Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File:                     grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier:          9G0yzwYmgZfHM0+Zzli6zwn2oWTCJjl0rzo1RsJiHR8=
Subject key identifier:   0D:EC:A8:70:84:F1:E8:34:F9:23:90:80:A4:1F:62:F5:B6:E6:C8:2B
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer:       /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial:       0197B77CC49030DE595E1705015CE3B3E472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number:          0D4E
Signing time:             Sat 28 Jun 2025 17:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:36 +0000
Files and hashes:         1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
                          2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: Bb84IgJfx4yGI2mF3abyGpVPp58suJJvs4SFQo/Bvg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:c4:90:30:de:59:5e:17:05:01:5c:e3:b3:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
        Validity
            Not Before: Jun 28 17:01:36 2025 GMT
            Not After : Jun 29 17:01:36 2025 GMT
        Subject: CN=0deca87084f1e834f9239080a41f62f5b6e6c82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:98:6a:c1:80:e2:1d:6b:08:3b:03:e7:f1:
                    1a:b7:93:33:f0:5b:1e:44:af:09:32:33:35:b8:60:
                    1d:29:84:a9:97:18:1f:72:4e:2a:9f:25:45:4c:84:
                    06:94:22:dd:af:7d:a0:3e:54:45:a8:6e:06:f6:7b:
                    38:c8:6b:f9:97:8f:3c:bf:5e:8c:75:54:bf:9b:29:
                    c6:ef:e7:6e:c3:1b:29:6b:bb:17:6e:9d:24:8a:ac:
                    19:eb:39:11:a0:40:81:9c:11:90:59:dc:8a:3b:72:
                    d2:ce:03:68:bf:97:2f:38:12:c0:cc:b4:82:85:82:
                    94:4e:4e:9a:f8:d0:5d:54:08:17:0c:29:26:8a:19:
                    ed:17:3f:ec:99:bf:40:93:63:59:63:8c:c5:b2:bf:
                    ef:e4:92:09:c1:dc:b4:01:08:88:c7:b1:bb:3d:d1:
                    91:bd:81:ef:31:c8:ee:fd:ba:3b:9a:ae:8f:0e:a2:
                    14:bd:f5:75:3e:34:d4:ff:ae:43:21:6a:9b:b7:06:
                    8e:60:89:48:a8:40:9e:92:89:cc:a8:aa:bc:42:26:
                    0b:c7:00:6b:96:2d:56:df:f9:5f:a5:9f:01:51:cf:
                    c3:dc:53:e3:a5:7d:83:88:08:7f:7e:ce:11:a6:31:
                    77:38:ce:2f:d0:60:9c:d8:a0:0d:69:d9:63:7e:34:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EC:A8:70:84:F1:E8:34:F9:23:90:80:A4:1F:62:F5:B6:E6:C8:2B
            X509v3 Authority Key Identifier:
                keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:da:c0:c2:1d:ca:92:e1:07:e7:e2:1e:53:d7:74:f0:1a:24:
         05:dd:2c:a6:59:c6:79:a7:a2:f5:a4:80:db:e8:23:b1:09:7c:
         2b:59:06:1c:15:57:ee:e6:83:fc:1f:a9:1f:a4:2a:ea:78:63:
         9d:67:43:22:e2:5e:5c:a7:65:e9:83:ba:fa:41:d0:aa:4c:73:
         e5:f9:4a:0a:3a:b2:0c:dd:ca:fa:6a:36:4b:3a:65:cc:c7:75:
         9f:67:40:b6:51:79:06:51:37:27:01:7c:73:c1:ca:1c:66:29:
         42:02:2e:8f:a6:b5:fe:c8:9f:c8:e7:70:1d:c9:90:65:e4:1b:
         ea:a5:36:5f:ff:01:11:e3:a3:9b:29:b9:13:9a:c0:3e:06:03:
         5b:82:b2:1c:76:69:f4:78:40:66:51:d5:4a:83:94:2a:71:ca:
         04:a0:cd:12:96:25:74:37:2c:d0:77:ab:df:9a:8b:6f:97:be:
         6e:e0:c4:c8:8d:98:ad:a6:56:a1:1a:3b:59:51:e5:a6:2e:54:
         0e:47:86:6a:9f:19:98:fe:8f:fc:1f:4b:11:dd:f2:9b:5b:c7:
         4c:a8:5c:7d:6d:89:61:7c:f9:82:02:85:91:eb:c1:3d:5c:64:
         63:6f:6f:7c:2d:a5:2c:a6:e5:9f:1b:01:18:36:cc:e1:cb:ca:
         90:b6:0e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fMSQMN5ZXhcFAVzjs+RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjEyZWNmYjIyZjI5ZDYwYTNlMzFiNzlmMzYyZGQ2MGMy
ZDRjMTAwHhcNMjUwNjI4MTcwMTM2WhcNMjUwNjI5MTcwMTM2WjAzMTEwLwYDVQQD
EygwZGVjYTg3MDg0ZjFlODM0ZjkyMzkwODBhNDFmNjJmNWI2ZTZjODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRKYasGA4h1rCDsD5/Eat5Mz8Fse
RK8JMjM1uGAdKYSplxgfck4qnyVFTIQGlCLdr32gPlRFqG4G9ns4yGv5l488v16M
dVS/mynG7+duwxspa7sXbp0kiqwZ6zkRoECBnBGQWdyKO3LSzgNov5cvOBLAzLSC
hYKUTk6a+NBdVAgXDCkmihntFz/smb9Ak2NZY4zFsr/v5JIJwdy0AQiIx7G7PdGR
vYHvMcju/bo7mq6PDqIUvfV1PjTU/65DIWqbtwaOYIlIqECekonMqKq8QiYLxwBr
li1W3/lfpZ8BUc/D3FPjpX2DiAh/fs4RpjF3OM4v0GCc2KANadljfjTfhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3sqHCE8eg0+SOQgKQfYvW25sgrMB8GA1UdIwQY
MBaAFIKxLs+yLynWCj4xt582LdYMLUwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEt
MmIwZWFiM2QzZDM3LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hNWM3MzgtM2RmNS00ZTAyLWFmMzEtMmIwZWFiM2QzZDM3
LzEvZ3JFdXo3SXZLZFlLUGpHM256WXQxZ3d0VEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNrAwh3K
kuEH5+IeU9d08BokBd0splnGeaei9aSA2+gjsQl8K1kGHBVX7uaD/B+pH6Qq6nhj
nWdDIuJeXKdl6YO6+kHQqkxz5flKCjqyDN3K+mo2SzplzMd1n2dAtlF5BlE3JwF8
c8HKHGYpQgIuj6a1/sifyOdwHcmQZeQb6qU2X/8BEeOjmym5E5rAPgYDW4KyHHZp
9HhAZlHVSoOUKnHKBKDNEpYldDcs0Her35qLb5e+buDEyI2YraZWoRo7WVHlpi5U
DkeGap8ZmP6P/B9LEd3ym1vHTKhcfW2JYXz5ggKFkevBPVxkY29vfC2lLKblnxsB
GDbM4cvKkLYOzg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:06 2025 by rpki-client