Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File:                     r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier:          U2Svu9Ro841qxqMvhmKCvwrozTqjKstAh2QCedrBLvU=
Subject key identifier:   81:D6:12:A7:4A:A7:EF:EA:8B:FC:C3:18:18:E9:43:A1:A4:94:1B:94
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       01987450EC03FD41E2DFE80D3248E7A7A7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number:          14ED
Signing time:             Mon 04 Aug 2025 09:01:57 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:57 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:57 +0000
Files and hashes:         1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=)
                          2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=)
                          3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=)
                          4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=)
                          5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=)
                          6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=)
                          7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=)
                          8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 8ruSBbZbVpaJZeuU9VqFhxyJmmBHDBMs5CxVzf7ecRA=)
                          9: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=)
                          10: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:ec:03:fd:41:e2:df:e8:0d:32:48:e7:a7:a7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: Aug  4 09:01:57 2025 GMT
            Not After : Aug  5 09:01:57 2025 GMT
        Subject: CN=81d612a74aa7efea8bfcc31818e943a1a4941b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:ba:7d:d9:4d:12:76:9e:87:bd:e8:1f:70:
                    6d:f2:ee:af:b9:e7:bd:86:ce:25:c9:a3:51:9f:ce:
                    af:e6:56:3f:e5:f3:f7:e8:be:bd:b0:5b:4f:31:ac:
                    3d:e2:5d:a9:30:58:18:6f:51:1d:d5:c4:df:77:29:
                    b8:4b:e5:aa:73:9c:e9:39:ed:c1:64:ee:83:dd:9a:
                    e4:5f:1a:bd:9d:5e:2c:a5:1b:11:00:f4:24:57:97:
                    49:37:24:de:f6:b9:a5:4b:54:9c:3b:c0:6f:1d:60:
                    40:6b:f5:e8:b0:77:0f:c5:d8:6b:16:ec:86:67:6c:
                    12:85:62:0c:c9:50:e4:6b:7c:04:e7:67:69:5c:47:
                    f6:92:62:19:ed:42:ea:f3:07:06:9d:02:db:82:26:
                    da:09:fc:92:9f:25:62:e6:74:c0:a2:ca:59:5c:c3:
                    71:b7:ef:07:4f:0e:a2:ee:cf:de:67:0b:f8:d4:f6:
                    a4:a9:b2:b9:98:48:ad:63:06:63:48:c1:b7:12:87:
                    4a:be:57:fe:c2:ad:3b:46:48:2d:e4:6f:be:85:d0:
                    c6:e7:93:88:7f:67:a0:6f:b6:f9:d0:9c:e4:a0:3e:
                    de:e9:6d:93:4e:22:51:67:f7:19:3d:08:5e:0f:e2:
                    78:74:c3:f8:d6:9b:23:7e:2a:33:ae:d7:f8:e9:dd:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:12:A7:4A:A7:EF:EA:8B:FC:C3:18:18:E9:43:A1:A4:94:1B:94
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:46:74:f1:0c:1a:aa:13:d9:fc:14:88:d4:de:60:9e:32:
         68:21:eb:82:17:40:af:f0:e8:97:53:c2:32:a8:ab:c5:f4:1b:
         da:7f:bc:cd:c0:66:22:ee:88:a4:c8:d9:c5:ac:86:5d:8d:6e:
         40:e5:d2:66:df:57:30:05:d1:99:6e:b9:26:48:bf:5e:3b:2e:
         9f:db:03:4b:ac:ff:d0:04:2f:58:37:c4:ea:37:cc:8f:c7:c4:
         45:83:4d:b8:27:ae:78:51:a9:4b:13:6c:f8:92:f0:45:97:08:
         17:c1:29:3b:dd:4c:05:5f:b9:3d:2f:44:19:25:d1:3f:f5:db:
         f6:94:4b:37:0c:8f:4f:3d:75:11:96:ba:d1:17:68:ff:5a:39:
         e4:fe:5f:db:ce:d9:ab:4a:f4:f4:e2:ed:2b:2a:f8:ea:cc:47:
         da:0f:c6:19:b9:ca:16:61:be:b6:c7:c2:e8:a5:04:e6:4b:48:
         07:69:e8:46:a8:e9:8f:75:f4:09:be:16:63:d6:fd:ca:de:ba:
         35:21:f2:06:d0:4b:19:4c:41:86:7c:d9:1c:84:07:fb:31:f4:
         55:e5:af:ec:bd:ed:04:4b:d1:7f:0f:2f:f5:19:1c:63:58:3e:
         40:40:28:a7:3a:60:60:5e:38:51:18:76:66:48:4f:7d:5b:49:
         8d:17:50:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UOwD/UHi3+gNMkjnp6eqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi
ZDNlYTgwHhcNMjUwODA0MDkwMTU3WhcNMjUwODA1MDkwMTU3WjAzMTEwLwYDVQQD
Eyg4MWQ2MTJhNzRhYTdlZmVhOGJmY2MzMTgxOGU5NDNhMWE0OTQxYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd66fdlNEnaeh73oH3Bt8u6vuee9
hs4lyaNRn86v5lY/5fP36L69sFtPMaw94l2pMFgYb1Ed1cTfdym4S+Wqc5zpOe3B
ZO6D3ZrkXxq9nV4spRsRAPQkV5dJNyTe9rmlS1ScO8BvHWBAa/XosHcPxdhrFuyG
Z2wShWIMyVDka3wE52dpXEf2kmIZ7ULq8wcGnQLbgibaCfySnyVi5nTAospZXMNx
t+8HTw6i7s/eZwv41PakqbK5mEitYwZjSMG3EodKvlf+wq07Rkgt5G++hdDG55OI
f2egb7b50JzkoD7e6W2TTiJRZ/cZPQheD+J4dMP41psjfiozrtf46d3UZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHWEqdKp+/qi/zDGBjpQ6GklBuUMB8GA1UdIwQY
MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt
NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw
LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGX5GdPEM
GqoT2fwUiNTeYJ4yaCHrghdAr/Dol1PCMqirxfQb2n+8zcBmIu6IpMjZxayGXY1u
QOXSZt9XMAXRmW65Jki/Xjsun9sDS6z/0AQvWDfE6jfMj8fERYNNuCeueFGpSxNs
+JLwRZcIF8EpO91MBV+5PS9EGSXRP/Xb9pRLNwyPTz11EZa60Rdo/1o55P5f287Z
q0r09OLtKyr46sxH2g/GGbnKFmG+tsfC6KUE5ktIB2noRqjpj3X0Cb4WY9b9yt66
NSHyBtBLGUxBhnzZHIQH+zH0VeWv7L3tBEvRfw8v9RkcY1g+QEAopzpgYF44URh2
ZkhPfVtJjRdQ8A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:39 2025 by rpki-client