Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          qrBzPt8GwntJqYk9XdsouFSLeuBXfQdM5CzfHMkBmHg=
Subject key identifier:   B0:04:8E:01:FA:1E:7B:62:1E:79:77:EF:E9:F4:0C:FB:52:E9:71:C2
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       0198D5BC0A6EE0CCA4F6D1459CEF3D9EB0A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          0FCD
Signing time:             Sat 23 Aug 2025 07:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:07 +0000
Files and hashes:         1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
                          2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: Ij95NLjvgypbWk7518dFzYPamaZM2VRaCDBaTwCpVSE=)
                          3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
                          4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:0a:6e:e0:cc:a4:f6:d1:45:9c:ef:3d:9e:b0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Aug 23 07:02:07 2025 GMT
            Not After : Aug 24 07:02:07 2025 GMT
        Subject: CN=b0048e01fa1e7b621e7977efe9f40cfb52e971c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:00:a4:7c:cd:dd:09:00:7f:7d:f5:5a:b6:
                    63:ca:a4:d4:a6:6b:98:bd:12:11:62:72:1a:23:86:
                    04:14:65:38:dc:1d:f8:44:34:c7:8a:5e:b4:64:62:
                    80:c3:70:4b:e9:00:16:6c:43:e2:e6:a5:50:7a:0c:
                    63:31:c8:b2:99:fd:d1:26:09:48:0f:c3:96:e7:e5:
                    8a:23:df:5f:a9:b0:8e:6a:bd:ca:0b:09:7c:eb:7d:
                    ea:8f:75:1e:11:85:fb:ed:05:64:da:3e:56:70:79:
                    46:c6:a7:9f:cf:a5:3e:b4:27:40:f7:a1:e3:0d:5b:
                    f4:93:1f:98:11:5b:c3:2b:92:69:8c:dc:93:3c:28:
                    40:e2:3d:e9:26:73:34:b8:ca:2f:0f:40:5e:4d:b0:
                    ac:54:cc:b8:4f:7e:48:df:b9:82:a9:73:9a:95:71:
                    37:e3:f2:1e:83:44:a2:6f:51:8d:05:4a:11:37:df:
                    72:bf:d0:ee:f1:d7:ec:81:b6:dc:a1:4b:61:85:12:
                    62:c8:0b:90:10:0f:13:06:7d:27:c5:bd:3e:b0:7d:
                    36:b3:f0:95:36:a4:0c:94:c2:d4:01:19:f0:03:16:
                    7f:08:91:9e:54:37:4b:89:50:da:8a:67:17:4e:8c:
                    8a:a4:af:d0:c7:f2:f5:d6:5c:2c:64:0d:33:a2:01:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:04:8E:01:FA:1E:7B:62:1E:79:77:EF:E9:F4:0C:FB:52:E9:71:C2
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:5e:db:4a:f7:b5:d0:6b:96:c8:27:b5:fb:62:f5:52:5c:
         e6:34:36:80:31:16:76:cd:15:63:dd:f1:cd:63:6e:d8:93:93:
         eb:03:9f:14:27:da:e8:bb:e0:d3:0f:ab:6a:30:76:8c:48:e8:
         40:6e:80:a1:d9:f7:63:8a:68:8d:04:fc:73:82:f1:53:49:ab:
         18:0f:0c:00:13:29:ad:67:ac:c6:d5:92:e1:d4:61:1b:eb:bc:
         16:fd:02:8f:2c:87:82:fc:a4:fb:5b:25:9a:12:fd:00:cd:d4:
         22:54:42:03:9c:b0:f6:4a:d5:db:5c:5b:88:48:6d:75:2b:60:
         88:69:a9:38:cd:03:d5:46:1e:e3:0f:e2:2f:2a:0e:f4:22:6a:
         3f:98:03:a7:5a:7e:fe:2e:44:6d:f5:0b:6d:f4:a4:16:08:0d:
         08:05:bc:de:dc:8d:35:21:32:ed:2a:f3:ae:55:d5:38:42:9b:
         d2:9e:21:35:14:a5:98:78:74:c0:46:f5:07:c8:3f:ec:81:59:
         b9:42:9f:45:2a:97:49:c6:50:e9:93:2b:b5:65:53:f7:04:7c:
         36:31:7a:84:05:7a:c6:c8:e6:26:71:33:a0:fa:47:68:6c:19:
         93:3f:bc:91:c6:a5:9e:2d:0a:71:2e:94:a7:e3:e4:8b:7f:32:
         e3:09:88:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvApu4Myk9tFFnO89nrCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4
MzhmMzMwHhcNMjUwODIzMDcwMjA3WhcNMjUwODI0MDcwMjA3WjAzMTEwLwYDVQQD
EyhiMDA0OGUwMWZhMWU3YjYyMWU3OTc3ZWZlOWY0MGNmYjUyZTk3MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ucApHzN3QkAf331WrZjyqTUpmuY
vRIRYnIaI4YEFGU43B34RDTHil60ZGKAw3BL6QAWbEPi5qVQegxjMciymf3RJglI
D8OW5+WKI99fqbCOar3KCwl8633qj3UeEYX77QVk2j5WcHlGxqefz6U+tCdA96Hj
DVv0kx+YEVvDK5JpjNyTPChA4j3pJnM0uMovD0BeTbCsVMy4T35I37mCqXOalXE3
4/Ieg0Sib1GNBUoRN99yv9Du8dfsgbbcoUthhRJiyAuQEA8TBn0nxb0+sH02s/CV
NqQMlMLUARnwAxZ/CJGeVDdLiVDaimcXToyKpK/Qx/L11lwsZA0zogG9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAEjgH6HntiHnl37+n0DPtS6XHCMB8GA1UdIwQY
MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt
OTc0YzQ0YWI5Y2ZiLzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi
LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5te20r3
tdBrlsgntfti9VJc5jQ2gDEWds0VY93xzWNu2JOT6wOfFCfa6Lvg0w+rajB2jEjo
QG6Aodn3Y4pojQT8c4LxU0mrGA8MABMprWesxtWS4dRhG+u8Fv0CjyyHgvyk+1sl
mhL9AM3UIlRCA5yw9krV21xbiEhtdStgiGmpOM0D1UYe4w/iLyoO9CJqP5gDp1p+
/i5EbfULbfSkFggNCAW83tyNNSEy7SrzrlXVOEKb0p4hNRSlmHh0wEb1B8g/7IFZ
uUKfRSqXScZQ6ZMrtWVT9wR8NjF6hAV6xsjmJnEzoPpHaGwZkz+8kcalni0KcS6U
p+Pki38y4wmITg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:46 2025 by rpki-client