Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier:          uarmHR0yqvLFobCE2DBxlkpn5V49eEcaqHDVR/TVGdw=
Subject key identifier:   CE:0E:86:64:BF:C8:68:4A:81:D1:08:E2:4E:F8:23:9B:BC:59:07:CB
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       0198E89E68D235944843B8ACA0DAD82394C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number:          0A61
Signing time:             Tue 26 Aug 2025 23:02:32 +0000
Manifest this update:     Tue 26 Aug 2025 23:02:32 +0000
Manifest next update:     Wed 27 Aug 2025 23:02:32 +0000
Files and hashes:         1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: 6USfFcd7JQYeY4Y3EfdNr9TSjyJx4w57PskKQjVtbLA=)
                          2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Aug 2025 23:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:e8:9e:68:d2:35:94:48:43:b8:ac:a0:da:d8:23:94:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Aug 26 23:02:32 2025 GMT
            Not After : Aug 27 23:02:32 2025 GMT
        Subject: CN=ce0e8664bfc8684a81d108e24ef8239bbc5907cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:8c:32:4d:7e:2f:26:06:1c:55:76:3f:45:
                    64:0c:65:a0:89:0e:30:53:74:0d:8b:20:67:7a:4f:
                    dd:fe:2a:7b:8c:d9:ff:08:1a:9c:43:92:a9:42:dd:
                    e6:c2:6c:0d:1c:0f:d8:7d:b2:ae:ba:ae:98:b8:e1:
                    af:9d:cc:72:d1:9a:11:da:51:de:88:6b:a5:9d:00:
                    96:27:98:8f:38:6f:ae:11:11:07:2b:5d:0b:b2:7c:
                    6a:88:88:21:6f:47:6d:92:68:21:60:54:f7:fe:83:
                    80:f4:33:77:6d:a9:be:d1:22:bc:fe:21:77:4b:a4:
                    02:6d:dc:ba:d4:5a:cc:a8:b2:7f:bb:16:e2:7f:c6:
                    47:5b:7a:be:00:ab:79:2a:49:8f:e9:05:b3:74:78:
                    55:53:99:fe:1a:3e:78:00:d7:4f:b7:88:a9:69:56:
                    bb:9d:24:e4:13:79:5f:83:7b:af:cd:f9:13:d6:34:
                    85:ff:c3:a8:3c:cf:0b:0a:bb:1e:b8:dc:fa:33:84:
                    8a:f3:e5:d0:9c:72:a6:9e:7f:2b:bb:32:10:6b:d3:
                    a3:5f:93:2c:42:9d:89:2f:15:20:ee:46:20:bf:87:
                    af:62:06:e7:72:7b:a9:30:8e:0f:99:41:70:3d:66:
                    87:b1:84:d9:19:f1:7a:98:ce:27:91:ee:99:36:2e:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:86:64:BF:C8:68:4A:81:D1:08:E2:4E:F8:23:9B:BC:59:07:CB
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:27:49:83:d4:0c:b8:f8:55:89:b3:3f:40:a2:ab:b5:7f:
         60:ef:3b:d8:48:33:63:ab:fb:e8:bf:b3:bb:ea:cf:4b:5b:a9:
         3c:d2:1e:8e:24:95:63:65:da:07:cf:ca:f4:de:68:57:6e:e6:
         60:3a:12:60:51:b2:6d:41:8c:b5:5e:89:93:08:d2:05:13:e7:
         2b:53:93:cd:8c:ca:ae:f9:e3:f9:a6:aa:2e:7f:9d:19:7d:62:
         4a:d0:57:a2:d0:35:b4:af:fa:bc:3b:97:67:f4:92:83:f2:ee:
         a4:cb:57:36:8d:67:87:a3:4b:5c:7a:fd:a8:00:52:0c:f6:eb:
         d1:57:08:4f:b9:9a:d4:88:40:c8:68:f6:19:74:94:87:7d:27:
         d4:19:73:80:ad:5d:54:f1:db:b1:f7:08:55:f9:12:3c:1a:2f:
         df:68:77:4b:98:8f:4c:f0:0b:14:4d:c3:b7:d2:16:63:88:9a:
         e5:79:73:11:e6:f4:1f:52:d7:49:8e:1c:67:38:28:1d:47:b3:
         5c:97:80:cd:d4:02:07:42:63:a3:b7:fe:e5:ac:d0:da:d9:72:
         6b:bc:21:4c:3c:3b:55:53:5a:1e:28:29:e0:06:b7:31:5c:ad:
         0f:2b:4a:ae:36:3f:fa:d1:c6:5c:5b:b6:88:73:94:f5:52:4f:
         2a:47:e8:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjonmjSNZRIQ7isoNrYI5TGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm
ZThlYWEwHhcNMjUwODI2MjMwMjMyWhcNMjUwODI3MjMwMjMyWjAzMTEwLwYDVQQD
EyhjZTBlODY2NGJmYzg2ODRhODFkMTA4ZTI0ZWY4MjM5YmJjNTkwN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TmMMk1+LyYGHFV2P0VkDGWgiQ4w
U3QNiyBnek/d/ip7jNn/CBqcQ5KpQt3mwmwNHA/YfbKuuq6YuOGvncxy0ZoR2lHe
iGulnQCWJ5iPOG+uEREHK10LsnxqiIghb0dtkmghYFT3/oOA9DN3bam+0SK8/iF3
S6QCbdy61FrMqLJ/uxbif8ZHW3q+AKt5KkmP6QWzdHhVU5n+Gj54ANdPt4ipaVa7
nSTkE3lfg3uvzfkT1jSF/8OoPM8LCrseuNz6M4SK8+XQnHKmnn8ruzIQa9OjX5Ms
Qp2JLxUg7kYgv4evYgbncnupMI4PmUFwPWaHsYTZGfF6mM4nke6ZNi7wDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4OhmS/yGhKgdEI4k74I5u8WQfLMB8GA1UdIwQY
MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt
Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj
LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDwnSYPU
DLj4VYmzP0Ciq7V/YO872EgzY6v76L+zu+rPS1upPNIejiSVY2XaB8/K9N5oV27m
YDoSYFGybUGMtV6JkwjSBRPnK1OTzYzKrvnj+aaqLn+dGX1iStBXotA1tK/6vDuX
Z/SSg/LupMtXNo1nh6NLXHr9qABSDPbr0VcIT7ma1IhAyGj2GXSUh30n1BlzgK1d
VPHbsfcIVfkSPBov32h3S5iPTPALFE3Dt9IWY4ia5XlzEeb0H1LXSY4cZzgoHUez
XJeAzdQCB0Jjo7f+5azQ2tlya7whTDw7VVNaHigp4Aa3MVytDytKrjY/+tHGXFu2
iHOU9VJPKkfong==
-----END CERTIFICATE-----
Generated at Wed Aug 27 02:06:43 2025 by rpki-client