Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File:                     V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier:          Za5ef2IZwNm0Xo1eeXDWaiHFNeYMm/uVhPrmhDL4sK0=
Subject key identifier:   0C:E2:24:DD:D2:DD:A4:46:6C:4A:9E:C1:14:B0:F0:BE:B2:24:EE:8F
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer:       /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial:       019922559185E705ED93C050AA42287EC674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number:          0ECC
Signing time:             Sun 07 Sep 2025 04:00:57 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:57 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:57 +0000
Files and hashes:         1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: x87YAkdu7odgv03czMGMvbOti5/7h/8ugLV4jheq52Q=)
                          2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:91:85:e7:05:ed:93:c0:50:aa:42:28:7e:c6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
        Validity
            Not Before: Sep  7 04:00:57 2025 GMT
            Not After : Sep  8 04:00:57 2025 GMT
        Subject: CN=0ce224ddd2dda4466c4a9ec114b0f0beb224ee8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:9b:24:42:50:ed:82:31:a2:cc:80:c5:a3:
                    13:64:80:90:9d:9b:9c:96:ab:f7:44:b1:9a:c2:8c:
                    8a:e1:5e:2e:22:52:a4:7d:33:9f:28:ac:01:7d:19:
                    21:5a:2b:d9:d8:d5:51:1f:be:7a:5c:be:50:e4:4a:
                    87:75:35:f3:bb:ee:23:51:7f:9f:f1:68:a9:24:82:
                    f0:fe:aa:fe:aa:53:9f:54:e3:c9:85:9a:16:5a:af:
                    47:a4:75:63:d4:32:a2:94:8f:fb:30:f6:df:e6:6d:
                    9d:bf:e5:73:62:8a:81:77:65:0f:72:dd:69:d4:02:
                    27:c4:9d:43:1a:2b:bb:e6:bc:55:54:81:8e:0d:ba:
                    5b:3a:2c:a6:cc:e9:6f:c5:69:65:52:28:12:1d:48:
                    ba:2c:8f:e8:8e:a4:d0:dc:6f:8b:35:d3:fd:9f:14:
                    0c:1f:b0:05:02:44:c5:34:e6:e9:98:eb:fa:87:d3:
                    e9:87:7f:1a:46:4a:3e:12:7b:ef:de:08:40:16:d8:
                    3c:3d:a8:8a:8e:01:9d:98:cf:ad:10:0f:73:49:9c:
                    b5:79:91:dd:fd:81:fd:fe:33:34:39:4f:5b:70:bb:
                    bc:03:70:f6:ba:65:c5:12:0c:2c:2c:ac:0b:d6:2e:
                    b9:34:0a:67:08:0c:44:db:11:b4:3d:eb:f6:b5:d3:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E2:24:DD:D2:DD:A4:46:6C:4A:9E:C1:14:B0:F0:BE:B2:24:EE:8F
            X509v3 Authority Key Identifier:
                keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:29:5f:e6:af:26:ff:9b:69:a7:e4:93:8f:90:56:c7:76:2d:
         20:dd:f2:72:c1:1c:39:c7:38:b5:99:dc:86:99:39:a7:a6:e2:
         d5:e3:d3:47:b8:1d:05:0f:ad:a4:8e:5b:50:72:08:0f:4b:9d:
         60:39:2c:e0:53:d2:e4:a2:20:7d:e7:f7:d4:bb:3d:4d:9e:8d:
         0b:c1:3f:11:a4:0d:1f:2d:09:c2:95:8c:de:59:d5:44:23:af:
         9f:26:71:ae:13:66:1f:f4:f2:4d:19:56:1a:5c:7a:b1:4d:71:
         74:82:de:53:64:f7:a7:93:25:75:06:d4:58:45:36:1d:81:7c:
         38:c5:30:36:a8:f3:61:68:b6:9b:6a:5b:3a:31:3f:4b:f1:d9:
         18:45:11:fa:09:2d:95:ce:b3:33:18:c4:3a:d6:94:a3:0e:09:
         c8:ab:d8:e7:91:b7:ae:c6:0a:66:8b:70:f3:31:da:f8:0c:f6:
         9c:77:20:c0:e9:20:1d:e6:b0:da:44:bf:d1:24:f1:1e:74:45:
         dd:a2:73:6d:aa:93:a6:98:2a:3e:ef:49:90:31:fb:41:ba:be:
         e2:a7:a1:3d:bc:bd:be:32:1a:7b:c7:b8:df:a0:0a:0f:8c:e6:
         d1:da:62:72:7f:ed:16:9b:2b:30:6c:7c:59:d9:b1:b3:9f:37:
         6e:10:a3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVZGF5wXtk8BQqkIofsZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YjBkNjdjNDllYzEyZjRmNTQxNzAzOGY2ZGMxM2MyZjkz
ZWE3NjUwHhcNMjUwOTA3MDQwMDU3WhcNMjUwOTA4MDQwMDU3WjAzMTEwLwYDVQQD
EygwY2UyMjRkZGQyZGRhNDQ2NmM0YTllYzExNGIwZjBiZWIyMjRlZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxGbJEJQ7YIxosyAxaMTZICQnZuc
lqv3RLGawoyK4V4uIlKkfTOfKKwBfRkhWivZ2NVRH756XL5Q5EqHdTXzu+4jUX+f
8WipJILw/qr+qlOfVOPJhZoWWq9HpHVj1DKilI/7MPbf5m2dv+VzYoqBd2UPct1p
1AInxJ1DGiu75rxVVIGODbpbOiymzOlvxWllUigSHUi6LI/ojqTQ3G+LNdP9nxQM
H7AFAkTFNObpmOv6h9Pph38aRko+Envv3ghAFtg8PaiKjgGdmM+tEA9zSZy1eZHd
/YH9/jM0OU9bcLu8A3D2umXFEgwsLKwL1i65NApnCAxE2xG0Pev2tdN1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAziJN3S3aRGbEqewRSw8L6yJO6PMB8GA1UdIwQY
MBaAFFew1nxJ7BL09UFwOPbcE8L5PqdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzkt
YzNhODM3NWY5MGY5LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzktYzNhODM3NWY5MGY5
LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSlf5q8m
/5tpp+STj5BWx3YtIN3ycsEcOcc4tZnchpk5p6bi1ePTR7gdBQ+tpI5bUHIID0ud
YDks4FPS5KIgfef31Ls9TZ6NC8E/EaQNHy0JwpWM3lnVRCOvnyZxrhNmH/TyTRlW
Glx6sU1xdILeU2T3p5MldQbUWEU2HYF8OMUwNqjzYWi2m2pbOjE/S/HZGEUR+gkt
lc6zMxjEOtaUow4JyKvY55G3rsYKZotw8zHa+Az2nHcgwOkgHeaw2kS/0STxHnRF
3aJzbaqTppgqPu9JkDH7Qbq+4qehPby9vjIae8e436AKD4zm0dpicn/tFpsrMGx8
Wdmxs583bhCjyQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:44 2025 by rpki-client