Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File:                     lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier:          ROztKpGedc+234e2zC/71YAoXnEvFpNktpDvFz9q9u4=
Subject key identifier:   0C:3E:80:3A:86:6B:D9:76:8C:84:C4:26:61:A3:1E:05:56:10:20:9F
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer:       /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial:       01988B7CBDEBBA9F84E5526191D6F9B48DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number:          13C4
Signing time:             Fri 08 Aug 2025 21:01:04 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:04 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:04 +0000
Files and hashes:         1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
                          2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
                          3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: TYL+z7u4HtfZ4c1bR6u7dAOtbOHfbO3f3yCBltruJA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:bd:eb:ba:9f:84:e5:52:61:91:d6:f9:b4:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
        Validity
            Not Before: Aug  8 21:01:04 2025 GMT
            Not After : Aug  9 21:01:04 2025 GMT
        Subject: CN=0c3e803a866bd9768c84c42661a31e055610209f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:fd:37:fd:83:06:a3:4f:2f:71:fa:b2:5d:
                    a6:71:e6:8e:42:4c:8a:b0:23:02:45:d9:95:5e:94:
                    65:f7:17:23:1e:e9:a1:60:3a:c8:57:c9:68:c6:5e:
                    b4:65:02:97:76:7e:c0:e4:e7:1e:7e:8e:49:ea:52:
                    47:e2:0b:e1:2d:a8:d2:78:6a:4c:93:32:1c:c0:fc:
                    9d:6b:ea:bb:24:66:ea:3c:2d:e2:25:9c:35:f0:d7:
                    ec:1a:99:fb:0c:93:cd:eb:84:3a:ac:ce:b0:97:07:
                    a8:11:18:29:18:a8:a9:29:c0:01:be:a8:14:3c:d1:
                    fd:b5:75:b5:cb:2c:18:b5:b3:10:80:b7:ec:68:f9:
                    a0:dd:59:a4:08:b0:c5:dc:ce:48:49:1f:9b:0c:08:
                    dc:f7:15:f1:15:b6:cd:b6:2f:5a:55:7e:89:ce:1a:
                    77:34:ba:c7:fb:83:9a:30:d4:4b:d8:18:e1:4b:46:
                    0d:ee:fc:c2:bf:67:54:fe:80:63:0d:16:f2:ee:65:
                    9b:b6:f5:a4:47:a5:91:47:e9:76:51:17:50:f9:24:
                    d1:ae:cf:4c:5d:1b:c3:e6:10:f2:16:d8:ad:c7:34:
                    9f:e3:61:99:02:09:85:16:8c:97:18:06:29:b7:36:
                    94:68:cb:e4:57:24:96:1c:22:b2:ef:98:b7:0f:a4:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:80:3A:86:6B:D9:76:8C:84:C4:26:61:A3:1E:05:56:10:20:9F
            X509v3 Authority Key Identifier:
                keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:43:75:5f:ff:24:f3:f4:83:84:86:f9:97:57:36:c4:15:2b:
         7d:9c:e5:11:7b:1e:d3:82:c1:3f:6f:87:4b:e9:c8:fe:26:11:
         27:6c:17:48:f3:fd:fa:6e:a7:75:82:c5:74:01:cd:a4:4a:25:
         da:d0:74:b2:be:68:79:4c:23:0c:86:15:0f:d2:91:35:59:18:
         6c:ee:c0:41:76:a6:20:e9:f4:7e:cb:cf:75:7c:41:35:14:88:
         f2:c7:d0:75:35:d1:8f:a0:3b:66:c7:66:19:94:d2:a8:db:7b:
         a7:cb:7a:bd:8e:80:3c:3f:1e:7c:af:f2:8b:8d:ba:50:89:4a:
         c1:1f:a3:36:0f:d0:32:af:a0:d6:9d:6c:36:73:4d:21:d5:d4:
         2e:4c:be:61:00:b3:e3:87:26:10:18:36:3f:8f:e1:ef:77:ed:
         6f:50:e7:12:65:f9:37:77:43:18:6b:c3:bc:21:a6:7d:b0:1f:
         66:50:e2:3e:12:67:79:f4:b6:7e:91:cf:e8:7f:ae:31:39:a0:
         36:ac:6c:e9:97:2b:a9:b0:21:bc:2f:b7:d9:c2:97:8c:65:4b:
         16:df:de:5d:13:63:c7:39:c8:16:1a:2f:15:26:13:70:a3:2c:
         62:29:c9:30:37:a9:79:f6:82:e5:4e:fa:91:16:b9:f8:fd:ee:
         ba:b5:a7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfL3rup+E5VJhkdb5tI3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZmYTZhOTBlZDk0ZTIyMWRiNjlkMjFmY2RkYTdjNjZk
MTNjOTEwHhcNMjUwODA4MjEwMTA0WhcNMjUwODA5MjEwMTA0WjAzMTEwLwYDVQQD
EygwYzNlODAzYTg2NmJkOTc2OGM4NGM0MjY2MWEzMWUwNTU2MTAyMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65z9N/2DBqNPL3H6sl2mceaOQkyK
sCMCRdmVXpRl9xcjHumhYDrIV8loxl60ZQKXdn7A5Ocefo5J6lJH4gvhLajSeGpM
kzIcwPyda+q7JGbqPC3iJZw18NfsGpn7DJPN64Q6rM6wlweoERgpGKipKcABvqgU
PNH9tXW1yywYtbMQgLfsaPmg3VmkCLDF3M5ISR+bDAjc9xXxFbbNti9aVX6Jzhp3
NLrH+4OaMNRL2BjhS0YN7vzCv2dU/oBjDRby7mWbtvWkR6WRR+l2URdQ+STRrs9M
XRvD5hDyFtitxzSf42GZAgmFFoyXGAYptzaUaMvkVySWHCKy75i3D6T1MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw+gDqGa9l2jITEJmGjHgVWECCfMB8GA1UdIwQY
MBaAFJQW+mqQ7ZTiIdtp0h/N2nxm0TyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYt
N2RlOTEwZTAwYmVkLzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYtN2RlOTEwZTAwYmVk
LzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUN1X/8k
8/SDhIb5l1c2xBUrfZzlEXse04LBP2+HS+nI/iYRJ2wXSPP9+m6ndYLFdAHNpEol
2tB0sr5oeUwjDIYVD9KRNVkYbO7AQXamIOn0fsvPdXxBNRSI8sfQdTXRj6A7Zsdm
GZTSqNt7p8t6vY6APD8efK/yi426UIlKwR+jNg/QMq+g1p1sNnNNIdXULky+YQCz
44cmEBg2P4/h73ftb1DnEmX5N3dDGGvDvCGmfbAfZlDiPhJnefS2fpHP6H+uMTmg
Nqxs6ZcrqbAhvC+32cKXjGVLFt/eXRNjxznIFhovFSYTcKMsYinJMDepefaC5U76
kRa5+P3uurWnDA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:05 2025 by rpki-client