Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          2WwXFIJWGKVXodhlM37gMlRz1g9louFykFnk3HqDAJ4=
Subject key identifier:   36:D5:10:B7:03:CF:9E:6F:5C:14:3B:25:68:B2:1A:47:52:BA:EA:BB
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       019875D09F81088CC7879F09E5681FE07939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          0B71
Signing time:             Mon 04 Aug 2025 16:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:03 +0000
Files and hashes:         1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: DtqXEB8u/QYauhFiTKLMqHFfP2+58ApoMSvaAP/DKiY=)
                          2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:9f:81:08:8c:c7:87:9f:09:e5:68:1f:e0:79:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Aug  4 16:01:03 2025 GMT
            Not After : Aug  5 16:01:03 2025 GMT
        Subject: CN=36d510b703cf9e6f5c143b2568b21a4752baeabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ee:e4:32:bb:e5:d1:84:7e:e8:ec:2d:f3:b1:
                    5d:cd:f1:f5:43:08:20:33:f0:ba:dc:eb:a1:56:52:
                    69:f1:02:47:ce:18:3f:ac:4b:4d:74:f9:46:3a:00:
                    1b:af:5f:7e:a2:f8:07:c0:52:1a:85:d1:fc:1c:7b:
                    7c:fa:ed:54:e9:fc:b5:97:15:3f:1f:b3:8f:48:c2:
                    3f:f7:50:25:4e:09:0c:e4:69:5d:eb:2f:90:07:00:
                    a9:f8:82:aa:28:95:bf:46:d4:74:15:e2:5b:ab:21:
                    5a:5b:79:cc:bb:a9:85:d7:1f:f1:4d:5a:4b:1f:fe:
                    da:d4:19:a6:18:d0:b5:ed:38:4e:a2:e1:9b:41:89:
                    e4:bb:85:65:ac:d2:e0:8c:9d:7a:3d:cf:67:fa:45:
                    3d:38:1b:7f:34:11:83:f6:cf:af:2b:d4:69:c7:49:
                    3c:9a:4d:f6:0f:f6:fa:32:3f:a5:e1:3c:39:2e:ba:
                    91:71:0b:5d:21:3e:95:16:26:eb:d1:f1:1c:2a:ba:
                    91:13:09:a2:2a:79:37:b9:7d:e7:e0:d6:af:4d:dc:
                    ee:45:ea:c7:ac:68:dc:3a:84:23:33:4b:b3:cc:0f:
                    d0:cf:18:2a:26:90:16:cd:ef:8c:bf:a2:8d:67:16:
                    07:f7:2e:f6:94:bf:14:c1:21:fd:bc:58:92:c6:bc:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:10:B7:03:CF:9E:6F:5C:14:3B:25:68:B2:1A:47:52:BA:EA:BB
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:43:82:74:4f:ec:11:bf:a9:77:ca:c7:6d:2e:1e:f4:33:40:
         5a:65:8d:f4:49:0a:be:a7:7a:06:39:ea:3b:ba:83:ca:48:b2:
         70:ba:ea:e4:7e:f0:e4:1a:ac:1a:03:66:14:0b:01:d4:de:71:
         31:44:68:fd:5a:be:55:53:63:e3:11:2c:f0:82:49:d7:1e:91:
         4b:a6:67:65:2a:56:aa:60:a0:22:a7:2d:86:a4:f9:74:4d:36:
         ff:bd:80:3f:a9:b6:04:4d:77:a3:46:aa:37:a1:01:c9:d2:6f:
         ae:5a:81:1c:f9:73:31:63:69:2e:e2:f9:bc:35:b6:05:ca:ed:
         26:51:42:9e:d6:f4:c8:4a:bc:f1:0d:0b:00:70:3d:97:ce:c9:
         9c:ec:5f:6c:04:a6:75:f9:32:44:de:9e:d7:d9:05:d6:ea:89:
         5c:b8:d4:5a:b9:95:7d:e7:7f:1b:e5:7b:99:12:9c:80:41:66:
         7f:4e:d3:87:0f:15:98:58:07:02:1b:9e:87:43:3c:97:bf:4f:
         55:6e:8c:ff:d4:99:7d:18:2e:72:66:74:97:e8:65:a0:bb:4a:
         c3:71:75:6e:28:9d:6a:11:94:c1:d3:83:b7:4f:bd:af:2a:6c:
         fa:62:5f:cd:c9:30:b1:9e:d3:7a:82:b3:21:6a:54:96:26:a5:
         74:a6:e3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10J+BCIzHh58J5Wgf4Hk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh
MGZmNDMwHhcNMjUwODA0MTYwMTAzWhcNMjUwODA1MTYwMTAzWjAzMTEwLwYDVQQD
EygzNmQ1MTBiNzAzY2Y5ZTZmNWMxNDNiMjU2OGIyMWE0NzUyYmFlYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9O7kMrvl0YR+6Owt87FdzfH1Qwgg
M/C63OuhVlJp8QJHzhg/rEtNdPlGOgAbr19+ovgHwFIahdH8HHt8+u1U6fy1lxU/
H7OPSMI/91AlTgkM5Gld6y+QBwCp+IKqKJW/RtR0FeJbqyFaW3nMu6mF1x/xTVpL
H/7a1BmmGNC17ThOouGbQYnku4VlrNLgjJ16Pc9n+kU9OBt/NBGD9s+vK9Rpx0k8
mk32D/b6Mj+l4Tw5LrqRcQtdIT6VFibr0fEcKrqREwmiKnk3uX3n4NavTdzuRerH
rGjcOoQjM0uzzA/QzxgqJpAWze+Mv6KNZxYH9y72lL8UwSH9vFiSxryxVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbVELcDz55vXBQ7JWiyGkdSuuq7MB8GA1UdIwQY
MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt
NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm
LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUOCdE/s
Eb+pd8rHbS4e9DNAWmWN9EkKvqd6BjnqO7qDykiycLrq5H7w5BqsGgNmFAsB1N5x
MURo/Vq+VVNj4xEs8IJJ1x6RS6ZnZSpWqmCgIqcthqT5dE02/72AP6m2BE13o0aq
N6EBydJvrlqBHPlzMWNpLuL5vDW2BcrtJlFCntb0yEq88Q0LAHA9l87JnOxfbASm
dfkyRN6e19kF1uqJXLjUWrmVfed/G+V7mRKcgEFmf07Thw8VmFgHAhueh0M8l79P
VW6M/9SZfRgucmZ0l+hloLtKw3F1biidahGUwdODt0+9ryps+mJfzckwsZ7TeoKz
IWpUlialdKbjMg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:32 2025 by rpki-client