Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File:                     oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier:          b9344RYoh7/yysWZ+iwLDNk6RYNQ7su0v3kXPbA4VwU=
Subject key identifier:   36:72:71:EB:E6:10:0F:5F:13:FB:74:DC:A6:CD:BB:96:DD:9C:94:C8
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer:       /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial:       0198857A6C2EE764E884201AB0B49949E56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number:          032F
Signing time:             Thu 07 Aug 2025 17:00:49 +0000
Manifest this update:     Thu 07 Aug 2025 17:00:49 +0000
Manifest next update:     Fri 08 Aug 2025 17:00:49 +0000
Files and hashes:         1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: PAu3ZYTqhanner5QU7jYhCgn+nQA8IYRt5i7xhYCGHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:6c:2e:e7:64:e8:84:20:1a:b0:b4:99:49:e5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
        Validity
            Not Before: Aug  7 17:00:49 2025 GMT
            Not After : Aug  8 17:00:49 2025 GMT
        Subject: CN=367271ebe6100f5f13fb74dca6cdbb96dd9c94c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:33:05:01:bf:27:db:bc:03:ee:65:97:21:
                    b9:5c:c6:5f:ac:75:4d:30:72:3e:66:02:8f:b1:c0:
                    f5:a9:d7:06:59:66:9d:bc:12:2e:bc:d7:c7:37:85:
                    a2:93:1e:e0:e7:7c:35:9d:da:0e:9d:12:85:34:f1:
                    40:1e:51:38:a3:99:32:0d:8e:bb:61:24:81:8d:23:
                    4d:c7:37:f4:38:b2:81:aa:58:0d:a5:48:2d:f9:88:
                    18:00:e7:f8:40:18:aa:59:a9:73:08:2c:5e:1e:26:
                    23:dc:f6:7c:84:98:41:b9:b8:8f:a1:c9:3d:af:b9:
                    46:96:24:92:2c:06:64:25:99:66:61:bd:68:e3:0e:
                    43:34:cf:34:8e:a6:09:fb:d6:bc:2c:f4:8b:1b:c6:
                    05:f8:72:b5:20:bc:46:20:31:40:75:9d:6c:e2:9b:
                    df:0a:e2:1b:a2:e4:9a:31:a8:2e:97:ea:4d:ec:c4:
                    7c:0d:91:22:8a:dc:c7:02:74:93:fa:d7:08:ab:fb:
                    1f:9f:0e:c7:e9:fe:7a:86:89:a2:fb:c3:8c:24:f3:
                    28:72:05:95:7b:4b:6a:a2:11:86:5a:8c:9c:c0:cf:
                    1c:49:a2:14:47:c3:74:08:97:da:30:ca:67:c1:d8:
                    70:13:ca:61:82:44:01:33:34:62:19:9c:00:61:8c:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:71:EB:E6:10:0F:5F:13:FB:74:DC:A6:CD:BB:96:DD:9C:94:C8
            X509v3 Authority Key Identifier:
                keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:a0:e6:92:c0:75:61:d4:ce:96:be:28:92:06:70:49:26:
         ba:5c:a4:b0:52:36:35:8d:73:71:82:73:93:7b:fb:23:69:7b:
         75:64:82:41:1b:ad:41:6f:ae:bc:e8:5f:04:80:87:8d:f7:95:
         bd:cd:44:0d:9a:c8:b3:ca:7f:0e:73:67:43:fe:ea:55:ef:69:
         80:bb:3c:51:f8:7c:90:d4:d2:fb:0a:7f:d2:f3:cb:56:49:98:
         07:49:45:8b:09:af:24:3b:1b:ff:2e:3d:3a:b4:5a:0f:70:5b:
         a4:a0:26:e2:8c:4e:1b:2b:b0:46:fe:04:32:85:b4:8e:9b:27:
         1e:4e:21:c5:07:18:0b:a4:5f:1c:a4:ad:55:a6:82:8d:17:c8:
         3c:31:f4:30:bf:00:ea:30:32:33:f3:f2:96:10:ce:af:45:b0:
         7d:0d:91:ae:f0:fc:3c:b4:fa:05:f0:9f:f9:c6:dc:1c:ad:3b:
         84:f9:b2:8e:78:16:9c:97:ee:f6:bc:c0:79:30:55:0d:8b:31:
         91:d8:5d:9b:d8:48:47:83:af:2f:b8:62:d2:58:25:e1:e8:59:
         f6:2a:8b:c2:a4:9a:ca:2d:c6:ad:75:2e:1e:7a:61:81:b7:a3:
         60:9d:40:16:84:b1:9d:35:03:31:3f:e5:71:b3:b5:a0:0e:77:
         8e:a2:3f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFemwu52TohCAasLSZSeVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzVlZGI1MDY0MjExNDQzMWFkYWVkOGJjNTA1ZTY4NTU5
Y2FkNGEwHhcNMjUwODA3MTcwMDQ5WhcNMjUwODA4MTcwMDQ5WjAzMTEwLwYDVQQD
EygzNjcyNzFlYmU2MTAwZjVmMTNmYjc0ZGNhNmNkYmI5NmRkOWM5NGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjMzBQG/J9u8A+5llyG5XMZfrHVN
MHI+ZgKPscD1qdcGWWadvBIuvNfHN4Wikx7g53w1ndoOnRKFNPFAHlE4o5kyDY67
YSSBjSNNxzf0OLKBqlgNpUgt+YgYAOf4QBiqWalzCCxeHiYj3PZ8hJhBubiPock9
r7lGliSSLAZkJZlmYb1o4w5DNM80jqYJ+9a8LPSLG8YF+HK1ILxGIDFAdZ1s4pvf
CuIbouSaMagul+pN7MR8DZEiitzHAnST+tcIq/sfnw7H6f56homi+8OMJPMocgWV
e0tqohGGWoycwM8cSaIUR8N0CJfaMMpnwdhwE8phgkQBMzRiGZwAYYz7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZycevmEA9fE/t03KbNu5bdnJTIMB8GA1UdIwQY
MBaAFKA17bUGQhFEMa2u2LxQXmhVnK1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUt
ZDQ5OGFhYjRlYjJhLzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUtZDQ5OGFhYjRlYjJh
LzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+ig5pLA
dWHUzpa+KJIGcEkmulyksFI2NY1zcYJzk3v7I2l7dWSCQRutQW+uvOhfBICHjfeV
vc1EDZrIs8p/DnNnQ/7qVe9pgLs8Ufh8kNTS+wp/0vPLVkmYB0lFiwmvJDsb/y49
OrRaD3BbpKAm4oxOGyuwRv4EMoW0jpsnHk4hxQcYC6RfHKStVaaCjRfIPDH0ML8A
6jAyM/PylhDOr0WwfQ2RrvD8PLT6BfCf+cbcHK07hPmyjngWnJfu9rzAeTBVDYsx
kdhdm9hIR4OvL7hi0lgl4ehZ9iqLwqSayi3GrXUuHnphgbejYJ1AFoSxnTUDMT/l
cbO1oA53jqI/aw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:19 2025 by rpki-client