Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File:                     d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier:          odfhZmpbR6wQWTix336URNlh8IyVt+n8HeCLX5SzgMo=
Subject key identifier:   A3:E0:A0:CA:F9:A5:42:EF:45:EC:81:2F:57:01:31:4F:DA:6F:0E:EB
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer:       /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial:       019847E4E1527766B85B5B2EE0D2F6735749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number:          0379
Signing time:             Sat 26 Jul 2025 18:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:38 +0000
Files and hashes:         1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: 0yz2Moqh3P0VChjyvwhDHXqznFD4jJvKo8a1OxIlUes=)
                          2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:e1:52:77:66:b8:5b:5b:2e:e0:d2:f6:73:57:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
        Validity
            Not Before: Jul 26 18:00:38 2025 GMT
            Not After : Jul 27 18:00:38 2025 GMT
        Subject: CN=a3e0a0caf9a542ef45ec812f5701314fda6f0eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:1e:62:f3:90:02:0e:a7:0a:f6:ac:d1:c4:
                    ca:b5:11:86:c2:20:ce:ff:5f:71:0f:9c:c4:fc:9a:
                    a6:30:61:50:b7:79:4c:14:e3:6e:da:db:85:84:49:
                    f2:98:c7:2b:14:d2:b7:e6:4c:b3:d8:1a:4e:02:fa:
                    b9:03:3f:49:ea:26:a1:3e:5e:71:c3:8f:29:cb:d7:
                    11:bc:39:1d:3d:21:27:2e:38:02:a4:bf:c1:44:b3:
                    71:59:05:84:a2:0c:e8:75:30:d9:bb:b3:a8:36:00:
                    85:e1:ee:2a:d6:fd:f2:bb:3f:a1:49:4b:bc:5e:f9:
                    08:41:ec:fa:5d:d6:65:97:2c:97:70:a0:47:58:e4:
                    b0:fa:9e:6e:0f:4b:07:d0:42:d9:23:99:29:07:f8:
                    0d:42:51:d6:ea:41:a0:ec:b3:85:3b:40:34:ee:07:
                    a8:b9:14:42:12:29:37:1e:28:a4:29:25:00:7a:62:
                    70:a0:86:5c:1a:e1:54:5e:9b:49:2a:b3:68:28:24:
                    66:45:f3:e5:91:9a:b7:f7:2d:32:0a:67:e5:77:cb:
                    ed:3f:72:62:59:7b:c3:d1:5f:bd:bf:f5:3f:86:1d:
                    42:f2:b5:08:7b:2d:85:81:f6:82:99:97:63:11:49:
                    d7:b4:48:94:bb:18:45:55:ec:18:94:e0:13:0a:1a:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:A0:CA:F9:A5:42:EF:45:EC:81:2F:57:01:31:4F:DA:6F:0E:EB
            X509v3 Authority Key Identifier:
                keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:24:5e:cf:82:09:55:a2:70:69:90:51:27:cb:6c:26:ec:0a:
         27:d3:92:e6:0e:d3:18:04:1f:99:06:3c:0b:db:ef:8c:ad:03:
         65:47:90:78:fe:c8:33:d4:f2:e3:1f:fd:a8:e1:8f:83:b0:58:
         34:3c:6d:7d:07:ea:31:df:9e:8b:cf:8e:2f:6e:2c:7c:12:d0:
         20:27:aa:4f:57:8b:26:08:6c:ea:97:c3:a5:5c:b6:4b:65:db:
         88:ae:b6:5f:6e:e2:7e:c1:9f:85:85:6e:af:8f:d3:22:0f:65:
         50:2e:54:b3:eb:8d:23:a9:3f:dc:e8:98:1c:0d:94:1c:04:d9:
         09:b9:59:6f:e3:c5:58:9a:0c:62:37:62:f6:6c:fe:37:49:8c:
         0e:90:a5:94:83:c6:02:29:a1:75:48:d4:e4:52:fa:06:c7:77:
         e3:8b:a2:b3:0c:ac:6a:24:09:10:23:d6:9f:b5:d0:20:ca:9f:
         ee:ef:92:39:c4:26:8c:22:ff:63:98:f5:52:c1:6f:4a:7a:54:
         5f:7c:fa:96:9a:85:85:69:d6:cc:38:74:7f:6a:6a:9f:f9:08:
         d8:b4:fa:6e:2d:ed:a3:3f:54:68:bf:e5:ff:51:8e:15:08:76:
         40:bb:4b:fa:97:5a:5d:7c:2e:5d:0d:bc:c5:e3:13:46:d6:8f:
         24:64:c0:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5OFSd2a4W1su4NL2c1dJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0
ZTZkMzAwHhcNMjUwNzI2MTgwMDM4WhcNMjUwNzI3MTgwMDM4WjAzMTEwLwYDVQQD
EyhhM2UwYTBjYWY5YTU0MmVmNDVlYzgxMmY1NzAxMzE0ZmRhNmYwZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgeYvOQAg6nCvas0cTKtRGGwiDO
/19xD5zE/JqmMGFQt3lMFONu2tuFhEnymMcrFNK35kyz2BpOAvq5Az9J6iahPl5x
w48py9cRvDkdPSEnLjgCpL/BRLNxWQWEogzodTDZu7OoNgCF4e4q1v3yuz+hSUu8
XvkIQez6XdZllyyXcKBHWOSw+p5uD0sH0ELZI5kpB/gNQlHW6kGg7LOFO0A07geo
uRRCEik3HiikKSUAemJwoIZcGuFUXptJKrNoKCRmRfPlkZq39y0yCmfld8vtP3Ji
WXvD0V+9v/U/hh1C8rUIey2FgfaCmZdjEUnXtEiUuxhFVewYlOATChotzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPgoMr5pULvReyBL1cBMU/abw7rMB8GA1UdIwQY
MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt
MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw
LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCRez4IJ
VaJwaZBRJ8tsJuwKJ9OS5g7TGAQfmQY8C9vvjK0DZUeQeP7IM9Ty4x/9qOGPg7BY
NDxtfQfqMd+ei8+OL24sfBLQICeqT1eLJghs6pfDpVy2S2XbiK62X27ifsGfhYVu
r4/TIg9lUC5Us+uNI6k/3OiYHA2UHATZCblZb+PFWJoMYjdi9mz+N0mMDpCllIPG
AimhdUjU5FL6Bsd344uiswysaiQJECPWn7XQIMqf7u+SOcQmjCL/Y5j1UsFvSnpU
X3z6lpqFhWnWzDh0f2pqn/kI2LT6bi3toz9UaL/l/1GOFQh2QLtL+pdaXXwuXQ28
xeMTRtaPJGTA1w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:35 2025 by rpki-client