Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File:                     oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier:          uLeAd3drEqN4TDKrYltxPPWfYXMw2QVF0hhSQdPu+VY=
Subject key identifier:   15:AE:63:35:AD:39:C1:BA:D4:F3:3A:12:F9:69:D0:0E:6D:BB:EF:EB
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer:       /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial:       0198492E1F3A32C92C1B1B268CF4BBF62F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number:          05C4
Signing time:             Sun 27 Jul 2025 00:00:15 +0000
Manifest this update:     Sun 27 Jul 2025 00:00:15 +0000
Manifest next update:     Mon 28 Jul 2025 00:00:15 +0000
Files and hashes:         1: GgU4V3exF_KMsbXxFhlxd1M5pl8.roa (hash: l8v1ZDd4kP5GR80G/4+UL0QS/Pev1eqpTKkPGhrjSW4=)
                          2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: juL39d6jcpBwW15FooBXtZbPeYIWwsXf5Ng7BYFuTjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:2e:1f:3a:32:c9:2c:1b:1b:26:8c:f4:bb:f6:2f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
        Validity
            Not Before: Jul 27 00:00:15 2025 GMT
            Not After : Jul 28 00:00:15 2025 GMT
        Subject: CN=15ae6335ad39c1bad4f33a12f969d00e6dbbefeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:7d:60:43:17:43:1d:72:13:84:95:6b:a5:
                    bf:7d:a8:47:b3:49:57:dc:c6:07:0f:3c:a7:15:4b:
                    36:62:cf:7d:39:e7:2a:eb:f7:f6:e6:a0:0a:eb:72:
                    e7:1c:c1:8b:4d:84:75:74:93:4b:24:ed:35:cb:60:
                    7d:a5:a4:02:01:a1:23:cd:5b:b2:8e:d9:fc:36:64:
                    af:a0:ca:66:76:ed:5a:e6:ca:55:95:93:95:9a:70:
                    fa:48:02:df:38:af:67:23:1a:b0:82:88:2a:d8:58:
                    ff:f5:31:99:1d:ef:35:90:3b:38:39:93:c7:04:09:
                    6e:c1:df:ed:08:ca:b9:cf:f4:14:97:a9:55:3a:ca:
                    1b:c7:92:32:b0:37:14:f6:1c:17:23:fa:3a:83:71:
                    44:53:e7:57:20:47:36:40:aa:ae:f4:f4:e1:3c:a6:
                    a2:67:23:28:f2:8c:56:60:45:e3:52:d6:0a:17:19:
                    f8:5e:8d:21:39:02:8e:dc:fe:db:3b:36:b2:0d:81:
                    0d:37:0a:ff:12:fa:14:76:a8:b3:e0:ec:2f:d2:00:
                    e7:a2:e8:d9:41:72:fa:b7:55:f9:84:cc:e4:5d:9c:
                    89:3c:42:fe:22:39:8e:f8:1a:6e:eb:0c:e3:62:bf:
                    69:44:3a:32:98:9e:80:58:f8:1b:89:32:11:69:a1:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:63:35:AD:39:C1:BA:D4:F3:3A:12:F9:69:D0:0E:6D:BB:EF:EB
            X509v3 Authority Key Identifier:
                keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:eb:61:5b:bf:37:3f:97:21:25:a4:43:04:80:55:72:75:e7:
         2b:9b:33:c2:90:03:ee:8d:4b:f7:61:b7:f5:7f:19:7d:51:76:
         83:87:8e:e5:04:e5:8b:26:ed:f3:f5:0b:8f:64:1e:08:a2:0f:
         dc:b7:12:c9:d3:e2:ea:a4:e6:8c:06:e0:29:24:ef:c7:00:39:
         b8:aa:fa:dc:00:45:55:e6:12:27:49:b1:45:d2:9a:13:de:7e:
         cf:6a:48:d4:e9:ee:72:ab:d5:58:a1:a4:8b:44:c7:e5:89:2b:
         99:5b:81:8e:90:44:bd:d6:44:a0:38:4a:34:fc:ae:48:ad:7f:
         11:83:fb:be:0b:b0:db:d9:84:b5:64:d8:65:cc:ed:27:a2:0a:
         99:de:f2:7d:df:3a:f6:2b:cb:d7:55:c6:45:ea:21:a2:d0:cb:
         d4:f9:55:9d:84:c3:9e:b4:1e:74:6c:6f:a8:b8:ae:b6:56:63:
         f9:fd:fb:52:ed:ba:f0:87:a0:1f:d4:57:69:ff:61:61:58:7a:
         6c:e3:06:c1:42:aa:d8:51:b3:9d:e0:b8:f3:ba:5b:77:17:97:
         d6:67:ac:2c:7a:42:a3:db:8c:0b:a1:3e:04:de:04:e4:1f:d5:
         d6:1f:70:2b:9e:05:70:16:a1:e4:d1:02:00:0e:b2:e7:34:b1:
         46:b0:15:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJLh86MsksGxsmjPS79i+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3
MGRmZTcwHhcNMjUwNzI3MDAwMDE1WhcNMjUwNzI4MDAwMDE1WjAzMTEwLwYDVQQD
EygxNWFlNjMzNWFkMzljMWJhZDRmMzNhMTJmOTY5ZDAwZTZkYmJlZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsN9YEMXQx1yE4SVa6W/fahHs0lX
3MYHDzynFUs2Ys99Oecq6/f25qAK63LnHMGLTYR1dJNLJO01y2B9paQCAaEjzVuy
jtn8NmSvoMpmdu1a5spVlZOVmnD6SALfOK9nIxqwgogq2Fj/9TGZHe81kDs4OZPH
BAluwd/tCMq5z/QUl6lVOsobx5IysDcU9hwXI/o6g3FEU+dXIEc2QKqu9PThPKai
ZyMo8oxWYEXjUtYKFxn4Xo0hOQKO3P7bOzayDYENNwr/EvoUdqiz4Owv0gDnoujZ
QXL6t1X5hMzkXZyJPEL+IjmO+Bpu6wzjYr9pRDoymJ6AWPgbiTIRaaGHuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWuYzWtOcG61PM6Evlp0A5tu+/rMB8GA1UdIwQY
MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt
ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0
LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+thW783
P5chJaRDBIBVcnXnK5szwpAD7o1L92G39X8ZfVF2g4eO5QTliybt8/ULj2QeCKIP
3LcSydPi6qTmjAbgKSTvxwA5uKr63ABFVeYSJ0mxRdKaE95+z2pI1OnucqvVWKGk
i0TH5YkrmVuBjpBEvdZEoDhKNPyuSK1/EYP7vguw29mEtWTYZcztJ6IKmd7yfd86
9ivL11XGReohotDL1PlVnYTDnrQedGxvqLiutlZj+f37Uu268IegH9RXaf9hYVh6
bOMGwUKq2FGzneC487pbdxeX1mesLHpCo9uMC6E+BN4E5B/V1h9wK54FcBah5NEC
AA6y5zSxRrAVXQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:41 2025 by rpki-client