Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File:                     IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier:          oNB64TRxzIFRt9jJN3mkKOtzPgRR0LCcil45w5xuq+k=
Subject key identifier:   D9:8D:34:C4:A2:96:01:49:61:CD:FD:03:1F:15:39:7C:24:AC:97:2A
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer:       /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial:       019849653A724260DE676DF0A8670EB57D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number:          031A
Signing time:             Sun 27 Jul 2025 01:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:27 +0000
Files and hashes:         1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: 9Lzf1dHCmbe4AAYQPw2NdJSTXTvkCgXE27QVZpcZpOE=)
                          2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:3a:72:42:60:de:67:6d:f0:a8:67:0e:b5:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
        Validity
            Not Before: Jul 27 01:00:27 2025 GMT
            Not After : Jul 28 01:00:27 2025 GMT
        Subject: CN=d98d34c4a296014961cdfd031f15397c24ac972a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:95:d6:fc:02:8a:a8:1f:dc:3e:68:39:92:
                    9a:e6:7b:86:e6:e3:9a:d5:e5:cd:88:73:c9:a1:31:
                    bb:4b:93:53:9b:8d:20:9f:8c:70:f4:62:91:c0:cf:
                    78:31:df:09:ea:92:29:d1:ab:4c:54:d8:54:80:5c:
                    58:17:ef:25:e1:6b:32:6b:e5:c1:bb:5d:7c:8f:47:
                    26:af:fa:d6:c0:66:45:64:c8:71:b0:30:29:b0:19:
                    49:f4:70:64:84:2f:5f:c4:fc:59:c0:0d:94:a2:cc:
                    1e:48:5c:7c:9f:5d:0a:47:eb:94:69:dc:e6:75:eb:
                    fb:d9:f4:70:f3:5f:94:0d:3b:65:dc:c2:68:72:20:
                    97:81:e8:8b:0a:40:c3:50:be:c4:9e:d9:70:a9:8d:
                    b4:ab:f0:93:1e:ba:21:ac:bf:95:fe:0c:28:b8:01:
                    09:ee:83:57:b9:e2:38:5a:1a:84:b7:7a:84:59:22:
                    e5:2c:0d:ea:e5:1b:60:67:38:f6:13:76:1c:04:54:
                    5e:50:ba:d4:66:c0:60:c3:f4:45:0f:7d:80:5e:a1:
                    a6:26:b9:2c:6d:10:cf:86:a4:5c:14:12:f1:09:47:
                    37:0a:c3:9c:5b:8a:9d:3b:b8:8b:99:f0:97:89:e0:
                    b6:f4:68:dd:cb:ff:53:eb:88:3d:f0:87:6f:cf:68:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8D:34:C4:A2:96:01:49:61:CD:FD:03:1F:15:39:7C:24:AC:97:2A
            X509v3 Authority Key Identifier:
                keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:81:f6:3a:d6:b3:81:9b:15:1d:ce:c6:1b:dc:c9:ce:da:6c:
         1a:47:34:9d:cc:0b:76:32:0f:1c:a7:c7:4d:44:09:d3:f8:88:
         b1:8f:18:e3:21:84:e5:9f:ec:3e:4a:0b:f6:ad:d3:04:dd:55:
         fc:66:75:22:a2:0e:14:7c:7d:36:c0:ed:a8:92:03:74:04:3b:
         d9:e7:72:5f:5c:96:73:ad:45:f9:a6:cb:d2:e0:be:33:eb:24:
         22:b3:14:5d:4e:f0:13:a2:9b:ae:58:ec:4c:66:e3:58:da:52:
         de:a8:10:68:00:e4:10:f4:28:81:57:50:71:d1:39:24:eb:a2:
         d5:a0:ee:1f:dd:7b:92:61:e0:3f:bf:bd:55:5b:87:d8:ae:8c:
         42:aa:da:17:b6:aa:1b:d7:5c:11:60:9b:3d:cb:47:e0:94:88:
         e0:2d:eb:e0:c3:59:a6:5c:58:5a:ec:c4:85:b2:2d:02:ee:d1:
         17:e6:7e:52:c9:17:34:00:b6:8c:62:d2:cc:36:7c:4f:96:c3:
         fa:ea:98:66:55:29:a9:b4:32:40:6c:65:c6:07:a6:7a:c2:6b:
         d3:d3:e9:b7:f6:ff:58:61:61:f6:5c:19:20:13:28:2d:3f:79:
         7a:99:c8:b3:e2:31:a5:37:40:30:1b:9a:09:a8:a4:64:6f:6c:
         f5:6d:34:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZTpyQmDeZ23wqGcOtX2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx
NjI3ZTAwHhcNMjUwNzI3MDEwMDI3WhcNMjUwNzI4MDEwMDI3WjAzMTEwLwYDVQQD
EyhkOThkMzRjNGEyOTYwMTQ5NjFjZGZkMDMxZjE1Mzk3YzI0YWM5NzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+SV1vwCiqgf3D5oOZKa5nuG5uOa
1eXNiHPJoTG7S5NTm40gn4xw9GKRwM94Md8J6pIp0atMVNhUgFxYF+8l4Wsya+XB
u118j0cmr/rWwGZFZMhxsDApsBlJ9HBkhC9fxPxZwA2UosweSFx8n10KR+uUadzm
dev72fRw81+UDTtl3MJociCXgeiLCkDDUL7EntlwqY20q/CTHrohrL+V/gwouAEJ
7oNXueI4WhqEt3qEWSLlLA3q5RtgZzj2E3YcBFReULrUZsBgw/RFD32AXqGmJrks
bRDPhqRcFBLxCUc3CsOcW4qdO7iLmfCXieC29Gjdy/9T64g98Idvz2haEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmNNMSilgFJYc39Ax8VOXwkrJcqMB8GA1UdIwQY
MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt
MzhmOGVkMDAwMWVkLzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk
LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4H2Otaz
gZsVHc7GG9zJztpsGkc0ncwLdjIPHKfHTUQJ0/iIsY8Y4yGE5Z/sPkoL9q3TBN1V
/GZ1IqIOFHx9NsDtqJIDdAQ72edyX1yWc61F+abL0uC+M+skIrMUXU7wE6Kbrljs
TGbjWNpS3qgQaADkEPQogVdQcdE5JOui1aDuH917kmHgP7+9VVuH2K6MQqraF7aq
G9dcEWCbPctH4JSI4C3r4MNZplxYWuzEhbItAu7RF+Z+UskXNAC2jGLSzDZ8T5bD
+uqYZlUpqbQyQGxlxgemesJr09Ppt/b/WGFh9lwZIBMoLT95epnIs+IxpTdAMBua
CaikZG9s9W00Qg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:29 2025 by rpki-client