Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File:                     J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier:          ipDO+WtqxZensvwGCyIFCUzLTh4BcFvtLfOBCKUs0dA=
Subject key identifier:   5A:2B:86:99:75:F3:BA:A5:1A:B6:E0:50:12:25:8B:D8:9B:73:DB:0F
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer:       /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial:       019872CFAF6D5A02925D72F7AAE9835B75C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number:          B0
Signing time:             Mon 04 Aug 2025 02:01:10 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:10 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:10 +0000
Files and hashes:         1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: z2Q4pGaI/qBiMTIE7y3+IG14BDvYOBlwVKx5oH84Enk=)
                          2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:af:6d:5a:02:92:5d:72:f7:aa:e9:83:5b:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
        Validity
            Not Before: Aug  4 02:01:10 2025 GMT
            Not After : Aug  5 02:01:10 2025 GMT
        Subject: CN=5a2b869975f3baa51ab6e05012258bd89b73db0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:64:d2:35:1c:f5:5c:25:e3:d6:04:92:f9:
                    d1:73:c7:5b:6e:73:e5:11:61:7c:f8:ad:7d:08:b7:
                    ac:96:83:75:df:fe:62:a2:65:9e:3a:45:9c:0e:af:
                    20:4c:49:1e:97:8b:67:41:05:ae:98:87:a8:27:4d:
                    64:31:0f:bd:c3:55:9b:9b:7e:62:17:f6:87:8d:39:
                    61:14:79:fa:fa:4c:23:38:5a:a6:de:a4:8b:45:5f:
                    7b:2f:9d:af:41:2a:cd:4f:2e:62:75:fb:cb:62:af:
                    52:82:e2:20:c5:1c:22:51:aa:42:bb:dc:7b:48:6c:
                    10:34:8e:a2:c4:ec:c2:4d:d2:eb:c1:51:89:68:7e:
                    d4:00:d8:e3:12:50:29:d6:74:dc:1e:d8:7f:6e:42:
                    69:48:63:b9:18:58:51:93:25:f8:20:a2:4c:12:fa:
                    24:82:cb:0c:48:71:60:29:bf:9e:9f:85:90:a9:e1:
                    81:f2:c3:44:6c:6b:6a:7c:ed:da:e7:6e:af:43:20:
                    b6:1f:a9:50:d4:69:0f:f2:3f:d5:19:3f:b0:28:39:
                    8d:c0:9a:52:ca:18:e4:b7:bc:c4:22:eb:f3:56:cf:
                    4e:2a:14:39:f5:43:16:61:c9:db:53:33:cf:be:a5:
                    c3:87:3b:37:8a:e4:f1:7c:20:8d:fd:7a:26:ad:43:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2B:86:99:75:F3:BA:A5:1A:B6:E0:50:12:25:8B:D8:9B:73:DB:0F
            X509v3 Authority Key Identifier:
                keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:72:65:c0:5d:5e:71:24:5b:af:c7:50:e5:67:c8:07:e4:
         15:e0:74:fe:c6:bd:83:40:eb:5b:1c:83:4f:1e:ca:ef:37:d4:
         96:a3:28:ed:b7:a3:13:17:8e:92:44:04:2f:37:cd:89:6a:67:
         ac:55:03:06:c9:58:33:98:7d:b7:bc:d5:4f:21:d8:52:d5:27:
         b8:9e:9e:40:a9:b7:2d:70:c9:93:e7:ad:a0:85:32:4e:7b:4b:
         66:7e:30:13:7e:91:f7:ab:a4:e7:3c:98:53:f0:d5:69:3a:17:
         63:1c:de:f4:62:33:8a:82:d9:f7:49:44:54:82:d6:27:7b:bb:
         68:67:ff:9a:35:3f:ae:c5:49:cd:b0:2d:62:20:a7:3f:4b:ee:
         5d:29:d5:7d:e2:8a:81:a6:55:6f:21:c7:01:51:f3:e8:4c:7d:
         e3:c3:d6:26:a3:f4:dc:48:c6:a6:ad:d6:8c:57:c3:68:c7:79:
         e5:1b:b6:81:26:91:24:dc:3b:34:3d:ee:75:1e:5b:4a:dd:8f:
         90:52:3b:c2:72:67:d2:79:19:f8:73:0e:6c:b0:32:dc:3a:86:
         8b:59:7d:81:38:06:24:4f:a1:7f:5d:23:d9:46:d6:98:d1:73:
         79:d4:75:20:29:83:ff:9d:78:59:38:7c:03:3f:33:18:1d:65:
         62:f5:b1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz69tWgKSXXL3qumDW3XIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy
OTUwZjgwHhcNMjUwODA0MDIwMTEwWhcNMjUwODA1MDIwMTEwWjAzMTEwLwYDVQQD
Eyg1YTJiODY5OTc1ZjNiYWE1MWFiNmUwNTAxMjI1OGJkODliNzNkYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I9k0jUc9Vwl49YEkvnRc8dbbnPl
EWF8+K19CLesloN13/5iomWeOkWcDq8gTEkel4tnQQWumIeoJ01kMQ+9w1Wbm35i
F/aHjTlhFHn6+kwjOFqm3qSLRV97L52vQSrNTy5idfvLYq9SguIgxRwiUapCu9x7
SGwQNI6ixOzCTdLrwVGJaH7UANjjElAp1nTcHth/bkJpSGO5GFhRkyX4IKJMEvok
gssMSHFgKb+en4WQqeGB8sNEbGtqfO3a526vQyC2H6lQ1GkP8j/VGT+wKDmNwJpS
yhjkt7zEIuvzVs9OKhQ59UMWYcnbUzPPvqXDhzs3iuTxfCCN/XomrUNefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFForhpl187qlGrbgUBIli9ibc9sPMB8GA1UdIwQY
MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt
MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy
LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMFyZcBd
XnEkW6/HUOVnyAfkFeB0/sa9g0DrWxyDTx7K7zfUlqMo7bejExeOkkQELzfNiWpn
rFUDBslYM5h9t7zVTyHYUtUnuJ6eQKm3LXDJk+etoIUyTntLZn4wE36R96uk5zyY
U/DVaToXYxze9GIzioLZ90lEVILWJ3u7aGf/mjU/rsVJzbAtYiCnP0vuXSnVfeKK
gaZVbyHHAVHz6Ex948PWJqP03EjGpq3WjFfDaMd55Ru2gSaRJNw7ND3udR5bSt2P
kFI7wnJn0nkZ+HMObLAy3DqGi1l9gTgGJE+hf10j2UbWmNFzedR1ICmD/514WTh8
Az8zGB1lYvWx2g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:17 2025 by rpki-client