Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
File:                     oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json)
Hash identifier:          d2ksCGD1l/eXKvGAf8tBdvbtI0kftWnZW+VygsH+n5A=
Subject key identifier:   DA:5D:5E:69:70:E2:4D:2E:94:DF:9A:F1:B3:7B:2E:8D:61:E7:CC:2B
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Certificate issuer:       /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial:       0197CB02BCED4B661A775756AA54E86A85F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
Manifest number:          09D4
Signing time:             Wed 02 Jul 2025 12:00:43 +0000
Manifest this update:     Wed 02 Jul 2025 12:00:43 +0000
Manifest next update:     Thu 03 Jul 2025 12:00:43 +0000
Files and hashes:         1: 6C7YcOFbadpcBk89Kuw0b1IqBF8.roa (hash: JbrRL4XZEv8Qmzh9zhvfoh7MCjeFilO/YQNFSTXbxbU=)
                          2: afO4hurvSrIP8znsQqZfWzAuCaw.roa (hash: 70XSJfwfBkJ1Y0qZMAnSwxD3V2qHt8opBQA7D5EoDdk=)
                          3: kYhmSty-d_ExIwjwR5061_8Q4y4.roa (hash: XsyaryVywDYH63Ckgtc54CuYpstFZ59p93FzqWrMEwU=)
                          4: lN5bAYLSZHAwGqZpVoi0mXKyoiw.roa (hash: skc9h0XzUKTO/Y3W3Op67ibVUlzF0ggKQikZJTSQVTA=)
                          5: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: u54qofTTcnBe7o2avSEw2d+X/nLcJuwoOVcLolCTtlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:02:bc:ed:4b:66:1a:77:57:56:aa:54:e8:6a:85:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
        Validity
            Not Before: Jul  2 12:00:43 2025 GMT
            Not After : Jul  3 12:00:43 2025 GMT
        Subject: CN=da5d5e6970e24d2e94df9af1b37b2e8d61e7cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:fe:ff:df:2d:a9:c0:12:dd:7d:26:8f:d5:
                    cb:05:9e:e4:ec:57:a7:e8:a6:14:d5:dd:08:83:d4:
                    a8:f8:59:14:31:d5:9e:ce:a0:52:e4:5a:32:56:a8:
                    2d:11:21:b7:58:a0:37:d3:04:66:2b:5f:6a:b7:ed:
                    6c:27:9a:31:59:d5:bc:b1:2e:1f:f1:63:03:87:95:
                    e6:82:43:3c:47:9f:44:78:69:f0:71:b8:2f:e6:75:
                    7f:2a:80:d9:7a:b2:34:6a:23:d8:17:2c:4d:aa:3e:
                    6d:9e:b6:f9:a6:0d:d7:3c:c7:e5:bc:18:aa:31:8a:
                    e3:e8:09:ca:a2:db:3b:4d:d3:34:3f:e4:02:2c:1b:
                    ac:a0:02:b0:f5:19:90:a0:20:50:e3:de:d3:ec:dc:
                    a7:fd:83:1e:44:64:7b:51:49:0e:b7:85:00:cd:46:
                    f5:2c:59:53:3c:03:e3:45:85:e0:15:03:bf:be:30:
                    c7:45:23:a8:44:1f:17:00:cc:23:ae:bf:f0:1f:fb:
                    7f:e4:2d:3b:8c:97:93:c6:aa:0a:a4:8d:b3:65:97:
                    56:c2:f9:e0:40:e2:35:2f:ea:02:ec:45:57:cc:40:
                    27:d9:0b:62:6b:0d:54:38:57:b2:29:6e:c1:e1:d9:
                    99:a6:b1:61:7f:1c:01:82:48:2a:17:25:ee:95:50:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5D:5E:69:70:E2:4D:2E:94:DF:9A:F1:B3:7B:2E:8D:61:E7:CC:2B
            X509v3 Authority Key Identifier:
                keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5b:0a:ed:d9:a9:75:b2:ea:d8:32:2f:66:78:ef:7a:9a:58:
         80:3d:32:d4:20:bc:de:5a:19:9a:66:ad:b2:f9:c1:3a:f6:cd:
         4e:49:e1:cc:b4:9e:7e:43:0a:24:d8:fb:4b:1b:da:c0:04:23:
         77:2b:f6:7a:b3:95:7c:06:09:84:e7:8a:ee:e6:f5:8a:44:d1:
         4d:94:94:62:7b:21:fe:bf:5a:ce:e1:e1:77:09:f3:2f:53:6d:
         6e:63:8d:96:37:25:a4:36:3f:f4:64:2d:49:3f:40:57:e6:08:
         92:5c:b5:63:09:4b:66:a5:ae:31:9d:ef:1c:2c:f8:10:ef:bd:
         51:85:c1:aa:7a:c8:2d:1d:f3:dd:ce:05:b4:fa:2f:f7:b1:83:
         1a:8b:24:18:1c:b6:a6:03:56:4c:ce:20:fd:0b:be:15:b2:fa:
         8e:32:c5:3e:03:f7:16:e3:70:cc:0e:5d:5d:88:db:80:e9:bf:
         71:90:9a:3b:65:fd:45:87:84:d3:50:1f:90:cd:40:1c:7e:e0:
         85:26:97:e9:d0:e3:fa:48:b2:c7:8c:2d:db:47:20:2d:84:f7:
         ca:c3:f5:f3:4b:f4:74:4a:83:bb:f1:13:5f:b9:e3:96:00:29:
         a8:1c:25:ad:2c:2d:7a:42:36:03:b4:25:e8:b2:c8:fd:9c:c9:
         2b:cb:5e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLArztS2Yad1dWqlToaoX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh
ZDBkMmIwHhcNMjUwNzAyMTIwMDQzWhcNMjUwNzAzMTIwMDQzWjAzMTEwLwYDVQQD
EyhkYTVkNWU2OTcwZTI0ZDJlOTRkZjlhZjFiMzdiMmU4ZDYxZTdjYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfL+/98tqcAS3X0mj9XLBZ7k7Fen
6KYU1d0Ig9So+FkUMdWezqBS5FoyVqgtESG3WKA30wRmK19qt+1sJ5oxWdW8sS4f
8WMDh5XmgkM8R59EeGnwcbgv5nV/KoDZerI0aiPYFyxNqj5tnrb5pg3XPMflvBiq
MYrj6AnKots7TdM0P+QCLBusoAKw9RmQoCBQ497T7Nyn/YMeRGR7UUkOt4UAzUb1
LFlTPAPjRYXgFQO/vjDHRSOoRB8XAMwjrr/wH/t/5C07jJeTxqoKpI2zZZdWwvng
QOI1L+oC7EVXzEAn2Qtiaw1UOFeyKW7B4dmZprFhfxwBgkgqFyXulVBqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpdXmlw4k0ulN+a8bN7Lo1h58wrMB8GA1UdIwQY
MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt
NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk
LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlsK7dmp
dbLq2DIvZnjveppYgD0y1CC83loZmmatsvnBOvbNTknhzLSefkMKJNj7SxvawAQj
dyv2erOVfAYJhOeK7ub1ikTRTZSUYnsh/r9azuHhdwnzL1NtbmONljclpDY/9GQt
ST9AV+YIkly1YwlLZqWuMZ3vHCz4EO+9UYXBqnrILR3z3c4FtPov97GDGoskGBy2
pgNWTM4g/Qu+FbL6jjLFPgP3FuNwzA5dXYjbgOm/cZCaO2X9RYeE01AfkM1AHH7g
hSaX6dDj+kiyx4wt20cgLYT3ysP180v0dEqDu/ETX7njlgApqBwlrSwtekI2A7Ql
6LLI/ZzJK8teyA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:33 2025 by rpki-client