Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File:                     025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier:          DhKC5Jc/s7+rjmotwDOcK2xCtzkaFaSGgXn4x5oOflk=
Subject key identifier:   32:50:B1:2F:96:E7:EB:61:8F:81:09:41:31:EF:F5:44:05:57:59:C2
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer:       /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial:       0198D5158646A9DA1D56240BDDD9E8341591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number:          0335
Signing time:             Sat 23 Aug 2025 04:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:14 +0000
Files and hashes:         1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: PFltTEqxnHZ+2NGao+i1oP554Kic2u1BSj1lF6K1Khk=)
                          2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:86:46:a9:da:1d:56:24:0b:dd:d9:e8:34:15:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
        Validity
            Not Before: Aug 23 04:00:14 2025 GMT
            Not After : Aug 24 04:00:14 2025 GMT
        Subject: CN=3250b12f96e7eb618f81094131eff544055759c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:06:06:58:30:9d:33:06:f0:72:0b:b0:b3:
                    32:90:00:65:f1:61:d0:09:12:93:fc:1a:a3:7e:34:
                    71:35:31:a5:21:cc:79:8e:56:66:18:e9:d5:20:09:
                    01:b7:a1:c7:b8:3b:82:4d:af:d5:14:8d:89:42:b2:
                    52:91:bc:87:a0:1d:57:00:eb:93:8a:b4:50:9f:b7:
                    b0:e5:4a:ec:a4:9b:64:5b:77:aa:01:e7:25:8a:74:
                    b1:b5:0e:f8:00:30:dd:b0:93:1c:7b:9e:0e:31:86:
                    28:67:8f:1b:b9:12:3f:4f:db:86:ca:09:50:d1:8d:
                    6d:96:19:d9:fc:dc:0a:aa:0e:5e:6e:b2:c2:1b:77:
                    61:81:83:37:cc:f0:4a:08:63:2a:e0:e1:7c:60:7c:
                    b0:a5:47:01:e9:0e:be:4c:db:b8:63:86:10:54:b6:
                    07:c9:be:43:7e:15:fe:51:fc:69:8b:6f:c4:71:a5:
                    be:cb:fc:74:ae:2e:ce:3b:83:06:31:34:d8:68:a3:
                    d5:be:d8:2f:4c:0c:97:26:bc:95:e7:e5:3d:87:ea:
                    2a:63:77:13:b0:26:78:d5:5e:a7:2d:8e:92:f4:31:
                    77:b1:f8:9c:63:47:74:3a:3a:45:76:7f:5d:14:38:
                    e6:8a:40:98:36:8f:c8:38:99:e3:ae:02:ed:e3:b3:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:50:B1:2F:96:E7:EB:61:8F:81:09:41:31:EF:F5:44:05:57:59:C2
            X509v3 Authority Key Identifier:
                keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4f:20:f0:ae:60:6e:03:da:54:44:05:a6:d8:16:87:2b:06:
         ef:94:8d:73:73:26:f0:17:08:bf:6f:d4:01:bd:f3:af:2a:94:
         0c:8e:3d:64:61:aa:80:9b:5b:90:f6:45:d8:cc:ae:2b:72:b5:
         9b:2c:56:54:8d:09:43:1c:4d:db:08:c3:a6:82:fc:1a:ac:84:
         4e:ec:3a:72:29:4f:69:50:43:95:38:97:ee:46:25:51:3d:01:
         15:34:99:f5:46:88:e0:ad:ec:78:ba:ad:28:f9:3f:63:18:1b:
         d0:5b:b8:0a:d6:40:94:77:f8:59:fc:09:41:6c:75:6b:47:b9:
         7c:5c:0f:f4:d6:96:5a:90:30:60:9e:e2:ae:7f:11:d8:54:5a:
         1f:e5:1b:88:70:cc:e6:22:1c:00:36:1a:73:45:28:3a:10:42:
         8a:92:b5:bc:5d:b8:7d:43:e6:ff:6d:5b:4a:03:9d:f7:48:c7:
         79:ef:a3:5c:ab:a3:87:58:26:01:7e:46:63:c9:95:45:ac:35:
         08:14:c3:4c:36:5c:7b:e3:ec:f3:3b:bf:d4:a3:8b:ea:90:50:
         c6:1e:86:aa:a6:12:53:4f:10:d7:d9:af:73:25:b7:62:7f:8a:
         f9:4f:f2:48:a1:ae:56:9b:b9:9d:7f:e0:db:c6:f1:c2:c1:69:
         37:5c:68:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFYZGqdodViQL3dnoNBWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3
YTk5M2UwHhcNMjUwODIzMDQwMDE0WhcNMjUwODI0MDQwMDE0WjAzMTEwLwYDVQQD
EygzMjUwYjEyZjk2ZTdlYjYxOGY4MTA5NDEzMWVmZjU0NDA1NTc1OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufoGBlgwnTMG8HILsLMykABl8WHQ
CRKT/BqjfjRxNTGlIcx5jlZmGOnVIAkBt6HHuDuCTa/VFI2JQrJSkbyHoB1XAOuT
irRQn7ew5UrspJtkW3eqAeclinSxtQ74ADDdsJMce54OMYYoZ48buRI/T9uGyglQ
0Y1tlhnZ/NwKqg5ebrLCG3dhgYM3zPBKCGMq4OF8YHywpUcB6Q6+TNu4Y4YQVLYH
yb5DfhX+Ufxpi2/EcaW+y/x0ri7OO4MGMTTYaKPVvtgvTAyXJryV5+U9h+oqY3cT
sCZ41V6nLY6S9DF3sficY0d0OjpFdn9dFDjmikCYNo/IOJnjrgLt47MU5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJQsS+W5+thj4EJQTHv9UQFV1nCMB8GA1UdIwQY
MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt
ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl
LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu08g8K5g
bgPaVEQFptgWhysG75SNc3Mm8BcIv2/UAb3zryqUDI49ZGGqgJtbkPZF2MyuK3K1
myxWVI0JQxxN2wjDpoL8GqyETuw6cilPaVBDlTiX7kYlUT0BFTSZ9UaI4K3seLqt
KPk/Yxgb0Fu4CtZAlHf4WfwJQWx1a0e5fFwP9NaWWpAwYJ7irn8R2FRaH+UbiHDM
5iIcADYac0UoOhBCipK1vF24fUPm/21bSgOd90jHee+jXKujh1gmAX5GY8mVRaw1
CBTDTDZce+Ps8zu/1KOL6pBQxh6GqqYSU08Q19mvcyW3Yn+K+U/ySKGuVpu5nX/g
28bxwsFpN1xoog==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:28 2025 by rpki-client