Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File:                     m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier:          M5sa2cikf3/y5C8hYjiyP4vV+Xt9JuwCXbk/T+MNpjM=
Subject key identifier:   C6:3C:7A:81:99:C9:1E:0A:BA:D6:2E:83:76:EA:61:5B:21:11:12:FB
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer:       /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial:       01984965B0D39B224229F0DF18C818417CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number:          0C02
Signing time:             Sun 27 Jul 2025 01:00:57 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:57 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:57 +0000
Files and hashes:         1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
                          2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: p1e7GE3jUO8DUFHdVIQGbINtLn5KTnFiwMLRHSDmJSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:b0:d3:9b:22:42:29:f0:df:18:c8:18:41:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
        Validity
            Not Before: Jul 27 01:00:57 2025 GMT
            Not After : Jul 28 01:00:57 2025 GMT
        Subject: CN=c63c7a8199c91e0abad62e8376ea615b211112fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:06:db:d2:e0:ed:c0:f4:02:1b:a8:c5:b7:
                    df:7a:cb:15:c4:6c:90:98:fb:44:ab:aa:99:aa:fb:
                    53:f7:5c:b2:f9:e5:01:3f:3b:cc:99:0c:01:5f:11:
                    8e:7d:f0:68:fe:74:71:59:52:ea:59:e4:0b:cc:14:
                    26:4e:fe:bf:36:c9:53:6d:32:15:c5:76:26:e8:5c:
                    af:89:e1:a1:ef:8a:57:7e:62:fa:5f:0d:d9:49:0e:
                    db:20:b5:45:9c:98:30:08:4e:e9:38:87:55:6c:e9:
                    8f:fa:2a:02:7f:58:72:17:55:49:d1:28:03:da:ea:
                    ff:42:4e:f1:50:d1:ce:33:fa:08:9e:1f:35:cb:3e:
                    7f:c4:0b:c7:15:11:9d:ba:a3:ee:1d:ef:c0:e6:bd:
                    b4:99:ca:1d:62:5d:f2:f5:70:e7:fb:2a:a2:95:40:
                    39:59:f1:1d:84:d8:4d:5c:b3:93:bf:78:69:59:64:
                    3c:20:01:4f:0b:a2:0c:7c:f4:11:fd:4a:cc:c4:0a:
                    27:f1:e0:dc:a5:3e:9d:16:6d:77:3f:9d:e8:3d:f0:
                    3f:d2:09:24:f9:fb:ef:d3:ca:e0:6f:ce:ca:ab:ad:
                    b9:20:9a:3e:24:4f:61:97:e7:37:78:5b:ad:d6:18:
                    05:a5:ed:a7:60:a1:c4:64:4a:3b:12:32:90:48:c3:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:7A:81:99:C9:1E:0A:BA:D6:2E:83:76:EA:61:5B:21:11:12:FB
            X509v3 Authority Key Identifier:
                keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:a0:0d:a0:a7:3d:1b:bf:4b:59:2c:b2:23:56:0c:41:8d:
         2b:b4:26:86:98:e0:8b:ce:8b:cb:76:ad:8a:33:2b:e3:52:60:
         0a:8d:a0:f5:73:39:82:29:53:09:dd:88:55:a3:cc:a2:4a:2e:
         e8:d2:61:b5:37:6e:ec:7d:3f:ab:5a:71:2c:27:cd:bf:23:99:
         ba:14:5c:e2:33:b5:37:ce:03:b4:a8:f6:6f:0b:45:15:4c:b3:
         45:bd:28:e7:37:f2:65:aa:d2:00:3b:be:11:a5:6e:b8:3f:5d:
         ca:fd:d0:f3:29:60:39:91:c5:d5:5d:ab:e8:96:93:fb:f8:e8:
         e0:6a:cc:e9:af:35:b5:84:43:4e:d5:ee:ca:43:53:45:16:7b:
         48:1b:71:e8:08:e5:cc:a4:38:be:f9:39:01:4b:cc:0c:4a:eb:
         2f:6a:47:58:ea:02:38:5e:71:b8:e3:f3:fe:c9:39:b7:80:1c:
         b2:59:05:9d:03:a4:e0:af:60:8b:2a:ed:68:8b:5a:b1:ae:29:
         a1:7b:83:51:f3:11:00:48:14:31:10:fd:62:62:eb:08:e5:13:
         df:6c:c9:22:09:fd:15:1e:ee:e7:6d:7a:a4:ea:d4:08:8c:a7:
         ae:5a:8d:86:8e:cf:b8:e1:1e:d6:43:3a:53:ca:a4:95:89:7b:
         f2:a8:81:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbDTmyJCKfDfGMgYQXy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0
NTUwNzIwHhcNMjUwNzI3MDEwMDU3WhcNMjUwNzI4MDEwMDU3WjAzMTEwLwYDVQQD
EyhjNjNjN2E4MTk5YzkxZTBhYmFkNjJlODM3NmVhNjE1YjIxMTExMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7wG29Lg7cD0AhuoxbffessVxGyQ
mPtEq6qZqvtT91yy+eUBPzvMmQwBXxGOffBo/nRxWVLqWeQLzBQmTv6/NslTbTIV
xXYm6FyvieGh74pXfmL6Xw3ZSQ7bILVFnJgwCE7pOIdVbOmP+ioCf1hyF1VJ0SgD
2ur/Qk7xUNHOM/oInh81yz5/xAvHFRGduqPuHe/A5r20mcodYl3y9XDn+yqilUA5
WfEdhNhNXLOTv3hpWWQ8IAFPC6IMfPQR/UrMxAon8eDcpT6dFm13P53oPfA/0gkk
+fvv08rgb87Kq625IJo+JE9hl+c3eFut1hgFpe2nYKHEZEo7EjKQSMPm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY8eoGZyR4KutYug3bqYVshERL7MB8GA1UdIwQY
MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt
MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx
LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXO6gDaCn
PRu/S1kssiNWDEGNK7Qmhpjgi86Ly3atijMr41JgCo2g9XM5gilTCd2IVaPMokou
6NJhtTdu7H0/q1pxLCfNvyOZuhRc4jO1N84DtKj2bwtFFUyzRb0o5zfyZarSADu+
EaVuuD9dyv3Q8ylgOZHF1V2r6JaT+/jo4GrM6a81tYRDTtXuykNTRRZ7SBtx6Ajl
zKQ4vvk5AUvMDErrL2pHWOoCOF5xuOPz/sk5t4AcslkFnQOk4K9giyrtaItasa4p
oXuDUfMRAEgUMRD9YmLrCOUT32zJIgn9FR7u5216pOrUCIynrlqNho7PuOEe1kM6
U8qklYl78qiBFg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:10 2025 by rpki-client