Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File:                     dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier:          Ku8M6Kk4P2qsACCExcFrEMr1hwtepjnSO+jyWMSDElA=
Subject key identifier:   A2:74:F7:DA:3A:97:60:F9:D5:A1:16:C5:33:A5:31:B4:99:F9:33:38
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer:       /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial:       0198D65EF95831035F7041187A7DB46904F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number:          10F1
Signing time:             Sat 23 Aug 2025 10:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:05 +0000
Files and hashes:         1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: bsYV++Ro7Sl/4FJdlvriPTTLi2wNE0zAYW4EiifrO3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5e:f9:58:31:03:5f:70:41:18:7a:7d:b4:69:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
        Validity
            Not Before: Aug 23 10:00:05 2025 GMT
            Not After : Aug 24 10:00:05 2025 GMT
        Subject: CN=a274f7da3a9760f9d5a116c533a531b499f93338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:12:bb:e2:44:f6:f4:f2:c0:ef:af:5d:f8:
                    60:81:e5:a2:86:19:71:9d:b4:ff:63:27:01:29:4e:
                    fb:51:97:06:85:7a:b0:2f:1d:9f:7c:ac:91:79:c1:
                    c5:fd:16:26:ed:c7:a2:5b:5d:16:f0:7f:c8:c1:5e:
                    2f:40:31:af:21:34:13:19:fa:da:a0:95:42:2d:d4:
                    24:a1:0d:cb:3f:67:f7:f1:23:5d:27:d2:c5:cc:a7:
                    7d:20:38:77:58:7b:da:c3:34:cd:26:4a:64:ee:9b:
                    53:d9:99:2f:08:02:ba:0d:6f:c8:96:d8:b9:fc:d0:
                    cf:4e:f3:aa:d8:11:80:77:a2:ea:ec:c4:f2:db:1e:
                    32:15:8d:47:2a:db:70:96:d0:2b:64:5b:30:d9:08:
                    1b:d8:73:58:1a:e3:f1:21:6e:6b:8b:36:0b:f0:aa:
                    42:e7:00:63:12:c7:8f:38:d8:eb:ec:3a:c2:bc:62:
                    d8:a1:2d:42:1a:d9:cb:65:c8:45:ce:93:08:31:88:
                    75:24:7f:83:66:fa:32:dc:e4:8a:81:71:e6:c6:ef:
                    ca:bf:98:fa:10:9f:91:cc:25:a8:03:6d:55:41:61:
                    ea:89:91:40:b5:17:3f:8d:26:2c:1e:fb:da:f0:a1:
                    c4:1d:63:7a:72:8e:09:47:b9:0a:6c:f4:12:67:5e:
                    04:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:F7:DA:3A:97:60:F9:D5:A1:16:C5:33:A5:31:B4:99:F9:33:38
            X509v3 Authority Key Identifier:
                keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:43:b9:d7:d5:6f:7b:9f:78:62:b5:e4:01:96:d2:c0:09:
         e9:f8:33:ed:34:34:53:63:46:c4:9c:61:4c:be:94:2c:c3:d6:
         be:f6:c4:54:4c:ec:53:80:e7:1d:b6:ad:3d:79:41:42:f2:eb:
         ca:30:c2:4c:c1:53:bc:a6:ad:37:32:5c:d5:49:f1:0a:4d:28:
         7e:2c:e9:23:13:e8:9b:b1:b7:bb:9d:5a:1e:0b:fb:94:aa:7c:
         92:13:5b:be:7b:03:0b:6f:44:08:c3:e2:82:43:6d:fd:66:86:
         60:da:0c:12:3b:1e:91:7d:ab:c8:7d:2b:8d:e5:37:4e:c7:ee:
         2a:0f:50:81:48:ad:16:d8:89:d0:28:e3:6e:d2:a5:ed:8c:d9:
         f5:ec:e0:2c:bd:9e:9b:1a:56:5a:06:8b:a7:a8:6f:63:02:6a:
         1a:85:46:5f:a3:19:f4:e2:5c:65:67:f6:f6:5f:80:c7:3a:34:
         c8:4d:1d:20:90:2c:98:f2:74:92:bc:f8:5d:e2:60:97:7e:31:
         bf:b5:44:77:d5:1c:55:2d:04:2b:10:c0:d8:42:c5:85:77:96:
         6d:9a:ca:4f:6d:4b:42:d0:c2:d8:02:71:39:2a:e8:5b:46:39:
         51:af:1d:10:d0:ac:c7:c8:b4:70:48:e1:74:bf:70:d2:6f:5c:
         c2:4a:6e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXvlYMQNfcEEYen20aQTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM3MmZlY2U5YmEzOTY2ZTE1ZTgwNTVjMDU4N2M1MDNj
MDM5YWIwHhcNMjUwODIzMTAwMDA1WhcNMjUwODI0MTAwMDA1WjAzMTEwLwYDVQQD
EyhhMjc0ZjdkYTNhOTc2MGY5ZDVhMTE2YzUzM2E1MzFiNDk5ZjkzMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYSu+JE9vTywO+vXfhggeWihhlx
nbT/YycBKU77UZcGhXqwLx2ffKyRecHF/RYm7ceiW10W8H/IwV4vQDGvITQTGfra
oJVCLdQkoQ3LP2f38SNdJ9LFzKd9IDh3WHvawzTNJkpk7ptT2ZkvCAK6DW/Ilti5
/NDPTvOq2BGAd6Lq7MTy2x4yFY1HKttwltArZFsw2Qgb2HNYGuPxIW5rizYL8KpC
5wBjEsePONjr7DrCvGLYoS1CGtnLZchFzpMIMYh1JH+DZvoy3OSKgXHmxu/Kv5j6
EJ+RzCWoA21VQWHqiZFAtRc/jSYsHvva8KHEHWN6co4JR7kKbPQSZ14ELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ099o6l2D51aEWxTOlMbSZ+TM4MB8GA1UdIwQY
MBaAFHRjcv7Om6OWbhXoBVwFh8UDwDmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zY2JiMWItNjkyNy00NWM5LWIxZDQt
MWQ3ZDU1YjIyY2M5LzEvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zY2JiMWItNjkyNy00NWM5LWIxZDQtMWQ3ZDU1YjIyY2M5
LzEvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs9DudfV
b3ufeGK15AGW0sAJ6fgz7TQ0U2NGxJxhTL6ULMPWvvbEVEzsU4DnHbatPXlBQvLr
yjDCTMFTvKatNzJc1UnxCk0ofizpIxPom7G3u51aHgv7lKp8khNbvnsDC29ECMPi
gkNt/WaGYNoMEjsekX2ryH0rjeU3TsfuKg9QgUitFtiJ0CjjbtKl7YzZ9ezgLL2e
mxpWWgaLp6hvYwJqGoVGX6MZ9OJcZWf29l+Axzo0yE0dIJAsmPJ0krz4XeJgl34x
v7VEd9UcVS0EKxDA2ELFhXeWbZrKT21LQtDC2AJxOSroW0Y5Ua8dENCsx8i0cEjh
dL9w0m9cwkpunA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:59 2025 by rpki-client