Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File:                     RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier:          Xgpu6l69AKAk+LPHYZ0xVDYDSVFx960CPLJNUUuXOUU=
Subject key identifier:   19:B3:62:29:E1:E8:F3:08:AF:47:D8:AB:42:15:D3:5F:56:D4:06:BA
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer:       /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial:       0198D4E08E4C9863637AD669270168A92278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number:          0DBA
Signing time:             Sat 23 Aug 2025 03:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:22 +0000
Files and hashes:         1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: /FtyaUrXpBhmoyzjXxFnaTC2T/KDkPUKbRpN9f9FJxE=)
                          2: su-hbEzusTLSOxmaXJEWMOWCTZI.roa (hash: wY777l5pDJFcS+82iBVpdLmEK77pZHYgVlbVwhboSl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8e:4c:98:63:63:7a:d6:69:27:01:68:a9:22:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
        Validity
            Not Before: Aug 23 03:02:22 2025 GMT
            Not After : Aug 24 03:02:22 2025 GMT
        Subject: CN=19b36229e1e8f308af47d8ab4215d35f56d406ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:ca:5b:66:ef:8f:c5:30:b5:ac:b6:59:ce:
                    0e:ea:c2:23:b7:41:93:b2:74:7c:91:5f:46:be:17:
                    20:85:1b:e7:7e:52:74:bc:1d:b4:00:21:82:3b:6e:
                    79:74:d3:0b:7a:62:ad:94:a5:6b:51:70:94:46:96:
                    d2:e8:ad:e7:9f:d5:58:b0:06:cb:5b:06:5e:8e:4e:
                    bb:75:39:06:f8:78:c3:42:3c:f0:79:d1:45:9f:e0:
                    66:cf:21:f1:29:c1:cf:1d:a3:57:5c:c6:03:6f:53:
                    22:33:df:97:a7:96:9a:ac:a8:9c:2d:c6:c1:df:42:
                    55:a0:65:6f:cc:20:6d:b7:69:98:52:0a:c4:7f:b7:
                    b3:fa:d5:e5:8b:04:a0:31:1e:cc:da:1b:58:4c:a3:
                    83:ac:23:08:e0:b0:46:5a:84:9e:f2:14:0f:fe:a8:
                    b5:48:12:ad:6f:7e:56:26:3e:74:4b:6f:7c:07:21:
                    d1:82:4d:3c:d0:f4:68:4c:8e:8d:6d:90:04:29:ff:
                    91:05:32:0e:c9:6f:04:59:89:0d:ca:b9:cd:9f:83:
                    4e:ea:aa:4a:e8:a2:78:c8:f4:a9:01:28:72:70:9a:
                    3a:00:e5:a9:d4:70:fc:06:67:d1:2d:b8:3e:3a:74:
                    fa:fa:08:0d:8d:40:b0:b4:a0:75:6d:a6:40:da:e6:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B3:62:29:E1:E8:F3:08:AF:47:D8:AB:42:15:D3:5F:56:D4:06:BA
            X509v3 Authority Key Identifier:
                keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:22:25:b6:13:6c:8b:a9:6d:f3:da:86:53:c7:b0:a0:05:91:
         9a:3c:c0:63:43:1b:d7:3b:dd:39:69:e1:63:0e:0f:58:4e:21:
         32:44:b2:56:82:f0:0d:3e:22:2a:fb:28:03:b1:92:c1:a1:ec:
         69:9a:46:8b:cc:89:7e:8f:33:a3:bf:96:f7:2a:c0:09:c5:c9:
         62:74:39:98:4f:3b:51:50:20:11:88:0f:fd:60:e9:47:48:ea:
         92:63:37:ef:d3:39:7e:1c:e0:f6:89:65:cb:35:73:9a:70:c6:
         17:c3:96:24:08:95:f0:c7:71:d9:79:ef:b2:01:2c:c3:b9:37:
         23:b1:0d:ce:fb:44:03:0e:1c:47:c8:1b:85:1f:e2:ba:82:13:
         1a:96:9c:ee:d9:e1:76:22:72:ff:88:51:71:e7:e6:2f:b5:bc:
         bc:2f:8d:33:53:95:bb:31:66:d4:21:c3:e6:68:b2:8f:6f:5e:
         17:2e:06:c8:95:e7:83:5f:14:11:cd:61:79:da:33:af:3e:0d:
         c1:3f:60:e8:13:0a:2a:f5:26:1c:a0:4b:ad:d6:c9:03:67:52:
         63:87:17:6a:75:53:25:19:52:b8:27:7f:04:35:86:15:ab:3b:
         cd:84:1f:ba:46:c6:c6:c9:0d:f4:8b:03:96:00:98:60:09:0c:
         4e:6e:ed:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4I5MmGNjetZpJwFoqSJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1M2I4NGU4ZTBlNTYxN2MzNDI2MGQ3NjhmNDQwYTUxMzFm
MmRjZjQwHhcNMjUwODIzMDMwMjIyWhcNMjUwODI0MDMwMjIyWjAzMTEwLwYDVQQD
EygxOWIzNjIyOWUxZThmMzA4YWY0N2Q4YWI0MjE1ZDM1ZjU2ZDQwNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzLKW2bvj8Uwtay2Wc4O6sIjt0GT
snR8kV9GvhcghRvnflJ0vB20ACGCO255dNMLemKtlKVrUXCURpbS6K3nn9VYsAbL
WwZejk67dTkG+HjDQjzwedFFn+BmzyHxKcHPHaNXXMYDb1MiM9+Xp5aarKicLcbB
30JVoGVvzCBtt2mYUgrEf7ez+tXliwSgMR7M2htYTKODrCMI4LBGWoSe8hQP/qi1
SBKtb35WJj50S298ByHRgk080PRoTI6NbZAEKf+RBTIOyW8EWYkNyrnNn4NO6qpK
6KJ4yPSpAShycJo6AOWp1HD8BmfRLbg+OnT6+ggNjUCwtKB1baZA2uZnswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmzYinh6PMIr0fYq0IV019W1Aa6MB8GA1UdIwQY
MBaAFEU7hOjg5WF8NCYNdo9EClEx8tz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQt
OTk4NzgzYzY4NDFkLzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQtOTk4NzgzYzY4NDFk
LzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCIlthNs
i6lt89qGU8ewoAWRmjzAY0Mb1zvdOWnhYw4PWE4hMkSyVoLwDT4iKvsoA7GSwaHs
aZpGi8yJfo8zo7+W9yrACcXJYnQ5mE87UVAgEYgP/WDpR0jqkmM379M5fhzg9oll
yzVzmnDGF8OWJAiV8Mdx2XnvsgEsw7k3I7ENzvtEAw4cR8gbhR/iuoITGpac7tnh
diJy/4hRcefmL7W8vC+NM1OVuzFm1CHD5miyj29eFy4GyJXng18UEc1hedozrz4N
wT9g6BMKKvUmHKBLrdbJA2dSY4cXanVTJRlSuCd/BDWGFas7zYQfukbGxskN9IsD
lgCYYAkMTm7t2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:39 2025 by rpki-client