Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File:                     dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier:          h1XOaJtO2pOHYdud8tdyRHC5RJ+FU8OXx90YVq2/ozE=
Subject key identifier:   1D:18:55:53:30:4C:8D:0A:1E:51:5F:85:73:82:80:E9:77:B1:BB:53
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer:       /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial:       019873E24C15CE01CC14A7DF1070EC56AD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number:          0ECC
Signing time:             Mon 04 Aug 2025 07:01:07 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:07 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:07 +0000
Files and hashes:         1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=)
                          2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: CD8eV0s7aK1nLQoLrgxYW02/POwbqltQc4UIFexB2lY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:4c:15:ce:01:cc:14:a7:df:10:70:ec:56:ad:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
        Validity
            Not Before: Aug  4 07:01:07 2025 GMT
            Not After : Aug  5 07:01:07 2025 GMT
        Subject: CN=1d185553304c8d0a1e515f85738280e977b1bb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:b0:25:56:ca:ad:30:fa:9b:9c:28:30:17:
                    ae:46:6b:9b:fe:51:ea:c8:5e:eb:d2:79:1f:ca:0e:
                    43:13:90:e0:c7:08:c5:29:3a:ce:53:53:cb:36:40:
                    f1:39:71:fb:42:5f:6d:50:95:4d:c8:00:2d:68:c0:
                    85:ef:07:5e:60:5e:dd:38:66:9b:b3:c8:ee:11:7c:
                    b6:8c:bd:25:89:3d:6b:a1:73:c1:ed:08:75:5d:44:
                    71:c9:66:1c:2f:21:59:e6:90:86:e7:8a:00:2b:1b:
                    79:29:de:af:41:e2:db:bc:91:9b:3a:55:09:f8:81:
                    1c:6f:75:e0:54:0e:44:2c:80:01:19:16:3a:34:71:
                    ea:07:5b:9a:5d:78:57:3a:b7:5c:84:d6:76:fb:28:
                    3a:bb:61:8e:9b:86:af:3d:f0:33:83:44:a9:ed:b9:
                    b2:60:b5:5b:00:d6:79:20:52:3f:86:6e:9b:0d:59:
                    88:22:43:32:68:3f:74:e1:a6:4e:54:cd:d4:2a:ac:
                    a8:4f:36:74:2b:7a:52:f3:c5:2e:0c:3f:b9:e7:8a:
                    7d:d7:c2:bf:c9:ad:a8:de:b7:f2:bf:83:7a:5d:38:
                    a3:9d:1b:fc:b6:fa:71:75:c9:2b:2b:a1:b6:e8:62:
                    24:43:ea:8d:ed:7e:2b:5a:93:4c:c3:55:38:8c:0d:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:18:55:53:30:4C:8D:0A:1E:51:5F:85:73:82:80:E9:77:B1:BB:53
            X509v3 Authority Key Identifier:
                keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:47:d4:0f:25:21:d9:cf:35:4f:cf:55:94:4e:ab:db:1a:
         ab:4b:75:50:d6:76:ac:eb:03:96:57:41:36:aa:60:6a:da:55:
         dc:fe:79:8a:a1:41:f5:c2:de:07:b1:16:34:b0:25:41:5f:03:
         b6:4c:b8:4f:ab:1e:56:b7:23:d7:26:0a:f0:b8:69:5e:2d:6e:
         10:6f:f7:90:b0:aa:25:2b:0d:a8:63:bd:a1:16:65:62:32:cf:
         34:56:9c:09:b3:c2:84:b1:a6:82:1e:52:b9:b2:70:e4:bf:7a:
         68:a1:6f:6f:e9:1d:41:77:29:42:bf:7a:04:f9:43:36:ff:f5:
         59:0b:a2:2a:8c:91:07:cd:e2:86:c6:5e:1f:a2:3d:57:55:2d:
         5e:a5:9d:90:ae:eb:bf:bc:ac:2c:74:8a:83:d3:76:7b:20:42:
         26:79:04:33:28:b6:52:2e:20:57:80:04:ee:98:13:31:ee:20:
         98:1f:a0:a8:dd:1a:42:b7:37:d1:12:ef:5d:b1:cd:58:e8:7e:
         2a:f9:66:2c:a3:21:34:51:5c:40:19:bf:49:d8:63:6b:ae:73:
         5c:29:21:53:46:03:b9:d8:e4:a3:14:5a:e9:bf:a1:42:3b:ad:
         fe:3b:45:3b:e9:43:38:5e:61:1c:18:c9:b9:fb:dc:e3:35:50:
         54:32:65:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4kwVzgHMFKffEHDsVq0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGM4ZWIwM2VmMjMyNmE2MjBkZjEwMDU0OGQxZjA2ZDg3
NDU1MWEwHhcNMjUwODA0MDcwMTA3WhcNMjUwODA1MDcwMTA3WjAzMTEwLwYDVQQD
EygxZDE4NTU1MzMwNGM4ZDBhMWU1MTVmODU3MzgyODBlOTc3YjFiYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEiwJVbKrTD6m5woMBeuRmub/lHq
yF7r0nkfyg5DE5DgxwjFKTrOU1PLNkDxOXH7Ql9tUJVNyAAtaMCF7wdeYF7dOGab
s8juEXy2jL0liT1roXPB7Qh1XURxyWYcLyFZ5pCG54oAKxt5Kd6vQeLbvJGbOlUJ
+IEcb3XgVA5ELIABGRY6NHHqB1uaXXhXOrdchNZ2+yg6u2GOm4avPfAzg0Sp7bmy
YLVbANZ5IFI/hm6bDVmIIkMyaD904aZOVM3UKqyoTzZ0K3pS88UuDD+554p918K/
ya2o3rfyv4N6XTijnRv8tvpxdckrK6G26GIkQ+qN7X4rWpNMw1U4jA09KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0YVVMwTI0KHlFfhXOCgOl3sbtTMB8GA1UdIwQY
MBaAFHZMjrA+8jJqYg3xAFSNHwbYdFUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEt
ZjNiNTBjNjVmODIwLzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEtZjNiNTBjNjVmODIw
LzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTlH1A8l
IdnPNU/PVZROq9saq0t1UNZ2rOsDlldBNqpgatpV3P55iqFB9cLeB7EWNLAlQV8D
tky4T6seVrcj1yYK8LhpXi1uEG/3kLCqJSsNqGO9oRZlYjLPNFacCbPChLGmgh5S
ubJw5L96aKFvb+kdQXcpQr96BPlDNv/1WQuiKoyRB83ihsZeH6I9V1UtXqWdkK7r
v7ysLHSKg9N2eyBCJnkEMyi2Ui4gV4AE7pgTMe4gmB+gqN0aQrc30RLvXbHNWOh+
KvlmLKMhNFFcQBm/Sdhja65zXCkhU0YDudjkoxRa6b+hQjut/jtFO+lDOF5hHBjJ
ufvc4zVQVDJl6w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:43 2025 by rpki-client