Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File:                     G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier:          hDDHcTD7g/1nFy2oyCaONuyzRvhNB0CcwRRGlwbJdfM=
Subject key identifier:   CF:65:49:C9:F3:F5:C7:4B:8B:33:D0:C6:5E:A0:E6:D9:EE:49:37:28
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer:       /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial:       0198D5BBE36890565707C6902B3B7EA8BB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number:          0B6D
Signing time:             Sat 23 Aug 2025 07:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:57 +0000
Files and hashes:         1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: HpJ+CSm0QSBcnzbG9BBjLDZ7iAQdk7SEfKDtrT8XhtE=)
                          2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e3:68:90:56:57:07:c6:90:2b:3b:7e:a8:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
        Validity
            Not Before: Aug 23 07:01:57 2025 GMT
            Not After : Aug 24 07:01:57 2025 GMT
        Subject: CN=cf6549c9f3f5c74b8b33d0c65ea0e6d9ee493728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:dd:ba:f7:72:79:5f:91:db:01:85:a6:6d:
                    12:5b:34:45:08:7a:6a:7d:f2:a9:98:b4:10:bf:0c:
                    2f:c1:b7:e2:86:eb:6d:04:84:8d:09:5a:ad:bb:97:
                    bf:86:91:ec:e4:c7:ff:4a:3b:0f:ca:f1:29:66:d3:
                    9b:7f:dd:9b:b6:bf:94:79:b5:c7:9e:dd:3e:29:89:
                    0d:2f:a0:19:fd:4c:1e:43:7e:bd:37:aa:30:b4:24:
                    7e:03:7d:2c:39:29:9b:35:d9:15:e0:5e:6a:f0:a1:
                    f0:5f:8e:a0:68:56:74:44:8e:65:62:f1:bc:8d:92:
                    5c:80:e2:6b:5a:f5:80:53:a9:98:ed:30:c3:f6:9c:
                    eb:1f:3b:8a:c1:e2:6b:57:27:33:1b:fb:82:d7:e3:
                    db:b0:10:42:a5:2f:67:f6:62:ba:fb:6d:18:28:41:
                    7f:57:ac:7e:bb:4a:ff:68:ff:67:63:b6:65:8a:7e:
                    55:12:40:8f:ba:cb:f2:46:4f:11:c3:f4:48:7f:4b:
                    a9:bc:41:fd:3c:be:54:c1:d1:0e:08:9c:c9:69:4b:
                    23:e9:14:55:c6:7d:1f:03:cd:82:77:90:42:12:6e:
                    51:8a:15:99:ee:29:bd:9b:da:8b:c8:38:ea:47:1c:
                    69:42:e0:b9:c5:fd:83:1d:04:95:01:e9:f6:ce:2a:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:65:49:C9:F3:F5:C7:4B:8B:33:D0:C6:5E:A0:E6:D9:EE:49:37:28
            X509v3 Authority Key Identifier:
                keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:91:38:02:41:42:0a:7a:7e:37:b5:5f:11:c1:b3:e1:14:b1:
         06:7a:1d:34:a4:61:b2:0b:48:71:48:b0:8f:84:4f:4e:bb:71:
         92:73:72:5a:72:e6:a5:de:35:cd:d5:db:54:a6:0c:42:e8:26:
         a4:ea:fc:4f:ed:1a:aa:10:ad:dc:d0:7b:46:c2:6e:16:0a:f3:
         bd:92:8d:0f:d2:37:2f:24:aa:6e:ad:0b:59:aa:13:fe:41:4c:
         8b:b8:82:ea:7a:67:d5:ee:2e:a4:0a:95:28:3f:88:31:d4:0b:
         64:da:ac:f0:99:7d:38:b2:fb:30:6f:ba:70:5f:47:a1:8d:a8:
         04:1b:b3:79:e8:f0:58:1a:56:0a:bb:1b:3c:b0:66:b8:f0:05:
         ec:9d:7d:27:12:f1:27:e1:74:07:ce:59:11:e9:2b:5d:76:6d:
         62:62:e2:5e:3f:6d:18:50:83:17:00:5c:16:67:34:a2:26:34:
         e5:0c:4b:4e:fd:cc:36:7f:8e:63:55:cd:b4:c6:f1:d1:5b:33:
         ac:ad:6d:bc:7e:7a:b9:34:70:09:ec:3e:9f:76:08:b4:53:d7:
         ba:2b:84:47:d3:ae:08:aa:84:b6:39:ae:ef:84:8c:31:e0:5a:
         e1:59:bd:1b:10:61:50:92:0f:93:ed:f2:ea:f5:18:62:21:8d:
         e3:5f:50:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+NokFZXB8aQKzt+qLtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjgwYjRhMzMyN2M1ODNhZWNkYjAzY2VmM2Y2NGYzM2Jk
NTliMDgwHhcNMjUwODIzMDcwMTU3WhcNMjUwODI0MDcwMTU3WjAzMTEwLwYDVQQD
EyhjZjY1NDljOWYzZjVjNzRiOGIzM2QwYzY1ZWEwZTZkOWVlNDkzNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fLduvdyeV+R2wGFpm0SWzRFCHpq
ffKpmLQQvwwvwbfihuttBISNCVqtu5e/hpHs5Mf/SjsPyvEpZtObf92btr+UebXH
nt0+KYkNL6AZ/UweQ369N6owtCR+A30sOSmbNdkV4F5q8KHwX46gaFZ0RI5lYvG8
jZJcgOJrWvWAU6mY7TDD9pzrHzuKweJrVyczG/uC1+PbsBBCpS9n9mK6+20YKEF/
V6x+u0r/aP9nY7Zlin5VEkCPusvyRk8Rw/RIf0upvEH9PL5UwdEOCJzJaUsj6RRV
xn0fA82Cd5BCEm5RihWZ7im9m9qLyDjqRxxpQuC5xf2DHQSVAen2zip/+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9lScnz9cdLizPQxl6g5tnuSTcoMB8GA1UdIwQY
MBaAFBu4C0ozJ8WDrs2wPO8/ZPM71ZsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzIt
ODA3YjdjMmQ2Mzg5LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzItODA3YjdjMmQ2Mzg5
LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpE4AkFC
Cnp+N7VfEcGz4RSxBnodNKRhsgtIcUiwj4RPTrtxknNyWnLmpd41zdXbVKYMQugm
pOr8T+0aqhCt3NB7RsJuFgrzvZKND9I3LySqbq0LWaoT/kFMi7iC6npn1e4upAqV
KD+IMdQLZNqs8Jl9OLL7MG+6cF9HoY2oBBuzeejwWBpWCrsbPLBmuPAF7J19JxLx
J+F0B85ZEekrXXZtYmLiXj9tGFCDFwBcFmc0oiY05QxLTv3MNn+OY1XNtMbx0Vsz
rK1tvH56uTRwCew+n3YItFPXuiuER9OuCKqEtjmu74SMMeBa4Vm9GxBhUJIPk+3y
6vUYYiGN419QRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:51 2025 by rpki-client