Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          iD0tIqExlsyHZC8X8nbMxzpt8ZEwtjpothDWUdNJPsU=
Subject key identifier:   39:7F:74:E3:51:08:FE:21:33:85:19:F0:E9:65:CD:01:E5:54:16:01
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       0198D5F12B2267C243C58117C90A27D4C0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          0D2F
Signing time:             Sat 23 Aug 2025 08:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:08 +0000
Files and hashes:         1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: QqHO80jsXPLvYsz9Vk5h83okj6ptDbpBwovFW9CaJWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:2b:22:67:c2:43:c5:81:17:c9:0a:27:d4:c0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Aug 23 08:00:08 2025 GMT
            Not After : Aug 24 08:00:08 2025 GMT
        Subject: CN=397f74e35108fe21338519f0e965cd01e5541601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:49:58:dd:bf:22:eb:4f:79:e4:07:93:07:
                    4d:71:1c:83:2a:81:2d:db:84:2a:db:d8:05:da:13:
                    ed:5a:89:83:c3:16:73:cc:02:a8:78:7c:74:8c:3f:
                    81:6b:69:d1:94:08:fa:7a:a1:66:e5:ee:13:df:2e:
                    65:cb:ab:b0:a0:65:64:ee:29:db:e9:99:8c:c4:4b:
                    dc:2b:db:c6:cc:de:84:27:df:27:74:8e:02:07:14:
                    00:53:e4:14:0c:49:cc:3a:27:f9:c8:4a:95:d2:98:
                    d6:26:4b:5b:cb:9b:44:89:b3:84:6a:9b:60:e4:c6:
                    f0:c9:13:45:31:9f:ac:59:55:d3:9c:75:67:33:5c:
                    de:73:46:b3:35:78:00:d2:8e:33:a3:b9:e1:ca:7b:
                    b4:7f:aa:99:21:4a:ca:6d:8b:6f:6f:d4:6a:59:ed:
                    b0:02:5d:b3:9a:7f:05:b0:bc:de:01:ee:c7:b5:e7:
                    4b:69:f6:07:29:74:48:09:9f:22:f3:0e:36:71:75:
                    a0:93:c4:d3:b7:2a:85:03:6d:34:f9:43:86:90:ea:
                    fa:55:8b:4c:d9:39:bd:b9:7a:1a:b5:79:1b:c7:2e:
                    a6:a5:94:3a:df:ef:7d:4d:f6:91:5d:bc:d0:31:bc:
                    c9:d7:fd:a4:49:b4:7b:1b:e2:c4:29:ee:53:2f:3f:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:74:E3:51:08:FE:21:33:85:19:F0:E9:65:CD:01:E5:54:16:01
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:81:ef:f9:94:f2:95:70:83:a4:28:61:8d:e6:a8:e9:14:9e:
         05:36:a1:20:e0:cf:af:2d:99:e8:ca:f1:9b:46:d9:db:e3:91:
         a0:bc:35:36:9b:be:3e:18:5f:47:f8:57:25:9e:ea:a6:5a:45:
         c4:89:51:6e:a2:3d:04:fc:64:4a:c8:bd:ec:9f:f5:bd:bd:61:
         fb:c2:0e:e4:57:59:f7:1b:02:59:04:be:b9:17:d3:32:d3:5b:
         38:62:66:86:2a:fa:03:17:59:ca:e7:25:ce:80:a1:25:96:33:
         b8:e8:6d:8d:f7:6f:5d:e4:46:c6:72:08:f5:fd:9a:ba:ac:d0:
         80:ee:b2:09:f4:ec:70:eb:63:5b:85:23:30:17:80:65:7e:aa:
         0d:a6:0c:a5:fd:5b:6a:bb:78:18:29:c8:d1:5b:fb:20:08:1f:
         6a:a7:78:4c:67:09:72:e6:e6:ea:7b:de:95:11:27:13:cb:24:
         e0:85:67:44:e7:da:ba:e3:6c:38:aa:aa:56:1a:f4:2c:5e:ef:
         ee:95:66:c1:a4:d5:71:83:74:c5:12:af:8b:9b:05:65:c2:7c:
         af:01:c1:70:9f:d4:5c:b0:78:ed:d7:d5:bf:1f:8d:d9:ad:5c:
         93:05:7f:41:0e:39:9f:8f:d9:69:eb:98:1c:e5:98:27:3f:41:
         41:c1:18:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8SsiZ8JDxYEXyQon1MC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk
NmNlZTEwHhcNMjUwODIzMDgwMDA4WhcNMjUwODI0MDgwMDA4WjAzMTEwLwYDVQQD
EygzOTdmNzRlMzUxMDhmZTIxMzM4NTE5ZjBlOTY1Y2QwMWU1NTQxNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3NJWN2/IutPeeQHkwdNcRyDKoEt
24Qq29gF2hPtWomDwxZzzAKoeHx0jD+Ba2nRlAj6eqFm5e4T3y5ly6uwoGVk7inb
6ZmMxEvcK9vGzN6EJ98ndI4CBxQAU+QUDEnMOif5yEqV0pjWJktby5tEibOEaptg
5MbwyRNFMZ+sWVXTnHVnM1zec0azNXgA0o4zo7nhynu0f6qZIUrKbYtvb9RqWe2w
Al2zmn8FsLzeAe7HtedLafYHKXRICZ8i8w42cXWgk8TTtyqFA200+UOGkOr6VYtM
2Tm9uXoatXkbxy6mpZQ63+99TfaRXbzQMbzJ1/2kSbR7G+LEKe5TLz/10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDl/dONRCP4hM4UZ8OllzQHlVBYBMB8GA1UdIwQY
MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt
ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5
LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYHv+ZTy
lXCDpChhjeao6RSeBTahIODPry2Z6Mrxm0bZ2+ORoLw1Npu+PhhfR/hXJZ7qplpF
xIlRbqI9BPxkSsi97J/1vb1h+8IO5FdZ9xsCWQS+uRfTMtNbOGJmhir6AxdZyucl
zoChJZYzuOhtjfdvXeRGxnII9f2auqzQgO6yCfTscOtjW4UjMBeAZX6qDaYMpf1b
art4GCnI0Vv7IAgfaqd4TGcJcubm6nvelREnE8sk4IVnROfauuNsOKqqVhr0LF7v
7pVmwaTVcYN0xRKvi5sFZcJ8rwHBcJ/UXLB47dfVvx+N2a1ckwV/QQ45n4/ZaeuY
HOWYJz9BQcEY9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:03 2025 by rpki-client