Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          HWGjJPWmjCQAVs0QqgRrDcQKh28sKJDbOA9L17iov4U=
Subject key identifier:   DE:A7:05:C4:68:89:02:23:C5:D6:6C:77:F5:F1:02:09:69:3F:8D:41
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       01984A0A6DA101D4CE8DF2C34D6AF2618AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          0DB4
Signing time:             Sun 27 Jul 2025 04:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:53 +0000
Files and hashes:         1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: IR2mV2LsfWuekyebWJj/3sCCy/YD7ynx4Hs/7ilojgs=)
                          2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
                          3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
                          4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:6d:a1:01:d4:ce:8d:f2:c3:4d:6a:f2:61:8a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Jul 27 04:00:53 2025 GMT
            Not After : Jul 28 04:00:53 2025 GMT
        Subject: CN=dea705c468890223c5d66c77f5f10209693f8d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:eb:c7:0b:cc:0b:69:95:4c:b9:9e:85:81:
                    51:ce:38:f9:1d:7c:33:7e:ca:55:e2:43:df:fb:1f:
                    95:7d:46:40:5f:6b:d0:16:7e:b0:46:6a:d9:c6:9e:
                    6c:bd:52:af:b0:70:82:4e:2f:59:09:84:b9:bc:f5:
                    7e:47:71:bc:09:ae:1e:75:23:53:b8:5d:a8:de:d4:
                    76:3e:96:3a:b1:65:6b:1b:dd:d5:59:8c:0f:ba:26:
                    d1:61:a5:b0:68:56:c8:3d:d2:6b:a7:ae:12:8c:5a:
                    05:7c:e9:20:00:e1:e0:70:4c:8b:e0:67:78:57:38:
                    80:61:19:c5:42:a9:2a:fe:1e:d6:59:66:7a:d9:f9:
                    a2:ce:c1:4b:22:09:35:55:f3:ef:1f:b9:97:5b:d5:
                    a1:b5:1f:6a:00:8d:ba:16:dc:85:da:81:c3:50:05:
                    02:d2:32:fd:64:1a:74:78:d8:fd:67:b3:7d:04:7f:
                    7e:cb:8d:cb:74:2a:c2:d2:81:21:1d:af:b1:32:5d:
                    c1:9e:3e:ae:10:e7:27:4b:3e:7f:12:ed:3c:b4:d0:
                    b2:a9:9d:db:62:c6:3a:31:44:ae:3a:05:27:cb:ad:
                    d0:ed:b7:0b:e1:bb:bd:3d:06:2e:5c:4c:b2:19:29:
                    da:ac:5f:0d:42:83:92:79:57:cd:a7:1d:7d:9b:60:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:05:C4:68:89:02:23:C5:D6:6C:77:F5:F1:02:09:69:3F:8D:41
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f9:77:2e:bc:27:8b:b5:e9:2d:c1:be:0e:64:a8:05:90:3d:
         8b:07:eb:40:6f:2b:1b:85:29:ca:71:56:a4:cc:cb:32:cd:2b:
         37:c5:08:97:de:83:e0:65:6c:34:63:0e:2e:8b:29:df:80:7f:
         ee:f7:ad:83:45:7b:95:35:66:b2:7d:e5:89:fa:ea:71:ff:a8:
         12:31:a3:a5:2d:be:85:ef:0c:c6:02:bd:8f:d9:d1:cf:67:32:
         b4:d5:da:c9:e1:cf:16:f4:06:f4:f2:4c:a3:f2:5f:f2:65:9f:
         c6:8b:24:05:8d:34:fb:92:5a:af:6a:bb:e8:a3:25:fb:5b:b4:
         bf:da:97:c9:11:8e:9c:74:6f:a4:12:07:01:98:23:2f:bb:60:
         7f:ad:2b:50:26:4a:1c:51:d2:ec:da:4d:03:e3:e2:30:42:de:
         36:f2:3e:07:49:cd:9b:a5:47:8e:83:eb:7b:53:e5:1c:59:50:
         40:36:af:95:1a:94:ea:a7:46:6b:88:77:d0:50:d8:ef:cf:0f:
         8d:59:b6:4d:bd:7a:5e:59:32:57:a1:4d:4c:06:f8:ff:fa:63:
         9a:7a:81:34:a9:10:68:26:8a:a0:b3:a0:29:3d:1d:a9:92:71:
         12:24:27:d0:e7:2e:c9:e6:c3:33:c9:3f:8f:36:cf:d5:bf:ac:
         4b:ce:05:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCm2hAdTOjfLDTWryYYqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4
OTI1MmYwHhcNMjUwNzI3MDQwMDUzWhcNMjUwNzI4MDQwMDUzWjAzMTEwLwYDVQQD
EyhkZWE3MDVjNDY4ODkwMjIzYzVkNjZjNzdmNWYxMDIwOTY5M2Y4ZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7TrxwvMC2mVTLmehYFRzjj5HXwz
fspV4kPf+x+VfUZAX2vQFn6wRmrZxp5svVKvsHCCTi9ZCYS5vPV+R3G8Ca4edSNT
uF2o3tR2PpY6sWVrG93VWYwPuibRYaWwaFbIPdJrp64SjFoFfOkgAOHgcEyL4Gd4
VziAYRnFQqkq/h7WWWZ62fmizsFLIgk1VfPvH7mXW9WhtR9qAI26FtyF2oHDUAUC
0jL9ZBp0eNj9Z7N9BH9+y43LdCrC0oEhHa+xMl3Bnj6uEOcnSz5/Eu08tNCyqZ3b
YsY6MUSuOgUny63Q7bcL4bu9PQYuXEyyGSnarF8NQoOSeVfNpx19m2DMNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6nBcRoiQIjxdZsd/XxAglpP41BMB8GA1UdIwQY
MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt
NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl
LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvl3Lrwn
i7XpLcG+DmSoBZA9iwfrQG8rG4UpynFWpMzLMs0rN8UIl96D4GVsNGMOLosp34B/
7vetg0V7lTVmsn3lifrqcf+oEjGjpS2+he8MxgK9j9nRz2cytNXayeHPFvQG9PJM
o/Jf8mWfxoskBY00+5Jar2q76KMl+1u0v9qXyRGOnHRvpBIHAZgjL7tgf60rUCZK
HFHS7NpNA+PiMELeNvI+B0nNm6VHjoPre1PlHFlQQDavlRqU6qdGa4h30FDY788P
jVm2Tb16XlkyV6FNTAb4//pjmnqBNKkQaCaKoLOgKT0dqZJxEiQn0OcuyebDM8k/
jzbP1b+sS84FnQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:28 2025 by rpki-client