Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File:                     DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier:          ofo1rghgXroZ2boqwVJJRMXbaQGO8n9/8fza2mcH4c0=
Subject key identifier:   B6:EB:DF:F2:EB:91:E5:48:72:17:42:2F:56:A6:80:06:FB:D7:59:EF
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer:       /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial:       019922FA9BFBDD4C44E41AD3C0F0CEEE6C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number:          01E3
Signing time:             Sun 07 Sep 2025 07:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:13 +0000
Files and hashes:         1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: Q12KXBCRWrdmz/vz2JgMkjGYVBDjXJhChHufxizTKwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:9b:fb:dd:4c:44:e4:1a:d3:c0:f0:ce:ee:6c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
        Validity
            Not Before: Sep  7 07:01:13 2025 GMT
            Not After : Sep  8 07:01:13 2025 GMT
        Subject: CN=b6ebdff2eb91e5487217422f56a68006fbd759ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:ba:c6:5c:0c:f2:64:27:47:bd:11:df:db:
                    19:70:f1:6d:c7:d8:75:37:2d:b1:de:02:47:af:d3:
                    14:db:c4:f7:d8:1c:0f:03:61:35:ce:96:ff:c7:ee:
                    d4:e7:e1:d4:bd:94:6d:15:84:06:f0:02:b1:58:cd:
                    ef:df:88:35:68:20:7d:47:22:01:68:ec:3c:50:bc:
                    43:f3:0d:ac:0d:ee:b1:be:e7:ff:82:55:e8:44:c3:
                    a0:b8:c6:88:80:12:a0:aa:27:11:ed:05:50:c8:75:
                    7f:89:d3:5b:b8:c9:4f:94:f0:fc:a5:89:7d:6e:9d:
                    cc:4d:ca:88:88:77:be:60:dc:ed:aa:49:31:81:ef:
                    5e:9e:19:e7:16:0e:04:98:48:69:06:93:13:58:9d:
                    d2:8c:cf:6c:bf:9c:8a:bb:17:87:cf:71:b0:53:6e:
                    f7:87:a1:14:ce:a5:ec:3f:06:54:d1:5d:7d:b8:5b:
                    cd:06:cf:61:c2:65:5c:69:7e:7b:ba:4f:af:08:2a:
                    b0:73:6b:2a:45:0d:ef:76:98:cd:32:9e:3b:b6:d4:
                    41:b0:dd:14:64:49:d9:0a:69:0b:e0:e4:c7:14:dc:
                    aa:c6:f2:1d:98:48:9a:19:72:61:c7:04:d0:bc:a5:
                    34:28:5f:37:51:56:56:de:e1:07:da:1f:fa:6b:3c:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EB:DF:F2:EB:91:E5:48:72:17:42:2F:56:A6:80:06:FB:D7:59:EF
            X509v3 Authority Key Identifier:
                keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:c4:61:ec:12:c9:cd:a5:cd:9c:38:21:78:58:50:f6:42:
         34:8e:88:38:29:48:56:f9:d3:cc:66:e7:09:83:1d:e8:66:a7:
         0e:fb:17:a9:c2:fa:7f:10:e3:61:7c:f7:e1:c0:a5:bb:90:dc:
         ab:83:9a:f8:01:15:ca:b9:3d:65:69:6e:73:b3:36:60:e3:e3:
         4b:8d:3c:79:28:5e:a4:e0:60:8e:7b:ce:0a:51:d0:47:37:0a:
         07:70:f7:ab:91:b9:8f:8c:6b:93:b9:5c:c3:8c:a6:7b:8a:16:
         c7:27:12:90:3e:fc:6b:de:8b:77:9a:82:9c:2e:fa:ca:02:29:
         56:a5:28:0e:09:05:50:48:c8:ee:f2:74:a7:38:22:8b:8f:44:
         72:2f:96:51:7b:80:88:80:ec:b3:dd:aa:02:f1:f4:4c:2e:34:
         1d:8c:25:2c:5f:c7:ae:ff:ec:10:8d:14:88:d8:2d:da:d1:7c:
         46:75:e7:02:df:b6:88:87:8b:1a:09:55:a5:78:5b:d7:27:03:
         ea:8b:7f:67:1d:0f:ef:f8:d6:20:d0:94:5e:40:8a:1a:0e:f5:
         88:b9:24:cf:e2:56:c4:39:32:65:82:a4:e9:f9:5b:ed:d6:5a:
         1e:a0:64:0a:c9:57:b2:6e:aa:26:ae:3b:d7:b3:a0:d4:42:c0:
         8b:61:c8:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+pv73UxE5BrTwPDO7mwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2MzNjAyOGQwMDU4MTBjYWJhMjQ2MTRiZDYwNzMxZGQ0
OTUwMzMwHhcNMjUwOTA3MDcwMTEzWhcNMjUwOTA4MDcwMTEzWjAzMTEwLwYDVQQD
EyhiNmViZGZmMmViOTFlNTQ4NzIxNzQyMmY1NmE2ODAwNmZiZDc1OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rK6xlwM8mQnR70R39sZcPFtx9h1
Ny2x3gJHr9MU28T32BwPA2E1zpb/x+7U5+HUvZRtFYQG8AKxWM3v34g1aCB9RyIB
aOw8ULxD8w2sDe6xvuf/glXoRMOguMaIgBKgqicR7QVQyHV/idNbuMlPlPD8pYl9
bp3MTcqIiHe+YNztqkkxge9enhnnFg4EmEhpBpMTWJ3SjM9sv5yKuxeHz3GwU273
h6EUzqXsPwZU0V19uFvNBs9hwmVcaX57uk+vCCqwc2sqRQ3vdpjNMp47ttRBsN0U
ZEnZCmkL4OTHFNyqxvIdmEiaGXJhxwTQvKU0KF83UVZW3uEH2h/6azw/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbr3/LrkeVIchdCL1amgAb711nvMB8GA1UdIwQY
MBaAFAzMNgKNAFgQyrokYUvWBzHdSVAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUt
ZGNmM2ExYzI1Y2YzLzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUtZGNmM2ExYzI1Y2Yz
LzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfvEYewS
yc2lzZw4IXhYUPZCNI6IOClIVvnTzGbnCYMd6GanDvsXqcL6fxDjYXz34cClu5Dc
q4Oa+AEVyrk9ZWluc7M2YOPjS408eShepOBgjnvOClHQRzcKB3D3q5G5j4xrk7lc
w4yme4oWxycSkD78a96Ld5qCnC76ygIpVqUoDgkFUEjI7vJ0pzgii49Eci+WUXuA
iIDss92qAvH0TC40HYwlLF/Hrv/sEI0UiNgt2tF8RnXnAt+2iIeLGglVpXhb1ycD
6ot/Zx0P7/jWINCUXkCKGg71iLkkz+JWxDkyZYKk6flb7dZaHqBkCslXsm6qJq47
17Og1ELAi2HIng==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:40 2025 by rpki-client