Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File:                     0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier:          8NsovuUCcxd5AmlrvhxzE9F8tbl97rnWhK/VPSiuK8c=
Subject key identifier:   8A:1C:09:5C:19:29:99:C4:B8:66:41:7E:8C:8B:2C:E4:43:88:E8:49
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer:       /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial:       019874BDC1287681559EBDD97D9A1E8CD967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number:          14C9
Signing time:             Mon 04 Aug 2025 11:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:49 +0000
Files and hashes:         1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: G/CzWthKLh36sSTWiuURRUUjFkUZxRTFMqF7amIwMwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:c1:28:76:81:55:9e:bd:d9:7d:9a:1e:8c:d9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
        Validity
            Not Before: Aug  4 11:00:49 2025 GMT
            Not After : Aug  5 11:00:49 2025 GMT
        Subject: CN=8a1c095c192999c4b866417e8c8b2ce44388e849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:50:56:58:e6:e8:57:f7:c0:61:26:e9:ee:
                    db:8e:62:62:56:ed:5a:53:02:38:f9:8b:df:b5:ae:
                    61:1b:ff:87:a7:4e:b0:8a:c4:b9:8b:74:0e:66:ee:
                    84:b4:0a:fe:01:6c:9a:33:80:f5:4f:97:51:7f:2c:
                    16:30:db:89:ea:e9:5a:93:f9:8d:55:11:76:d8:1e:
                    33:3c:e9:b7:83:08:d5:0b:9f:6a:e6:1d:f8:df:c2:
                    ec:01:d6:58:5c:fb:38:d7:14:52:d1:15:7f:83:45:
                    3f:7f:34:f0:a3:06:54:62:12:ff:7e:81:be:c2:1e:
                    45:18:e5:c7:9c:1f:e3:d9:3f:1a:89:96:15:f5:cb:
                    37:1e:45:0e:c5:c2:56:a0:81:6c:ce:b1:d1:1c:5c:
                    b5:6c:cf:83:d7:27:36:d9:30:ef:e1:14:48:ad:ab:
                    45:e2:fa:ab:e1:fe:e4:ea:76:2c:08:d1:5b:ca:27:
                    96:62:b6:3f:89:ec:1c:15:8f:fa:57:97:88:97:6b:
                    d3:70:60:a7:c9:63:e9:37:4d:15:00:b8:05:7b:f1:
                    0c:af:0f:b5:ed:5c:25:96:53:73:b0:fe:e2:a8:42:
                    6d:12:40:31:a8:be:f1:79:e1:c3:3f:92:8c:d5:c6:
                    28:ca:4a:4b:f2:a1:48:cc:7e:a5:bc:78:a5:fd:05:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1C:09:5C:19:29:99:C4:B8:66:41:7E:8C:8B:2C:E4:43:88:E8:49
            X509v3 Authority Key Identifier:
                keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:d1:7b:fe:6e:9c:77:91:8e:ba:e7:ac:c6:93:bf:a0:90:
         1c:05:e1:b7:31:dd:ff:08:ab:a3:98:7b:f8:25:45:99:a9:c0:
         e5:18:f1:1a:43:17:12:cf:16:4b:72:41:9d:b2:fd:65:21:48:
         f0:49:00:82:4c:fd:f5:ec:2b:c7:3b:30:08:31:95:ea:03:dd:
         1d:73:83:bc:3b:5e:46:93:21:01:ab:8e:70:99:df:2c:c6:f9:
         06:58:7d:12:e9:af:8f:30:a3:c4:bf:e7:01:63:bf:0e:05:f5:
         57:cc:16:63:dd:06:81:9c:dc:e8:1c:ab:ca:04:34:ff:3f:c0:
         5a:7e:79:5f:b1:8a:7c:c4:4e:1d:b9:67:3a:d5:14:eb:f6:24:
         22:37:c1:99:1e:8c:01:ad:00:29:11:1f:57:5f:2d:c0:11:93:
         e3:46:73:2e:5e:a9:9e:93:fa:1f:2e:44:74:ab:eb:c9:ba:69:
         f8:5e:59:76:d5:87:90:15:3d:30:0f:27:8c:f2:87:f2:a3:40:
         5e:8e:07:c0:53:9e:3c:df:f5:6e:0b:06:af:00:44:60:6c:ae:
         e3:c1:1c:c0:75:2a:a5:e5:90:e9:c3:2e:6f:4c:02:d2:27:ab:
         9e:2c:cb:e0:7e:c4:c2:64:ba:ef:32:98:85:53:88:08:1d:ed:
         ff:c6:db:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vcEodoFVnr3ZfZoejNlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjUwYjRmYzA5NTg5MGI4MzFjMDNkOTk2MjVjMGVlNTQx
OWQzNWEwHhcNMjUwODA0MTEwMDQ5WhcNMjUwODA1MTEwMDQ5WjAzMTEwLwYDVQQD
Eyg4YTFjMDk1YzE5Mjk5OWM0Yjg2NjQxN2U4YzhiMmNlNDQzODhlODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlBQVljm6Ff3wGEm6e7bjmJiVu1a
UwI4+Yvfta5hG/+Hp06wisS5i3QOZu6EtAr+AWyaM4D1T5dRfywWMNuJ6ulak/mN
VRF22B4zPOm3gwjVC59q5h3438LsAdZYXPs41xRS0RV/g0U/fzTwowZUYhL/foG+
wh5FGOXHnB/j2T8aiZYV9cs3HkUOxcJWoIFszrHRHFy1bM+D1yc22TDv4RRIratF
4vqr4f7k6nYsCNFbyieWYrY/iewcFY/6V5eIl2vTcGCnyWPpN00VALgFe/EMrw+1
7VwlllNzsP7iqEJtEkAxqL7xeeHDP5KM1cYoykpL8qFIzH6lvHil/QUuswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIocCVwZKZnEuGZBfoyLLORDiOhJMB8GA1UdIwQY
MBaAFNP1C0/AlYkLgxwD2ZYlwO5UGdNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQt
NzdlMzIxN2NkMzlmLzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQtNzdlMzIxN2NkMzlm
LzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0bRe/5u
nHeRjrrnrMaTv6CQHAXhtzHd/wiro5h7+CVFmanA5RjxGkMXEs8WS3JBnbL9ZSFI
8EkAgkz99ewrxzswCDGV6gPdHXODvDteRpMhAauOcJnfLMb5Blh9EumvjzCjxL/n
AWO/DgX1V8wWY90GgZzc6ByrygQ0/z/AWn55X7GKfMROHblnOtUU6/YkIjfBmR6M
Aa0AKREfV18twBGT40ZzLl6pnpP6Hy5EdKvrybpp+F5ZdtWHkBU9MA8njPKH8qNA
Xo4HwFOePN/1bgsGrwBEYGyu48EcwHUqpeWQ6cMub0wC0iernizL4H7EwmS67zKY
hVOICB3t/8bb7w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:04 2025 by rpki-client