Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File:                     0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier:          ZWMfP9FA7BEVAd2zFiSFh0SoeAkClgr2Iye8EddNG0s=
Subject key identifier:   C3:F3:CF:3D:34:AD:90:F0:01:65:30:C2:83:5F:F1:B7:BA:EF:BA:D2
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer:       /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial:       0198D515FB27D50A8BDCC186C5FE9FA47996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number:          077A
Signing time:             Sat 23 Aug 2025 04:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:44 +0000
Files and hashes:         1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: 195T3CYNyfrV5i0YBFRY1uVt209dzARxs6upgfn6Lnw=)
                          2: _tDyQl_V4oGcaoTQCOv_1tAVV5w.roa (hash: NfAtzjH7XpKV/Nx/c7iUxK0arZdAcmbSlWPMtQY58/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:fb:27:d5:0a:8b:dc:c1:86:c5:fe:9f:a4:79:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
        Validity
            Not Before: Aug 23 04:00:44 2025 GMT
            Not After : Aug 24 04:00:44 2025 GMT
        Subject: CN=c3f3cf3d34ad90f0016530c2835ff1b7baefbad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:a2:a5:0b:9c:30:20:98:6b:ac:5b:f4:fb:
                    8f:86:c3:ab:8f:c2:f4:b9:1e:04:64:1d:44:73:b6:
                    84:0f:95:33:c5:67:07:9d:b6:7d:c5:05:ab:f7:73:
                    fa:f9:de:89:2a:35:fd:20:5f:d7:49:c0:0c:a2:29:
                    27:66:d0:4a:c3:2d:3a:b8:5a:c7:17:bc:a5:27:02:
                    a3:c9:ca:8b:e6:41:42:6c:68:0e:ee:b6:8a:03:38:
                    54:3f:eb:10:dd:fc:30:ff:aa:91:e5:e1:87:13:0b:
                    70:83:fe:a3:eb:f1:88:55:db:39:d2:34:d9:35:57:
                    c8:8b:11:52:bf:9d:33:ee:0d:04:42:ff:ca:b9:b8:
                    66:f4:d3:1a:84:a8:75:3a:66:6c:a7:a6:dc:49:e0:
                    29:0f:4e:f3:78:3b:49:1a:73:92:a3:91:e3:50:6b:
                    a9:07:d3:34:dc:32:90:4d:01:72:89:3a:86:fe:6e:
                    bd:12:0b:20:d0:b4:6c:e7:90:93:ec:72:9c:dd:66:
                    64:d6:74:de:aa:c6:16:90:85:d2:7b:9b:32:50:de:
                    ee:17:11:a9:34:21:1a:75:05:e8:3f:75:74:76:bb:
                    db:0d:8e:73:5c:62:5a:94:cc:be:3e:06:77:71:35:
                    d7:6a:fa:73:62:f5:51:34:fe:83:9b:52:aa:10:ef:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:CF:3D:34:AD:90:F0:01:65:30:C2:83:5F:F1:B7:BA:EF:BA:D2
            X509v3 Authority Key Identifier:
                keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:52:c5:82:f7:2c:1f:8d:7d:3c:a3:28:d7:10:2d:71:db:
         45:cd:ae:9d:e5:ff:35:f5:c5:fe:04:b5:10:d2:32:99:1e:c3:
         60:8f:57:33:f8:0f:ab:6c:12:5e:3b:a2:61:de:d6:e9:61:1b:
         71:dd:0c:ac:53:6a:43:64:bd:f7:8e:d6:f1:01:27:d0:ed:d0:
         82:88:a8:cb:00:ec:a4:4a:3f:a8:e5:26:7c:1e:a1:76:ad:20:
         07:18:7d:0e:20:ac:3f:81:5f:53:9a:59:89:6e:7d:e1:0c:57:
         a7:43:f1:75:70:0d:c2:f2:80:bf:5b:bc:95:4c:e4:a3:18:f1:
         cc:af:c3:91:4e:31:74:83:ab:31:41:ed:6a:e5:9e:7f:7c:b5:
         9f:ec:96:c3:1c:2f:0f:64:51:7f:24:77:8c:52:a0:62:bb:db:
         89:fe:35:61:18:a6:84:86:bc:b1:68:3e:a9:69:70:34:83:c8:
         f4:80:ce:d9:e6:db:d2:2e:d6:c9:9c:d0:e6:63:58:d6:42:04:
         2b:8a:4d:00:e8:ba:1c:ea:58:da:9b:2c:b6:70:40:bb:e7:c9:
         0b:59:d5:c0:8f:aa:a1:a0:2a:e5:ec:d3:b4:04:65:2d:c8:23:
         a1:98:34:11:5d:94:aa:95:41:ed:29:58:f9:68:c2:44:4e:09:
         66:4b:a6:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfsn1QqL3MGGxf6fpHmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjMxM2I2NDBjNmRlNzUzNWI4MWVjNjhjNDBlZTZlYzk5
ZmZmNGQwHhcNMjUwODIzMDQwMDQ0WhcNMjUwODI0MDQwMDQ0WjAzMTEwLwYDVQQD
EyhjM2YzY2YzZDM0YWQ5MGYwMDE2NTMwYzI4MzVmZjFiN2JhZWZiYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LyipQucMCCYa6xb9PuPhsOrj8L0
uR4EZB1Ec7aED5UzxWcHnbZ9xQWr93P6+d6JKjX9IF/XScAMoiknZtBKwy06uFrH
F7ylJwKjycqL5kFCbGgO7raKAzhUP+sQ3fww/6qR5eGHEwtwg/6j6/GIVds50jTZ
NVfIixFSv50z7g0EQv/Kubhm9NMahKh1OmZsp6bcSeApD07zeDtJGnOSo5HjUGup
B9M03DKQTQFyiTqG/m69Egsg0LRs55CT7HKc3WZk1nTeqsYWkIXSe5syUN7uFxGp
NCEadQXoP3V0drvbDY5zXGJalMy+PgZ3cTXXavpzYvVRNP6Dm1KqEO/qHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPzzz00rZDwAWUwwoNf8be677rSMB8GA1UdIwQY
MBaAFNDzE7ZAxt51NbgexoxA7m7Jn/9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYt
MGM3M2JlYzUxMDdjLzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85YTk5ZjktMmQ2Yy00YTRhLWEwOTYtMGM3M2JlYzUxMDdj
LzEvMFBNVHRrREczblUxdUI3R2pFRHVic21mXzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1xSxYL3
LB+NfTyjKNcQLXHbRc2uneX/NfXF/gS1ENIymR7DYI9XM/gPq2wSXjuiYd7W6WEb
cd0MrFNqQ2S9947W8QEn0O3QgoioywDspEo/qOUmfB6hdq0gBxh9DiCsP4FfU5pZ
iW594QxXp0PxdXANwvKAv1u8lUzkoxjxzK/DkU4xdIOrMUHtauWef3y1n+yWwxwv
D2RRfyR3jFKgYrvbif41YRimhIa8sWg+qWlwNIPI9IDO2ebb0i7WyZzQ5mNY1kIE
K4pNAOi6HOpY2psstnBAu+fJC1nVwI+qoaAq5ezTtARlLcgjoZg0EV2UqpVB7SlY
+WjCRE4JZkumdw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:59 2025 by rpki-client