Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File:                     ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier:          mog6jzl7pfJjmTmi0OsVQJzJnCqKzBavXNtOtxkr4oA=
Subject key identifier:   13:28:AA:4C:19:B6:DA:E1:C7:7E:F0:9E:DA:83:3E:5B:51:13:F6:82
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer:       /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial:       019848F777F90466A0D5CBB5BB5E0CC0E96C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number:          118D
Signing time:             Sat 26 Jul 2025 23:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:34 +0000
Files and hashes:         1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: mHLYA5CAbmchwZQrLLFk0q4gdvC715KAN8+AYssdtjo=)
                          2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:77:f9:04:66:a0:d5:cb:b5:bb:5e:0c:c0:e9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
        Validity
            Not Before: Jul 26 23:00:34 2025 GMT
            Not After : Jul 27 23:00:34 2025 GMT
        Subject: CN=1328aa4c19b6dae1c77ef09eda833e5b5113f682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:92:84:af:52:47:d3:5c:7a:ab:e3:ba:b7:
                    7a:44:ac:3e:0e:6d:ab:3b:34:e2:69:87:95:60:b2:
                    fa:72:cc:55:d0:0c:6b:82:cf:08:5c:73:20:0c:91:
                    23:10:1a:9d:b1:36:a8:8e:7f:fb:43:e3:f1:35:73:
                    06:93:c1:3d:c7:c4:9b:ff:97:88:fb:98:20:c4:f8:
                    0c:31:32:86:e3:22:be:d7:41:51:58:16:d3:b4:af:
                    0b:68:44:e6:e4:94:44:1c:57:91:dc:60:61:a9:ef:
                    f4:2c:9c:90:cd:e6:c7:e4:eb:cb:98:d1:48:25:b2:
                    b9:d6:4a:e6:ca:ae:9f:ca:50:23:ba:66:c0:e2:0a:
                    d2:48:d0:7f:6c:7e:a6:23:b9:81:42:df:57:7b:bf:
                    fa:03:88:17:ba:4e:32:9d:db:58:d7:41:f7:c7:12:
                    9e:a8:81:58:3b:22:90:04:99:c1:e8:10:63:84:aa:
                    e4:34:29:1b:f2:86:5e:c5:2c:79:74:fa:44:ca:9f:
                    2c:ab:4e:a2:86:75:21:3e:cd:c2:c4:ca:7c:8e:c6:
                    d1:cc:c0:61:bc:d9:9d:12:b0:34:d1:e8:e4:38:cd:
                    b3:2b:1d:a6:29:ae:f2:d9:55:08:bf:43:d2:5d:98:
                    ea:f1:e6:17:05:aa:b2:08:a0:2b:b5:b5:bf:05:33:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:AA:4C:19:B6:DA:E1:C7:7E:F0:9E:DA:83:3E:5B:51:13:F6:82
            X509v3 Authority Key Identifier:
                keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:ca:cb:4e:a2:99:c4:0a:98:0f:16:4e:1d:83:c2:6f:a0:
         af:34:06:48:b9:7d:f1:34:bc:18:aa:86:8e:c4:f4:78:d5:e8:
         0e:26:01:6b:0c:2a:de:bb:b5:31:08:21:80:ef:a2:04:e6:07:
         03:d1:b3:b9:97:ee:31:3a:bf:1a:70:20:40:4c:e0:25:bb:b7:
         67:cf:0d:95:3f:af:92:69:32:bf:7b:75:3b:96:0f:02:97:78:
         65:d7:aa:f1:ff:ad:bb:e2:af:d7:77:9c:0a:92:ea:1f:a4:27:
         2f:40:7c:2a:d1:c1:d5:a0:c9:55:75:54:b8:50:df:ef:b7:b4:
         e6:71:a1:f5:7d:f0:04:d4:d8:af:a9:33:9d:2f:b7:ee:06:3a:
         29:45:4f:ac:f1:9c:2e:52:7a:f6:32:70:46:da:f2:50:68:ae:
         72:ac:27:86:8a:12:90:d2:9c:50:47:94:4b:56:49:4b:65:da:
         81:00:38:ad:69:9a:12:51:4e:b5:ff:d9:60:cf:61:02:4f:11:
         9d:28:a8:a6:57:4f:db:2a:9c:08:2b:6b:4c:9e:57:73:7e:aa:
         7e:3e:ee:1b:1e:33:8e:5e:79:f1:77:05:1a:2c:88:39:c1:ad:
         5b:d6:0e:ac:6c:b1:af:86:f8:c9:4b:a5:b4:2b:91:03:87:3e:
         79:b9:e9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI93f5BGag1cu1u14MwOlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi
Y2ZhN2EwHhcNMjUwNzI2MjMwMDM0WhcNMjUwNzI3MjMwMDM0WjAzMTEwLwYDVQQD
EygxMzI4YWE0YzE5YjZkYWUxYzc3ZWYwOWVkYTgzM2U1YjUxMTNmNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPiShK9SR9Nceqvjurd6RKw+Dm2r
OzTiaYeVYLL6csxV0Axrgs8IXHMgDJEjEBqdsTaojn/7Q+PxNXMGk8E9x8Sb/5eI
+5ggxPgMMTKG4yK+10FRWBbTtK8LaETm5JREHFeR3GBhqe/0LJyQzebH5OvLmNFI
JbK51krmyq6fylAjumbA4grSSNB/bH6mI7mBQt9Xe7/6A4gXuk4yndtY10H3xxKe
qIFYOyKQBJnB6BBjhKrkNCkb8oZexSx5dPpEyp8sq06ihnUhPs3CxMp8jsbRzMBh
vNmdErA00ejkOM2zKx2mKa7y2VUIv0PSXZjq8eYXBaqyCKArtbW/BTO2uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMoqkwZttrhx37wntqDPltRE/aCMB8GA1UdIwQY
MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt
ODZiOTBmMTk3ZWRlLzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl
LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACavKy06i
mcQKmA8WTh2Dwm+grzQGSLl98TS8GKqGjsT0eNXoDiYBawwq3ru1MQghgO+iBOYH
A9GzuZfuMTq/GnAgQEzgJbu3Z88NlT+vkmkyv3t1O5YPApd4Zdeq8f+tu+Kv13ec
CpLqH6QnL0B8KtHB1aDJVXVUuFDf77e05nGh9X3wBNTYr6kznS+37gY6KUVPrPGc
LlJ69jJwRtryUGiucqwnhooSkNKcUEeUS1ZJS2XagQA4rWmaElFOtf/ZYM9hAk8R
nSiopldP2yqcCCtrTJ5Xc36qfj7uGx4zjl558XcFGiyIOcGtW9YOrGyxr4b4yUul
tCuRA4c+ebnp1w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:56:01 2025 by rpki-client