Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          lD/lXAJPJWai7Jmg/TeOaj+9odywlGrlDOBL/11fu9k=
Subject key identifier:   44:71:F1:79:7A:30:13:CF:1F:38:37:60:B6:54:58:35:DC:98:EF:CC
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       01983795C8D66A982A3F32186CC1E8B3845C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          03A0
Signing time:             Wed 23 Jul 2025 14:00:19 +0000
Manifest this update:     Wed 23 Jul 2025 14:00:19 +0000
Manifest next update:     Thu 24 Jul 2025 14:00:19 +0000
Files and hashes:         1: 7hX2kvhGcEho9Z4B5I203SOFDKo.roa (hash: uOYoTi2rqcHbtIlClUvG5lUVdT7AvqTcY4AmaxczRf4=)
                          2: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: s7O8RqibkuIJPqIcqWYdfMDUjoE.roa (hash: ykWeKMB88xTTAGzMmS7J7k6zzmZsm9kZjUOtWvaQgJI=)
                          7: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: ILL46qOnPLqwpCJRLMMy1uThzKWEAcwhTkq3KwvCPpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:37:95:c8:d6:6a:98:2a:3f:32:18:6c:c1:e8:b3:84:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Jul 23 14:00:19 2025 GMT
            Not After : Jul 24 14:00:19 2025 GMT
        Subject: CN=4471f1797a3013cf1f383760b6545835dc98efcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:f3:3a:7b:6f:86:2f:70:72:98:e8:59:de:
                    19:29:d2:f0:04:b2:44:96:7a:61:a6:36:9d:bb:2a:
                    30:33:26:63:6a:0f:14:d4:61:06:4b:ad:06:1c:c9:
                    1c:f7:72:83:cb:d3:fd:ac:cb:8c:43:cc:27:1d:b4:
                    f2:bc:89:98:8f:cc:bb:29:d9:68:b5:24:91:39:c3:
                    22:cc:73:38:f9:5f:9a:99:4d:1f:c7:c9:3e:12:1d:
                    c1:16:23:f3:70:93:3a:e9:1e:b9:e9:85:0f:18:a4:
                    00:a2:79:50:0b:92:84:68:4f:47:1a:fd:b9:69:cd:
                    f0:64:b9:85:1c:7e:f3:a9:bc:0b:b2:08:45:c5:cf:
                    2d:af:5f:87:83:38:d0:65:ea:59:c5:42:ef:79:87:
                    48:41:84:fa:7e:4e:ed:5a:b7:02:8b:06:6c:ca:9a:
                    b0:46:cb:03:0f:b8:1a:1a:45:f0:10:60:15:68:8a:
                    48:c9:2a:01:34:b7:e9:36:9e:b8:8d:8e:7b:50:7c:
                    13:2f:b8:48:66:12:11:45:ea:eb:18:70:37:7e:3f:
                    8d:a7:61:79:c1:7e:24:a1:0f:9a:40:2e:6c:ca:a2:
                    de:2a:cc:52:39:be:83:96:51:78:9c:e4:9b:51:fb:
                    3c:2c:04:0d:6d:89:f6:d6:19:00:65:c8:e7:a5:9b:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:F1:79:7A:30:13:CF:1F:38:37:60:B6:54:58:35:DC:98:EF:CC
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:c1:18:23:8f:df:6d:f3:17:60:d6:48:ba:7c:bd:53:e8:
         fc:6b:81:67:a6:15:cd:36:3c:9a:06:26:bf:29:42:75:d4:39:
         2e:e6:31:ca:27:9c:19:24:5f:9a:4b:d3:ba:ec:78:58:6e:4f:
         f8:df:5c:71:61:f4:12:d7:b4:82:b0:12:f5:4e:42:01:86:46:
         e1:55:36:de:2d:8d:64:b5:64:84:7e:46:4e:0b:be:7b:33:87:
         a6:7a:5d:00:99:6c:0a:01:72:20:3c:b7:9b:db:d8:3c:5e:61:
         13:9a:97:2a:67:f6:24:0a:5b:74:dc:3c:02:10:e1:e5:7d:fd:
         82:04:a1:33:d7:a1:27:ac:d5:50:a0:22:74:45:ea:37:be:63:
         02:e4:b8:e9:ee:b2:2b:ee:e9:74:8a:f3:ce:04:e7:15:c8:7a:
         5c:85:99:28:fe:3d:b6:7f:1f:41:16:d4:68:cb:c9:ae:24:0a:
         09:c8:c4:15:30:de:45:8c:17:87:4e:7d:f4:9c:e4:75:f8:5d:
         2e:65:28:96:fa:c3:c7:1b:8b:c3:57:23:01:a1:24:09:dc:e1:
         bc:13:3a:1e:69:9d:be:48:28:07:6b:b5:7d:a6:77:89:a5:7e:
         92:12:66:b5:ed:0a:8a:64:88:74:65:d3:19:e9:42:94:68:18:
         e9:d3:dd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg3lcjWapgqPzIYbMHos4RcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjUwNzIzMTQwMDE5WhcNMjUwNzI0MTQwMDE5WjAzMTEwLwYDVQQD
Eyg0NDcxZjE3OTdhMzAxM2NmMWYzODM3NjBiNjU0NTgzNWRjOThlZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+rzOntvhi9wcpjoWd4ZKdLwBLJE
lnphpjaduyowMyZjag8U1GEGS60GHMkc93KDy9P9rMuMQ8wnHbTyvImYj8y7Kdlo
tSSROcMizHM4+V+amU0fx8k+Eh3BFiPzcJM66R656YUPGKQAonlQC5KEaE9HGv25
ac3wZLmFHH7zqbwLsghFxc8tr1+HgzjQZepZxULveYdIQYT6fk7tWrcCiwZsypqw
RssDD7gaGkXwEGAVaIpIySoBNLfpNp64jY57UHwTL7hIZhIRRerrGHA3fj+Np2F5
wX4koQ+aQC5syqLeKsxSOb6DllF4nOSbUfs8LAQNbYn21hkAZcjnpZuPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERx8Xl6MBPPHzg3YLZUWDXcmO/MMB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIzBGCOP
323zF2DWSLp8vVPo/GuBZ6YVzTY8mgYmvylCddQ5LuYxyiecGSRfmkvTuux4WG5P
+N9ccWH0Ete0grAS9U5CAYZG4VU23i2NZLVkhH5GTgu+ezOHpnpdAJlsCgFyIDy3
m9vYPF5hE5qXKmf2JApbdNw8AhDh5X39ggShM9ehJ6zVUKAidEXqN75jAuS46e6y
K+7pdIrzzgTnFch6XIWZKP49tn8fQRbUaMvJriQKCcjEFTDeRYwXh0599Jzkdfhd
LmUolvrDxxuLw1cjAaEkCdzhvBM6HmmdvkgoB2u1faZ3iaV+khJmte0KimSIdGXT
GelClGgY6dPdbA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:35:45 2025 by rpki-client