Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File:                     oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier:          3pEtzqHLnusuk4eehBCE3T/i1j2ggyNEF3609vP/CjA=
Subject key identifier:   D5:B2:AA:EB:33:88:2C:E7:B1:4C:C4:70:18:F9:8B:CE:31:3D:C9:97
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer:       /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial:       01984250ADD80D092268FA65D2CBD1CD467C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number:          0347
Signing time:             Fri 25 Jul 2025 16:00:40 +0000
Manifest this update:     Fri 25 Jul 2025 16:00:40 +0000
Manifest next update:     Sat 26 Jul 2025 16:00:40 +0000
Files and hashes:         1: 0BmC-81HN_hGVStiVWyBsG7yPOQ.roa (hash: 1DBUkLbwQ3sH8OPXtfdrx6wa0RdQ3lqLVqMY8QCHCK8=)
                          2: 58QzCphRddJsBqi71H5oisOTtGM.roa (hash: K7oZA9oPzuB3kuDmCdohN1gPlNbeKKgYedD/MB4pxbM=)
                          3: K5VqopWIERNLlg6XYIHxbSMQwf8.roa (hash: 6CqhTE0o4WqNXO4cXlNrVv+QBipio9ZfLg1pbcvRhvU=)
                          4: Qt9hOGMkdfDH8ID_bHwfLmJlE60.roa (hash: ARZiY2rT8rE43lKmT9EIHjzaS4HpYkA+YcbbFMZTS4E=)
                          5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: M/2pzuFzQ0X4krV/epEYovklME73VzfRw9bMaSg9xh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:50:ad:d8:0d:09:22:68:fa:65:d2:cb:d1:cd:46:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
        Validity
            Not Before: Jul 25 16:00:40 2025 GMT
            Not After : Jul 26 16:00:40 2025 GMT
        Subject: CN=d5b2aaeb33882ce7b14cc47018f98bce313dc997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:5d:31:f5:b5:2c:9f:13:0f:a6:ab:5d:ed:
                    fd:de:30:e0:41:76:22:1f:8b:49:16:98:ed:e2:15:
                    81:6c:36:61:4a:43:9e:d7:d1:2b:cb:40:7b:65:1c:
                    ec:ad:63:28:bd:5e:f6:20:b5:7c:69:00:f6:27:63:
                    6b:09:7f:0c:5b:34:c2:3d:22:f1:44:5f:76:eb:bb:
                    f1:e3:30:32:6c:95:cf:60:e6:ca:7d:c0:f8:ac:55:
                    2f:43:4e:5a:30:97:f8:79:6d:97:ad:cb:53:40:55:
                    ed:2a:fb:eb:8a:a9:43:00:ba:9c:73:aa:b4:44:e9:
                    c3:5b:99:36:29:79:d8:45:af:00:5d:f2:93:53:4e:
                    7a:c9:91:60:e2:ba:bb:1f:49:a5:cd:9a:20:a9:2a:
                    53:ab:81:a5:04:8b:7f:15:28:ae:55:fa:85:2c:27:
                    6c:cd:57:58:aa:a4:e6:8c:1a:b2:9d:92:7c:b2:8c:
                    91:95:b5:3c:04:e1:46:46:47:99:74:1a:86:b6:d7:
                    ab:f7:5f:63:1f:29:13:af:91:c6:a7:ca:a5:3d:cc:
                    02:d0:97:c1:98:34:02:8b:76:6d:d6:db:07:1e:9d:
                    2a:b9:1d:f0:d9:91:23:14:82:41:ca:ef:1a:bc:43:
                    12:a7:99:80:92:ea:38:79:18:d9:d0:94:99:f4:c5:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:AA:EB:33:88:2C:E7:B1:4C:C4:70:18:F9:8B:CE:31:3D:C9:97
            X509v3 Authority Key Identifier:
                keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:93:d5:c0:ac:84:80:15:47:01:ec:f0:e0:f9:ba:c8:52:
         be:90:a7:54:5b:ea:45:66:14:a4:d8:7c:5d:fb:95:d0:9e:65:
         64:22:78:54:d6:f7:f1:64:3c:57:ea:c3:3e:46:24:cd:64:97:
         c6:b9:ba:7c:15:35:e2:02:cf:74:f0:02:b8:ee:2f:a1:63:a0:
         bd:00:2f:2f:6a:a3:df:9f:a8:84:ad:42:c6:ff:32:38:8a:41:
         b3:dc:37:fe:c5:9f:43:4b:8e:1b:44:65:e7:05:db:25:4e:d9:
         ff:4b:26:7f:fa:92:ee:44:39:7d:f0:7e:3d:8c:a0:7f:c7:b7:
         df:88:ac:86:72:9a:d5:ea:80:52:d1:64:01:43:a2:fa:58:20:
         d6:62:a5:38:cb:8a:6b:90:47:f1:50:4c:e2:3e:6e:4e:06:b6:
         eb:cc:5c:3b:aa:f4:06:7d:7d:9a:00:ab:e4:ec:2a:ea:06:ab:
         41:22:89:13:9f:80:26:c3:3c:66:87:eb:50:ba:47:01:03:17:
         1c:87:95:d8:44:7a:a2:29:ae:6e:d8:6a:9b:9b:fd:83:f2:10:
         29:e6:62:d9:a1:07:62:dd:20:37:b6:81:03:f1:db:70:fd:5f:
         05:bc:68:22:09:1d:ad:c0:07:4c:09:92:98:6d:a5:8c:40:bd:
         ae:3d:06:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCUK3YDQkiaPpl0svRzUZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWJmNTRkMDI4ZWU0NzY0ZjYyZjc4YWQ4NzFkYmYwMjYy
Mjg3ODgwHhcNMjUwNzI1MTYwMDQwWhcNMjUwNzI2MTYwMDQwWjAzMTEwLwYDVQQD
EyhkNWIyYWFlYjMzODgyY2U3YjE0Y2M0NzAxOGY5OGJjZTMxM2RjOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG5dMfW1LJ8TD6arXe393jDgQXYi
H4tJFpjt4hWBbDZhSkOe19Ery0B7ZRzsrWMovV72ILV8aQD2J2NrCX8MWzTCPSLx
RF9267vx4zAybJXPYObKfcD4rFUvQ05aMJf4eW2XrctTQFXtKvvriqlDALqcc6q0
ROnDW5k2KXnYRa8AXfKTU056yZFg4rq7H0mlzZogqSpTq4GlBIt/FSiuVfqFLCds
zVdYqqTmjBqynZJ8soyRlbU8BOFGRkeZdBqGtter919jHykTr5HGp8qlPcwC0JfB
mDQCi3Zt1tsHHp0quR3w2ZEjFIJByu8avEMSp5mAkuo4eRjZ0JSZ9MVkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWyqusziCznsUzEcBj5i84xPcmXMB8GA1UdIwQY
MBaAFKHr9U0CjuR2T2L3ithx2/AmIoeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQt
NDdhNWJmNWIzMTNkLzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQtNDdhNWJmNWIzMTNk
LzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOiT1cCs
hIAVRwHs8OD5ushSvpCnVFvqRWYUpNh8XfuV0J5lZCJ4VNb38WQ8V+rDPkYkzWSX
xrm6fBU14gLPdPACuO4voWOgvQAvL2qj35+ohK1Cxv8yOIpBs9w3/sWfQ0uOG0Rl
5wXbJU7Z/0smf/qS7kQ5ffB+PYygf8e334ishnKa1eqAUtFkAUOi+lgg1mKlOMuK
a5BH8VBM4j5uTga268xcO6r0Bn19mgCr5Owq6garQSKJE5+AJsM8ZofrULpHAQMX
HIeV2ER6oimubthqm5v9g/IQKeZi2aEHYt0gN7aBA/HbcP1fBbxoIgkdrcAHTAmS
mG2ljEC9rj0Gkg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:35 2025 by rpki-client