Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File:                     fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier:          niUTMgXZ1RnnBLorqmKftuFISrMt6zi5+U08HtxnjjM=
Subject key identifier:   30:14:E8:8C:76:26:C3:89:84:14:79:7E:B4:77:15:B2:80:33:9C:62
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer:       /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial:       0198488976C727135B97FD20B98D0586CA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number:          06AD
Signing time:             Sat 26 Jul 2025 21:00:24 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:24 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:24 +0000
Files and hashes:         1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: m9fIhOO8uxTMqiIDmkjupe4F5E1mlNVynf+VdN+zhiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:76:c7:27:13:5b:97:fd:20:b9:8d:05:86:ca:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
        Validity
            Not Before: Jul 26 21:00:24 2025 GMT
            Not After : Jul 27 21:00:24 2025 GMT
        Subject: CN=3014e88c7626c3898414797eb47715b280339c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:ce:ac:e2:23:45:91:1a:8a:5e:03:84:ec:
                    17:48:25:8a:36:ac:61:38:cb:e5:27:e8:96:65:75:
                    ca:eb:c6:7d:7e:53:33:8a:78:5a:ec:66:d6:57:2b:
                    09:da:9f:3a:4b:1f:e3:a3:a5:74:76:56:da:d3:69:
                    52:fc:6c:14:b5:63:fe:01:63:f1:84:57:73:47:a1:
                    10:43:1c:2e:da:ca:54:d7:7a:01:f6:90:62:d3:86:
                    a8:19:33:07:11:f3:32:c7:5e:c8:7b:b7:6d:d7:44:
                    c0:48:ab:1a:f4:68:55:19:df:3e:98:18:cb:f6:be:
                    13:45:5f:9b:65:ed:a5:98:cc:13:10:19:d3:2b:40:
                    55:e1:6f:5a:c0:40:5c:0d:df:90:f0:71:b4:0e:60:
                    19:cd:79:43:ef:98:a9:36:d8:0a:75:5f:b6:9d:49:
                    d8:75:20:a4:ce:68:45:74:27:c0:a9:02:02:73:32:
                    5a:08:47:e7:c7:f0:b6:0b:2f:03:7e:5d:55:51:36:
                    1b:e0:0f:ad:23:d8:17:45:7e:dd:88:e5:07:a4:77:
                    4b:4e:b3:45:a7:cf:60:d7:f6:a0:26:f0:10:f4:3f:
                    cf:39:04:bf:44:d5:d3:b6:87:d6:79:d9:19:1b:0c:
                    09:38:7a:6e:a4:83:4c:79:37:57:3b:ab:e8:6f:6c:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:E8:8C:76:26:C3:89:84:14:79:7E:B4:77:15:B2:80:33:9C:62
            X509v3 Authority Key Identifier:
                keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:8c:2c:cd:90:9d:57:0e:46:b0:5f:ee:c3:0a:22:3c:e1:d7:
         54:f6:39:cf:ff:05:10:be:f7:4f:05:06:80:30:b8:af:fa:bf:
         31:f9:93:df:33:e4:1f:38:e7:9c:13:c1:e7:61:39:af:e6:a0:
         27:3e:d6:7f:9d:23:e4:7a:49:93:43:87:9f:68:84:6a:2a:26:
         15:11:c0:30:f2:8d:4d:cb:a4:f4:9a:26:88:7b:48:2f:1d:f9:
         9e:fc:96:09:63:1a:cf:22:d5:37:ff:e1:3d:b2:ba:1c:8f:33:
         ef:78:00:ee:c1:9b:55:6f:76:55:a9:e3:e9:44:4b:48:16:b8:
         58:3a:65:7d:a3:ae:de:7f:55:6a:1e:8b:9b:ca:a6:a6:41:61:
         98:09:27:3a:08:95:16:84:dc:ed:54:0d:11:c8:e2:4f:e6:f3:
         71:e5:a9:25:ae:a0:e1:57:1a:9b:84:57:19:f5:cc:e3:ed:49:
         0f:1c:92:83:e2:71:95:24:97:32:4e:dc:66:8c:20:dd:2b:5a:
         33:21:f5:ed:56:d4:e5:b6:6a:b1:51:42:09:a4:b1:70:a4:21:
         fb:10:db:c8:73:37:ba:27:bf:ae:70:31:7a:01:f5:04:26:7a:
         0b:3d:df:48:90:88:bc:4c:8e:f7:35:1e:10:78:83:e5:3c:50:
         db:aa:50:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiXbHJxNbl/0guY0FhspXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlN2EyMGI0ODY4MjFkNjI3YmQzNjA5NWU3YTA1YWY5ZmFh
MTUyOWMwHhcNMjUwNzI2MjEwMDI0WhcNMjUwNzI3MjEwMDI0WjAzMTEwLwYDVQQD
EygzMDE0ZTg4Yzc2MjZjMzg5ODQxNDc5N2ViNDc3MTViMjgwMzM5YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocHOrOIjRZEail4DhOwXSCWKNqxh
OMvlJ+iWZXXK68Z9flMzinha7GbWVysJ2p86Sx/jo6V0dlba02lS/GwUtWP+AWPx
hFdzR6EQQxwu2spU13oB9pBi04aoGTMHEfMyx17Ie7dt10TASKsa9GhVGd8+mBjL
9r4TRV+bZe2lmMwTEBnTK0BV4W9awEBcDd+Q8HG0DmAZzXlD75ipNtgKdV+2nUnY
dSCkzmhFdCfAqQICczJaCEfnx/C2Cy8Dfl1VUTYb4A+tI9gXRX7diOUHpHdLTrNF
p89g1/agJvAQ9D/POQS/RNXTtofWedkZGwwJOHpupINMeTdXO6vob2zjwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAU6Ix2JsOJhBR5frR3FbKAM5xiMB8GA1UdIwQY
MBaAFH56ILSGgh1ie9NgleegWvn6oVKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUt
YmE3NWY0NzVmYzNlLzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUtYmE3NWY0NzVmYzNl
LzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2owszZCd
Vw5GsF/uwwoiPOHXVPY5z/8FEL73TwUGgDC4r/q/MfmT3zPkHzjnnBPB52E5r+ag
Jz7Wf50j5HpJk0OHn2iEaiomFRHAMPKNTcuk9JomiHtILx35nvyWCWMazyLVN//h
PbK6HI8z73gA7sGbVW92Vanj6URLSBa4WDplfaOu3n9Vah6Lm8qmpkFhmAknOgiV
FoTc7VQNEcjiT+bzceWpJa6g4Vcam4RXGfXM4+1JDxySg+JxlSSXMk7cZowg3Sta
MyH17VbU5bZqsVFCCaSxcKQh+xDbyHM3uie/rnAxegH1BCZ6Cz3fSJCIvEyO9zUe
EHiD5TxQ26pQ9Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:18 2025 by rpki-client