Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File:                     KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier:          f0oZfWpsv+E5L7O0Za/lyLx0uWV7J7UGFxdRHs6v0Xg=
Subject key identifier:   C0:FA:71:8F:B5:65:8A:5B:54:E8:3C:01:8E:0D:F6:FF:22:31:A7:84
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer:       /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial:       01987DF83053F84CCE60C8A12EF5921A31F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number:          0C9E
Signing time:             Wed 06 Aug 2025 06:01:13 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:13 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:13 +0000
Files and hashes:         1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: oDurQlaLvY3QbARwyScF/BocwtXoOfc8Cg02ta/UL6U=)
                          2: zXRn6qUdykmyNBlVs8F5lijyofI.roa (hash: ocGQIF9V1x5fsDLwah9aysnQL0wM33g0zDeGg9Z68IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:30:53:f8:4c:ce:60:c8:a1:2e:f5:92:1a:31:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
        Validity
            Not Before: Aug  6 06:01:13 2025 GMT
            Not After : Aug  7 06:01:13 2025 GMT
        Subject: CN=c0fa718fb5658a5b54e83c018e0df6ff2231a784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:41:4e:1d:48:82:ed:fe:7d:9e:e6:6e:de:
                    ae:b7:b9:03:2d:2b:ea:c0:bf:e7:75:60:90:31:c6:
                    5e:f0:f2:08:55:03:37:ed:a7:08:ae:02:56:83:21:
                    88:b2:ff:0e:a1:58:d7:40:a6:fc:fb:d0:9f:e8:dd:
                    85:e4:34:3b:a8:8b:70:75:87:c8:94:f5:b4:ad:a6:
                    80:05:58:0d:40:f3:cd:3a:78:fd:28:3f:5d:e6:a4:
                    79:94:c5:1e:7a:dc:29:ed:51:30:ca:f5:d9:f4:49:
                    bb:0e:8f:03:ef:08:5d:d5:71:ab:3c:36:86:63:c3:
                    68:d3:13:a0:20:1c:37:92:dc:36:ab:a7:87:64:4b:
                    35:4d:ef:d3:96:a8:99:04:76:39:63:d3:bf:b5:ed:
                    4a:69:c1:06:65:0d:77:88:3a:da:00:91:52:78:0c:
                    04:10:33:82:fe:12:6f:68:c1:dd:cf:11:84:63:61:
                    eb:28:41:38:d9:44:07:0e:66:89:c7:c4:09:21:bd:
                    5d:55:e5:6b:aa:d9:37:c4:d3:68:9d:79:a6:85:a8:
                    a5:f8:f9:83:7e:5b:06:33:54:6a:91:fc:9a:32:f8:
                    bb:88:e9:cf:e8:17:52:34:1a:be:c3:dc:a4:02:55:
                    a1:ee:ae:ee:b7:de:a0:8c:3a:54:a1:f8:3d:0e:6f:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:71:8F:B5:65:8A:5B:54:E8:3C:01:8E:0D:F6:FF:22:31:A7:84
            X509v3 Authority Key Identifier:
                keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:3d:c6:03:8d:0f:0c:77:0c:a8:9c:c7:ce:c8:bf:15:d6:
         3d:27:4b:46:a8:92:e4:49:e3:ac:5e:03:78:4d:ec:a2:1a:fb:
         d6:6e:9a:a0:a6:b0:e9:d0:e4:d2:df:cf:85:71:dc:3b:9a:54:
         17:6e:5c:5d:5f:cf:9a:0d:50:6b:f8:d3:38:cf:34:06:85:a1:
         8f:94:3f:f8:9c:d5:92:14:0d:f1:75:b5:41:84:ec:db:a7:38:
         f3:b7:44:7f:51:e4:97:a3:14:39:e7:8b:17:d2:53:fb:e2:b2:
         7a:03:68:ce:41:0d:84:f8:8d:c9:e6:71:9a:a7:28:ea:fc:64:
         58:cd:da:49:f4:6d:97:45:67:5a:0b:5d:9c:65:76:e2:eb:ed:
         7d:4b:50:7b:5c:a4:f2:0a:33:46:d3:bc:df:82:5a:5c:54:e9:
         0a:ec:8f:a3:d8:97:17:0a:bd:7f:1a:0d:b7:9a:2b:46:38:03:
         00:95:e7:a6:05:45:75:82:fd:6c:0e:79:ed:d9:6a:f4:bc:55:
         23:6c:25:04:22:9c:43:68:5a:b3:30:0c:5c:ff:43:7a:c9:4b:
         f5:cc:ab:ea:a5:d7:05:80:95:92:01:4f:1d:59:40:c1:f9:0f:
         06:97:f2:a4:6e:4a:9c:fd:91:a2:c8:2b:bf:85:93:fb:9c:fd:
         83:95:71:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+DBT+EzOYMihLvWSGjH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjBmYjRiOWFkY2IyZWNhMmIxMDZkZTBhODkzOTYxNTk2
Y2NkMTgwHhcNMjUwODA2MDYwMTEzWhcNMjUwODA3MDYwMTEzWjAzMTEwLwYDVQQD
EyhjMGZhNzE4ZmI1NjU4YTViNTRlODNjMDE4ZTBkZjZmZjIyMzFhNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji1BTh1Igu3+fZ7mbt6ut7kDLSvq
wL/ndWCQMcZe8PIIVQM37acIrgJWgyGIsv8OoVjXQKb8+9Cf6N2F5DQ7qItwdYfI
lPW0raaABVgNQPPNOnj9KD9d5qR5lMUeetwp7VEwyvXZ9Em7Do8D7whd1XGrPDaG
Y8No0xOgIBw3ktw2q6eHZEs1Te/TlqiZBHY5Y9O/te1KacEGZQ13iDraAJFSeAwE
EDOC/hJvaMHdzxGEY2HrKEE42UQHDmaJx8QJIb1dVeVrqtk3xNNonXmmhail+PmD
flsGM1RqkfyaMvi7iOnP6BdSNBq+w9ykAlWh7q7ut96gjDpUofg9Dm9LOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD6cY+1ZYpbVOg8AY4N9v8iMaeEMB8GA1UdIwQY
MBaAFCrw+0ua3LLsorEG3gqJOWFZbM0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZWRmNDEtNDhlMC00MGFkLThlN2Mt
NWU5NTRhZjFkODBlLzEvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZWRmNDEtNDhlMC00MGFkLThlN2MtNWU5NTRhZjFkODBl
LzEvS3ZEN1M1cmNzdXlpc1FiZUNvazVZVmxzelJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgI9xgON
Dwx3DKicx87IvxXWPSdLRqiS5EnjrF4DeE3sohr71m6aoKaw6dDk0t/PhXHcO5pU
F25cXV/Pmg1Qa/jTOM80BoWhj5Q/+JzVkhQN8XW1QYTs26c487dEf1Hkl6MUOeeL
F9JT++KyegNozkENhPiNyeZxmqco6vxkWM3aSfRtl0VnWgtdnGV24uvtfUtQe1yk
8gozRtO834JaXFTpCuyPo9iXFwq9fxoNt5orRjgDAJXnpgVFdYL9bA557dlq9LxV
I2wlBCKcQ2haszAMXP9DeslL9cyr6qXXBYCVkgFPHVlAwfkPBpfypG5KnP2Rosgr
v4WT+5z9g5VxsQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:26 2025 by rpki-client