Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          7EqRnxelPNDYVjvJIokb+62VCV8ls8cPFNUjPUyRwZ4=
Subject key identifier:   DF:45:4D:A8:CC:B9:C5:2C:F4:78:99:8A:22:00:09:CF:C9:6D:30:33
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       0197D32A5637113B3DBDE4D2706BF8C173BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          0F0B
Signing time:             Fri 04 Jul 2025 02:00:56 +0000
Manifest this update:     Fri 04 Jul 2025 02:00:56 +0000
Manifest next update:     Sat 05 Jul 2025 02:00:56 +0000
Files and hashes:         1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
                          2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=)
                          3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=)
                          4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
                          5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: dI9A1065HzNHsR/Dk6ybiTnEDTR+Czf+nEBL9ytwswI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d3:2a:56:37:11:3b:3d:bd:e4:d2:70:6b:f8:c1:73:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Jul  4 02:00:56 2025 GMT
            Not After : Jul  5 02:00:56 2025 GMT
        Subject: CN=df454da8ccb9c52cf478998a220009cfc96d3033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:60:cd:40:51:aa:d7:d7:cc:32:49:f1:86:
                    66:cc:cb:8a:17:8a:05:ea:bc:9a:c7:e6:f8:bf:1e:
                    37:8e:02:78:0e:2a:79:ee:4b:23:60:d4:04:93:5d:
                    5b:f0:9e:8f:f0:f9:76:13:61:a7:63:69:55:fc:f2:
                    09:e4:fa:28:63:17:13:1a:64:e7:9a:b7:ba:7f:eb:
                    9f:9a:0a:95:20:f3:72:32:75:26:a5:d6:d7:6c:ac:
                    0d:e8:b4:c0:23:9a:a2:e8:cd:3f:5c:3b:13:96:c5:
                    39:52:ec:8c:ee:73:4f:77:f5:6e:70:2d:d2:dc:5e:
                    2a:c1:a4:09:73:f9:c9:fa:cb:e2:1d:f1:81:58:21:
                    a6:cc:fe:20:eb:e8:de:70:48:c2:ae:a8:3f:56:9e:
                    d0:9e:c0:9f:bb:d9:89:1b:32:60:dc:f4:0c:9b:e6:
                    bd:0e:54:14:2e:8d:0b:83:6d:a0:da:77:06:77:57:
                    6a:e0:8e:9a:e9:85:18:f0:af:b5:b5:f9:81:37:e9:
                    74:8b:f9:62:6d:d6:dc:11:34:4a:49:8c:e1:5f:33:
                    52:7b:3e:dd:db:87:81:29:45:fe:af:fd:e6:6c:59:
                    92:02:74:6c:b6:2e:e5:29:76:e4:29:bc:2b:30:d2:
                    3a:53:ad:40:e2:85:3e:03:1c:06:34:e8:d3:59:68:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:45:4D:A8:CC:B9:C5:2C:F4:78:99:8A:22:00:09:CF:C9:6D:30:33
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:b2:4d:9b:fd:2e:41:b2:40:a8:38:35:5c:1c:1b:a7:df:
         38:ab:50:55:85:da:f3:df:eb:1a:f8:a2:09:03:1a:7a:55:86:
         0b:31:e5:b6:be:80:66:66:21:73:91:7b:6b:aa:cd:b8:36:83:
         52:c0:c1:a9:56:b0:82:4e:c8:3a:5d:f4:af:86:b5:34:d3:61:
         49:cd:5f:68:07:89:15:44:fb:69:6e:28:95:f2:b1:d4:8d:8c:
         00:46:f1:49:77:00:4b:56:39:9b:a4:74:06:ac:43:f0:14:2e:
         f4:fd:59:4a:e7:fb:09:ca:2b:3c:74:70:d3:34:70:9e:68:55:
         74:30:87:87:96:e3:34:85:4f:b3:a7:13:e2:6d:9f:e3:fb:6b:
         5d:5c:1b:21:2d:cc:a4:ec:1e:4d:e3:1f:6b:2e:33:2c:3f:c7:
         34:50:2e:c3:26:a2:f9:29:08:45:20:98:5e:8b:0c:03:77:46:
         9f:e4:19:26:06:9f:74:9f:48:20:0e:e1:6b:47:bc:11:b3:37:
         53:32:35:ed:49:ed:ab:0f:1a:8a:3c:8a:0f:31:a3:ab:6f:56:
         14:1e:0b:68:75:ba:a6:d7:3d:bd:f4:d7:bb:a4:f8:a7:07:27:
         4d:e1:8d:73:a2:f6:91:17:62:b7:37:d2:9c:b6:e8:db:96:00:
         53:13:1e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfTKlY3ETs9veTScGv4wXO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjUwNzA0MDIwMDU2WhcNMjUwNzA1MDIwMDU2WjAzMTEwLwYDVQQD
EyhkZjQ1NGRhOGNjYjljNTJjZjQ3ODk5OGEyMjAwMDljZmM5NmQzMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI9gzUBRqtfXzDJJ8YZmzMuKF4oF
6ryax+b4vx43jgJ4Dip57ksjYNQEk11b8J6P8Pl2E2GnY2lV/PIJ5PooYxcTGmTn
mre6f+ufmgqVIPNyMnUmpdbXbKwN6LTAI5qi6M0/XDsTlsU5UuyM7nNPd/VucC3S
3F4qwaQJc/nJ+sviHfGBWCGmzP4g6+jecEjCrqg/Vp7QnsCfu9mJGzJg3PQMm+a9
DlQULo0Lg22g2ncGd1dq4I6a6YUY8K+1tfmBN+l0i/libdbcETRKSYzhXzNSez7d
24eBKUX+r/3mbFmSAnRsti7lKXbkKbwrMNI6U61A4oU+AxwGNOjTWWiCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9FTajMucUs9HiZiiIACc/JbTAzMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseqyTZv9
LkGyQKg4NVwcG6ffOKtQVYXa89/rGviiCQMaelWGCzHltr6AZmYhc5F7a6rNuDaD
UsDBqVawgk7IOl30r4a1NNNhSc1faAeJFUT7aW4olfKx1I2MAEbxSXcAS1Y5m6R0
BqxD8BQu9P1ZSuf7CcorPHRw0zRwnmhVdDCHh5bjNIVPs6cT4m2f4/trXVwbIS3M
pOweTeMfay4zLD/HNFAuwyai+SkIRSCYXosMA3dGn+QZJgafdJ9IIA7ha0e8EbM3
UzI17Untqw8aijyKDzGjq29WFB4LaHW6ptc9vfTXu6T4pwcnTeGNc6L2kRditzfS
nLbo25YAUxMe8w==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:55:32 2025 by rpki-client