Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File:                     Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier:          DiKugTHKzIzXqQCrL+u4kn6QRwM43TCaybDPZpNRpKM=
Subject key identifier:   7B:5C:42:C2:98:B1:2D:5D:38:11:A8:36:23:AA:E8:1C:19:55:B6:E0
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer:       /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial:       0198D5BBD3BF6213837CF3172FC5A3080012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number:          10CD
Signing time:             Sat 23 Aug 2025 07:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:53 +0000
Files and hashes:         1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: b0ar12rMdSLX+C5u1Om5B8wjGgnM79fgHSlwF+q72HE=)
                          2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d3:bf:62:13:83:7c:f3:17:2f:c5:a3:08:00:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
        Validity
            Not Before: Aug 23 07:01:53 2025 GMT
            Not After : Aug 24 07:01:53 2025 GMT
        Subject: CN=7b5c42c298b12d5d3811a83623aae81c1955b6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:db:04:48:39:32:dc:85:e7:59:5f:95:33:96:
                    be:ee:ee:f9:ad:c4:9e:9b:34:23:80:d5:ba:e7:2c:
                    d3:b1:2d:22:7b:ba:d1:5d:d4:e7:fd:39:46:2d:c6:
                    f8:bf:76:92:1f:ea:4a:5b:d5:5b:00:1c:a2:2a:1b:
                    c7:83:9b:52:91:2d:15:e3:a4:0d:07:28:ac:76:d3:
                    51:7b:72:9b:0e:11:b6:3a:3f:6a:4f:9d:77:2f:50:
                    8a:fa:66:38:00:5f:0d:89:ea:8a:93:93:44:29:08:
                    da:65:ab:15:1c:dd:a4:ff:68:6a:88:00:11:59:45:
                    55:a2:18:47:89:90:64:50:2f:10:28:37:45:de:7f:
                    ba:64:e9:87:2e:45:fe:53:42:1c:31:64:a2:7b:49:
                    b5:d7:35:b3:45:b8:28:c0:19:0d:ca:33:3a:16:1b:
                    5b:54:3a:91:ba:ad:e9:5e:89:5b:63:55:1f:a4:ac:
                    e7:22:23:cb:e5:80:d3:15:a5:39:ba:30:b2:e7:96:
                    19:33:b2:96:f0:a2:d1:58:7f:bb:03:bd:8f:40:2b:
                    b2:29:58:12:11:1a:1e:17:f0:d5:2c:23:b7:1f:1d:
                    07:8c:67:01:cf:ab:d7:89:25:26:31:1e:ce:5b:c1:
                    1a:c7:8b:70:81:8f:8e:ee:b9:f3:80:db:bd:8c:60:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:42:C2:98:B1:2D:5D:38:11:A8:36:23:AA:E8:1C:19:55:B6:E0
            X509v3 Authority Key Identifier:
                keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:47:4e:25:01:08:35:75:10:3e:85:da:51:85:b1:99:0d:
         e1:3e:d2:97:f9:07:6f:b3:d0:cd:ef:22:4c:56:f5:b9:ba:b3:
         25:6d:19:d9:44:25:24:67:a7:08:08:d9:52:63:1f:72:fd:bc:
         e2:80:bd:8d:9e:6d:78:e5:46:7b:c8:8e:3e:a2:2d:6f:86:5a:
         2c:64:f2:07:be:c8:1e:a3:dc:1d:c9:aa:4c:49:c8:30:3b:db:
         90:44:b1:5d:c1:4b:98:34:97:af:26:08:ba:e4:16:ca:7e:cc:
         e0:91:f3:6d:e4:81:13:0c:8c:bf:2f:6c:d8:29:c1:86:cf:3b:
         58:a6:ab:6d:48:ee:ee:62:83:eb:d1:e2:c0:cb:ee:a0:11:31:
         9c:13:05:4e:fb:5e:fe:48:c2:62:8c:d2:29:5e:a7:08:eb:cb:
         0a:cb:58:23:f1:e8:19:dc:c1:2d:8d:ad:b1:73:63:f6:0f:57:
         ba:95:de:1f:a0:b2:0b:6a:4e:74:b0:f5:44:22:36:ac:62:db:
         92:8e:a0:7e:34:f8:c4:10:76:af:96:15:dc:97:f0:53:e2:2d:
         b8:b9:95:db:fa:a2:ef:47:06:14:10:99:1e:d9:41:63:28:66:
         78:83:66:60:a6:dd:67:e5:88:a3:65:d5:29:cd:05:f7:2c:71:
         ac:1b:9f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9O/YhODfPMXL8WjCAASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Y2Y5ZGMwYzdiN2ZjNGEzMzZlNGVlZTU3YjFlYzE5NDhj
OGRkZjMwHhcNMjUwODIzMDcwMTUzWhcNMjUwODI0MDcwMTUzWjAzMTEwLwYDVQQD
Eyg3YjVjNDJjMjk4YjEyZDVkMzgxMWE4MzYyM2FhZTgxYzE5NTViNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NsESDky3IXnWV+VM5a+7u75rcSe
mzQjgNW65yzTsS0ie7rRXdTn/TlGLcb4v3aSH+pKW9VbAByiKhvHg5tSkS0V46QN
ByisdtNRe3KbDhG2Oj9qT513L1CK+mY4AF8NieqKk5NEKQjaZasVHN2k/2hqiAAR
WUVVohhHiZBkUC8QKDdF3n+6ZOmHLkX+U0IcMWSie0m11zWzRbgowBkNyjM6Fhtb
VDqRuq3pXolbY1UfpKznIiPL5YDTFaU5ujCy55YZM7KW8KLRWH+7A72PQCuyKVgS
ERoeF/DVLCO3Hx0HjGcBz6vXiSUmMR7OW8Eax4twgY+O7rnzgNu9jGBRQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtcQsKYsS1dOBGoNiOq6BwZVbbgMB8GA1UdIwQY
MBaAFEXPncDHt/xKM25O7lex7BlIyN3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTIt
ZWU3MmYyYjNhNDczLzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTItZWU3MmYyYjNhNDcz
LzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv5HTiUB
CDV1ED6F2lGFsZkN4T7Sl/kHb7PQze8iTFb1ubqzJW0Z2UQlJGenCAjZUmMfcv28
4oC9jZ5teOVGe8iOPqItb4ZaLGTyB77IHqPcHcmqTEnIMDvbkESxXcFLmDSXryYI
uuQWyn7M4JHzbeSBEwyMvy9s2CnBhs87WKarbUju7mKD69HiwMvuoBExnBMFTvte
/kjCYozSKV6nCOvLCstYI/HoGdzBLY2tsXNj9g9XupXeH6CyC2pOdLD1RCI2rGLb
ko6gfjT4xBB2r5YV3JfwU+ItuLmV2/qi70cGFBCZHtlBYyhmeINmYKbdZ+WIo2XV
Kc0F9yxxrBufZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:47 2025 by rpki-client