Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File:                     Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier:          gT6NJzd43YcuDeL2TLcg5Nqb/EQjLLG1Lp+mqzy0I/U=
Subject key identifier:   CD:37:3E:D8:BD:AE:D1:2B:04:F4:91:0C:5B:24:E3:71:76:26:03:A4
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer:       /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial:       0198443EF616364A5BC4AB2F32F7E05F48CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number:          0374
Signing time:             Sat 26 Jul 2025 01:00:33 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:33 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:33 +0000
Files and hashes:         1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
                          2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: faQ5a6Q5/LevU4Pb98aP8bbsK+iyZVqOKOrbCTPdeVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:f6:16:36:4a:5b:c4:ab:2f:32:f7:e0:5f:48:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
        Validity
            Not Before: Jul 26 01:00:33 2025 GMT
            Not After : Jul 27 01:00:33 2025 GMT
        Subject: CN=cd373ed8bdaed12b04f4910c5b24e371762603a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:76:80:a0:bd:02:33:bc:de:1f:8e:6f:3c:
                    5a:b3:92:3b:8d:31:82:d1:cb:3e:4c:21:1f:2a:56:
                    43:25:79:c0:dc:0d:c2:c5:b2:c6:82:fc:5a:36:27:
                    0f:3c:7d:77:17:5a:2c:ce:1f:ca:f6:7f:3c:65:95:
                    10:e2:9f:d3:ca:51:42:45:71:d9:3b:3e:99:37:55:
                    d3:b4:00:dd:6e:17:1f:c3:4e:07:c0:6c:ec:fa:db:
                    69:9e:c8:fc:14:5f:38:d6:78:04:bb:c1:41:a4:b4:
                    bb:a5:4c:be:dc:2e:ab:7c:fe:cc:dd:e2:85:98:b2:
                    15:34:fb:3c:c7:74:47:cf:ea:13:ac:e5:3f:2a:c6:
                    82:7d:1d:72:06:72:24:08:4b:43:16:9a:93:53:21:
                    38:6e:57:4b:a4:e7:28:91:41:1a:db:14:27:a0:ef:
                    ed:7a:c6:18:7c:89:af:15:b4:73:50:da:78:24:94:
                    04:f8:68:41:71:03:ab:16:6e:9f:b4:2a:50:0b:da:
                    26:3b:2c:5a:77:cc:0a:9e:5e:42:80:91:1d:fd:7e:
                    5e:74:2b:13:b9:cd:4d:66:a4:b6:6f:f1:ab:56:2a:
                    37:eb:03:ad:2b:89:b3:ab:ec:7c:59:94:9a:05:ce:
                    0e:7d:60:01:cf:ea:e3:54:c8:c7:a2:0a:2f:62:92:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:3E:D8:BD:AE:D1:2B:04:F4:91:0C:5B:24:E3:71:76:26:03:A4
            X509v3 Authority Key Identifier:
                keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:26:bb:c1:aa:fb:72:29:6e:70:58:fb:97:94:96:ad:41:
         1a:73:e7:36:34:b2:2d:13:d7:24:20:dd:24:06:08:85:d4:af:
         83:87:ed:b7:65:aa:0c:c5:d2:f2:78:5d:ca:9e:15:a9:de:ff:
         fa:8c:8d:05:6d:a4:8e:dc:ec:5a:0c:47:f0:f4:50:ed:3e:9f:
         8f:c4:24:09:a5:67:e5:71:e4:a0:10:97:6f:ed:f2:04:99:7b:
         ef:c6:06:c6:ce:63:7a:c3:9d:d2:48:b8:f9:e2:67:19:e9:a8:
         7c:7e:fd:71:69:da:76:b5:06:7a:d3:68:c0:c3:e8:43:a8:c7:
         0a:ca:43:48:a2:e2:14:f9:04:05:fe:54:de:89:9a:15:b8:ea:
         6c:3b:91:4a:db:be:b3:42:a8:02:b8:c6:e8:5a:4b:f8:f7:cd:
         7d:df:83:a7:f2:56:5b:ad:c3:51:15:d8:d5:99:03:b4:ab:4f:
         e4:58:76:44:dc:69:50:cf:17:24:eb:5d:b3:22:73:1c:dc:1b:
         57:6b:d3:4d:56:55:d8:c6:8e:74:38:87:5a:95:95:b4:76:1a:
         0d:1c:d6:ab:a5:cb:6f:01:e3:b0:52:a9:ae:83:17:b7:19:a7:
         d8:7c:d9:d2:71:75:ba:29:96:f5:1e:de:b8:ce:9d:8a:68:80:
         b1:80:8b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPvYWNkpbxKsvMvfgX0jLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz
MTFkOGMwHhcNMjUwNzI2MDEwMDMzWhcNMjUwNzI3MDEwMDMzWjAzMTEwLwYDVQQD
EyhjZDM3M2VkOGJkYWVkMTJiMDRmNDkxMGM1YjI0ZTM3MTc2MjYwM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1al2gKC9AjO83h+Obzxas5I7jTGC
0cs+TCEfKlZDJXnA3A3CxbLGgvxaNicPPH13F1oszh/K9n88ZZUQ4p/TylFCRXHZ
Oz6ZN1XTtADdbhcfw04HwGzs+ttpnsj8FF841ngEu8FBpLS7pUy+3C6rfP7M3eKF
mLIVNPs8x3RHz+oTrOU/KsaCfR1yBnIkCEtDFpqTUyE4bldLpOcokUEa2xQnoO/t
esYYfImvFbRzUNp4JJQE+GhBcQOrFm6ftCpQC9omOyxad8wKnl5CgJEd/X5edCsT
uc1NZqS2b/GrVio36wOtK4mzq+x8WZSaBc4OfWABz+rjVMjHogovYpK1cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM03Pti9rtErBPSRDFsk43F2JgOkMB8GA1UdIwQY
MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt
MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx
LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbImu8Gq
+3IpbnBY+5eUlq1BGnPnNjSyLRPXJCDdJAYIhdSvg4ftt2WqDMXS8nhdyp4Vqd7/
+oyNBW2kjtzsWgxH8PRQ7T6fj8QkCaVn5XHkoBCXb+3yBJl778YGxs5jesOd0ki4
+eJnGemofH79cWnadrUGetNowMPoQ6jHCspDSKLiFPkEBf5U3omaFbjqbDuRStu+
s0KoArjG6FpL+PfNfd+Dp/JWW63DURXY1ZkDtKtP5Fh2RNxpUM8XJOtdsyJzHNwb
V2vTTVZV2MaOdDiHWpWVtHYaDRzWq6XLbwHjsFKproMXtxmn2HzZ0nF1uimW9R7e
uM6dimiAsYCLrg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:43:34 2025 by rpki-client