Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File:                     0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier:          xlDADfOdj3yhyffe34sboVKOB8kCSEc9R57OYmyE/0k=
Subject key identifier:   82:44:24:90:23:67:52:3F:AE:8D:ED:B5:63:3B:F9:AE:E0:40:C7:76
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer:       /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial:       0198D5BBC66AF791BF85A3A607AFB78C0D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 07:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:49 +0000
Files and hashes:         1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: Y8ETcBxUaGbL316Jo2qHJDlBKKzCqWQc6SSh8yioMaM=)
                          2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c6:6a:f7:91:bf:85:a3:a6:07:af:b7:8c:0d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
        Validity
            Not Before: Aug 23 07:01:49 2025 GMT
            Not After : Aug 24 07:01:49 2025 GMT
        Subject: CN=824424902367523fae8dedb5633bf9aee040c776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:7d:4a:9a:bb:0c:87:06:fc:57:7f:de:94:
                    c8:4e:8e:43:d2:73:9e:61:c5:ce:ba:4d:70:1e:5d:
                    68:5d:ba:70:af:ec:72:3b:99:ac:96:ce:4e:83:7f:
                    7d:de:13:ac:f5:f4:6e:26:a6:14:5e:5b:3a:ba:f0:
                    99:0b:50:6d:6a:fe:a1:12:64:49:d6:32:5c:e8:df:
                    82:ae:e7:22:fd:58:6d:5f:5a:ec:64:71:f5:a7:e1:
                    d8:2d:83:11:8b:82:b7:dd:de:b7:1e:d4:03:81:c4:
                    e7:5e:48:f5:b2:05:6d:aa:62:23:75:a3:09:fd:9f:
                    36:43:28:2a:99:77:50:9f:44:1e:cb:e2:34:81:3c:
                    7f:90:ac:c0:a4:6a:05:9a:fe:e6:d6:64:13:bf:ca:
                    c2:9d:c7:23:20:97:2f:b2:d1:8c:83:6d:d4:44:18:
                    73:25:8e:94:48:55:d9:b4:78:ef:a1:0e:ac:75:3a:
                    17:85:b5:7e:40:2d:62:46:23:90:43:06:f6:93:d8:
                    05:6e:c1:77:f9:c7:6b:56:df:d6:71:d4:fd:78:be:
                    1a:0b:91:89:f8:d8:5a:a9:f4:2a:33:7f:9c:bc:4e:
                    a4:a1:47:da:ee:6a:30:8d:84:c4:ed:de:40:64:b9:
                    9e:c3:00:2b:89:a8:92:9d:ca:bc:57:ee:09:b7:2d:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:44:24:90:23:67:52:3F:AE:8D:ED:B5:63:3B:F9:AE:E0:40:C7:76
            X509v3 Authority Key Identifier:
                keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:16:0a:1a:00:a2:a5:17:4d:01:f0:62:16:a4:ae:3d:9a:
         1a:0e:6e:2a:30:2e:e0:7f:ad:02:b8:84:a5:46:67:d4:13:3c:
         de:b1:bd:bc:6c:1f:6b:c5:ee:2b:36:92:f6:bf:1a:4f:42:90:
         c3:0e:e8:fe:ad:f9:21:27:47:1c:fa:f7:c6:c1:a1:45:46:a4:
         c9:b5:4d:c2:6f:8b:4f:7a:cf:b0:f6:d2:f8:cb:8c:f9:6a:17:
         3b:8e:f4:6b:fd:bf:86:43:62:6c:2c:0b:f7:bd:f6:bf:ef:05:
         c4:c1:73:6b:d9:be:64:4d:c4:7c:50:82:07:fc:5c:6f:0d:d7:
         f4:78:26:4e:c2:0d:e2:4a:aa:ed:84:51:14:25:04:48:4f:79:
         be:4d:a9:99:9c:40:67:ee:cf:f2:71:ee:0d:f0:9d:72:cc:a1:
         00:c8:2e:80:ce:77:d7:46:29:d3:4f:6a:f4:f4:83:a3:39:58:
         c1:c2:b3:4d:27:f8:16:90:98:48:d5:bb:66:a7:5b:c0:1f:d7:
         13:79:3a:6c:63:4e:58:c1:f8:73:71:74:a7:e0:e2:5d:3a:94:
         13:68:c0:92:02:f0:9b:db:ff:2a:30:cf:0c:40:7f:e3:03:bb:
         1d:45:f8:74:58:d7:0a:2b:39:7b:4d:b6:39:ba:d5:79:8e:06:
         b7:b3:e1:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8Zq95G/haOmB6+3jA19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzI2N2JmMjNiMjk3MWE0Nzk1YTgzZWY4NDc4YTgyMWJh
ZmIxZGIwHhcNMjUwODIzMDcwMTQ5WhcNMjUwODI0MDcwMTQ5WjAzMTEwLwYDVQQD
Eyg4MjQ0MjQ5MDIzNjc1MjNmYWU4ZGVkYjU2MzNiZjlhZWUwNDBjNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvul9Spq7DIcG/Fd/3pTITo5D0nOe
YcXOuk1wHl1oXbpwr+xyO5msls5Og3993hOs9fRuJqYUXls6uvCZC1Btav6hEmRJ
1jJc6N+Cruci/VhtX1rsZHH1p+HYLYMRi4K33d63HtQDgcTnXkj1sgVtqmIjdaMJ
/Z82QygqmXdQn0Qey+I0gTx/kKzApGoFmv7m1mQTv8rCnccjIJcvstGMg23URBhz
JY6USFXZtHjvoQ6sdToXhbV+QC1iRiOQQwb2k9gFbsF3+cdrVt/WcdT9eL4aC5GJ
+NhaqfQqM3+cvE6koUfa7mowjYTE7d5AZLmewwAriaiSncq8V+4Jty1mzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJEJJAjZ1I/ro3ttWM7+a7gQMd2MB8GA1UdIwQY
MBaAFNByZ78jspcaR5WoPvhHioIbr7HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQt
ZjQ2NzNiYTUyYzAwLzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQtZjQ2NzNiYTUyYzAw
LzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOcWChoA
oqUXTQHwYhakrj2aGg5uKjAu4H+tAriEpUZn1BM83rG9vGwfa8XuKzaS9r8aT0KQ
ww7o/q35ISdHHPr3xsGhRUakybVNwm+LT3rPsPbS+MuM+WoXO470a/2/hkNibCwL
9732v+8FxMFza9m+ZE3EfFCCB/xcbw3X9HgmTsIN4kqq7YRRFCUESE95vk2pmZxA
Z+7P8nHuDfCdcsyhAMgugM5310Yp009q9PSDozlYwcKzTSf4FpCYSNW7ZqdbwB/X
E3k6bGNOWMH4c3F0p+DiXTqUE2jAkgLwm9v/KjDPDEB/4wO7HUX4dFjXCis5e022
ObrVeY4Gt7Ph8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:41 2025 by rpki-client