Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File:                     oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier:          kg87bFGZ4gq6Ks0Q8RCWNs0guz6kJtX1Q0ythVEZOS4=
Subject key identifier:   C2:49:8F:05:92:02:8C:82:DC:B4:E3:7E:85:E1:E6:85:4B:25:39:75
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer:       /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial:       01987306673997E513E21BAC966437FA162C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 03:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:56 +0000
Files and hashes:         1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=)
                          2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: WAFp/l5orBsQTpziLUh2+dGer9wAIr5fwZhcaDDlgRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:67:39:97:e5:13:e2:1b:ac:96:64:37:fa:16:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
        Validity
            Not Before: Aug  4 03:00:56 2025 GMT
            Not After : Aug  5 03:00:56 2025 GMT
        Subject: CN=c2498f0592028c82dcb4e37e85e1e6854b253975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:00:95:d6:bc:2a:d5:a2:3d:e0:d3:3a:13:
                    e7:6f:95:06:80:dd:3d:f5:0f:9a:45:b6:dc:86:62:
                    38:f0:b4:42:00:94:5a:f0:33:7c:d0:c7:1b:50:2d:
                    89:f6:fe:fe:15:49:d7:b8:c5:ef:bd:61:36:4e:c1:
                    5b:10:70:bc:bd:cd:66:ff:48:07:df:69:c5:4d:b4:
                    21:98:dc:b1:2d:4b:47:5a:aa:87:36:33:88:7f:a6:
                    7f:b8:9e:2d:30:99:64:00:2a:9f:a7:90:d2:a8:21:
                    13:18:8e:5a:4f:ba:2b:af:34:e5:44:98:bf:10:6e:
                    36:8a:e9:ae:28:d9:08:7b:54:ff:46:b9:50:70:7d:
                    e6:a1:ed:13:be:b3:5f:1e:17:12:4f:dc:0d:df:c5:
                    db:f9:2a:05:c3:89:b2:b7:1c:82:cb:83:c7:e2:f2:
                    50:b5:69:75:a8:fc:97:32:b4:12:ae:0c:60:58:f8:
                    51:0e:d0:b1:96:e4:5c:92:c0:b8:4a:95:13:72:87:
                    d4:d7:59:9f:9b:be:43:d7:1d:70:79:6c:ef:e1:fa:
                    6d:5a:81:5e:c3:2b:d1:07:d6:3d:19:5b:38:17:f6:
                    a3:7e:b0:b3:8e:b6:40:a9:c0:ef:f7:66:21:48:0b:
                    51:6d:6c:da:68:63:f1:89:ba:f6:ad:bf:76:25:c3:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:8F:05:92:02:8C:82:DC:B4:E3:7E:85:E1:E6:85:4B:25:39:75
            X509v3 Authority Key Identifier:
                keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:0c:03:13:6f:7e:97:a4:a7:17:24:96:97:af:39:7f:e2:
         a6:89:fc:8b:ab:8a:9e:c4:40:35:89:8f:28:4c:3d:2d:a5:37:
         ad:2c:76:09:84:0f:8a:33:1a:6f:8b:95:11:12:91:94:fe:62:
         84:79:b7:84:fd:ce:87:88:d1:d4:00:b4:24:dd:16:11:79:19:
         b5:be:cf:02:4a:58:5f:e2:ff:7b:65:50:39:22:7d:a5:ef:50:
         7d:e4:20:d3:65:7e:c2:dd:07:bc:36:19:bc:fa:24:27:84:b1:
         35:4f:44:a6:8e:2f:20:1e:29:87:fb:e7:c8:e5:b5:af:ca:f4:
         5b:89:5e:5d:90:f5:10:37:e7:ab:3b:94:42:c3:ef:d0:8b:2c:
         51:7c:2e:a9:68:ff:98:5f:e8:e7:b2:27:d8:a3:33:98:ac:fc:
         f2:20:66:b9:4b:81:64:df:bb:ed:18:23:43:b3:3b:fc:47:29:
         e1:84:9c:03:fb:7b:39:85:00:21:ee:b5:45:7a:11:20:29:04:
         e5:a6:d7:3e:2d:b5:d7:9e:0e:e6:1f:3b:3d:f1:0f:c7:aa:82:
         67:18:8f:81:20:60:c7:2f:75:85:56:28:36:4d:00:67:3e:ab:
         a3:83:fe:1f:8e:a0:78:02:93:5d:48:79:b1:e1:47:4d:7e:56:
         aa:74:29:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBmc5l+UT4huslmQ3+hYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjlkNGQyNzU3MmVmNWE2YTZkYmVjZDc5MmVlZjk4Y2U5
MDcxNmQwHhcNMjUwODA0MDMwMDU2WhcNMjUwODA1MDMwMDU2WjAzMTEwLwYDVQQD
EyhjMjQ5OGYwNTkyMDI4YzgyZGNiNGUzN2U4NWUxZTY4NTRiMjUzOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHEAlda8KtWiPeDTOhPnb5UGgN09
9Q+aRbbchmI48LRCAJRa8DN80McbUC2J9v7+FUnXuMXvvWE2TsFbEHC8vc1m/0gH
32nFTbQhmNyxLUtHWqqHNjOIf6Z/uJ4tMJlkACqfp5DSqCETGI5aT7orrzTlRJi/
EG42iumuKNkIe1T/RrlQcH3moe0TvrNfHhcST9wN38Xb+SoFw4mytxyCy4PH4vJQ
tWl1qPyXMrQSrgxgWPhRDtCxluRcksC4SpUTcofU11mfm75D1x1weWzv4fptWoFe
wyvRB9Y9GVs4F/ajfrCzjrZAqcDv92YhSAtRbWzaaGPxibr2rb92JcP7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJJjwWSAoyC3LTjfoXh5oVLJTl1MB8GA1UdIwQY
MBaAFKMp1NJ1cu9aam2+zXku75jOkHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUt
ZWUxNzg1NzhkY2I1LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUtZWUxNzg1NzhkY2I1
LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6sMAxNv
fpekpxcklpevOX/ipon8i6uKnsRANYmPKEw9LaU3rSx2CYQPijMab4uVERKRlP5i
hHm3hP3Oh4jR1AC0JN0WEXkZtb7PAkpYX+L/e2VQOSJ9pe9QfeQg02V+wt0HvDYZ
vPokJ4SxNU9Epo4vIB4ph/vnyOW1r8r0W4leXZD1EDfnqzuUQsPv0IssUXwuqWj/
mF/o57In2KMzmKz88iBmuUuBZN+77RgjQ7M7/Ecp4YScA/t7OYUAIe61RXoRICkE
5abXPi21154O5h87PfEPx6qCZxiPgSBgxy91hVYoNk0AZz6ro4P+H46geAKTXUh5
seFHTX5WqnQpkA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:15 2025 by rpki-client