Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          I2hcyrGmAiyT9/Wmf3pvL4Ly5W8LEyB/eEFjzUCtJSc=
Subject key identifier:   4C:D9:00:06:71:50:D8:4F:E7:12:3E:F0:B1:0C:BA:62:DA:8A:D9:7A
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       019849D328D98852991FA0E94036C3FCE3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          0ED9
Signing time:             Sun 27 Jul 2025 03:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:31 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: WzUJ5YNYVb6Caxr5/e5pk/acoBhw7WxtqcsUyPPU3AU=)
                          2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:28:d9:88:52:99:1f:a0:e9:40:36:c3:fc:e3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: Jul 27 03:00:31 2025 GMT
            Not After : Jul 28 03:00:31 2025 GMT
        Subject: CN=4cd900067150d84fe7123ef0b10cba62da8ad97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:1b:75:d3:13:8f:e6:72:83:55:80:a2:6d:
                    73:c5:0b:cf:ff:85:a3:2a:17:4d:8a:47:7c:b8:a6:
                    5b:1c:c1:6b:e0:4f:1b:2c:d1:b6:39:1f:65:59:55:
                    62:19:b9:eb:44:28:1e:1d:77:54:d3:b9:13:9a:34:
                    f8:75:5c:9f:06:42:6f:a7:05:af:91:63:b5:5d:f3:
                    01:b2:87:0f:85:c7:68:f3:24:2c:17:1c:84:02:d1:
                    c5:dd:96:19:fe:60:aa:80:48:42:6a:d4:b2:20:bc:
                    6e:55:b7:74:aa:c7:5c:7f:b2:69:f5:26:45:3e:e9:
                    28:cf:8c:4c:49:01:bd:65:0b:78:da:7d:5b:a8:bc:
                    e4:02:8c:2a:43:fe:6a:00:f2:24:4f:40:0c:99:7a:
                    48:a6:c4:9d:e0:a9:1b:f9:15:7b:9b:67:16:b1:2c:
                    4c:e0:b2:39:c7:ed:d7:d9:bd:1a:e8:3a:60:1b:af:
                    f2:0a:d6:25:fe:1e:7f:7a:7a:04:1a:38:e3:69:1a:
                    31:fa:18:3e:8f:fa:5f:1d:5e:34:3d:d6:c5:ec:89:
                    27:c7:3b:b3:06:cb:1f:dd:9a:f2:9f:47:f5:b2:bd:
                    80:a5:80:55:8c:6b:94:42:1d:70:47:a3:1b:ff:c1:
                    c8:b6:5f:bc:88:97:60:a0:6a:96:4b:dd:fe:bb:bb:
                    62:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D9:00:06:71:50:D8:4F:E7:12:3E:F0:B1:0C:BA:62:DA:8A:D9:7A
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b8:96:32:4d:ce:8d:11:63:82:08:37:68:08:71:21:08:35:
         49:b3:55:cf:8f:e8:42:9d:5b:3a:29:7d:d8:7c:8f:d0:81:6d:
         11:0a:bd:a0:2d:0c:9f:25:62:3f:8d:73:3b:94:a2:1b:26:9d:
         60:39:55:f3:ef:42:6b:1b:51:6a:36:7f:a1:14:1e:d8:98:99:
         27:4f:20:ed:1c:9b:8a:e1:c4:d4:a5:6f:cf:d4:64:e0:e9:5c:
         f8:ef:cb:1f:53:8c:81:08:a8:93:52:ee:1b:c4:b3:26:ce:da:
         f2:20:2f:c3:df:1c:60:fa:7c:4f:49:99:26:cb:a2:a3:3c:f3:
         3f:d3:81:b7:d5:33:16:92:d0:2f:44:26:e6:a3:60:8f:03:5b:
         e7:ab:e1:5f:04:02:f7:d4:6f:ad:ee:d1:93:0d:bc:43:77:ae:
         90:2e:4c:7b:8f:93:5d:d1:a3:d0:04:c7:14:70:f3:7a:8f:b8:
         4f:d1:0e:e6:61:09:52:88:18:be:3a:b9:a6:03:fc:c1:df:e4:
         2b:25:80:c5:6e:e3:fe:bd:82:b6:e5:21:65:7c:7b:e4:87:16:
         f1:20:02:56:55:f6:aa:be:4e:98:23:a5:43:4d:99:e3:ae:14:
         21:ca:c4:01:63:ad:61:69:6f:d6:db:49:62:7a:01:e9:ca:3f:
         cf:95:8e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0yjZiFKZH6DpQDbD/OPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2
YjRlNjMwHhcNMjUwNzI3MDMwMDMxWhcNMjUwNzI4MDMwMDMxWjAzMTEwLwYDVQQD
Eyg0Y2Q5MDAwNjcxNTBkODRmZTcxMjNlZjBiMTBjYmE2MmRhOGFkOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3kbddMTj+Zyg1WAom1zxQvP/4Wj
KhdNikd8uKZbHMFr4E8bLNG2OR9lWVViGbnrRCgeHXdU07kTmjT4dVyfBkJvpwWv
kWO1XfMBsocPhcdo8yQsFxyEAtHF3ZYZ/mCqgEhCatSyILxuVbd0qsdcf7Jp9SZF
Pukoz4xMSQG9ZQt42n1bqLzkAowqQ/5qAPIkT0AMmXpIpsSd4Kkb+RV7m2cWsSxM
4LI5x+3X2b0a6DpgG6/yCtYl/h5/enoEGjjjaRox+hg+j/pfHV40PdbF7Iknxzuz
Bssf3Zryn0f1sr2ApYBVjGuUQh1wR6Mb/8HItl+8iJdgoGqWS93+u7tixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzZAAZxUNhP5xI+8LEMumLaitl6MB8GA1UdIwQY
MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt
YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5
LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7iWMk3O
jRFjggg3aAhxIQg1SbNVz4/oQp1bOil92HyP0IFtEQq9oC0MnyViP41zO5SiGyad
YDlV8+9CaxtRajZ/oRQe2JiZJ08g7RybiuHE1KVvz9Rk4Olc+O/LH1OMgQiok1Lu
G8SzJs7a8iAvw98cYPp8T0mZJsuiozzzP9OBt9UzFpLQL0Qm5qNgjwNb56vhXwQC
99Rvre7Rkw28Q3eukC5Me4+TXdGj0ATHFHDzeo+4T9EO5mEJUogYvjq5pgP8wd/k
KyWAxW7j/r2CtuUhZXx75IcW8SACVlX2qr5OmCOlQ02Z464UIcrEAWOtYWlv1ttJ
YnoB6co/z5WOyg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:33 2025 by rpki-client