Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
File:                     M_RqsXrvI5qWvee2zLcG9-C2K24.mft (raw, json)
Hash identifier:          kOYftJ7Bi3VBSYCE1is7FEwu7Q3sQXSDhdxXHFkD9LE=
Subject key identifier:   9C:81:F5:EB:A5:B7:1E:8C:66:58:F9:DA:04:13:C6:45:CF:1E:DD:F2
Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
Certificate issuer:       /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Certificate serial:       01982A119E1DF708D33B820686FA7193489E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
Manifest number:          11
Signing time:             Sun 20 Jul 2025 23:00:54 +0000
Manifest this update:     Sun 20 Jul 2025 23:00:54 +0000
Manifest next update:     Mon 21 Jul 2025 23:00:54 +0000
Files and hashes:         1: MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa (hash: JMBYVhl1br5C36w4dCy9ILJG/1PRS8u33zsXvftn/Yw=)
                          2: M_RqsXrvI5qWvee2zLcG9-C2K24.crl (hash: MGPtr6/dsegpjlnFHfx8qKla0xNRx4C+E5201L/Kd78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2a:11:9e:1d:f7:08:d3:3b:82:06:86:fa:71:93:48:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
        Validity
            Not Before: Jul 20 23:00:54 2025 GMT
            Not After : Jul 21 23:00:54 2025 GMT
        Subject: CN=9c81f5eba5b71e8c6658f9da0413c645cf1eddf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:c6:c8:ba:ec:91:fc:7e:24:b0:2e:6d:41:
                    95:14:b5:95:81:1e:4e:c6:d6:41:30:0a:41:b7:bb:
                    25:33:f8:1b:78:62:57:13:02:f4:ae:4a:49:a1:1e:
                    34:a5:04:85:ac:a7:3f:6a:32:1c:d2:de:13:53:8b:
                    9f:a4:38:0b:f0:5d:55:e3:bd:a7:71:a2:39:94:63:
                    79:52:55:d2:e1:7b:cd:3f:96:67:48:cc:68:4c:e2:
                    df:49:3a:8c:33:92:da:03:b4:43:fa:30:33:af:85:
                    3c:1c:2a:21:50:53:80:57:a7:15:85:2f:9f:66:c7:
                    d3:c6:1e:52:7d:20:20:dc:9f:9e:fa:a6:91:06:23:
                    7d:32:43:c9:bb:64:63:30:57:10:88:78:d4:35:14:
                    9c:47:9b:e9:c3:c1:95:ab:06:a5:48:8a:2e:12:af:
                    5b:d7:bf:3d:ee:38:df:f8:1b:76:e7:43:24:90:e4:
                    9e:41:84:a2:e6:c3:52:18:e9:2c:26:48:63:9a:05:
                    a2:5a:11:a6:85:f3:db:85:91:12:09:09:ca:7a:ce:
                    94:a6:43:26:37:eb:40:1b:ba:67:de:2c:a3:bb:e9:
                    e6:f8:38:d8:ca:02:2e:40:b7:60:53:8f:52:50:88:
                    12:40:09:f0:ff:00:12:09:0a:19:04:d8:ae:de:ac:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:F5:EB:A5:B7:1E:8C:66:58:F9:DA:04:13:C6:45:CF:1E:DD:F2
            X509v3 Authority Key Identifier:
                keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:01:29:97:5e:8b:76:7b:57:21:59:2d:cf:84:1f:96:1f:e8:
         cc:0b:1a:2f:ec:ea:9b:c0:f9:3e:36:92:c7:e7:f5:1b:57:70:
         c3:10:38:3f:d4:3d:ec:7f:8a:d4:8e:58:a5:16:dd:db:5f:a5:
         7e:5c:ba:e2:70:d5:4c:0c:c7:f4:53:55:d0:39:a1:1e:95:67:
         05:bb:18:8d:36:4a:02:56:ce:73:50:2d:70:fb:53:5f:e7:11:
         92:02:84:14:ef:70:36:24:7a:00:46:ba:1a:60:88:11:9e:f7:
         d5:31:06:af:22:93:42:6e:64:a2:40:0c:4f:b1:07:b7:8d:08:
         05:2e:10:48:f5:d6:f1:1e:08:c2:44:75:7d:8f:20:6d:0f:1e:
         1b:63:78:7e:83:e0:42:53:36:ea:1d:b5:1c:71:55:14:89:27:
         4b:d0:e4:98:e2:e2:c1:c0:1b:7f:75:37:7b:82:95:f5:35:b2:
         fb:80:f6:cd:2c:5c:98:08:77:4b:f8:d5:de:50:98:fd:da:12:
         3e:9c:37:50:cc:ae:2e:0f:36:24:e4:f1:29:7d:68:bc:4a:26:
         23:17:79:c9:be:f0:41:1e:92:c2:29:10:4f:c9:e4:41:d9:2b:
         c6:9e:8a:4a:76:04:27:90:49:06:08:3f:b2:18:e2:d9:11:40:
         8d:c4:8d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgqEZ4d9wjTO4IGhvpxk0ieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjQ2YWIxN2FlZjIzOWE5NmJkZTdiNmNjYjcwNmY3ZTBi
NjJiNmUwHhcNMjUwNzIwMjMwMDU0WhcNMjUwNzIxMjMwMDU0WjAzMTEwLwYDVQQD
Eyg5YzgxZjVlYmE1YjcxZThjNjY1OGY5ZGEwNDEzYzY0NWNmMWVkZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB7GyLrskfx+JLAubUGVFLWVgR5O
xtZBMApBt7slM/gbeGJXEwL0rkpJoR40pQSFrKc/ajIc0t4TU4ufpDgL8F1V472n
caI5lGN5UlXS4XvNP5ZnSMxoTOLfSTqMM5LaA7RD+jAzr4U8HCohUFOAV6cVhS+f
ZsfTxh5SfSAg3J+e+qaRBiN9MkPJu2RjMFcQiHjUNRScR5vpw8GVqwalSIouEq9b
17897jjf+Bt250MkkOSeQYSi5sNSGOksJkhjmgWiWhGmhfPbhZESCQnKes6UpkMm
N+tAG7pn3iyju+nm+DjYygIuQLdgU49SUIgSQAnw/wASCQoZBNiu3qyykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyB9eultx6MZlj52gQTxkXPHt3yMB8GA1UdIwQY
MBaAFDP0arF67yOalr3ntsy3BvfgtituMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMTZiY2MtZWE1Yi00ZTI5LTgxYzYt
NmYwN2EwN2QyNzY5LzEvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMTZiY2MtZWE1Yi00ZTI5LTgxYzYtNmYwN2EwN2QyNzY5
LzEvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAEpl16L
dntXIVktz4Qflh/ozAsaL+zqm8D5PjaSx+f1G1dwwxA4P9Q97H+K1I5YpRbd21+l
fly64nDVTAzH9FNV0DmhHpVnBbsYjTZKAlbOc1AtcPtTX+cRkgKEFO9wNiR6AEa6
GmCIEZ731TEGryKTQm5kokAMT7EHt40IBS4QSPXW8R4IwkR1fY8gbQ8eG2N4foPg
QlM26h21HHFVFIknS9DkmOLiwcAbf3U3e4KV9TWy+4D2zSxcmAh3S/jV3lCY/doS
Ppw3UMyuLg82JOTxKX1ovEomIxd5yb7wQR6SwikQT8nkQdkrxp6KSnYEJ5BJBgg/
shji2RFAjcSN5Q==
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:09:33 2025 by rpki-client