Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File:                     oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier:          CgstvtzqvKxXEd0gHEahnxQTZZ719rfw+SnLUHzUfo8=
Subject key identifier:   24:CD:3C:9A:B0:12:AE:2D:AF:7E:55:93:B0:B9:D4:3D:07:27:86:CB
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer:       /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial:       019849669498A359EC5588ADC0747EFAD4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 01:01:56 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:56 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:56 +0000
Files and hashes:         1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: dV+1nMpos18zm8qScghdTuSpAfmNyRPO3RJDVyWDaas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:94:98:a3:59:ec:55:88:ad:c0:74:7e:fa:d4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
        Validity
            Not Before: Jul 27 01:01:56 2025 GMT
            Not After : Jul 28 01:01:56 2025 GMT
        Subject: CN=24cd3c9ab012ae2daf7e5593b0b9d43d072786cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:f6:17:78:2e:af:06:bc:91:7f:77:e4:43:
                    c7:24:2d:11:1d:56:d9:08:2f:28:cb:06:a7:c9:e6:
                    79:e9:d5:72:c0:a1:f6:41:aa:88:0a:d9:ab:59:5e:
                    37:b7:d0:ca:ec:a9:76:ff:50:2d:17:b1:08:31:ed:
                    79:12:e3:c4:83:b3:7e:0b:dd:67:9f:53:5f:7e:de:
                    5b:57:39:96:1c:9f:bd:7e:9d:d6:74:ae:7f:82:33:
                    7f:3f:5a:d4:18:de:8c:35:e2:e9:38:14:93:00:24:
                    b5:59:e3:50:9b:07:ae:e6:c0:9a:ba:fc:80:81:f4:
                    ae:4d:56:7b:b8:58:0d:85:1d:5f:b2:fb:45:5d:76:
                    9b:6f:7a:30:e9:d7:75:a0:3c:c9:19:36:b7:14:f5:
                    46:e2:ea:00:7d:81:d9:66:10:ed:2b:b5:c1:f3:30:
                    fc:6c:1b:86:00:cc:fa:db:13:1e:1f:da:52:ae:6e:
                    49:61:3f:d7:6a:9c:19:65:87:dc:75:63:30:1d:0a:
                    de:25:0d:58:03:28:17:98:44:2f:e0:31:fc:7a:8a:
                    1d:6b:8d:2b:ad:4a:be:0e:fb:8d:68:27:d0:23:de:
                    07:9a:f3:bb:03:82:ef:aa:d8:42:54:a6:b5:dc:fb:
                    d1:0d:02:9b:a3:36:41:2f:ef:0a:19:ae:5a:0e:3f:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:3C:9A:B0:12:AE:2D:AF:7E:55:93:B0:B9:D4:3D:07:27:86:CB
            X509v3 Authority Key Identifier:
                keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:09:4a:6b:ba:bf:32:6e:6a:f2:1c:1c:37:61:db:12:55:
         4d:3c:7f:6a:e7:7c:ee:8a:50:a2:f0:7e:a7:68:cc:aa:08:d5:
         91:54:6b:13:b4:e3:f2:ff:2f:e5:c1:23:59:4e:24:b7:ad:0f:
         68:ec:fb:36:83:27:b8:cd:e3:85:a7:2b:68:03:9d:6b:aa:4a:
         75:15:98:ce:4a:99:14:de:d0:64:a3:f2:df:da:8e:21:54:f7:
         f6:1b:2f:30:7d:64:9a:ff:d4:88:20:8b:b6:54:dc:93:af:ae:
         88:da:68:14:3c:49:78:6a:05:82:9e:67:0e:ee:f6:19:97:c0:
         9b:44:ad:ab:7f:15:a0:35:68:77:91:ef:bc:ae:69:f3:6f:72:
         81:8e:1b:57:1a:da:45:97:b1:08:81:a4:d3:bb:c5:70:cb:d7:
         0b:83:bc:ce:83:14:f1:4e:c4:a1:80:ab:40:91:6f:b8:4a:bf:
         73:6a:94:ba:f3:97:2b:fd:d3:c3:ea:e3:fc:d4:8d:67:c5:dd:
         d7:6a:f9:23:80:e8:2e:b2:51:8e:b2:fd:b1:81:ea:89:92:a1:
         1e:f8:87:8d:16:02:36:01:85:27:ef:c7:ce:2d:58:ca:59:38:
         a9:d5:db:97:e3:b0:20:81:27:51:45:ed:ec:45:8c:c0:c8:78:
         0d:61:80:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZpSYo1nsVYitwHR++tTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDYyY2E5Y2NlOGM4ZmZkMWY5ZDdkZTdjN2U5MDVjNmU4
OTNjZmMwHhcNMjUwNzI3MDEwMTU2WhcNMjUwNzI4MDEwMTU2WjAzMTEwLwYDVQQD
EygyNGNkM2M5YWIwMTJhZTJkYWY3ZTU1OTNiMGI5ZDQzZDA3Mjc4NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfj2F3gurwa8kX935EPHJC0RHVbZ
CC8oywanyeZ56dVywKH2QaqICtmrWV43t9DK7Kl2/1AtF7EIMe15EuPEg7N+C91n
n1Nfft5bVzmWHJ+9fp3WdK5/gjN/P1rUGN6MNeLpOBSTACS1WeNQmweu5sCauvyA
gfSuTVZ7uFgNhR1fsvtFXXabb3ow6dd1oDzJGTa3FPVG4uoAfYHZZhDtK7XB8zD8
bBuGAMz62xMeH9pSrm5JYT/XapwZZYfcdWMwHQreJQ1YAygXmEQv4DH8eooda40r
rUq+DvuNaCfQI94HmvO7A4LvqthCVKa13PvRDQKbozZBL+8KGa5aDj9uEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTNPJqwEq4tr35Vk7C51D0HJ4bLMB8GA1UdIwQY
MBaAFKFGLKnM6Mj/0fnX3nx+kFxuiTz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4Mjgt
MjcyY2M5MmNjNjBiLzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4MjgtMjcyY2M5MmNjNjBi
LzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd0JSmu6
vzJuavIcHDdh2xJVTTx/aud87opQovB+p2jMqgjVkVRrE7Tj8v8v5cEjWU4kt60P
aOz7NoMnuM3jhacraAOda6pKdRWYzkqZFN7QZKPy39qOIVT39hsvMH1kmv/UiCCL
tlTck6+uiNpoFDxJeGoFgp5nDu72GZfAm0Stq38VoDVod5HvvK5p829ygY4bVxra
RZexCIGk07vFcMvXC4O8zoMU8U7EoYCrQJFvuEq/c2qUuvOXK/3Tw+rj/NSNZ8Xd
12r5I4DoLrJRjrL9sYHqiZKhHviHjRYCNgGFJ+/Hzi1Yylk4qdXbl+OwIIEnUUXt
7EWMwMh4DWGAgw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:58 2025 by rpki-client