Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
File:                     oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json)
Hash identifier:          j+TN+ot6ul74Y2lV6Fz0Q13fq+xj5ph/bKIdKeGpq6M=
Subject key identifier:   E8:4E:EF:1C:9B:5C:4A:60:A5:3B:FA:18:7C:AB:31:DE:8C:F5:6D:CF
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Certificate issuer:       /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial:       0198469B5B8AB4E89A36F0620655FAC37C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
Manifest number:          0A14
Signing time:             Sat 26 Jul 2025 12:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:43 +0000
Files and hashes:         1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=)
                          2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=)
                          3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=)
                          4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=)
                          5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: jjSVEGF8D2HwTMXnR5aSJXbx4nsID0nXV/NZX19AU28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:5b:8a:b4:e8:9a:36:f0:62:06:55:fa:c3:7c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
        Validity
            Not Before: Jul 26 12:00:43 2025 GMT
            Not After : Jul 27 12:00:43 2025 GMT
        Subject: CN=e84eef1c9b5c4a60a53bfa187cab31de8cf56dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:04:04:9e:32:79:a8:d3:c8:f0:87:0b:fc:
                    09:6e:81:2c:a0:8b:2f:da:68:1e:36:f0:d9:83:f4:
                    50:d5:10:f5:c2:81:1c:9d:de:9c:99:dc:fc:63:85:
                    08:65:75:19:a3:c2:e9:32:50:ee:20:57:25:e7:12:
                    c2:13:78:f6:34:96:3b:a3:8a:23:d8:53:80:19:3e:
                    14:aa:74:0a:c2:c4:b4:70:58:61:69:21:1d:98:33:
                    bf:89:eb:70:38:4b:eb:02:c9:99:f1:c4:65:d3:60:
                    18:31:ea:f0:93:3e:f8:a7:b0:a2:7e:68:3e:1a:6a:
                    f6:0c:d7:81:06:ba:a3:f3:8b:92:ea:56:55:f8:50:
                    6d:e7:f2:6f:95:ec:6b:95:54:38:1b:aa:38:46:ca:
                    f3:0b:7a:f9:b5:67:da:53:63:45:38:9b:02:db:92:
                    c5:d4:ec:6c:8e:54:6b:e7:e8:07:d3:31:a8:51:d4:
                    21:ef:25:73:f0:ac:ac:c1:e7:e3:38:75:3e:f2:88:
                    56:86:d6:89:fa:2f:77:75:1c:11:a0:01:8d:b2:d9:
                    dd:9e:fa:69:c4:ea:3d:3d:d0:6f:15:b1:0b:9b:df:
                    1b:f0:8a:e2:26:aa:e9:3a:bb:1c:c1:c4:da:19:f5:
                    1b:92:de:ad:4f:8b:4c:55:de:1b:58:ee:55:d1:a5:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:EF:1C:9B:5C:4A:60:A5:3B:FA:18:7C:AB:31:DE:8C:F5:6D:CF
            X509v3 Authority Key Identifier:
                keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:d3:8a:29:f4:55:e5:0c:22:06:81:99:22:ae:bf:c5:ed:
         77:75:6e:07:50:13:3b:66:a1:cd:e0:d7:52:92:a4:ee:29:d5:
         46:b6:e3:18:3b:f7:83:6d:6e:a1:12:33:5e:12:6a:c1:fc:9b:
         e8:a2:e9:03:32:fb:99:63:ea:bc:65:27:cf:50:51:9d:aa:d8:
         8d:86:fc:34:5b:4e:d2:f1:f7:69:40:49:76:2a:9c:a4:3c:2a:
         f3:bd:81:de:c1:39:3f:85:2d:7a:7c:42:7c:43:33:96:ee:aa:
         bf:34:c5:e1:33:8e:95:28:05:2c:2c:5f:80:f6:2f:c1:87:0b:
         99:6d:fe:30:cb:b8:bc:2f:2c:f5:a2:b2:6e:99:c5:50:6b:53:
         c6:8b:73:57:87:c2:29:0c:ee:dc:6c:4c:8f:67:0d:c8:93:73:
         3d:f2:e4:b1:67:25:c6:80:dc:7c:98:46:f7:f0:d8:2b:27:a0:
         ef:ac:68:7f:8b:8c:7e:90:0f:2d:4b:cb:aa:85:4d:b1:62:6d:
         b6:d0:8c:90:c0:ac:2c:0e:7b:13:9e:8c:48:ee:79:33:9c:30:
         2d:85:01:c6:92:da:c7:ea:c3:5b:69:9b:f4:9e:bc:35:e6:33:
         e6:26:8a:a9:c5:0d:36:da:cb:08:8e:47:f5:e7:c1:70:c0:b7:
         8f:89:45:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGm1uKtOiaNvBiBlX6w3wNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh
ZDBkMmIwHhcNMjUwNzI2MTIwMDQzWhcNMjUwNzI3MTIwMDQzWjAzMTEwLwYDVQQD
EyhlODRlZWYxYzliNWM0YTYwYTUzYmZhMTg3Y2FiMzFkZThjZjU2ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqQEBJ4yeajTyPCHC/wJboEsoIsv
2mgeNvDZg/RQ1RD1woEcnd6cmdz8Y4UIZXUZo8LpMlDuIFcl5xLCE3j2NJY7o4oj
2FOAGT4UqnQKwsS0cFhhaSEdmDO/ietwOEvrAsmZ8cRl02AYMerwkz74p7Cifmg+
Gmr2DNeBBrqj84uS6lZV+FBt5/JvlexrlVQ4G6o4RsrzC3r5tWfaU2NFOJsC25LF
1OxsjlRr5+gH0zGoUdQh7yVz8KyswefjOHU+8ohWhtaJ+i93dRwRoAGNstndnvpp
xOo9PdBvFbELm98b8IriJqrpOrscwcTaGfUbkt6tT4tMVd4bWO5V0aX30wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhO7xybXEpgpTv6GHyrMd6M9W3PMB8GA1UdIwQY
MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt
NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk
LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDHTiin0
VeUMIgaBmSKuv8Xtd3VuB1ATO2ahzeDXUpKk7inVRrbjGDv3g21uoRIzXhJqwfyb
6KLpAzL7mWPqvGUnz1BRnarYjYb8NFtO0vH3aUBJdiqcpDwq872B3sE5P4UtenxC
fEMzlu6qvzTF4TOOlSgFLCxfgPYvwYcLmW3+MMu4vC8s9aKybpnFUGtTxotzV4fC
KQzu3GxMj2cNyJNzPfLksWclxoDcfJhG9/DYKyeg76xof4uMfpAPLUvLqoVNsWJt
ttCMkMCsLA57E56MSO55M5wwLYUBxpLax+rDW2mb9J68NeYz5iaKqcUNNtrLCI5H
9efBcMC3j4lFFg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:17:36 2025 by rpki-client