Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          33F+PngeXrVnTtF58cpLBL6QgZMvkaU9OBMUWOomj+k=
Subject key identifier:   A5:01:27:0F:10:EF:F8:B2:BC:1D:6E:9B:20:65:3A:15:9F:5C:B9:A3
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       0198D54E7ADB6D7E19A7B86E5E9C4A77383E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          0346
Signing time:             Sat 23 Aug 2025 05:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:26 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: wrIG8psHncppC8FKaTUKPaD/17lOZS8cXw4upHGdLdM=)
                          2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:7a:db:6d:7e:19:a7:b8:6e:5e:9c:4a:77:38:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Aug 23 05:02:26 2025 GMT
            Not After : Aug 24 05:02:26 2025 GMT
        Subject: CN=a501270f10eff8b2bc1d6e9b20653a159f5cb9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:60:e0:39:9f:55:24:31:02:93:81:2f:ce:
                    ef:ac:c8:8d:de:46:ed:f9:73:60:09:ba:d2:94:f8:
                    c8:96:24:5b:06:4f:e7:d3:f9:47:45:bf:73:25:f7:
                    58:e4:72:c6:7c:5e:7f:35:8a:cb:e8:f2:33:e0:7c:
                    f8:44:4f:37:a8:ed:6e:bf:0b:16:b2:c0:e4:2c:cb:
                    5b:6f:3d:71:14:63:47:7d:7b:bf:cb:50:81:c2:ea:
                    39:eb:ca:09:59:72:99:85:f8:c9:90:73:2e:e9:a7:
                    00:fc:0e:2a:30:c5:c7:12:18:4c:2e:c9:16:25:eb:
                    9d:6f:c9:37:77:81:13:8e:f7:67:4c:d9:fb:96:d5:
                    0d:54:63:60:1d:56:bb:37:85:49:0c:70:9c:68:93:
                    f0:f0:6c:37:27:53:96:30:e4:93:00:a4:dc:39:76:
                    f9:66:3c:e1:5d:9e:6f:8b:46:1d:e9:bb:8d:60:61:
                    9b:58:4e:65:a8:fe:5b:9d:4b:7b:b0:20:48:5c:e6:
                    78:7d:d0:e4:30:42:d6:bd:b0:0b:d6:15:d3:ea:7b:
                    ec:00:13:76:60:fc:b2:42:42:96:2e:8e:4d:96:b5:
                    d1:a9:7f:b9:2d:63:9b:99:ad:a2:a4:20:70:3f:94:
                    74:c0:a4:87:43:f5:2d:58:fa:1c:bc:94:a0:6d:ea:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:27:0F:10:EF:F8:B2:BC:1D:6E:9B:20:65:3A:15:9F:5C:B9:A3
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e5:c0:1a:bd:9b:08:8f:e4:ca:80:60:7d:d3:d7:2c:d9:54:
         59:42:5b:25:8d:6c:87:cb:2d:25:fa:38:ec:f7:75:89:c5:a5:
         31:f0:2b:3e:6e:42:a5:52:97:6e:5c:5f:1b:5d:87:1c:8a:1e:
         2a:8b:45:31:50:dd:95:18:e6:80:29:60:73:f3:61:e6:f6:22:
         0b:b9:d0:12:de:89:51:87:e9:13:b4:90:3c:a7:fd:ee:79:24:
         7d:5a:4a:e5:f3:36:72:1a:64:d3:ce:a3:7d:27:bf:d4:00:9d:
         77:78:2a:5b:0d:20:99:97:02:fd:be:1e:39:20:0a:26:9e:57:
         0f:68:18:c1:e9:77:01:ea:aa:7d:6c:ad:4e:c5:40:7c:d4:15:
         cf:e8:c5:51:d6:13:a9:fc:39:c6:bf:ce:5b:d8:6d:64:66:2c:
         9f:51:26:01:63:af:96:1e:7a:9e:58:7c:c9:aa:cb:ce:d6:01:
         62:2f:1c:3b:79:86:00:c1:49:f6:0c:a3:f4:d4:30:53:d2:85:
         07:db:7a:f1:06:33:87:9a:32:02:47:7f:ce:ae:5e:06:bd:e4:
         c3:0c:65:0b:ed:6d:19:13:03:cb:a2:38:85:d7:5d:61:8d:96:
         84:2d:13:f2:36:a5:8b:1a:e1:a7:49:88:f4:e9:b5:ac:53:72:
         4d:b0:f4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnrbbX4Zp7huXpxKdzg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy
MDUzYjQwHhcNMjUwODIzMDUwMjI2WhcNMjUwODI0MDUwMjI2WjAzMTEwLwYDVQQD
EyhhNTAxMjcwZjEwZWZmOGIyYmMxZDZlOWIyMDY1M2ExNTlmNWNiOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurlg4DmfVSQxApOBL87vrMiN3kbt
+XNgCbrSlPjIliRbBk/n0/lHRb9zJfdY5HLGfF5/NYrL6PIz4Hz4RE83qO1uvwsW
ssDkLMtbbz1xFGNHfXu/y1CBwuo568oJWXKZhfjJkHMu6acA/A4qMMXHEhhMLskW
Jeudb8k3d4ETjvdnTNn7ltUNVGNgHVa7N4VJDHCcaJPw8Gw3J1OWMOSTAKTcOXb5
ZjzhXZ5vi0Yd6buNYGGbWE5lqP5bnUt7sCBIXOZ4fdDkMELWvbAL1hXT6nvsABN2
YPyyQkKWLo5NlrXRqX+5LWObma2ipCBwP5R0wKSHQ/UtWPocvJSgberBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUBJw8Q7/iyvB1umyBlOhWfXLmjMB8GA1UdIwQY
MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt
MzA2MjUzMTc0MzBkLzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk
LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuXAGr2b
CI/kyoBgfdPXLNlUWUJbJY1sh8stJfo47Pd1icWlMfArPm5CpVKXblxfG12HHIoe
KotFMVDdlRjmgClgc/Nh5vYiC7nQEt6JUYfpE7SQPKf97nkkfVpK5fM2chpk086j
fSe/1ACdd3gqWw0gmZcC/b4eOSAKJp5XD2gYwel3AeqqfWytTsVAfNQVz+jFUdYT
qfw5xr/OW9htZGYsn1EmAWOvlh56nlh8yarLztYBYi8cO3mGAMFJ9gyj9NQwU9KF
B9t68QYzh5oyAkd/zq5eBr3kwwxlC+1tGRMDy6I4hdddYY2WhC0T8jalixrhp0mI
9Om1rFNyTbD0Dg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:01 2025 by rpki-client