Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File:                     u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier:          HvkHc5Vlr+toZ4dgu+SgVqjN/v1UhtfYY2CATxDluq4=
Subject key identifier:   76:00:19:5A:1F:12:52:BB:03:6C:3F:F4:42:F5:16:72:35:BD:0E:06
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer:       /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial:       0198808B258AB5531F25A55CFFB9F8204D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number:          03F8
Signing time:             Wed 06 Aug 2025 18:00:59 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:59 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:59 +0000
Files and hashes:         1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
                          2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: 01aI7fsvZvfntG/iX4/BdiJkyw+27paVlItv3cnnBwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:25:8a:b5:53:1f:25:a5:5c:ff:b9:f8:20:4d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
        Validity
            Not Before: Aug  6 18:00:59 2025 GMT
            Not After : Aug  7 18:00:59 2025 GMT
        Subject: CN=7600195a1f1252bb036c3ff442f5167235bd0e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:00:03:2a:cd:cf:ab:45:5e:d5:12:c5:06:
                    5a:df:2e:67:5f:a9:62:87:01:5d:07:ca:17:28:ba:
                    df:78:ab:3e:3f:3f:b3:8a:c4:69:e1:6a:2f:8b:08:
                    03:fe:05:67:27:58:06:83:3a:a3:4f:17:a8:dd:74:
                    cc:82:ac:b5:e3:24:fb:c3:fa:5a:e6:18:01:8e:0d:
                    55:f6:2f:35:ee:4e:11:e4:38:f7:ee:ee:3d:a6:df:
                    d8:65:fd:59:62:98:10:4f:1a:da:4b:58:3c:33:fd:
                    db:62:9d:31:83:a3:c8:3a:83:f4:8e:78:63:bd:c3:
                    fa:86:40:0d:2b:5e:a9:65:72:21:67:f9:93:15:d1:
                    5c:b4:7d:c2:5a:f5:14:3e:44:0a:5d:87:f5:7f:83:
                    1e:76:d5:88:aa:05:1a:f3:3a:aa:6e:9f:25:7e:91:
                    68:dd:0d:f2:1f:c0:ac:be:da:91:d2:f8:df:26:55:
                    2c:02:82:98:50:09:64:ff:90:9f:0e:40:5a:02:e5:
                    a4:ed:0a:95:87:3d:5f:d2:c1:43:cf:53:e8:61:9e:
                    b4:72:2c:3c:89:5a:87:b6:3d:ef:4f:84:b3:53:02:
                    0f:30:6d:cd:e7:10:51:c7:db:43:fe:9d:94:a2:d2:
                    3b:47:fd:42:5a:00:f1:40:66:56:f8:52:ed:dc:c4:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:00:19:5A:1F:12:52:BB:03:6C:3F:F4:42:F5:16:72:35:BD:0E:06
            X509v3 Authority Key Identifier:
                keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:11:85:fa:1c:95:bc:d1:d2:21:a3:e7:d6:c6:6b:53:84:
         b9:21:53:18:3d:d7:8b:db:37:b3:27:14:92:ca:a6:47:ae:71:
         41:9e:3f:b4:fe:67:fe:63:42:2a:37:38:73:96:c6:64:1f:fa:
         3f:d7:a6:eb:39:25:ca:18:97:6c:ed:7a:95:d2:9e:a7:bc:ba:
         31:98:ff:11:04:51:33:ba:6d:30:41:cc:56:a8:36:e5:96:9b:
         4a:62:35:79:37:a2:b3:3e:10:e1:d3:bf:1c:fd:fd:80:58:d9:
         e9:37:50:6d:80:22:b4:74:05:58:0b:4e:74:63:73:01:a7:1a:
         52:89:41:ab:bd:7f:ca:16:ca:a5:9b:5c:03:91:2f:1a:9c:b9:
         09:71:38:9e:a2:b8:eb:cc:42:9c:5d:4a:25:d7:57:d3:52:e3:
         72:be:ae:9f:97:2f:ad:14:70:86:55:d6:e6:21:a1:a4:78:dd:
         1e:7a:a4:9a:3b:38:90:3d:10:98:b6:fa:66:93:c5:35:93:d2:
         a8:2d:e1:51:1f:e2:56:c0:cd:a8:a4:5c:60:b9:56:7d:2f:f7:
         02:ba:e4:b3:47:7c:fc:56:2b:41:55:e4:75:85:2d:87:95:4d:
         20:f5:73:31:3d:37:e2:a4:bd:a9:0d:73:38:f8:c7:93:83:39:
         f5:ec:af:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAiyWKtVMfJaVc/7n4IE10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTM2OTMzZGMzYWEwM2IzZGFhMDZlNWIzODczZjM1YmRh
YjU1ZDIwHhcNMjUwODA2MTgwMDU5WhcNMjUwODA3MTgwMDU5WjAzMTEwLwYDVQQD
Eyg3NjAwMTk1YTFmMTI1MmJiMDM2YzNmZjQ0MmY1MTY3MjM1YmQwZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+EAAyrNz6tFXtUSxQZa3y5nX6li
hwFdB8oXKLrfeKs+Pz+zisRp4WoviwgD/gVnJ1gGgzqjTxeo3XTMgqy14yT7w/pa
5hgBjg1V9i817k4R5Dj37u49pt/YZf1ZYpgQTxraS1g8M/3bYp0xg6PIOoP0jnhj
vcP6hkANK16pZXIhZ/mTFdFctH3CWvUUPkQKXYf1f4MedtWIqgUa8zqqbp8lfpFo
3Q3yH8CsvtqR0vjfJlUsAoKYUAlk/5CfDkBaAuWk7QqVhz1f0sFDz1PoYZ60ciw8
iVqHtj3vT4SzUwIPMG3N5xBRx9tD/p2UotI7R/1CWgDxQGZW+FLt3MSDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYAGVofElK7A2w/9EL1FnI1vQ4GMB8GA1UdIwQY
MBaAFLuTaTPcOqA7PaoG5bOHPzW9q1XSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgt
MGMzM2UxMjY0ZDdmLzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgtMGMzM2UxMjY0ZDdm
LzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPYRhfoc
lbzR0iGj59bGa1OEuSFTGD3Xi9s3sycUksqmR65xQZ4/tP5n/mNCKjc4c5bGZB/6
P9em6zklyhiXbO16ldKep7y6MZj/EQRRM7ptMEHMVqg25ZabSmI1eTeisz4Q4dO/
HP39gFjZ6TdQbYAitHQFWAtOdGNzAacaUolBq71/yhbKpZtcA5EvGpy5CXE4nqK4
68xCnF1KJddX01Ljcr6un5cvrRRwhlXW5iGhpHjdHnqkmjs4kD0QmLb6ZpPFNZPS
qC3hUR/iVsDNqKRcYLlWfS/3Arrks0d8/FYrQVXkdYUth5VNIPVzMT034qS9qQ1z
OPjHk4M59eyvJw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:48:51 2025 by rpki-client