Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File:                     DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier:          FOS251Nlhpc+a79N7gYVjTelt1b0anQGikn4Hwg07zA=
Subject key identifier:   E9:38:7B:0C:87:15:6E:63:3A:E7:6C:AA:2A:6B:1A:79:F3:EB:44:BF
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer:       /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial:       01988A3315FD38E5B9002E56038AB996810D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number:          12E9
Signing time:             Fri 08 Aug 2025 15:01:00 +0000
Manifest this update:     Fri 08 Aug 2025 15:01:00 +0000
Manifest next update:     Sat 09 Aug 2025 15:01:00 +0000
Files and hashes:         1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: UEYoX4HKXdeFOZNq7371Z3zy/27Avx2rNnm9YQfEenY=)
                          2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:33:15:fd:38:e5:b9:00:2e:56:03:8a:b9:96:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
        Validity
            Not Before: Aug  8 15:01:00 2025 GMT
            Not After : Aug  9 15:01:00 2025 GMT
        Subject: CN=e9387b0c87156e633ae76caa2a6b1a79f3eb44bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:49:89:ad:5b:d9:7f:30:70:d4:53:ad:ba:
                    aa:76:1b:54:d6:44:59:7a:9b:b0:91:af:af:7a:ea:
                    fb:a5:9e:8a:57:6d:28:28:5e:75:ea:4e:37:65:cf:
                    b0:0d:6b:d4:9a:ed:56:37:33:ae:f1:7a:61:34:66:
                    81:3b:3e:17:47:e1:54:52:27:76:84:94:9e:88:29:
                    62:99:9c:37:47:02:54:f0:e8:c1:9d:e4:af:00:e1:
                    68:f0:4c:93:d4:83:6e:18:56:ad:65:24:33:36:65:
                    07:18:ec:8d:ff:64:9b:51:f0:2a:58:c2:6c:bd:7d:
                    03:4f:75:fd:f6:f9:ae:e5:0a:78:5c:7c:c6:21:eb:
                    89:eb:f5:34:c5:a6:c9:fb:7f:c6:42:0d:7d:f2:37:
                    97:62:ce:15:95:51:71:88:7c:21:33:a0:82:01:16:
                    ec:ac:38:41:25:ea:93:fb:b1:3f:f0:9f:fb:12:9b:
                    61:44:ef:a5:b2:dd:b3:20:32:80:fe:eb:31:01:f7:
                    08:e6:dc:90:5b:f3:59:15:cb:28:73:5a:17:b9:2f:
                    6b:cc:8e:88:8f:05:d6:db:2a:a5:79:3a:49:9b:e9:
                    56:33:e9:3b:b3:54:b8:23:71:8a:7c:07:f1:a4:76:
                    fb:13:24:dc:df:8f:1e:bc:6e:81:5e:06:20:2c:28:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:7B:0C:87:15:6E:63:3A:E7:6C:AA:2A:6B:1A:79:F3:EB:44:BF
            X509v3 Authority Key Identifier:
                keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:34:44:14:56:81:b6:5a:bc:27:0b:c0:e4:f9:d9:d0:21:
         a4:af:4c:d9:a9:d9:39:c0:06:81:c5:11:e8:ac:8b:6b:16:8a:
         16:54:da:4b:6d:76:e8:3c:a9:1d:0c:e8:26:24:3e:1a:e9:98:
         8c:e7:85:c0:5b:39:83:48:8d:2b:e2:3a:91:82:65:2c:9a:e7:
         4c:d0:72:d2:be:13:ef:54:58:3a:99:a3:0e:8e:4e:c0:ac:b2:
         81:20:33:dd:19:10:0e:c3:d4:c8:dc:49:de:a1:bb:26:1d:bb:
         5c:a6:34:7b:8a:13:d1:1e:f1:bb:91:d5:8c:d0:ea:4c:cd:2d:
         43:63:be:8f:f4:9a:1f:0d:4f:64:6f:49:d2:16:38:94:44:e7:
         7d:46:3b:8e:22:c9:27:fa:c0:d6:d0:92:38:da:37:af:eb:51:
         54:1d:2e:ef:9c:9d:10:79:e7:99:c8:b5:e2:a4:84:08:7c:81:
         e0:96:ac:44:82:45:be:82:36:ef:51:11:23:87:33:1e:ed:ed:
         74:ae:45:36:28:fc:2b:5f:dc:1f:8f:88:2f:e5:5f:6c:06:09:
         d3:5d:f5:52:70:ed:a2:02:45:47:4d:08:75:be:79:4c:b3:e0:
         0e:41:26:7e:fb:2d:17:07:7a:e5:c2:f1:68:d6:58:00:43:7c:
         1f:ef:e6:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMxX9OOW5AC5WA4q5loENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj
MDEyYjAwHhcNMjUwODA4MTUwMTAwWhcNMjUwODA5MTUwMTAwWjAzMTEwLwYDVQQD
EyhlOTM4N2IwYzg3MTU2ZTYzM2FlNzZjYWEyYTZiMWE3OWYzZWI0NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJxJia1b2X8wcNRTrbqqdhtU1kRZ
epuwka+veur7pZ6KV20oKF516k43Zc+wDWvUmu1WNzOu8XphNGaBOz4XR+FUUid2
hJSeiClimZw3RwJU8OjBneSvAOFo8EyT1INuGFatZSQzNmUHGOyN/2SbUfAqWMJs
vX0DT3X99vmu5Qp4XHzGIeuJ6/U0xabJ+3/GQg198jeXYs4VlVFxiHwhM6CCARbs
rDhBJeqT+7E/8J/7EpthRO+lst2zIDKA/usxAfcI5tyQW/NZFcsoc1oXuS9rzI6I
jwXW2yqleTpJm+lWM+k7s1S4I3GKfAfxpHb7EyTc348evG6BXgYgLCggBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk4ewyHFW5jOudsqiprGnnz60S/MB8GA1UdIwQY
MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt
OGFjN2JlNDZjYzRiLzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi
LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrY0RBRW
gbZavCcLwOT52dAhpK9M2anZOcAGgcUR6KyLaxaKFlTaS2126DypHQzoJiQ+GumY
jOeFwFs5g0iNK+I6kYJlLJrnTNBy0r4T71RYOpmjDo5OwKyygSAz3RkQDsPUyNxJ
3qG7Jh27XKY0e4oT0R7xu5HVjNDqTM0tQ2O+j/SaHw1PZG9J0hY4lETnfUY7jiLJ
J/rA1tCSONo3r+tRVB0u75ydEHnnmci14qSECHyB4JasRIJFvoI271ERI4czHu3t
dK5FNij8K1/cH4+IL+VfbAYJ0131UnDtogJFR00Idb55TLPgDkEmfvstFwd65cLx
aNZYAEN8H+/mAg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:34 2025 by rpki-client