Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File:                     ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier:          QBwj3EfmyaHRr77nWkrd6UpwIJ3sY/ZViUG21insV0s=
Subject key identifier:   E6:5C:D1:0C:4F:CC:F6:1F:A6:D6:B1:3C:DB:9F:80:50:DB:E6:BC:54
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer:       /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial:       01989592101834630D31A8C4C216A2833E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number:          0331
Signing time:             Sun 10 Aug 2025 20:00:34 +0000
Manifest this update:     Sun 10 Aug 2025 20:00:34 +0000
Manifest next update:     Mon 11 Aug 2025 20:00:34 +0000
Files and hashes:         1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
                          2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
                          3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: 3d52Wn+Nadm+pKwlDFNutRouk2g6BHDykbHipSHCHQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:10:18:34:63:0d:31:a8:c4:c2:16:a2:83:3e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
        Validity
            Not Before: Aug 10 20:00:34 2025 GMT
            Not After : Aug 11 20:00:34 2025 GMT
        Subject: CN=e65cd10c4fccf61fa6d6b13cdb9f8050dbe6bc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:87:30:d4:47:47:f9:86:36:3f:7f:b0:85:
                    2b:04:8d:7e:ba:8f:74:70:c9:1f:7b:77:1a:b1:a9:
                    d9:af:c4:3f:6c:13:00:3d:ec:84:5c:58:25:7c:2b:
                    a5:c7:9d:21:e9:67:d3:3a:a7:1b:03:eb:38:0d:db:
                    33:20:48:ba:78:d1:c2:b2:97:8c:7d:b2:46:97:7c:
                    d5:27:24:82:a6:2d:3f:20:00:58:ab:06:40:55:92:
                    eb:26:99:3c:5f:43:5d:72:0c:e1:9d:e1:c1:af:0a:
                    f8:75:8c:07:ee:b6:db:40:df:c6:a0:cd:53:d3:ba:
                    91:08:c4:bc:0a:07:9e:64:77:53:cf:f3:0d:b7:cc:
                    07:8d:61:12:b7:59:2d:63:3c:a8:3a:c0:c4:85:cf:
                    38:90:2c:de:0b:ae:5d:0e:c5:19:1a:ec:77:93:a7:
                    a8:42:05:dc:ae:8c:81:38:b9:f3:92:c1:01:0a:d0:
                    46:4a:8c:9b:0b:2c:ca:8f:21:ee:32:4a:d3:26:16:
                    04:a3:48:49:8e:e5:d9:82:fb:65:b5:a4:ab:fe:70:
                    ec:c5:93:8e:ab:4b:85:46:28:f1:cb:f6:13:77:fb:
                    33:46:da:f0:2c:a0:9c:1d:22:8b:6f:af:e5:69:98:
                    bc:18:27:6b:2d:cd:d6:6c:b2:34:3f:3f:6b:4a:17:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5C:D1:0C:4F:CC:F6:1F:A6:D6:B1:3C:DB:9F:80:50:DB:E6:BC:54
            X509v3 Authority Key Identifier:
                keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:40:98:88:72:73:5f:48:d6:23:c4:c0:46:15:f6:50:29:a1:
         97:8c:da:53:02:79:90:64:16:7b:c2:2a:d1:87:66:e5:07:0f:
         fa:c7:ea:15:b2:50:93:35:f7:6b:c8:a3:e0:2b:b2:ff:35:2f:
         a4:e4:0b:a8:cc:50:f4:ce:3b:4f:c7:f2:60:8b:3d:25:25:96:
         39:1c:69:81:6c:99:6f:ac:d3:d0:49:41:c9:8e:84:2d:4d:7e:
         4f:17:3b:83:e7:7d:75:c4:fe:13:10:4f:62:05:22:5e:f8:93:
         c1:39:4e:b2:bc:38:93:1a:3d:be:4c:e0:b6:ed:63:cf:ea:2a:
         33:c3:c1:a6:bb:31:58:07:91:c4:bc:db:92:75:e4:af:6a:6d:
         30:b6:5a:7f:5b:77:0f:fb:50:0f:46:ef:9f:34:ff:92:d7:b1:
         fc:96:fb:40:96:8d:30:3c:70:12:3b:43:35:e7:c6:f2:1d:9c:
         f7:02:b9:b5:40:df:b6:d5:1c:7d:3b:59:96:af:16:eb:fe:57:
         73:90:98:1f:9b:90:1b:df:1b:20:ab:a3:e5:39:2e:17:b0:09:
         c6:8c:24:57:f9:dd:52:16:8d:7c:65:68:c3:2f:43:31:7d:8d:
         5c:4c:a2:98:71:77:d1:13:ca:1b:95:66:f4:3f:86:11:db:24:
         d9:96:18:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkhAYNGMNMajEwhaigz4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4
NmViYjEwHhcNMjUwODEwMjAwMDM0WhcNMjUwODExMjAwMDM0WjAzMTEwLwYDVQQD
EyhlNjVjZDEwYzRmY2NmNjFmYTZkNmIxM2NkYjlmODA1MGRiZTZiYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCHMNRHR/mGNj9/sIUrBI1+uo90
cMkfe3casanZr8Q/bBMAPeyEXFglfCulx50h6WfTOqcbA+s4DdszIEi6eNHCspeM
fbJGl3zVJySCpi0/IABYqwZAVZLrJpk8X0NdcgzhneHBrwr4dYwH7rbbQN/GoM1T
07qRCMS8CgeeZHdTz/MNt8wHjWESt1ktYzyoOsDEhc84kCzeC65dDsUZGux3k6eo
QgXcroyBOLnzksEBCtBGSoybCyzKjyHuMkrTJhYEo0hJjuXZgvtltaSr/nDsxZOO
q0uFRijxy/YTd/szRtrwLKCcHSKLb6/laZi8GCdrLc3WbLI0Pz9rShcQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZc0QxPzPYfptaxPNufgFDb5rxUMB8GA1UdIwQY
MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt
YzRkNDJiN2Y2MjcwLzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw
LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUCYiHJz
X0jWI8TARhX2UCmhl4zaUwJ5kGQWe8Iq0Ydm5QcP+sfqFbJQkzX3a8ij4Cuy/zUv
pOQLqMxQ9M47T8fyYIs9JSWWORxpgWyZb6zT0ElByY6ELU1+Txc7g+d9dcT+ExBP
YgUiXviTwTlOsrw4kxo9vkzgtu1jz+oqM8PBprsxWAeRxLzbknXkr2ptMLZaf1t3
D/tQD0bvnzT/ktex/Jb7QJaNMDxwEjtDNefG8h2c9wK5tUDfttUcfTtZlq8W6/5X
c5CYH5uQG98bIKuj5TkuF7AJxowkV/ndUhaNfGVowy9DMX2NXEyimHF30RPKG5Vm
9D+GEdsk2ZYYAA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:16 2025 by rpki-client