Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File:                     CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier:          eZ8CWFpDOB016KY7+3m9AtKafa8op0Lg1CMRhZrU0M0=
Subject key identifier:   70:AB:CE:C1:01:37:CD:19:D3:C6:A9:B2:2F:0B:85:F3:D2:79:95:14
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer:       /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial:       01987DC09943F7632393E98FAC1158661E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number:          1080
Signing time:             Wed 06 Aug 2025 05:00:30 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:30 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:30 +0000
Files and hashes:         1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: MQ5rInk9ALww/m+8V6QiySR8WUxd/ON4gOh7W+rLvDc=)
                          2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:99:43:f7:63:23:93:e9:8f:ac:11:58:66:1e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
        Validity
            Not Before: Aug  6 05:00:30 2025 GMT
            Not After : Aug  7 05:00:30 2025 GMT
        Subject: CN=70abcec10137cd19d3c6a9b22f0b85f3d2799514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:1e:ae:ee:d5:a7:02:49:4c:77:28:f6:b3:
                    9c:e0:56:b5:9f:a8:8d:55:39:36:61:45:ec:4d:2c:
                    36:00:97:5f:6f:d2:45:02:bb:b8:7e:c9:4d:80:13:
                    93:0e:83:3a:f4:81:a7:a8:de:36:53:83:18:a6:12:
                    8e:2f:77:3e:be:25:7d:92:18:ff:f9:b8:1c:4d:90:
                    ff:da:6d:ce:f5:d2:83:44:bb:5a:29:8a:f5:b1:27:
                    e4:76:c4:9b:33:53:a7:ec:89:e0:2e:f5:a5:0f:a2:
                    1a:37:52:dd:25:9e:6b:e2:f0:43:ec:9f:24:fc:ab:
                    de:03:37:16:84:7f:b5:df:74:dd:5c:0b:78:81:73:
                    a2:6e:28:2f:3c:9d:8b:1b:43:90:f6:c6:57:55:7b:
                    37:98:3b:91:2a:10:3c:9a:b6:6a:e8:e3:91:17:b0:
                    f2:0b:8b:a2:07:1d:fc:f6:4d:20:5a:bb:c3:97:e1:
                    ff:62:bc:04:c0:15:22:b3:ad:51:bb:a5:ad:84:ba:
                    7b:b0:95:a5:95:58:1e:2e:c0:8d:40:41:ef:8d:9d:
                    24:a8:ac:68:ab:cd:29:9a:09:8f:6d:b6:40:63:92:
                    e3:6b:ed:c1:8f:5c:a4:e2:7e:ef:5e:9a:64:bd:56:
                    ff:6e:9d:39:42:13:ed:9c:39:1b:68:91:8d:b5:24:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AB:CE:C1:01:37:CD:19:D3:C6:A9:B2:2F:0B:85:F3:D2:79:95:14
            X509v3 Authority Key Identifier:
                keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:24:81:8a:f5:51:71:dd:39:b1:c8:d9:70:fd:bf:1d:b2:85:
         42:73:cc:6e:20:ec:f1:d8:c2:38:e1:5a:1b:2d:be:37:61:95:
         53:c3:ea:61:85:34:d9:8e:b0:f8:8e:d8:05:b6:f7:58:d8:93:
         81:6b:46:1c:1d:59:7d:ba:0b:a1:7d:f0:61:83:36:1d:04:8d:
         70:06:3a:99:e7:2a:4b:56:1b:42:a8:14:8b:c1:21:5a:9a:fd:
         c3:62:f4:1d:92:4d:aa:33:e9:b6:5a:af:1d:79:b6:2c:95:1c:
         29:de:54:53:c4:2d:01:6d:43:0d:4e:2d:a2:2c:2c:0e:e6:ba:
         8e:b3:63:e6:f6:30:b7:9a:ec:12:b2:b9:a9:96:35:48:38:6f:
         9b:f4:09:58:f9:cd:6b:a5:8d:2f:78:4f:27:4e:d8:cb:d9:db:
         2b:11:19:d5:b6:4b:ef:27:b0:7a:56:98:88:af:22:02:76:80:
         6e:9b:7f:cd:d7:08:f5:a2:79:63:4f:23:e3:52:fd:b5:45:4a:
         16:fc:72:64:ee:a6:b6:a5:e4:c8:df:c2:b3:ef:d6:35:72:2c:
         c3:11:34:ee:74:79:4f:e4:03:35:1c:48:e1:b5:86:84:a1:7a:
         85:65:c7:f3:28:38:5e:c4:a2:31:fe:06:40:4a:6e:20:21:8e:
         17:30:6b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wJlD92Mjk+mPrBFYZh5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm
OGMxNGQwHhcNMjUwODA2MDUwMDMwWhcNMjUwODA3MDUwMDMwWjAzMTEwLwYDVQQD
Eyg3MGFiY2VjMTAxMzdjZDE5ZDNjNmE5YjIyZjBiODVmM2QyNzk5NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rkeru7VpwJJTHco9rOc4Fa1n6iN
VTk2YUXsTSw2AJdfb9JFAru4fslNgBOTDoM69IGnqN42U4MYphKOL3c+viV9khj/
+bgcTZD/2m3O9dKDRLtaKYr1sSfkdsSbM1On7IngLvWlD6IaN1LdJZ5r4vBD7J8k
/KveAzcWhH+133TdXAt4gXOibigvPJ2LG0OQ9sZXVXs3mDuRKhA8mrZq6OORF7Dy
C4uiBx389k0gWrvDl+H/YrwEwBUis61Ru6WthLp7sJWllVgeLsCNQEHvjZ0kqKxo
q80pmgmPbbZAY5Lja+3Bj1yk4n7vXppkvVb/bp05QhPtnDkbaJGNtSQSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCrzsEBN80Z08apsi8LhfPSeZUUMB8GA1UdIwQY
MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt
YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi
LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCSBivVR
cd05scjZcP2/HbKFQnPMbiDs8djCOOFaGy2+N2GVU8PqYYU02Y6w+I7YBbb3WNiT
gWtGHB1ZfboLoX3wYYM2HQSNcAY6mecqS1YbQqgUi8EhWpr9w2L0HZJNqjPptlqv
HXm2LJUcKd5UU8QtAW1DDU4toiwsDua6jrNj5vYwt5rsErK5qZY1SDhvm/QJWPnN
a6WNL3hPJ07Yy9nbKxEZ1bZL7yewelaYiK8iAnaAbpt/zdcI9aJ5Y08j41L9tUVK
FvxyZO6mtqXkyN/Cs+/WNXIswxE07nR5T+QDNRxI4bWGhKF6hWXH8yg4XsSiMf4G
QEpuICGOFzBrOg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:49 2025 by rpki-client