Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File:                     ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier:          s+2Ou5FDpbgmP4ili28o+WYmWgwG97NY4QtYz+5iQYk=
Subject key identifier:   0A:77:8D:DC:5C:CB:5F:BD:69:0A:1E:4D:CA:FA:5F:B8:C2:A7:EA:AD
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer:       /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial:       019922FA2B52255AC82034588C822205F27B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number:          0E68
Signing time:             Sun 07 Sep 2025 07:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:44 +0000
Files and hashes:         1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: UqGw0YrRkwqELHIYDA90D/cbItEtrKhsjHqFykvAv/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:2b:52:25:5a:c8:20:34:58:8c:82:22:05:f2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
        Validity
            Not Before: Sep  7 07:00:44 2025 GMT
            Not After : Sep  8 07:00:44 2025 GMT
        Subject: CN=0a778ddc5ccb5fbd690a1e4dcafa5fb8c2a7eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:bc:c9:e4:a1:5b:ba:0d:66:18:63:b3:ee:
                    0e:2f:53:ff:e9:9d:7f:3a:86:cc:47:fb:f7:be:9c:
                    ba:10:e8:b6:98:c1:2a:1b:27:75:6a:78:67:9e:99:
                    fb:ac:5b:91:e5:0d:80:22:40:b3:0a:45:0c:6b:7c:
                    2b:4c:34:25:a0:2f:44:09:f6:e2:a5:fc:32:b7:f9:
                    51:81:f3:9a:1f:76:61:0a:21:28:7a:3a:99:9b:61:
                    9b:83:d7:92:3c:82:df:16:a7:05:d3:1c:5a:a3:82:
                    93:07:d9:58:d1:72:a1:40:0a:5c:43:6e:75:9a:87:
                    5a:3f:8c:2e:b3:0b:4e:b7:8e:28:92:ed:e0:94:ec:
                    6e:93:34:e2:ec:8b:b0:66:20:89:94:a9:33:89:ed:
                    e7:f2:7b:90:10:0f:42:4a:52:bf:a7:d3:8d:c3:04:
                    ad:44:fb:da:85:f7:57:65:d7:45:fd:08:51:1b:a8:
                    d8:d2:94:c3:af:81:c4:17:ce:06:66:ab:65:cd:83:
                    bd:50:86:96:e9:b4:27:01:ad:89:3a:26:a4:4e:d4:
                    39:6c:e6:39:97:7f:ff:fc:f4:b9:60:9a:0b:86:12:
                    5b:47:f4:09:f7:35:df:64:01:f6:e1:7a:03:f6:a4:
                    23:fb:90:27:9e:25:f2:7a:b9:f7:79:ea:98:b7:d4:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:77:8D:DC:5C:CB:5F:BD:69:0A:1E:4D:CA:FA:5F:B8:C2:A7:EA:AD
            X509v3 Authority Key Identifier:
                keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:f6:14:e9:b1:c0:20:c5:16:75:07:97:59:5d:f0:7b:20:
         e4:4a:d8:82:72:89:ac:2c:af:42:42:03:a8:29:b1:89:df:ee:
         0d:7b:cd:e8:2f:7b:4b:d5:40:fb:ad:ee:e8:d2:30:e4:05:a4:
         b6:92:72:e2:7c:3e:12:51:63:7e:95:d9:04:0e:b9:7a:30:1b:
         cf:b4:42:0a:33:09:d0:68:bf:2d:43:75:c5:7c:05:5a:10:39:
         29:b2:28:7d:62:32:7f:c2:a3:a4:a7:5b:e4:2d:13:2d:07:be:
         23:c4:3e:1d:ac:2c:e1:31:05:14:ed:4b:48:39:65:43:d0:ba:
         fe:b0:a0:2b:38:0c:32:6b:0e:cd:ac:01:c3:5f:39:5d:04:ad:
         62:6e:6b:89:a2:82:de:58:e9:81:e1:3d:bb:d1:41:82:dd:0e:
         31:15:3e:52:62:5f:86:08:40:88:43:64:d9:d0:1e:77:6c:3c:
         fd:c7:92:04:bc:ec:b3:26:9a:ee:35:d2:25:ec:17:6a:b1:ef:
         d8:f5:b8:da:42:76:8a:de:60:6f:7c:b6:1f:94:9f:be:05:b9:
         ef:71:8e:5e:35:70:14:8d:b5:81:3b:43:94:76:3d:c8:0b:1a:
         a8:f7:f3:0f:82:d5:b7:66:3e:e4:d5:93:e7:10:40:8d:75:29:
         88:fa:d2:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+itSJVrIIDRYjIIiBfJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzBmNGQxMzk0NWYxNmY5Yjc0YjEyNjQ3ZWExMmNjNWQy
NzQ4Y2YwHhcNMjUwOTA3MDcwMDQ0WhcNMjUwOTA4MDcwMDQ0WjAzMTEwLwYDVQQD
EygwYTc3OGRkYzVjY2I1ZmJkNjkwYTFlNGRjYWZhNWZiOGMyYTdlYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd28yeShW7oNZhhjs+4OL1P/6Z1/
OobMR/v3vpy6EOi2mMEqGyd1anhnnpn7rFuR5Q2AIkCzCkUMa3wrTDQloC9ECfbi
pfwyt/lRgfOaH3ZhCiEoejqZm2Gbg9eSPILfFqcF0xxao4KTB9lY0XKhQApcQ251
modaP4wuswtOt44oku3glOxukzTi7IuwZiCJlKkzie3n8nuQEA9CSlK/p9ONwwSt
RPvahfdXZddF/QhRG6jY0pTDr4HEF84GZqtlzYO9UIaW6bQnAa2JOiakTtQ5bOY5
l3///PS5YJoLhhJbR/QJ9zXfZAH24XoD9qQj+5AnniXyern3eeqYt9Sv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp3jdxcy1+9aQoeTcr6X7jCp+qtMB8GA1UdIwQY
MBaAFDgw9NE5RfFvm3SxJkfqEsxdJ0jPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYt
ZWNkZWMwYTQxMDI0LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYtZWNkZWMwYTQxMDI0
LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGM72FOmx
wCDFFnUHl1ld8Hsg5ErYgnKJrCyvQkIDqCmxid/uDXvN6C97S9VA+63u6NIw5AWk
tpJy4nw+ElFjfpXZBA65ejAbz7RCCjMJ0Gi/LUN1xXwFWhA5KbIofWIyf8KjpKdb
5C0TLQe+I8Q+Haws4TEFFO1LSDllQ9C6/rCgKzgMMmsOzawBw185XQStYm5riaKC
3ljpgeE9u9FBgt0OMRU+UmJfhghAiENk2dAed2w8/ceSBLzssyaa7jXSJewXarHv
2PW42kJ2it5gb3y2H5SfvgW573GOXjVwFI21gTtDlHY9yAsaqPfzD4LVt2Y+5NWT
5xBAjXUpiPrSeA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:00 2025 by rpki-client