Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          ourz1jV15VR5X9pGMfXyUtDLcCbyfbf3VKf7LI0TW5A=
Subject key identifier:   82:22:30:6C:69:EE:F2:EC:43:ED:A8:0E:33:D1:DA:5C:A2:7B:4B:7A
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       0198383AABECD43709F37E87878F35FB0F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          048E
Signing time:             Wed 23 Jul 2025 17:00:25 +0000
Manifest this update:     Wed 23 Jul 2025 17:00:25 +0000
Manifest next update:     Thu 24 Jul 2025 17:00:25 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          4: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
                          5: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (hash: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=)
                          6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: 9TvIlHZ26H8skmK8wsUdp9f8V30VkSKpYsKFEV/C27U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:3a:ab:ec:d4:37:09:f3:7e:87:87:8f:35:fb:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Jul 23 17:00:25 2025 GMT
            Not After : Jul 24 17:00:25 2025 GMT
        Subject: CN=8222306c69eef2ec43eda80e33d1da5ca27b4b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:1f:80:a8:dc:c8:81:7a:a5:4b:84:80:da:
                    06:db:fd:ca:c3:ac:d7:c1:76:9a:bb:02:6f:3a:0b:
                    22:80:27:7d:c3:e7:4e:40:d0:72:42:86:ed:a8:ec:
                    f4:c4:3c:2b:50:5d:7a:50:35:f9:8d:c7:d4:0d:a0:
                    2a:20:86:b5:ab:45:71:8e:08:c7:2b:db:1f:4e:12:
                    33:4e:40:a5:a5:3b:5b:ca:23:dc:d3:1b:b1:d9:1c:
                    13:da:58:6b:d7:75:aa:fa:f5:f5:02:95:7c:13:4a:
                    0e:1b:db:a7:fd:ba:4b:c5:c4:9d:06:00:e3:55:23:
                    6f:e3:03:4a:96:6a:b2:42:65:c6:e0:72:2d:57:a6:
                    29:88:a0:0b:91:2d:08:24:24:13:02:b0:b0:94:99:
                    d9:80:0c:a8:47:fa:39:05:29:27:52:aa:a3:57:f1:
                    5f:d5:aa:49:18:ea:09:a2:44:d6:ff:11:fd:97:d7:
                    90:ec:28:99:fe:a9:56:6d:b7:8e:5b:e2:0c:71:e2:
                    35:ec:d1:f6:c2:96:09:7d:8b:ea:7a:28:ee:0e:b7:
                    d3:3c:cc:13:e6:14:cc:de:43:90:7a:d6:42:88:0b:
                    0a:23:31:7e:1e:14:7e:95:c6:9a:48:eb:b7:b1:7d:
                    68:6f:79:c1:a7:32:34:5a:1b:80:77:6f:28:66:19:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:22:30:6C:69:EE:F2:EC:43:ED:A8:0E:33:D1:DA:5C:A2:7B:4B:7A
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a1:87:9d:b6:95:af:a2:62:ff:2f:2d:0c:bd:ce:02:18:b3:
         c2:54:a4:99:c3:e5:70:53:2b:92:51:bc:92:52:96:04:c8:a2:
         6b:7e:3d:29:5d:bc:8b:51:0f:c2:33:01:31:cc:2a:68:a4:41:
         79:71:87:f1:21:37:50:7d:33:94:fb:a1:1e:a5:b8:8d:06:4c:
         9c:1f:64:94:5e:fc:dd:be:62:9a:82:e3:c4:8e:06:6c:5b:2e:
         4f:0b:d9:e9:23:74:95:eb:d4:3d:1c:28:fa:09:b6:a5:cb:65:
         0e:7d:17:9c:a9:49:d9:3e:59:cb:c0:99:3c:45:0b:7b:ff:88:
         6f:0c:37:bf:90:12:71:7b:22:27:ab:a2:14:df:50:d7:a8:8f:
         91:75:ac:ba:d8:b1:8d:3c:ec:41:72:37:b4:fd:27:e9:17:ea:
         0b:60:5d:d6:96:a9:25:31:46:89:c5:c7:4c:41:1c:b9:fb:cc:
         b5:0a:83:bb:48:14:32:c1:83:80:94:99:21:a6:77:91:c6:e3:
         46:51:97:74:c4:c1:64:f8:7c:68:dd:aa:0d:aa:9b:30:fa:f2:
         cc:4f:87:e1:fb:e4:66:de:ad:0f:b6:2b:a5:59:dd:93:28:7b:
         55:00:88:34:95:35:02:c5:6e:b9:a7:d5:68:f1:90:25:f8:e8:
         9b:2d:ea:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4Oqvs1DcJ836Hh481+w93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjUwNzIzMTcwMDI1WhcNMjUwNzI0MTcwMDI1WjAzMTEwLwYDVQQD
Eyg4MjIyMzA2YzY5ZWVmMmVjNDNlZGE4MGUzM2QxZGE1Y2EyN2I0YjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP0fgKjcyIF6pUuEgNoG2/3Kw6zX
wXaauwJvOgsigCd9w+dOQNByQobtqOz0xDwrUF16UDX5jcfUDaAqIIa1q0VxjgjH
K9sfThIzTkClpTtbyiPc0xux2RwT2lhr13Wq+vX1ApV8E0oOG9un/bpLxcSdBgDj
VSNv4wNKlmqyQmXG4HItV6YpiKALkS0IJCQTArCwlJnZgAyoR/o5BSknUqqjV/Ff
1apJGOoJokTW/xH9l9eQ7CiZ/qlWbbeOW+IMceI17NH2wpYJfYvqeijuDrfTPMwT
5hTM3kOQetZCiAsKIzF+HhR+lcaaSOu3sX1ob3nBpzI0WhuAd28oZhnQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIiMGxp7vLsQ+2oDjPR2lyie0t6MB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKGHnbaV
r6Ji/y8tDL3OAhizwlSkmcPlcFMrklG8klKWBMiia349KV28i1EPwjMBMcwqaKRB
eXGH8SE3UH0zlPuhHqW4jQZMnB9klF783b5imoLjxI4GbFsuTwvZ6SN0levUPRwo
+gm2pctlDn0XnKlJ2T5Zy8CZPEULe/+Ibww3v5AScXsiJ6uiFN9Q16iPkXWsutix
jTzsQXI3tP0n6RfqC2Bd1papJTFGicXHTEEcufvMtQqDu0gUMsGDgJSZIaZ3kcbj
RlGXdMTBZPh8aN2qDaqbMPryzE+H4fvkZt6tD7YrpVndkyh7VQCINJU1AsVuuafV
aPGQJfjomy3qDA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:12:03 2025 by rpki-client