Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          i6VlKtoIyk+ZO7pVqM563iJyKBN+q+5npA8cvQyZPFw=
Subject key identifier:   89:46:AA:F5:06:CD:44:99:25:E5:D1:23:52:AC:4E:AE:A0:40:0C:7E
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       0198282335504CC210B851F48C230F206991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0A97
Signing time:             Sun 20 Jul 2025 14:00:52 +0000
Manifest this update:     Sun 20 Jul 2025 14:00:52 +0000
Manifest next update:     Mon 21 Jul 2025 14:00:52 +0000
Files and hashes:         1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=)
                          2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: Hf4g37D83hH/4Fbl08tmIKpvoa+0WUQC70G3xfP50w4=)
                          5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:23:35:50:4c:c2:10:b8:51:f4:8c:23:0f:20:69:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jul 20 14:00:52 2025 GMT
            Not After : Jul 21 14:00:52 2025 GMT
        Subject: CN=8946aaf506cd449925e5d12352ac4eaea0400c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:96:29:f2:2f:c0:ad:0d:5f:a8:68:9c:c5:
                    15:77:93:26:a5:a2:4c:fd:7f:46:07:92:c3:47:9a:
                    8f:1a:c2:56:3a:43:0e:49:2c:ed:ab:b3:fd:e7:34:
                    a6:49:31:bd:4e:fc:03:14:69:b3:a1:4c:6a:c9:f1:
                    30:f8:0f:e6:20:f9:9e:52:e6:7c:97:25:7b:53:04:
                    87:f2:ce:3f:83:83:87:52:dd:22:55:82:b7:7d:c0:
                    00:9c:85:42:d5:75:be:3e:70:58:10:81:de:e7:52:
                    50:61:41:53:3b:0c:8b:fa:02:2c:71:a7:46:86:e9:
                    0d:51:bd:21:64:d3:16:7f:b6:44:39:96:65:fc:06:
                    fb:f5:9f:29:c5:e2:88:b4:db:9e:80:70:06:3f:44:
                    43:7d:e5:a4:85:4a:93:50:7b:ff:f0:ca:5f:e6:be:
                    30:4e:c6:e5:44:51:45:92:fe:16:75:1d:22:29:ee:
                    e7:a7:97:36:55:3e:40:ec:9d:75:64:69:c7:96:5f:
                    fe:83:08:7b:5e:37:4e:6e:c8:03:9e:6b:1b:2b:04:
                    0b:39:32:a9:8e:cc:97:c9:91:f9:cb:49:8c:2c:12:
                    5a:6a:a2:6e:10:d7:bb:6f:0f:5a:f3:54:ad:53:9e:
                    3a:5c:25:dc:17:e4:85:04:19:13:b5:7a:77:2b:a4:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:46:AA:F5:06:CD:44:99:25:E5:D1:23:52:AC:4E:AE:A0:40:0C:7E
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:17:de:5d:8e:4a:5e:9f:21:cf:2e:49:47:2f:76:5f:ea:
         43:10:63:3e:64:8f:64:b6:ea:55:69:35:9f:26:e3:e9:80:35:
         17:23:59:d2:d8:30:a4:d9:b7:c2:dd:67:46:96:bf:8c:d8:b2:
         13:ef:73:d5:7b:ff:b4:36:93:39:19:9a:66:44:f9:f5:d9:4c:
         e8:9b:17:b4:8c:3d:5a:14:ca:f3:3e:26:e0:12:dc:0a:9d:50:
         da:f9:ac:cb:03:51:dd:ec:c1:35:ae:0f:36:92:75:a4:19:e2:
         58:92:64:95:be:ab:1b:ca:87:89:42:57:71:53:89:2b:2b:1e:
         c9:41:c4:19:7a:d1:62:3d:b7:d8:7b:0a:64:f0:0e:49:18:78:
         85:76:8a:d2:0a:10:a2:db:a8:eb:d5:5a:a5:30:fc:da:49:05:
         18:aa:aa:bf:ef:4c:cb:c6:0e:19:78:08:1a:ba:f0:3a:1f:44:
         b0:33:8a:8a:92:b0:41:be:a5:71:25:b7:28:46:61:fa:0b:b8:
         7c:28:8e:59:d9:32:f1:c1:b7:70:4b:aa:88:d2:26:5a:eb:f2:
         1f:5a:71:83:ae:1c:aa:88:c9:d6:04:1c:59:28:6b:d9:b2:58:
         af:fb:82:30:3a:75:54:dd:90:b7:af:59:9f:73:d9:e3:28:af:
         ad:73:dd:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgoIzVQTMIQuFH0jCMPIGmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz
OGM1YjMwHhcNMjUwNzIwMTQwMDUyWhcNMjUwNzIxMTQwMDUyWjAzMTEwLwYDVQQD
Eyg4OTQ2YWFmNTA2Y2Q0NDk5MjVlNWQxMjM1MmFjNGVhZWEwNDAwYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2SWKfIvwK0NX6honMUVd5MmpaJM
/X9GB5LDR5qPGsJWOkMOSSztq7P95zSmSTG9TvwDFGmzoUxqyfEw+A/mIPmeUuZ8
lyV7UwSH8s4/g4OHUt0iVYK3fcAAnIVC1XW+PnBYEIHe51JQYUFTOwyL+gIscadG
hukNUb0hZNMWf7ZEOZZl/Ab79Z8pxeKItNuegHAGP0RDfeWkhUqTUHv/8Mpf5r4w
TsblRFFFkv4WdR0iKe7np5c2VT5A7J11ZGnHll/+gwh7XjdObsgDnmsbKwQLOTKp
jsyXyZH5y0mMLBJaaqJuENe7bw9a81StU546XCXcF+SFBBkTtXp3K6QwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlGqvUGzUSZJeXRI1KsTq6gQAx+MB8GA1UdIwQY
MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct
ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0
LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoEX3l2O
Sl6fIc8uSUcvdl/qQxBjPmSPZLbqVWk1nybj6YA1FyNZ0tgwpNm3wt1nRpa/jNiy
E+9z1Xv/tDaTORmaZkT59dlM6JsXtIw9WhTK8z4m4BLcCp1Q2vmsywNR3ezBNa4P
NpJ1pBniWJJklb6rG8qHiUJXcVOJKyseyUHEGXrRYj232HsKZPAOSRh4hXaK0goQ
otuo69VapTD82kkFGKqqv+9My8YOGXgIGrrwOh9EsDOKipKwQb6lcSW3KEZh+gu4
fCiOWdky8cG3cEuqiNImWuvyH1pxg64cqojJ1gQcWShr2bJYr/uCMDp1VN2Qt69Z
n3PZ4yivrXPdPg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:29 2025 by rpki-client