Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          4nBFCOMGW2Et6y5Man2ijo4y2+WWJ2e6CPsnyTaaYzU=
Subject key identifier:   6B:5C:A7:BE:7B:67:20:0D:22:3A:E5:A3:F2:C3:3E:58:5D:FC:E4:B5
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       0199239F30F0C56597334DD19D692FD6AB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0C66
Signing time:             Sun 07 Sep 2025 10:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:59 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: uqbPIOn8Ri9s6bfokWvGAACZ0AcQnJdISdZGHX+eqoo=)
                          2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:30:f0:c5:65:97:33:4d:d1:9d:69:2f:d6:ab:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Sep  7 10:00:59 2025 GMT
            Not After : Sep  8 10:00:59 2025 GMT
        Subject: CN=6b5ca7be7b67200d223ae5a3f2c33e585dfce4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:2d:1d:5b:10:5f:8a:18:88:30:53:cc:e3:
                    99:de:c2:3a:00:47:1f:b0:18:19:dd:02:18:d1:74:
                    21:5c:74:89:8e:38:90:83:53:87:4c:d9:78:66:23:
                    6d:8c:be:95:9c:56:df:72:73:2c:ab:bc:c6:b7:a9:
                    b4:de:1f:d1:10:2b:6b:96:df:b5:a4:8c:f9:43:68:
                    94:30:87:cc:9c:60:ae:6a:dc:fd:24:14:b8:e5:33:
                    8f:04:b6:c0:08:93:ad:a6:6e:98:6c:d0:a5:23:58:
                    40:ae:17:09:b9:e1:97:8b:a6:36:da:18:95:3a:93:
                    0d:6b:71:f9:46:38:56:f9:4d:95:a5:19:de:93:ad:
                    84:04:9b:f9:db:96:47:9b:44:b6:08:11:13:f3:50:
                    eb:fb:44:11:9a:80:08:39:6f:10:71:b3:29:bf:f0:
                    01:45:0d:73:6d:38:43:54:89:f7:76:9f:69:e3:60:
                    26:f5:fa:9b:7f:c8:6f:9c:fb:77:ba:51:ac:ce:85:
                    39:da:04:ee:e3:be:04:c9:19:d3:ab:64:69:f0:ae:
                    22:9f:b4:fa:0c:75:b2:ac:82:ba:05:5c:b9:f0:97:
                    fb:aa:dc:b7:40:44:6d:b2:c8:72:e3:08:be:f3:3f:
                    0f:f2:2b:ab:eb:d4:f9:28:6e:b2:1f:d9:c0:96:92:
                    8d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:A7:BE:7B:67:20:0D:22:3A:E5:A3:F2:C3:3E:58:5D:FC:E4:B5
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:c2:b5:7f:53:4d:91:04:4a:cf:50:9c:e3:71:b1:6f:f6:
         81:31:c9:6a:d7:01:26:20:56:e5:aa:66:9e:05:c9:0b:4d:e2:
         b6:61:c4:f8:45:32:56:b9:d3:59:d7:1b:5b:aa:1a:51:ef:ab:
         35:bd:6d:0b:57:4d:92:e5:5b:6b:24:56:3e:a4:b2:2d:76:5d:
         0c:8d:73:fd:ae:f4:b1:a9:3a:04:82:d8:95:ec:02:7e:4b:d3:
         d7:94:98:83:86:67:d2:74:bf:14:f9:44:d2:b5:17:4d:12:28:
         5b:eb:41:e9:37:05:8e:0c:3e:ca:c2:cb:f1:db:ca:48:bc:3b:
         54:6a:df:14:77:b5:8a:62:1a:55:4b:1f:6a:66:18:31:7d:e8:
         5a:ac:e9:fa:1b:f1:9a:ec:42:69:4b:8c:2e:5b:e6:7e:81:97:
         54:ca:ca:cd:f3:e3:9e:cb:28:d9:f3:84:3d:31:1f:f6:5d:e5:
         86:e3:0d:ca:0b:15:17:45:04:95:13:49:1e:5d:bf:a1:e3:a5:
         36:a5:b9:c5:27:69:bc:ce:10:5c:73:b9:87:f0:10:25:52:34:
         df:c5:60:e6:2f:37:d2:6c:f5:a1:46:ba:89:32:9b:a0:f2:97:
         9c:50:46:12:a2:33:22:de:33:4a:89:55:37:49:dd:ad:3b:f3:
         3e:98:f0:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnzDwxWWXM03RnWkv1qtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmI1M2NhMzA3MDQzNDI3ZWY0ZWFjODljNzdjMWJhMTNm
NmYwMmUwHhcNMjUwOTA3MTAwMDU5WhcNMjUwOTA4MTAwMDU5WjAzMTEwLwYDVQQD
Eyg2YjVjYTdiZTdiNjcyMDBkMjIzYWU1YTNmMmMzM2U1ODVkZmNlNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjUtHVsQX4oYiDBTzOOZ3sI6AEcf
sBgZ3QIY0XQhXHSJjjiQg1OHTNl4ZiNtjL6VnFbfcnMsq7zGt6m03h/RECtrlt+1
pIz5Q2iUMIfMnGCuatz9JBS45TOPBLbACJOtpm6YbNClI1hArhcJueGXi6Y22hiV
OpMNa3H5RjhW+U2VpRnek62EBJv525ZHm0S2CBET81Dr+0QRmoAIOW8QcbMpv/AB
RQ1zbThDVIn3dp9p42Am9fqbf8hvnPt3ulGszoU52gTu474EyRnTq2Rp8K4in7T6
DHWyrIK6BVy58Jf7qty3QERtsshy4wi+8z8P8iur69T5KG6yH9nAlpKNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtcp757ZyANIjrlo/LDPlhd/OS1MB8GA1UdIwQY
MBaAFO1rU8owcENCfvTqyJx3wboT9vAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAt
NmQ2MTVmM2UxNGY1LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAtNmQ2MTVmM2UxNGY1
LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX3CtX9T
TZEESs9QnONxsW/2gTHJatcBJiBW5apmngXJC03itmHE+EUyVrnTWdcbW6oaUe+r
Nb1tC1dNkuVbayRWPqSyLXZdDI1z/a70sak6BILYlewCfkvT15SYg4Zn0nS/FPlE
0rUXTRIoW+tB6TcFjgw+ysLL8dvKSLw7VGrfFHe1imIaVUsfamYYMX3oWqzp+hvx
muxCaUuMLlvmfoGXVMrKzfPjnsso2fOEPTEf9l3lhuMNygsVF0UElRNJHl2/oeOl
NqW5xSdpvM4QXHO5h/AQJVI038Vg5i830mz1oUa6iTKboPKXnFBGEqIzIt4zSolV
N0ndrTvzPpjwqA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:36 2025 by rpki-client