Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File:                     D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier:          fK2R+onVuzvn/5JeDcNfATrSUM35rpy+maDSdTGQWSQ=
Subject key identifier:   8B:24:5D:8B:08:7F:8C:4D:4C:8D:C2:DC:77:1C:E7:15:6B:90:F1:D8
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer:       /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial:       0197B5C4B8B2E135B82A04F84CF947ECFD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 09:00:57 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:57 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:57 +0000
Files and hashes:         1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: rd6yJIlpYsHfykMXRvHKHeSKV2ml/FYuSk4tExljllU=)
                          2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:b8:b2:e1:35:b8:2a:04:f8:4c:f9:47:ec:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
        Validity
            Not Before: Jun 28 09:00:57 2025 GMT
            Not After : Jun 29 09:00:57 2025 GMT
        Subject: CN=8b245d8b087f8c4d4c8dc2dc771ce7156b90f1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:82:10:a8:80:dc:e7:de:47:40:bd:04:8a:
                    38:70:4e:29:17:f0:9f:4c:54:44:b8:cc:ad:a0:87:
                    28:18:1b:54:22:f4:46:a4:d8:aa:ea:5e:ff:a6:1d:
                    ef:fd:5c:03:ac:4c:b3:36:f7:fd:80:4b:89:49:64:
                    be:24:89:c1:f8:e8:62:5b:02:19:da:25:44:c2:fb:
                    2c:70:9b:33:42:88:34:00:04:2a:fb:80:6f:83:65:
                    db:06:f0:f8:2f:4f:c3:0e:58:84:6e:70:da:f5:97:
                    7e:8f:19:a6:f3:59:4e:c5:4e:11:f3:32:ce:4d:6e:
                    04:88:47:f9:82:59:30:13:1e:12:6f:9b:f5:91:77:
                    70:cb:2e:5e:3f:00:7b:1f:b4:a6:6c:57:0a:7c:a5:
                    c6:69:9b:d9:b4:45:e2:d6:21:06:7c:00:f9:3e:91:
                    83:0a:7f:5c:6a:c3:a6:d4:60:47:59:1a:4f:8b:a3:
                    00:e4:d2:74:cd:b3:21:3f:d7:e8:d7:6d:db:21:83:
                    f7:fe:aa:78:67:7e:e8:74:d1:7e:52:03:6b:23:14:
                    75:ce:48:fe:70:28:bc:4b:e0:a1:dd:84:a5:88:15:
                    35:2a:ef:8e:06:4a:f5:10:d4:45:81:a2:2a:d0:2c:
                    42:32:49:b4:8e:38:b6:0a:05:7e:8d:e5:da:46:b8:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:24:5D:8B:08:7F:8C:4D:4C:8D:C2:DC:77:1C:E7:15:6B:90:F1:D8
            X509v3 Authority Key Identifier:
                keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:aa:67:30:e6:fd:c0:75:81:dd:da:45:9e:86:d2:0b:ac:79:
         14:90:3e:3e:14:6a:e4:c8:70:8b:62:2d:84:9c:90:55:b9:60:
         f0:a0:37:76:eb:7e:24:3b:4f:5e:dd:47:b2:df:73:3c:14:68:
         fd:a8:23:66:ea:02:ac:c4:ec:94:df:9c:b3:3d:dd:4a:94:84:
         0c:4f:4a:c6:ac:dd:62:50:e7:34:f9:d7:5b:37:90:96:2c:b9:
         fd:0a:a8:d3:77:87:8a:0c:dc:b7:44:eb:b1:f0:e7:eb:8e:c1:
         ff:2f:73:6c:f3:1a:6c:b1:f5:d2:6f:5a:76:b6:13:cf:ed:c6:
         6e:68:4a:e0:8a:1a:2b:e6:6d:30:83:51:2b:18:b6:da:33:49:
         8a:d7:d3:64:a5:14:df:0b:19:5d:63:54:d5:ae:1b:cb:74:8f:
         bc:af:4c:a4:a3:63:83:1f:87:59:62:58:90:35:e6:02:35:78:
         94:43:48:fd:de:86:7e:c2:2a:d6:ce:c3:e5:26:ee:13:fd:4a:
         15:64:3b:e0:cd:1c:23:cc:d8:bc:48:ec:1c:b1:c4:12:28:13:
         46:de:1c:2c:28:8c:64:e1:44:62:fd:ed:65:48:44:c4:bc:d8:
         08:cf:65:4f:b8:b2:4f:52:0b:a3:d3:27:74:54:fb:db:64:d6:
         90:69:f0:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xLiy4TW4KgT4TPlH7P2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjhlOTNmMzQ3MmVhNmJlNThmM2ZlYjc0NDk1NDcwMDk1
YTE3N2QwHhcNMjUwNjI4MDkwMDU3WhcNMjUwNjI5MDkwMDU3WjAzMTEwLwYDVQQD
Eyg4YjI0NWQ4YjA4N2Y4YzRkNGM4ZGMyZGM3NzFjZTcxNTZiOTBmMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7+CEKiA3OfeR0C9BIo4cE4pF/Cf
TFREuMytoIcoGBtUIvRGpNiq6l7/ph3v/VwDrEyzNvf9gEuJSWS+JInB+OhiWwIZ
2iVEwvsscJszQog0AAQq+4Bvg2XbBvD4L0/DDliEbnDa9Zd+jxmm81lOxU4R8zLO
TW4EiEf5glkwEx4Sb5v1kXdwyy5ePwB7H7SmbFcKfKXGaZvZtEXi1iEGfAD5PpGD
Cn9casOm1GBHWRpPi6MA5NJ0zbMhP9fo123bIYP3/qp4Z37odNF+UgNrIxR1zkj+
cCi8S+Ch3YSliBU1Ku+OBkr1ENRFgaIq0CxCMkm0jji2CgV+jeXaRrgxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIskXYsIf4xNTI3C3Hcc5xVrkPHYMB8GA1UdIwQY
MBaAFA/46T80cupr5Y8/63RJVHAJWhd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYt
ZmNlM2Q1OTBjNmRiLzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YjkzYTQtODY4ZC00ZjMwLWI0NGYtZmNlM2Q1OTBjNmRi
LzEvRF9qcFB6Unk2bXZsanpfcmRFbFVjQWxhRjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKpnMOb9
wHWB3dpFnobSC6x5FJA+PhRq5Mhwi2IthJyQVblg8KA3dut+JDtPXt1Hst9zPBRo
/agjZuoCrMTslN+csz3dSpSEDE9KxqzdYlDnNPnXWzeQliy5/Qqo03eHigzct0Tr
sfDn647B/y9zbPMabLH10m9adrYTz+3GbmhK4IoaK+ZtMINRKxi22jNJitfTZKUU
3wsZXWNU1a4by3SPvK9MpKNjgx+HWWJYkDXmAjV4lENI/d6GfsIq1s7D5SbuE/1K
FWQ74M0cI8zYvEjsHLHEEigTRt4cLCiMZOFEYv3tZUhExLzYCM9lT7iyT1ILo9Mn
dFT722TWkGnwRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:37 2025 by rpki-client