Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          64egmm+StEPFLSh/v3mkxYDOFhu0iRUz2dAOmebglQI=
Subject key identifier:   D3:D7:9A:A0:4B:09:28:85:C9:D4:51:31:17:EC:E7:36:1B:08:11:67
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       019848F769BAEC30817FDA055805ABEEFAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          031F
Signing time:             Sat 26 Jul 2025 23:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:30 +0000
Files and hashes:         1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: JlliIpe0EbUrzczoSwlfXmdkLW/qkqWLivBqJ+QoZFc=)
                          2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:69:ba:ec:30:81:7f:da:05:58:05:ab:ee:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Jul 26 23:00:30 2025 GMT
            Not After : Jul 27 23:00:30 2025 GMT
        Subject: CN=d3d79aa04b092885c9d4513117ece7361b081167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:42:2e:2f:53:46:d9:ac:64:83:42:10:6e:
                    fe:15:12:9a:6b:e7:07:1d:1c:da:26:89:bc:c9:a9:
                    40:10:d8:6f:02:a4:a6:4c:72:32:ba:02:0d:c0:ca:
                    8b:00:32:7c:5b:84:19:b6:7c:3e:b4:be:bd:e9:38:
                    8d:0e:c8:f3:dc:2e:86:8f:49:26:d9:ae:81:31:af:
                    ce:ae:a9:96:48:cc:67:40:36:b0:e8:ba:56:6a:08:
                    88:cc:85:4d:85:5f:b2:4d:d0:14:b0:64:24:9e:c0:
                    fe:8f:75:d7:ed:ce:c7:7f:40:71:46:3a:2d:04:53:
                    d3:3e:32:5f:2d:fe:97:2d:0d:d3:35:85:c4:6b:7c:
                    72:c7:a5:ea:33:14:3a:25:cd:de:41:62:2b:ff:53:
                    80:ac:70:76:03:b2:e6:95:da:fc:dc:d3:d0:5c:d1:
                    bb:a4:ac:bb:b2:8d:32:bf:26:92:f7:c1:d9:4d:76:
                    dc:1c:7d:9c:d6:86:c2:00:ee:25:df:dc:49:0e:be:
                    8d:02:f9:af:39:1c:52:c9:df:12:46:ba:70:ff:a0:
                    3b:41:50:5e:6d:a7:7a:ca:96:73:0e:eb:4c:c0:6c:
                    2c:2a:cd:52:48:69:03:94:7b:f5:40:19:2f:53:94:
                    f6:b9:6d:6b:5c:ea:03:44:a2:36:a5:97:05:5c:c7:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D7:9A:A0:4B:09:28:85:C9:D4:51:31:17:EC:E7:36:1B:08:11:67
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:b8:71:7b:b0:b4:01:94:af:a9:d8:36:f6:8f:0f:5f:4e:
         fc:85:17:65:c1:23:04:28:02:f6:a1:da:fe:1d:26:b5:63:f8:
         23:22:84:0c:b1:f6:4a:13:b4:1b:4b:aa:63:03:14:3b:60:ce:
         d4:eb:c6:3a:f0:59:ea:b5:51:cb:9f:9a:84:3b:36:1c:4e:0d:
         10:98:e7:1e:85:51:1e:2c:6e:84:97:17:3c:9f:8f:4d:50:ec:
         d8:8e:fd:19:62:72:b8:23:25:72:31:03:ab:be:1f:21:f6:cf:
         16:d0:14:e9:75:f2:d6:81:0c:c3:d3:3b:dc:2c:08:d0:5e:18:
         9d:c5:68:58:b9:4a:04:92:8b:17:db:70:8d:88:fc:e3:16:2f:
         ee:8d:cd:2d:2f:68:40:72:1f:9c:ed:0c:3a:00:cb:20:2b:2f:
         05:47:c1:27:64:f7:4b:69:74:4e:de:6c:df:53:9e:bf:a9:20:
         f4:99:03:a8:86:0a:04:bb:b3:05:0f:5d:7a:1e:c1:f1:e1:d1:
         77:d7:54:e0:ec:ad:27:ea:28:47:f3:f0:f4:1d:d9:b9:8c:31:
         58:01:18:f0:16:d0:c4:29:eb:2e:d7:68:1f:dd:97:96:7d:92:
         9b:ac:c0:11:8a:11:90:8a:aa:44:ec:44:e6:31:fb:85:7f:03:
         12:c5:1a:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI92m67DCBf9oFWAWr7vrRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzU2ODY1N2U1MGU2ZjhlNWM2YmZlZmE4OWNlZjM1MGQ5
NGY4MmUwHhcNMjUwNzI2MjMwMDMwWhcNMjUwNzI3MjMwMDMwWjAzMTEwLwYDVQQD
EyhkM2Q3OWFhMDRiMDkyODg1YzlkNDUxMzExN2VjZTczNjFiMDgxMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruJCLi9TRtmsZINCEG7+FRKaa+cH
HRzaJom8yalAENhvAqSmTHIyugINwMqLADJ8W4QZtnw+tL696TiNDsjz3C6Gj0km
2a6BMa/OrqmWSMxnQDaw6LpWagiIzIVNhV+yTdAUsGQknsD+j3XX7c7Hf0BxRjot
BFPTPjJfLf6XLQ3TNYXEa3xyx6XqMxQ6Jc3eQWIr/1OArHB2A7Lmldr83NPQXNG7
pKy7so0yvyaS98HZTXbcHH2c1obCAO4l39xJDr6NAvmvORxSyd8SRrpw/6A7QVBe
bad6ypZzDutMwGwsKs1SSGkDlHv1QBkvU5T2uW1rXOoDRKI2pZcFXMeXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPXmqBLCSiFydRRMRfs5zYbCBFnMB8GA1UdIwQY
MBaAFP3FaGV+UOb45ca/76ic7zUNlPguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUt
NDM1YWYxNGFhMDdhLzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUtNDM1YWYxNGFhMDdh
LzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2i4cXuw
tAGUr6nYNvaPD19O/IUXZcEjBCgC9qHa/h0mtWP4IyKEDLH2ShO0G0uqYwMUO2DO
1OvGOvBZ6rVRy5+ahDs2HE4NEJjnHoVRHixuhJcXPJ+PTVDs2I79GWJyuCMlcjED
q74fIfbPFtAU6XXy1oEMw9M73CwI0F4YncVoWLlKBJKLF9twjYj84xYv7o3NLS9o
QHIfnO0MOgDLICsvBUfBJ2T3S2l0Tt5s31Oev6kg9JkDqIYKBLuzBQ9deh7B8eHR
d9dU4OytJ+ooR/Pw9B3ZuYwxWAEY8BbQxCnrLtdoH92Xln2Sm6zAEYoRkIqqROxE
5jH7hX8DEsUaxA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:06 2025 by rpki-client