Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File:                     xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier:          16AMVtSKmJIXJOT1Ni/zq1l7huRO3vjK3xXTr4OiBkQ=
Subject key identifier:   45:FB:2E:BB:CC:4E:D3:9C:4F:C7:66:7A:9A:AC:E3:B2:21:E9:A5:D1
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer:       /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial:       0198D54E524F19321EFD8F1B901B63DB047D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number:          0CCB
Signing time:             Sat 23 Aug 2025 05:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:16 +0000
Files and hashes:         1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
                          2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: W8AS4ybeecWkF46T6JRWlsiU1kv6bWh+EnGJC1jiMEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:52:4f:19:32:1e:fd:8f:1b:90:1b:63:db:04:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
        Validity
            Not Before: Aug 23 05:02:16 2025 GMT
            Not After : Aug 24 05:02:16 2025 GMT
        Subject: CN=45fb2ebbcc4ed39c4fc7667a9aace3b221e9a5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:09:d0:6e:1f:35:27:62:39:45:e1:fc:b7:
                    4f:98:fa:7e:d8:7a:ec:ea:3f:87:4f:03:88:77:58:
                    4a:f6:09:84:5e:73:f6:cf:a0:36:be:64:de:62:b0:
                    7b:70:dc:bf:64:c4:30:2b:bc:52:c5:bf:ca:2f:92:
                    ea:bc:a8:45:b1:68:48:71:0f:9c:8d:2e:17:54:c9:
                    f6:5a:41:a0:58:d7:38:26:24:82:12:09:00:cd:d3:
                    49:e5:d4:57:96:56:30:54:bd:b2:49:17:6a:2b:1e:
                    1d:15:18:5e:01:b4:1d:0a:ab:fd:71:38:f2:47:86:
                    88:69:6a:f6:a2:ba:70:62:50:7f:62:7e:d7:3b:2a:
                    3d:b6:67:31:23:fa:ee:c3:43:a5:86:49:e5:7e:b1:
                    cb:ee:4d:66:0e:1f:41:82:6a:90:27:bc:15:53:ac:
                    46:d7:cb:7e:57:68:d5:24:91:16:9b:e6:6c:1b:f7:
                    c7:35:2e:2e:bc:b6:6f:13:fb:77:cf:bc:90:4c:40:
                    54:8b:c9:8e:99:d5:3c:7b:3a:9f:57:98:14:89:28:
                    61:7a:89:cf:07:0e:aa:2f:80:ac:f7:0b:8e:c3:3c:
                    db:c3:0d:9b:37:38:35:56:64:25:ef:40:3b:e4:de:
                    72:5f:4b:49:f4:c3:9d:31:76:e0:f5:2c:57:7f:9f:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FB:2E:BB:CC:4E:D3:9C:4F:C7:66:7A:9A:AC:E3:B2:21:E9:A5:D1
            X509v3 Authority Key Identifier:
                keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:71:15:e6:35:17:16:75:12:8d:7a:8f:ba:de:5d:ac:17:
         b1:89:03:c6:be:70:e2:f2:86:8e:33:d7:85:85:15:ab:bd:a9:
         48:be:e4:18:59:81:b9:16:1b:c2:66:a5:b9:32:77:61:f1:c1:
         a1:c7:20:d7:82:2e:86:e6:35:bf:15:98:af:3e:95:c9:33:a2:
         1f:4e:c1:08:02:71:02:e4:ef:34:96:16:83:d5:54:cd:2e:d9:
         1e:68:a9:30:d2:c5:4d:d5:81:da:7a:e8:74:e5:85:2c:17:58:
         85:4f:ca:54:ab:a9:6e:39:8b:3b:67:2e:f8:e2:06:f0:a9:1c:
         da:9f:57:17:6a:5b:03:cd:49:45:c1:ea:22:7c:14:39:f2:d5:
         f8:b6:0e:0e:d1:95:11:26:5f:d9:a8:70:86:cd:ab:8c:44:e8:
         9a:89:01:00:ad:17:11:8a:75:ce:7e:56:ab:f0:03:49:4b:de:
         bb:a1:60:36:11:1e:60:0c:51:05:a9:8d:33:6e:75:1c:25:1f:
         e3:35:82:d0:ba:9a:0c:fe:93:3d:c1:f2:93:32:42:c8:df:7e:
         a5:6c:29:b3:3f:4b:be:a4:62:3d:5f:67:97:4b:fc:02:cc:68:
         99:16:d5:01:f5:4e:a3:4b:07:5b:e5:9f:ca:6d:bf:70:0e:71:
         63:03:4f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTlJPGTIe/Y8bkBtj2wR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj
YjdlZjkwHhcNMjUwODIzMDUwMjE2WhcNMjUwODI0MDUwMjE2WjAzMTEwLwYDVQQD
Eyg0NWZiMmViYmNjNGVkMzljNGZjNzY2N2E5YWFjZTNiMjIxZTlhNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0sJ0G4fNSdiOUXh/LdPmPp+2Hrs
6j+HTwOId1hK9gmEXnP2z6A2vmTeYrB7cNy/ZMQwK7xSxb/KL5LqvKhFsWhIcQ+c
jS4XVMn2WkGgWNc4JiSCEgkAzdNJ5dRXllYwVL2ySRdqKx4dFRheAbQdCqv9cTjy
R4aIaWr2orpwYlB/Yn7XOyo9tmcxI/ruw0OlhknlfrHL7k1mDh9BgmqQJ7wVU6xG
18t+V2jVJJEWm+ZsG/fHNS4uvLZvE/t3z7yQTEBUi8mOmdU8ezqfV5gUiShheonP
Bw6qL4Cs9wuOwzzbww2bNzg1VmQl70A75N5yX0tJ9MOdMXbg9SxXf580AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX7LrvMTtOcT8dmepqs47Ih6aXRMB8GA1UdIwQY
MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt
MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk
LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/xxFeY1
FxZ1Eo16j7reXawXsYkDxr5w4vKGjjPXhYUVq72pSL7kGFmBuRYbwmaluTJ3YfHB
occg14IuhuY1vxWYrz6VyTOiH07BCAJxAuTvNJYWg9VUzS7ZHmipMNLFTdWB2nro
dOWFLBdYhU/KVKupbjmLO2cu+OIG8Kkc2p9XF2pbA81JRcHqInwUOfLV+LYODtGV
ESZf2ahwhs2rjETomokBAK0XEYp1zn5Wq/ADSUveu6FgNhEeYAxRBamNM251HCUf
4zWC0LqaDP6TPcHykzJCyN9+pWwpsz9LvqRiPV9nl0v8AsxomRbVAfVOo0sHW+Wf
ym2/cA5xYwNPqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:54 2025 by rpki-client