Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          Knv+zG3sUbav8kWihFbWa/9f6/zeLHtzB47PfAQCLUc=
Subject key identifier:   2F:6C:19:F5:0F:21:AA:2A:FF:40:91:E6:EE:63:8D:CA:41:DD:92:96
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       019892C8DBED81AB3471E2E36648943C5DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0C1B
Signing time:             Sun 10 Aug 2025 07:01:33 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:33 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:33 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: ggu9EqWS5lVVRUMgkCjM/KJfB7HTSfZVRT1kzzX+m5s=)
                          2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:db:ed:81:ab:34:71:e2:e3:66:48:94:3c:5d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Aug 10 07:01:33 2025 GMT
            Not After : Aug 11 07:01:33 2025 GMT
        Subject: CN=2f6c19f50f21aa2aff4091e6ee638dca41dd9296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:d4:75:e9:43:d5:fd:f2:24:e2:91:7a:fe:
                    04:f0:ea:a9:cc:0c:d5:bd:c8:5a:c0:26:d0:4c:a7:
                    0b:6c:1a:dc:db:94:00:f0:4b:3b:bb:52:34:7d:54:
                    94:e6:10:47:79:5a:74:d2:5e:bd:4b:b2:2e:e6:88:
                    ba:d9:06:9d:c6:34:e0:d6:5b:7f:49:3b:8c:9e:23:
                    c4:03:54:7f:e8:f0:83:48:18:0f:65:ce:66:8d:0a:
                    b3:f4:a8:a8:13:d2:c2:76:51:ad:21:b3:4d:50:8f:
                    a5:0d:d7:e8:d6:a8:24:6e:26:28:4e:6d:d5:61:fe:
                    95:48:76:7d:18:93:1b:14:5e:5e:24:d8:98:a0:b1:
                    66:eb:95:7a:d4:4c:02:1a:49:8a:19:83:71:79:2c:
                    68:51:1b:3d:aa:26:bf:91:22:3d:98:ad:09:cf:61:
                    93:b7:06:fa:5d:eb:e1:f5:86:d4:89:4c:f3:4b:ac:
                    fa:95:b1:0a:4c:92:ec:8c:13:29:9a:65:7a:89:d5:
                    0e:a8:a3:7b:a4:0b:75:5a:19:e0:cc:83:3d:a2:3e:
                    5a:40:0a:84:00:a6:53:8b:7a:e9:0e:29:2a:fc:3d:
                    9c:97:29:03:b9:8d:e7:0e:5c:6b:da:cb:16:8e:e7:
                    04:ea:94:14:0d:c8:8e:16:c8:32:72:75:87:6c:43:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6C:19:F5:0F:21:AA:2A:FF:40:91:E6:EE:63:8D:CA:41:DD:92:96
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:d3:e7:bf:4c:ae:51:80:d2:02:e2:22:1e:8f:a7:09:a3:
         69:ac:35:7e:32:9a:6f:c4:39:00:95:9e:d0:cf:46:27:1d:60:
         ea:24:a3:0d:c6:05:f7:88:05:02:be:bd:c2:9f:5f:bc:ed:9e:
         09:b8:85:63:9b:3a:8c:a5:d7:f2:08:b4:ea:09:e9:ba:bc:37:
         49:02:16:58:84:cc:b3:00:a3:4f:a0:24:d2:31:17:b2:8e:9a:
         74:4e:52:7b:ea:ba:8c:15:29:2f:17:4b:86:d3:9c:d3:9b:50:
         2b:90:21:bf:da:c2:97:71:49:53:11:29:c2:5c:a8:8d:d2:cf:
         0c:51:d2:9a:42:13:39:33:a6:a3:a6:bf:bd:f7:bf:5e:52:c5:
         98:db:37:d1:66:05:f5:d3:e5:9d:d8:50:91:d2:32:2a:2e:49:
         d2:f2:a6:9d:44:1f:e0:45:15:78:c2:13:d6:1a:bf:e9:27:c2:
         ea:35:42:a1:d7:28:9f:cd:e7:3b:82:10:20:c8:69:1b:91:d9:
         f0:47:03:2d:13:39:f3:45:07:6e:62:dd:7f:58:0e:4a:fc:7c:
         a2:a6:ae:66:8d:16:42:53:a6:21:15:52:bf:07:fc:54:fb:18:
         d0:be:90:47:de:27:91:35:d1:63:94:bd:6a:fa:c8:33:14:25:
         1d:9a:f3:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyNvtgas0ceLjZkiUPF3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmI1M2NhMzA3MDQzNDI3ZWY0ZWFjODljNzdjMWJhMTNm
NmYwMmUwHhcNMjUwODEwMDcwMTMzWhcNMjUwODExMDcwMTMzWjAzMTEwLwYDVQQD
EygyZjZjMTlmNTBmMjFhYTJhZmY0MDkxZTZlZTYzOGRjYTQxZGQ5Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRDUdelD1f3yJOKRev4E8OqpzAzV
vchawCbQTKcLbBrc25QA8Es7u1I0fVSU5hBHeVp00l69S7Iu5oi62QadxjTg1lt/
STuMniPEA1R/6PCDSBgPZc5mjQqz9KioE9LCdlGtIbNNUI+lDdfo1qgkbiYoTm3V
Yf6VSHZ9GJMbFF5eJNiYoLFm65V61EwCGkmKGYNxeSxoURs9qia/kSI9mK0Jz2GT
twb6Xevh9YbUiUzzS6z6lbEKTJLsjBMpmmV6idUOqKN7pAt1WhngzIM9oj5aQAqE
AKZTi3rpDikq/D2clykDuY3nDlxr2ssWjucE6pQUDciOFsgycnWHbEMdtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9sGfUPIaoq/0CR5u5jjcpB3ZKWMB8GA1UdIwQY
MBaAFO1rU8owcENCfvTqyJx3wboT9vAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAt
NmQ2MTVmM2UxNGY1LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAtNmQ2MTVmM2UxNGY1
LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzTT579M
rlGA0gLiIh6Ppwmjaaw1fjKab8Q5AJWe0M9GJx1g6iSjDcYF94gFAr69wp9fvO2e
CbiFY5s6jKXX8gi06gnpurw3SQIWWITMswCjT6Ak0jEXso6adE5Se+q6jBUpLxdL
htOc05tQK5Ahv9rCl3FJUxEpwlyojdLPDFHSmkITOTOmo6a/vfe/XlLFmNs30WYF
9dPlndhQkdIyKi5J0vKmnUQf4EUVeMIT1hq/6SfC6jVCodcon83nO4IQIMhpG5HZ
8EcDLRM580UHbmLdf1gOSvx8oqauZo0WQlOmIRVSvwf8VPsY0L6QR94nkTXRY5S9
avrIMxQlHZrzUg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:59 2025 by rpki-client