Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          OR8xy23Q2i3m5y3SAHoDBX6UQ1ztc1ymUvs9vY/l8o8=
Subject key identifier:   69:7F:C7:9D:F1:1E:3F:94:AF:E8:23:5B:D4:47:0B:AF:62:4E:68:E7
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       01988AA0B32A2A5D521F4C33919837D05176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          034E
Signing time:             Fri 08 Aug 2025 17:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 17:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 17:00:44 +0000
Files and hashes:         1: 7_nRVCQ3y6MID4FpVdSH-LVv21k.roa (hash: KeBopEjJ3jhpQFeNvuaMhntEK/xxfN7GL7n6M9G/SKU=)
                          2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=)
                          3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: TI1CWtUyU5srYarX6IfM26lsEMsHdA4SGHwCsUGFnjA=)
                          4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=)
                          5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=)
                          6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:b3:2a:2a:5d:52:1f:4c:33:91:98:37:d0:51:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Aug  8 17:00:44 2025 GMT
            Not After : Aug  9 17:00:44 2025 GMT
        Subject: CN=697fc79df11e3f94afe8235bd4470baf624e68e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:52:c6:73:ab:56:f0:62:c8:97:7c:2e:5c:
                    ab:42:8f:97:97:45:2c:d3:8e:0b:0d:44:21:27:88:
                    52:6f:72:8e:f8:eb:3a:7f:f6:19:76:c0:25:0b:04:
                    5e:ea:c6:ee:d6:23:d2:47:41:41:c2:47:72:ea:b8:
                    66:e7:1b:a7:50:31:30:1e:53:ec:27:bd:2a:ee:3f:
                    25:26:8e:7c:80:e4:2b:d9:c2:27:8f:5c:3c:79:0e:
                    ce:d3:3c:98:f1:82:45:41:80:0a:9e:65:3b:83:0b:
                    39:7f:8c:e4:73:ac:14:98:4c:61:9f:ea:98:5b:b8:
                    a6:c9:ff:39:21:6d:da:a4:52:d6:fb:20:17:ec:2e:
                    56:39:be:e8:b0:69:a7:0a:b0:91:ef:a6:c6:1d:1d:
                    f4:60:d7:79:4d:44:c3:5a:57:64:f7:62:c3:1f:42:
                    e5:07:79:f0:16:90:ea:da:51:7a:53:8a:58:db:ec:
                    2c:99:64:76:d5:9e:5f:fa:86:ca:3f:d6:b5:7f:35:
                    c8:a3:39:ae:f4:ab:e1:0f:82:b9:5d:f6:f9:10:2d:
                    8b:bf:9a:e1:46:95:92:e9:ee:3c:fd:1f:7d:d4:61:
                    f4:8f:e4:c1:22:aa:40:60:44:dd:5b:b1:83:46:0d:
                    00:6b:e0:27:0b:f2:5a:61:8e:ed:5e:44:8f:37:98:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:C7:9D:F1:1E:3F:94:AF:E8:23:5B:D4:47:0B:AF:62:4E:68:E7
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:5e:7b:90:54:11:ce:88:56:ea:26:07:1a:6c:a1:3e:19:
         f5:a1:89:f2:75:ca:a2:22:26:29:ce:57:67:0c:2f:60:68:d5:
         7a:e2:96:62:7f:d7:bd:fe:cb:7c:0c:b5:1d:bd:aa:47:22:68:
         f3:db:b5:47:22:b0:8c:ef:15:d9:3a:9f:59:cb:b7:2f:02:d3:
         df:ab:be:00:61:2f:8a:d4:5b:b1:fc:ad:68:6e:5b:2b:e7:67:
         ae:ba:a0:5e:ee:b7:7a:72:21:fa:9d:db:bd:24:4e:b7:50:bc:
         d7:1d:a8:e0:19:5c:fd:9d:d9:23:70:ce:17:ab:ba:21:c9:2e:
         f8:b5:e8:42:9c:99:6d:7c:55:cb:37:1b:b9:59:89:dd:d9:d3:
         f8:c6:92:00:29:97:e4:d8:48:b8:90:cd:01:c4:f8:d7:c7:d8:
         4a:01:b2:7f:34:85:83:66:bd:ac:9a:eb:bf:90:69:b6:b3:72:
         ab:99:b5:47:6b:6d:d7:6d:37:5d:ac:8e:1c:62:49:51:6a:93:
         38:14:45:68:df:e6:ab:74:5d:49:73:41:4b:39:42:1c:2c:26:
         a7:0f:34:8e:24:6a:1b:c1:b6:dd:3f:71:66:6d:dd:1c:cb:aa:
         b0:00:c4:64:8f:77:ba:5a:5c:9d:de:c7:6c:48:a6:8d:82:bd:
         30:a1:f5:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoLMqKl1SH0wzkZg30FF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk
N2RhMDMwHhcNMjUwODA4MTcwMDQ0WhcNMjUwODA5MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg2OTdmYzc5ZGYxMWUzZjk0YWZlODIzNWJkNDQ3MGJhZjYyNGU2OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOpSxnOrVvBiyJd8LlyrQo+Xl0Us
044LDUQhJ4hSb3KO+Os6f/YZdsAlCwRe6sbu1iPSR0FBwkdy6rhm5xunUDEwHlPs
J70q7j8lJo58gOQr2cInj1w8eQ7O0zyY8YJFQYAKnmU7gws5f4zkc6wUmExhn+qY
W7imyf85IW3apFLW+yAX7C5WOb7osGmnCrCR76bGHR30YNd5TUTDWldk92LDH0Ll
B3nwFpDq2lF6U4pY2+wsmWR21Z5f+obKP9a1fzXIozmu9KvhD4K5Xfb5EC2Lv5rh
RpWS6e48/R991GH0j+TBIqpAYETdW7GDRg0Aa+AnC/JaYY7tXkSPN5hgGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl/x53xHj+Ur+gjW9RHC69iTmjnMB8GA1UdIwQY
MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt
ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz
LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKxee5BU
Ec6IVuomBxpsoT4Z9aGJ8nXKoiImKc5XZwwvYGjVeuKWYn/Xvf7LfAy1Hb2qRyJo
89u1RyKwjO8V2TqfWcu3LwLT36u+AGEvitRbsfytaG5bK+dnrrqgXu63enIh+p3b
vSROt1C81x2o4Blc/Z3ZI3DOF6u6Icku+LXoQpyZbXxVyzcbuVmJ3dnT+MaSACmX
5NhIuJDNAcT418fYSgGyfzSFg2a9rJrrv5BptrNyq5m1R2tt1203XayOHGJJUWqT
OBRFaN/mq3RdSXNBSzlCHCwmpw80jiRqG8G23T9xZm3dHMuqsADEZI93ulpcnd7H
bEimjYK9MKH1IQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:34 2025 by rpki-client