Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File:                     65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier:          j1YiXSQ/zrYsH1V/0yQHvghrppO342OGEQwM0G+fUj0=
Subject key identifier:   C0:FC:D8:0F:AB:23:5A:DA:AA:60:65:0F:6F:FD:A2:82:2F:20:20:A5
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       01984A4180B870EB3B184F429031E1062682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number:          0B35
Signing time:             Sun 27 Jul 2025 05:01:03 +0000
Manifest this update:     Sun 27 Jul 2025 05:01:03 +0000
Manifest next update:     Mon 28 Jul 2025 05:01:03 +0000
Files and hashes:         1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: BEO+hRprDRu7Sc8hdTSjg1Ze7jUgAPjEP34pwxQVcOw=)
                          2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:80:b8:70:eb:3b:18:4f:42:90:31:e1:06:26:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: Jul 27 05:01:03 2025 GMT
            Not After : Jul 28 05:01:03 2025 GMT
        Subject: CN=c0fcd80fab235adaaa60650f6ffda2822f2020a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:76:09:03:d5:e5:3f:8f:29:80:72:28:3c:
                    1b:c0:62:1d:fa:71:0f:a4:4e:24:02:da:2e:59:8a:
                    e8:71:7a:93:3b:a2:73:8d:a0:9b:1e:16:01:66:a2:
                    1f:ce:61:85:3c:ec:24:9e:e6:2e:0c:1f:d7:be:8a:
                    e6:1e:7e:97:37:4e:40:04:d1:e5:58:bc:4b:5e:0e:
                    75:74:06:1c:ad:9d:09:77:24:c7:47:77:7c:84:32:
                    01:01:20:dd:a9:41:c3:48:c3:32:0b:fd:df:1a:a7:
                    f4:aa:69:c8:09:49:11:df:18:4e:ea:a0:e7:a7:38:
                    b4:b4:c5:4c:04:d1:8e:c1:b4:59:53:36:da:93:a5:
                    13:dd:cd:3c:7f:23:03:07:81:82:21:4b:8e:4b:dc:
                    d3:0e:2c:8c:56:52:3e:6f:ce:91:4c:d6:0a:fc:af:
                    fe:19:37:f7:b7:06:11:de:fb:b4:df:20:9a:70:d8:
                    67:f8:68:4f:1c:6a:4b:0a:28:67:d2:0b:56:45:74:
                    bb:6d:ef:2c:69:1a:8e:11:f0:17:4c:80:bb:dc:4f:
                    87:8e:da:20:b0:7d:ad:1e:e2:37:ef:a1:fe:85:ec:
                    02:3e:ed:13:14:d9:2a:f4:ab:93:89:0e:89:04:57:
                    36:fb:ca:88:e8:57:0c:b7:a1:1d:9a:b9:98:ca:5e:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:D8:0F:AB:23:5A:DA:AA:60:65:0F:6F:FD:A2:82:2F:20:20:A5
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:32:c8:e6:49:f6:0c:ac:7d:4a:94:83:bb:ca:3d:4a:6c:e7:
         9a:e7:cf:eb:da:60:e7:40:74:f7:f3:95:54:bb:fc:35:8b:24:
         9a:16:68:56:4e:1a:cc:28:c6:1e:29:0b:a4:56:97:e3:47:07:
         d1:f7:d8:2b:3c:59:77:94:c1:1d:f7:27:c7:8f:bf:d9:fe:b4:
         06:f6:d1:d1:67:ee:fe:14:06:5f:01:60:2f:ef:2a:91:7c:c7:
         89:e6:be:4a:c7:12:25:dc:06:d6:94:24:88:60:c3:08:fe:67:
         81:aa:b0:aa:67:63:79:10:b6:64:94:c4:a7:89:12:06:31:20:
         6e:9b:be:47:75:0e:9e:a2:9b:73:91:1c:3a:a4:62:c0:fb:95:
         95:d6:6a:36:e7:80:21:41:6a:1c:ee:7e:67:49:e4:ba:2d:3f:
         02:76:4c:ac:9b:f0:31:9b:1e:55:24:0f:e0:64:8b:19:06:27:
         73:8e:f9:a8:7f:15:a7:e8:1c:4d:00:88:c3:77:a0:19:f7:8e:
         18:d4:79:a9:36:82:a1:c4:a8:42:d6:01:1c:b7:1c:8d:f6:22:
         87:61:0c:59:a2:fb:12:65:91:28:b8:8b:66:b5:12:72:5b:29:
         62:69:a6:1c:2a:98:65:cb:e9:0b:d8:dc:a3:af:54:68:8b:6f:
         03:dc:2d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQYC4cOs7GE9CkDHhBiaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTYwOTgyZTgyYmY5ZTk4NzU0NDUwMDkzMDhkZTdlY2Jk
MDVjNTQwHhcNMjUwNzI3MDUwMTAzWhcNMjUwNzI4MDUwMTAzWjAzMTEwLwYDVQQD
EyhjMGZjZDgwZmFiMjM1YWRhYWE2MDY1MGY2ZmZkYTI4MjJmMjAyMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgx2CQPV5T+PKYByKDwbwGId+nEP
pE4kAtouWYrocXqTO6JzjaCbHhYBZqIfzmGFPOwknuYuDB/XvormHn6XN05ABNHl
WLxLXg51dAYcrZ0JdyTHR3d8hDIBASDdqUHDSMMyC/3fGqf0qmnICUkR3xhO6qDn
pzi0tMVMBNGOwbRZUzbak6UT3c08fyMDB4GCIUuOS9zTDiyMVlI+b86RTNYK/K/+
GTf3twYR3vu03yCacNhn+GhPHGpLCihn0gtWRXS7be8saRqOEfAXTIC73E+Hjtog
sH2tHuI376H+hewCPu0TFNkq9KuTiQ6JBFc2+8qI6FcMt6EdmrmYyl4KXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD82A+rI1raqmBlD2/9ooIvICClMB8GA1UdIwQY
MBaAFOuWCYLoK/nph1RFAJMI3n7L0FxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjct
Y2FkZmNlZjBiNWM0LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjctY2FkZmNlZjBiNWM0
LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTLI5kn2
DKx9SpSDu8o9SmznmufP69pg50B09/OVVLv8NYskmhZoVk4azCjGHikLpFaX40cH
0ffYKzxZd5TBHfcnx4+/2f60BvbR0Wfu/hQGXwFgL+8qkXzHiea+SscSJdwG1pQk
iGDDCP5ngaqwqmdjeRC2ZJTEp4kSBjEgbpu+R3UOnqKbc5EcOqRiwPuVldZqNueA
IUFqHO5+Z0nkui0/AnZMrJvwMZseVSQP4GSLGQYnc475qH8Vp+gcTQCIw3egGfeO
GNR5qTaCocSoQtYBHLccjfYih2EMWaL7EmWRKLiLZrUSclspYmmmHCqYZcvpC9jc
o69UaItvA9wtEQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:43 2025 by rpki-client