Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File:                     V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier:          j9w9v2dw6SISsMGJEz+zSU4WpFcMg8ZZ+s1aZ12IWnY=
Subject key identifier:   E3:5E:C6:69:27:6D:8C:E0:2D:F6:AD:D8:A4:5A:12:E2:8B:9A:C7:0E
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer:       /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial:       0198801DAE43BE58207ADD7340DB7B09ED0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number:          1623
Signing time:             Wed 06 Aug 2025 16:01:25 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:25 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:25 +0000
Files and hashes:         1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: dijCQZeuyzmN4K7f8uL3OT2pCfbMrwCo0KHIkodVHKE=)
                          2: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (hash: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:ae:43:be:58:20:7a:dd:73:40:db:7b:09:ed:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
        Validity
            Not Before: Aug  6 16:01:25 2025 GMT
            Not After : Aug  7 16:01:25 2025 GMT
        Subject: CN=e35ec669276d8ce02df6add8a45a12e28b9ac70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:02:30:dd:d0:13:e2:59:6c:93:17:d6:cf:
                    21:ca:db:6a:65:a8:33:75:b9:1d:f5:95:1c:74:f1:
                    31:03:98:c1:b7:1b:18:02:46:72:d7:51:fe:3a:9f:
                    5b:ef:1c:aa:c0:5c:e4:1c:58:02:06:75:a3:ba:18:
                    a4:03:c8:22:69:36:06:52:87:0d:29:21:c0:c2:66:
                    f1:81:81:76:fd:92:4c:6e:ce:00:13:4e:2b:59:b1:
                    3b:45:8c:09:a0:a0:e6:dd:73:3f:8e:8b:32:75:e2:
                    73:78:2c:86:49:59:ea:f2:1f:3d:ac:59:2e:74:82:
                    1b:10:55:3f:3f:39:5a:9a:f5:b2:87:e8:ef:af:e0:
                    06:c5:ac:74:6b:b5:26:10:88:b2:4b:8e:b7:d0:6f:
                    b9:b0:fe:66:05:ca:b3:8c:f2:48:6b:8f:33:d5:90:
                    aa:c4:fe:83:97:70:bd:a1:9a:fb:4f:0f:8b:48:85:
                    7e:7c:83:6b:b4:37:bb:bc:b8:6c:c6:ae:d7:b5:0d:
                    2b:b1:97:7d:c9:bf:1a:a3:b9:67:88:39:e5:93:a5:
                    b4:b2:91:2a:c1:b5:93:09:41:86:73:a4:d8:07:80:
                    f7:eb:6a:9d:80:04:a8:75:18:9f:c0:39:25:bf:2d:
                    3c:7a:52:16:d5:ea:bc:a3:06:31:1b:51:d9:da:c2:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:C6:69:27:6D:8C:E0:2D:F6:AD:D8:A4:5A:12:E2:8B:9A:C7:0E
            X509v3 Authority Key Identifier:
                keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:c0:64:6a:c6:38:cf:1e:87:20:46:07:68:b1:4a:5b:50:
         33:86:18:c3:ac:70:22:eb:7a:30:79:6b:7c:cc:08:37:50:dc:
         32:f3:0c:2a:35:51:e9:3d:c9:c3:0f:c9:82:e9:2a:3c:58:b2:
         ac:9f:48:00:9d:96:29:44:73:81:d6:4d:a5:6d:80:ff:8b:70:
         ff:7c:10:10:07:ab:a4:f3:55:8c:ee:03:50:ab:dc:ed:51:9c:
         a2:be:e3:15:ff:88:3e:58:ee:75:21:71:8c:3e:81:98:36:2f:
         5c:9f:b1:68:1e:a0:09:34:7e:e4:42:9a:90:12:4b:c8:0e:33:
         52:ea:9e:4a:92:d1:42:17:42:a7:fa:d5:5e:2b:a7:58:f1:f8:
         f9:34:a6:f6:34:5c:c4:0a:26:eb:c3:ce:53:41:02:fb:dd:f3:
         3c:10:18:3f:fd:71:70:96:53:22:8d:9e:05:bc:eb:4c:4b:ca:
         a9:08:c2:a2:39:11:1f:19:c0:cd:59:b6:8c:c2:ed:7c:84:d9:
         3a:6c:81:93:19:39:72:5a:b9:92:26:09:0d:b6:24:68:98:08:
         49:a1:18:ff:71:f5:02:28:22:28:0c:20:cf:06:ef:c4:46:31:
         61:82:dc:f0:91:4e:0e:2e:2b:77:5a:64:c0:d2:cf:ad:5d:d2:
         fa:34:ec:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAHa5Dvlgget1zQNt7Ce0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw
MDUyZjMwHhcNMjUwODA2MTYwMTI1WhcNMjUwODA3MTYwMTI1WjAzMTEwLwYDVQQD
EyhlMzVlYzY2OTI3NmQ4Y2UwMmRmNmFkZDhhNDVhMTJlMjhiOWFjNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x8CMN3QE+JZbJMX1s8hyttqZagz
dbkd9ZUcdPExA5jBtxsYAkZy11H+Op9b7xyqwFzkHFgCBnWjuhikA8giaTYGUocN
KSHAwmbxgYF2/ZJMbs4AE04rWbE7RYwJoKDm3XM/josydeJzeCyGSVnq8h89rFku
dIIbEFU/PzlamvWyh+jvr+AGxax0a7UmEIiyS4630G+5sP5mBcqzjPJIa48z1ZCq
xP6Dl3C9oZr7Tw+LSIV+fINrtDe7vLhsxq7XtQ0rsZd9yb8ao7lniDnlk6W0spEq
wbWTCUGGc6TYB4D362qdgASodRifwDklvy08elIW1eq8owYxG1HZ2sIGWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONexmknbYzgLfat2KRaEuKLmscOMB8GA1UdIwQY
MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt
ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1
LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiLAZGrG
OM8ehyBGB2ixSltQM4YYw6xwIut6MHlrfMwIN1DcMvMMKjVR6T3Jww/JgukqPFiy
rJ9IAJ2WKURzgdZNpW2A/4tw/3wQEAerpPNVjO4DUKvc7VGcor7jFf+IPljudSFx
jD6BmDYvXJ+xaB6gCTR+5EKakBJLyA4zUuqeSpLRQhdCp/rVXiunWPH4+TSm9jRc
xAom68POU0EC+93zPBAYP/1xcJZTIo2eBbzrTEvKqQjCojkRHxnAzVm2jMLtfITZ
OmyBkxk5clq5kiYJDbYkaJgISaEY/3H1AigiKAwgzwbvxEYxYYLc8JFODi4rd1pk
wNLPrV3S+jTspw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:11 2025 by rpki-client