Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File:                     qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier:          lWmaMYwYupDKqBSQP1krWzH29Axkb9VrNgMaXDy+X+Q=
Subject key identifier:   6F:E5:07:7B:E7:EA:7C:B9:00:00:20:47:74:43:D5:F9:D0:E8:C2:C8
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer:       /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial:       01988C58434396C211D951D59F6CF90AACC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number:          1111
Signing time:             Sat 09 Aug 2025 01:00:51 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:51 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:51 +0000
Files and hashes:         1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: Xs8v1ZIpazNgT0KrEN9hdFeW+uvN+lKEToODpzH2SMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:43:43:96:c2:11:d9:51:d5:9f:6c:f9:0a:ac:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
        Validity
            Not Before: Aug  9 01:00:51 2025 GMT
            Not After : Aug 10 01:00:51 2025 GMT
        Subject: CN=6fe5077be7ea7cb9000020477443d5f9d0e8c2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:94:64:56:00:a6:22:c0:a2:99:15:72:1c:
                    af:aa:f7:72:5a:0f:e4:0f:d3:6c:02:5c:10:7c:dd:
                    fc:f0:db:83:4d:84:15:df:90:0c:bd:1b:77:19:9f:
                    66:e4:42:40:6a:98:0c:79:7c:4d:49:3e:de:eb:a2:
                    9a:7d:bb:fe:89:bc:43:1c:e1:0d:a2:23:f6:45:5c:
                    b4:07:e4:b4:06:d1:47:77:a7:33:62:6a:80:6a:76:
                    6e:42:7e:30:f2:e1:6b:8f:58:73:c9:c0:e8:64:92:
                    06:28:9a:0a:14:00:f9:40:15:0f:c6:ca:87:e5:74:
                    b8:51:15:b1:17:89:cc:96:62:93:6f:d2:a9:cf:20:
                    8e:0b:2c:b5:93:91:d1:1a:d6:c6:84:44:01:70:31:
                    14:68:0c:b2:f5:d6:95:6d:d8:cf:b7:79:d6:a5:f4:
                    35:de:78:cc:0f:86:a7:13:2f:d0:80:7a:a5:3a:7a:
                    7e:97:05:f6:36:8f:96:2c:b4:fe:5b:58:2b:6b:28:
                    1a:65:15:91:a0:98:ae:57:cd:bb:9e:34:01:4a:6d:
                    a2:11:84:99:52:23:12:d4:00:0a:85:55:ce:9f:4d:
                    91:f1:ee:be:f9:39:85:52:f4:5d:e8:95:88:6b:8e:
                    da:57:31:8e:91:7c:42:1c:f3:a0:ce:bd:24:31:e4:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:07:7B:E7:EA:7C:B9:00:00:20:47:74:43:D5:F9:D0:E8:C2:C8
            X509v3 Authority Key Identifier:
                keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:b8:fd:5d:73:0f:60:b9:b1:f7:b7:8d:0b:f0:b1:9f:f6:
         92:4e:55:e6:16:c8:5d:e2:08:7b:5a:6f:ce:57:3b:72:49:c9:
         9c:32:ed:02:90:7b:4a:23:c7:77:5f:0d:bf:be:a8:a1:a7:a7:
         fb:56:24:82:85:45:5d:2d:43:de:51:80:82:1f:a0:61:a3:3b:
         98:c2:cb:42:46:79:93:27:57:6a:97:d6:fa:2a:0a:2e:f9:46:
         32:33:97:c6:e1:c3:a3:fa:6d:31:18:3f:97:23:9e:b3:69:cb:
         da:1e:b2:a7:37:a3:0e:af:a6:2b:c0:48:9c:b2:41:46:11:d7:
         ae:8e:ea:ad:71:0f:18:ff:86:e5:c7:05:86:0f:48:f9:04:c7:
         9a:44:4c:17:fe:37:06:57:1a:ba:38:3a:54:30:d6:4a:ce:19:
         39:86:2f:1d:7c:1b:2a:3a:23:09:09:d1:83:a9:31:e6:c1:54:
         a9:45:99:5e:b0:75:c6:8b:ee:cb:e3:7f:44:8b:e0:f0:63:8e:
         86:5b:6d:8d:16:86:1d:f8:85:94:d3:dd:44:57:61:1c:1c:21:
         f7:66:9d:fd:39:40:43:4e:59:6e:12:d8:f2:63:b0:49:b9:0e:
         72:7b:ad:e6:eb:88:82:ea:5f:2b:df:e8:f2:98:af:af:5c:a6:
         6f:92:6d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWENDlsIR2VHVn2z5CqzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZWJkOGFlNmZkNTJiYmJkNDk3MGMyMTYxNjNkOWIyYjBm
MGYyNDEwHhcNMjUwODA5MDEwMDUxWhcNMjUwODEwMDEwMDUxWjAzMTEwLwYDVQQD
Eyg2ZmU1MDc3YmU3ZWE3Y2I5MDAwMDIwNDc3NDQzZDVmOWQwZThjMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nqUZFYApiLAopkVchyvqvdyWg/k
D9NsAlwQfN388NuDTYQV35AMvRt3GZ9m5EJAapgMeXxNST7e66Kafbv+ibxDHOEN
oiP2RVy0B+S0BtFHd6czYmqAanZuQn4w8uFrj1hzycDoZJIGKJoKFAD5QBUPxsqH
5XS4URWxF4nMlmKTb9KpzyCOCyy1k5HRGtbGhEQBcDEUaAyy9daVbdjPt3nWpfQ1
3njMD4anEy/QgHqlOnp+lwX2No+WLLT+W1graygaZRWRoJiuV827njQBSm2iEYSZ
UiMS1AAKhVXOn02R8e6++TmFUvRd6JWIa47aVzGOkXxCHPOgzr0kMeSHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/lB3vn6ny5AAAgR3RD1fnQ6MLIMB8GA1UdIwQY
MBaAFKjr2K5v1Su71JcMIWFj2bKw8PJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQt
ZTFjNGM0YWEwZTFkLzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQtZTFjNGM0YWEwZTFk
LzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8q4/V1z
D2C5sfe3jQvwsZ/2kk5V5hbIXeIIe1pvzlc7cknJnDLtApB7SiPHd18Nv76ooaen
+1YkgoVFXS1D3lGAgh+gYaM7mMLLQkZ5kydXapfW+ioKLvlGMjOXxuHDo/ptMRg/
lyOes2nL2h6ypzejDq+mK8BInLJBRhHXro7qrXEPGP+G5ccFhg9I+QTHmkRMF/43
Blcaujg6VDDWSs4ZOYYvHXwbKjojCQnRg6kx5sFUqUWZXrB1xovuy+N/RIvg8GOO
hlttjRaGHfiFlNPdRFdhHBwh92ad/TlAQ05ZbhLY8mOwSbkOcnut5uuIgupfK9/o
8pivr1ymb5Jteg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:49 2025 by rpki-client