Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          bKfj87lRSWSEyfO1TOrkfnwi+sUr76LQeANz/CBVJz8=
Subject key identifier:   A2:66:41:AD:E7:06:E8:98:98:7F:50:D5:CC:63:67:B4:D0:87:EA:99
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       019845515C26F33D937445C6A79CB5355B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          032B
Signing time:             Sat 26 Jul 2025 06:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 06:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 06:00:16 +0000
Files and hashes:         1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=)
                          2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: 2giJ52hjLX0TC8rueR0pamh502OJ0TPBBlGWWz++Kos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:51:5c:26:f3:3d:93:74:45:c6:a7:9c:b5:35:5b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Jul 26 06:00:16 2025 GMT
            Not After : Jul 27 06:00:16 2025 GMT
        Subject: CN=a26641ade706e898987f50d5cc6367b4d087ea99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:16:ed:f4:c8:22:9f:2a:0e:7a:35:20:2f:
                    6e:22:05:cf:4f:94:c5:f2:19:3c:87:65:b1:5a:cb:
                    9c:4d:57:8f:42:90:cd:b8:dd:85:fe:54:3f:ff:ad:
                    fb:17:0d:ac:3f:94:2f:0c:a5:8e:ff:a8:4f:9a:ca:
                    54:20:e9:5f:da:89:44:61:10:33:27:ef:87:6f:eb:
                    88:d3:e5:9b:04:67:a7:60:3f:75:e2:b5:b1:73:8a:
                    6f:c2:f4:8a:d5:17:d6:b7:f7:8a:3d:37:c3:04:aa:
                    8c:fe:0a:1e:b2:e4:c1:91:d2:58:39:b4:21:47:d9:
                    47:0a:a6:fc:6e:99:8f:9f:a3:13:69:d9:39:8c:cf:
                    37:3c:67:dc:3c:92:80:8d:bc:42:36:eb:ce:a2:93:
                    f0:c5:0c:0a:dc:ac:ff:e1:c7:ef:59:3c:ec:31:50:
                    86:49:25:2b:52:5a:93:91:5d:86:f3:82:e4:d3:05:
                    24:00:d2:d6:d3:46:19:b3:a1:c4:8e:8f:68:d4:34:
                    27:3f:9e:2d:b7:1d:e7:9d:ab:b4:7c:59:c8:f2:ea:
                    03:8b:89:37:aa:2f:81:da:4b:ff:3e:e5:80:2a:16:
                    fd:2c:00:60:3e:f1:93:fb:87:25:2e:ea:9a:ff:bd:
                    13:36:d9:3f:fc:ee:77:9a:be:30:27:32:c3:87:23:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:41:AD:E7:06:E8:98:98:7F:50:D5:CC:63:67:B4:D0:87:EA:99
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:15:0a:4f:0d:6e:3c:21:0d:b8:3a:7c:91:2a:21:a5:01:a2:
         69:28:49:2c:8a:b3:19:05:02:32:ae:d1:bf:2f:8d:05:fa:28:
         c7:66:63:8e:87:fa:67:0b:70:44:f5:df:98:63:8f:0b:08:04:
         48:10:02:00:41:a0:b1:c7:01:a7:01:8b:10:bd:e6:69:42:ae:
         ea:ae:8c:6d:a1:8b:36:5a:fe:3a:76:23:56:07:ac:80:55:a7:
         0d:bf:e6:ab:87:56:3d:e3:29:1a:e6:fe:90:66:10:6b:44:24:
         94:a5:da:ec:a0:15:79:f9:03:0b:4b:e9:16:8c:f8:1a:ec:80:
         72:75:fc:58:35:98:55:68:db:74:33:07:a3:18:b4:f5:17:8e:
         a1:1a:56:40:16:56:5b:f9:ec:79:78:56:3c:e1:33:18:49:60:
         45:5d:4a:fa:88:50:ff:e1:0e:7d:3e:f4:8a:7f:1d:ce:b2:f9:
         cc:19:1a:94:b2:b4:6e:fb:f6:25:8b:d7:82:a4:7e:4a:37:9a:
         c6:62:d5:4d:b4:b9:80:15:ab:47:d7:f0:23:be:0c:cf:30:99:
         02:c0:93:28:b9:c7:dd:07:44:73:47:70:7a:20:0e:7d:4f:c2:
         ac:82:ae:20:79:43:ec:9c:11:47:3e:a2:8f:b0:ec:18:61:02:
         35:35:55:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFUVwm8z2TdEXGp5y1NVuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NjcwNWI1NTdiODIzMDg2YjZhNTMyMzI0YmZiYmEzNjk5
NWNiMWMwHhcNMjUwNzI2MDYwMDE2WhcNMjUwNzI3MDYwMDE2WjAzMTEwLwYDVQQD
EyhhMjY2NDFhZGU3MDZlODk4OTg3ZjUwZDVjYzYzNjdiNGQwODdlYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/sW7fTIIp8qDno1IC9uIgXPT5TF
8hk8h2WxWsucTVePQpDNuN2F/lQ//637Fw2sP5QvDKWO/6hPmspUIOlf2olEYRAz
J++Hb+uI0+WbBGenYD914rWxc4pvwvSK1RfWt/eKPTfDBKqM/goesuTBkdJYObQh
R9lHCqb8bpmPn6MTadk5jM83PGfcPJKAjbxCNuvOopPwxQwK3Kz/4cfvWTzsMVCG
SSUrUlqTkV2G84Lk0wUkANLW00YZs6HEjo9o1DQnP54ttx3nnau0fFnI8uoDi4k3
qi+B2kv/PuWAKhb9LABgPvGT+4clLuqa/70TNtk//O53mr4wJzLDhyOksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJmQa3nBuiYmH9Q1cxjZ7TQh+qZMB8GA1UdIwQY
MBaAFFdnBbVXuCMIa2pTIyS/u6NplcscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTkt
YTdiZjNiZjkwMmQ4LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTktYTdiZjNiZjkwMmQ4
LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1BUKTw1u
PCENuDp8kSohpQGiaShJLIqzGQUCMq7Rvy+NBfoox2Zjjof6ZwtwRPXfmGOPCwgE
SBACAEGgsccBpwGLEL3maUKu6q6MbaGLNlr+OnYjVgesgFWnDb/mq4dWPeMpGub+
kGYQa0QklKXa7KAVefkDC0vpFoz4GuyAcnX8WDWYVWjbdDMHoxi09ReOoRpWQBZW
W/nseXhWPOEzGElgRV1K+ohQ/+EOfT70in8dzrL5zBkalLK0bvv2JYvXgqR+Sjea
xmLVTbS5gBWrR9fwI74MzzCZAsCTKLnH3QdEc0dweiAOfU/CrIKuIHlD7JwRRz6i
j7DsGGECNTVVvw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:51 2025 by rpki-client