Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File:                     D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier:          HJKIUXtZbZTNZVgEP5H/h/ij5E4/pRAf0XhbXBRF4G4=
Subject key identifier:   DB:53:F7:D3:EE:FA:AE:06:10:26:10:DD:5A:5B:76:D9:8B:B3:E3:28
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer:       /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial:       01984A40F3BB7C19A3934A2D8B12A4FAB1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number:          0388
Signing time:             Sun 27 Jul 2025 05:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:27 +0000
Files and hashes:         1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
                          2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: c7tBGCCuvyMj82ME1fCA/sNNFG/Utp88GUnaycbYmSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:f3:bb:7c:19:a3:93:4a:2d:8b:12:a4:fa:b1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
        Validity
            Not Before: Jul 27 05:00:27 2025 GMT
            Not After : Jul 28 05:00:27 2025 GMT
        Subject: CN=db53f7d3eefaae06102610dd5a5b76d98bb3e328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:cd:48:0e:94:0e:d2:89:6a:07:25:fd:09:
                    60:2b:33:58:bc:ce:99:4a:4d:2d:89:e8:64:df:7b:
                    2c:b6:ff:88:df:25:36:47:dd:73:28:6f:99:ae:07:
                    ba:98:d2:4b:c8:4c:d5:ae:4d:8d:82:07:12:31:1a:
                    48:5b:2d:73:5f:74:d9:3a:fb:ca:46:2a:43:93:28:
                    89:cd:6f:99:ad:8c:ef:03:27:8b:bf:40:b4:ba:52:
                    6c:17:f5:ed:0f:cc:f1:bc:d9:72:3f:8e:e6:c5:ae:
                    05:3b:cd:33:54:dc:3a:8b:b5:b5:40:60:2f:94:53:
                    77:5f:bf:e6:ba:f5:50:f5:9e:ab:0c:29:99:6d:8b:
                    48:96:9c:e3:e4:31:9e:63:9e:67:e1:bf:a2:01:7b:
                    31:e7:d1:a8:64:6e:f3:74:ee:6d:14:bb:d9:11:a1:
                    4b:9c:35:ff:06:4a:ed:cc:49:f5:f2:d9:08:81:23:
                    05:b5:d3:96:ec:c3:87:89:52:ec:9a:dd:ee:71:fc:
                    dd:85:0a:6c:a6:47:73:b6:28:85:44:4f:7e:de:62:
                    6c:08:15:b8:16:ae:22:33:07:82:0c:a5:0d:2b:d6:
                    8a:cb:b9:f7:ed:93:a9:2e:b6:4e:db:69:1d:02:a0:
                    bd:36:2c:99:02:d2:e3:8c:ad:d6:b1:80:55:7c:2f:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:F7:D3:EE:FA:AE:06:10:26:10:DD:5A:5B:76:D9:8B:B3:E3:28
            X509v3 Authority Key Identifier:
                keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:09:d2:30:75:eb:ec:8b:45:f6:6f:77:c6:e1:28:31:5e:
         d5:93:c1:4c:35:ce:1a:10:c7:3c:6b:a5:f6:08:4d:56:dc:86:
         96:18:5c:ad:d4:34:1f:80:e9:07:b1:66:dc:26:0e:50:b5:59:
         d4:a8:7f:e8:11:c2:e8:32:aa:d8:ec:aa:43:83:bb:e0:05:b0:
         31:fd:f1:31:ba:a9:e8:b9:ea:48:32:95:07:78:23:a8:10:82:
         b5:00:31:11:8a:74:34:32:69:34:af:9c:a2:8a:88:44:9e:68:
         09:07:5c:d3:ec:53:d5:5f:41:3a:a3:39:49:53:2c:ad:74:2a:
         7e:06:e6:3f:4a:5b:93:6f:e3:0c:35:b0:fe:21:55:1b:f9:af:
         34:7c:af:a7:12:df:9e:a7:5a:cb:32:dd:ce:0e:dc:ed:57:ae:
         ac:0b:4c:27:58:96:c4:4a:be:b1:38:8b:bc:2f:dd:c6:78:71:
         6f:10:de:c7:75:46:70:fc:ee:8a:6a:6a:cc:fd:71:d3:c4:f3:
         ac:fb:4f:5b:70:14:29:c6:3f:18:11:ae:6f:39:45:f6:8c:eb:
         44:d6:88:67:54:d8:26:b1:d7:cb:04:96:a4:af:db:13:6a:66:
         5a:98:c4:2d:28:73:17:5b:39:2e:d4:d9:cc:42:c3:b1:e6:4a:
         3f:7e:98:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQPO7fBmjk0otixKk+rG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2
OGVkMGUwHhcNMjUwNzI3MDUwMDI3WhcNMjUwNzI4MDUwMDI3WjAzMTEwLwYDVQQD
EyhkYjUzZjdkM2VlZmFhZTA2MTAyNjEwZGQ1YTViNzZkOThiYjNlMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTHNSA6UDtKJagcl/QlgKzNYvM6Z
Sk0tiehk33sstv+I3yU2R91zKG+Zrge6mNJLyEzVrk2NggcSMRpIWy1zX3TZOvvK
RipDkyiJzW+ZrYzvAyeLv0C0ulJsF/XtD8zxvNlyP47mxa4FO80zVNw6i7W1QGAv
lFN3X7/muvVQ9Z6rDCmZbYtIlpzj5DGeY55n4b+iAXsx59GoZG7zdO5tFLvZEaFL
nDX/BkrtzEn18tkIgSMFtdOW7MOHiVLsmt3ucfzdhQpspkdztiiFRE9+3mJsCBW4
Fq4iMweCDKUNK9aKy7n37ZOpLrZO22kdAqC9NiyZAtLjjK3WsYBVfC9ujQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtT99Pu+q4GECYQ3VpbdtmLs+MoMB8GA1UdIwQY
MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt
OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj
LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMoJ0jB1
6+yLRfZvd8bhKDFe1ZPBTDXOGhDHPGul9ghNVtyGlhhcrdQ0H4DpB7Fm3CYOULVZ
1Kh/6BHC6DKq2OyqQ4O74AWwMf3xMbqp6LnqSDKVB3gjqBCCtQAxEYp0NDJpNK+c
ooqIRJ5oCQdc0+xT1V9BOqM5SVMsrXQqfgbmP0pbk2/jDDWw/iFVG/mvNHyvpxLf
nqdayzLdzg7c7VeurAtMJ1iWxEq+sTiLvC/dxnhxbxDex3VGcPzuimpqzP1x08Tz
rPtPW3AUKcY/GBGubzlF9ozrRNaIZ1TYJrHXywSWpK/bE2pmWpjELShzF1s5LtTZ
zELDseZKP36YvQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:08:24 2025 by rpki-client