:58:5b:99:58:cd:53:27:5c:df:93:1b:df:
         40:7d:b9:6d:11:8a:d9:7c:18:f9:36:a7:29:6d:92:5a:5d:43:
         ec:60:1e:d3:3e:78:26:91:36:01:1e:b0:52:49:7f:3b:30:e3:
         49:dc:f8:ae:19:9a:7e:ad:64:46:20:99:24:bd:fb:ff:d8:b1:
         33:67:10:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v4tnfVOLla4IYINEl7ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm
OWMxNjgwHhcNMjUwODA1MTUwMDMwWhcNMjUwODA2MTUwMDMwWjAzMTEwLwYDVQQD
Eyg4NzRhODY2Y2QwYjBlZTU0ZTNkMjA1ZTI4NjAwM2MzZmE2OGE1ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1hzyCCcC8n7N5BttosTGfh4Nc1n
nh+Wd108s7g9FCV063cNcieO0Z1uCuDHIPZplhreSL+zk8uKADp1Ntbs2KxOr3P4
vH70Ag66izAK3VH+OcjFOLkYZQ46fVLxK1gKHHYBuquZv+JS0CdCf3MOWEBLsgjT
E0L9HGnv+TX6f9aOTlE5c+9uImaycfcs9cT+mNi32E013oz2qy9Q7BiGcmiBN6Px
dJXHj1zi6pp40cA12oPShNAcx9gbfXVKcGcFmISED30977CjNe0ZUKhAPuuhZIFo
mopuJ8LjqN6hUTVI5jZOrQOjHGz/EtkH0xc57on8/ZgtGTWlwk2JN304lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdKhmzQsO5U49IF4oYAPD+mil1TMB8GA1UdIwQY
MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct
YTJkNjM2ZjMyNWU2LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2
LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6XJgIPj
42GyHbIQuaq7yJXcUR/NirJQG1t9sP1l5+xpzx1JLThxpdnvMeJ2/BOKNganEE1k
6RQLK/Ntla1SnXunrJF8Y+H5C7KNyg3Bo+1b7AAA5x615CxGge5/AEMyzyyKrFKS
BLT/5sf7xaf/wEjsvNaf7sMQLtiXT7mWof1ZVHqkuh0rlV97LVyhP0vP3Tsn/SXQ
8NQPW7Rf3NbEi7UHVzyIjhgzk2FyUFru2jyldJFBjrNsp0t+WFuZWM1TJ1zfkxvf
QH25bRGK2XwY+TanKW2SWl1D7GAe0z54JpE2AR6wUkl/OzDjSdz4rhmafq1kRiCZ
JL37/9ixM2cQgg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:17 2025 by rpki-client