Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          CWSq7pVJhKl6vzAsKNMgT4YGxjS57YPjy4wVs4vspX4=
Subject key identifier:   8B:0C:4C:88:B5:0E:13:A5:3C:B3:C5:0F:82:34:5C:B8:CB:08:E7:EF
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       0197CDCE92258BB5CE38F130F988FAD91472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          15C1
Signing time:             Thu 03 Jul 2025 01:02:36 +0000
Manifest this update:     Thu 03 Jul 2025 01:02:36 +0000
Manifest next update:     Fri 04 Jul 2025 01:02:36 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: InojMA6XUdK0HnHI30iSp5Zs3tbVu7goJB0qOojeGt0=)
                          2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:92:25:8b:b5:ce:38:f1:30:f9:88:fa:d9:14:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Jul  3 01:02:36 2025 GMT
            Not After : Jul  4 01:02:36 2025 GMT
        Subject: CN=8b0c4c88b50e13a53cb3c50f82345cb8cb08e7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:1b:8b:d9:63:e3:7e:c6:c6:ba:d0:88:b7:
                    dc:39:07:b5:1d:70:c2:02:64:60:b2:8f:64:bb:04:
                    3c:58:44:81:aa:8a:a4:41:da:47:7c:a6:36:0d:c5:
                    ab:84:58:ee:14:bf:7b:2d:22:3b:64:39:63:6d:3b:
                    36:c5:33:c3:ec:7f:c1:46:ad:73:48:59:4f:64:de:
                    8c:d4:1b:0b:e0:ba:39:8f:bf:d1:20:a0:fc:a8:c3:
                    10:34:f4:f7:24:a0:8a:d4:c5:57:e0:cb:3e:ce:06:
                    4f:6b:e9:28:e7:fe:ec:71:e7:fb:77:21:e2:eb:e7:
                    04:32:aa:99:00:dc:d8:7f:0e:5f:4e:f1:3c:b0:a6:
                    df:f2:b9:a9:03:96:af:85:c9:7f:bf:18:98:75:04:
                    4e:eb:ce:31:7f:4a:46:1b:af:81:b3:15:cc:fd:53:
                    0d:c1:11:e1:99:cf:7e:89:6d:49:38:d9:ab:93:80:
                    62:50:c8:1f:84:fe:c5:e9:03:ef:6d:38:e9:22:ea:
                    c6:df:0f:19:99:c5:f9:00:32:ad:64:f7:1a:70:64:
                    d2:0a:fa:2d:91:60:34:e5:d4:83:a6:39:8c:ea:ac:
                    29:3d:81:c3:b7:c3:96:06:79:a2:93:e2:9a:f9:c1:
                    8e:34:e1:bf:18:cc:c1:57:ef:a1:4b:68:e0:52:93:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0C:4C:88:B5:0E:13:A5:3C:B3:C5:0F:82:34:5C:B8:CB:08:E7:EF
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:bc:f3:6d:f3:eb:b3:97:cb:3f:d1:90:33:97:11:23:e0:
         a4:9b:45:cf:ff:47:b7:f6:50:a5:9f:e5:27:9c:81:d7:87:7a:
         28:a7:f4:52:7b:4c:ec:9a:d9:2e:8a:16:2a:fb:cb:6a:b0:d3:
         c7:06:86:62:e1:0a:74:e8:1a:e0:e0:d8:58:b1:33:6d:f9:10:
         9d:4d:9c:95:63:ae:82:a3:c2:1c:40:b9:17:9d:75:80:fc:e2:
         03:9e:a4:6e:83:c6:21:df:fc:e6:c0:29:1e:8a:9b:a5:98:d2:
         2c:be:c5:0f:c0:12:71:01:4c:5f:21:c2:fd:c7:aa:35:aa:64:
         b0:7b:6f:d5:70:37:32:be:4d:12:41:f6:22:5a:e2:96:15:4a:
         5f:c1:de:b8:3f:b5:37:5e:6d:62:6c:eb:ac:5f:56:a2:bc:a6:
         7a:4c:a3:bd:28:b2:2e:5f:d3:db:52:3d:5b:18:dd:d9:c0:5f:
         50:4b:35:14:bd:da:e2:2c:f0:26:be:bc:f6:c2:5d:1b:c3:66:
         6a:3a:65:42:50:15:ac:3b:3f:2e:e4:55:fc:be:1c:cb:c8:89:
         88:ee:13:12:84:3b:b3:ec:6f:6e:e8:f9:e8:b3:2d:8f:13:3f:
         cb:9a:b5:d9:e1:46:0f:7a:a6:7a:41:dd:8c:76:df:91:46:3e:
         75:f6:f9:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzpIli7XOOPEw+Yj62RRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2
MTNiYzUwHhcNMjUwNzAzMDEwMjM2WhcNMjUwNzA0MDEwMjM2WjAzMTEwLwYDVQQD
Eyg4YjBjNGM4OGI1MGUxM2E1M2NiM2M1MGY4MjM0NWNiOGNiMDhlN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZMbi9lj437GxrrQiLfcOQe1HXDC
AmRgso9kuwQ8WESBqoqkQdpHfKY2DcWrhFjuFL97LSI7ZDljbTs2xTPD7H/BRq1z
SFlPZN6M1BsL4Lo5j7/RIKD8qMMQNPT3JKCK1MVX4Ms+zgZPa+ko5/7scef7dyHi
6+cEMqqZANzYfw5fTvE8sKbf8rmpA5avhcl/vxiYdQRO684xf0pGG6+BsxXM/VMN
wRHhmc9+iW1JONmrk4BiUMgfhP7F6QPvbTjpIurG3w8ZmcX5ADKtZPcacGTSCvot
kWA05dSDpjmM6qwpPYHDt8OWBnmik+Ka+cGONOG/GMzBV++hS2jgUpMEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsMTIi1DhOlPLPFD4I0XLjLCOfvMB8GA1UdIwQY
MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt
NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4
LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIS+8823z
67OXyz/RkDOXESPgpJtFz/9Ht/ZQpZ/lJ5yB14d6KKf0UntM7JrZLooWKvvLarDT
xwaGYuEKdOga4ODYWLEzbfkQnU2clWOugqPCHEC5F511gPziA56kboPGId/85sAp
HoqbpZjSLL7FD8AScQFMXyHC/ceqNapksHtv1XA3Mr5NEkH2IlrilhVKX8HeuD+1
N15tYmzrrF9WorymekyjvSiyLl/T21I9Wxjd2cBfUEs1FL3a4izwJr689sJdG8Nm
ajplQlAVrDs/LuRV/L4cy8iJiO4TEoQ7s+xvbuj56LMtjxM/y5q12eFGD3qmekHd
jHbfkUY+dfb5vg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:46:30 2025 by rpki-client