Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File:                     Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier:          1pAyZeaBHZjLQgtqzYy47WhvBH6umgORMtTsu6ejzCo=
Subject key identifier:   C0:01:C8:C9:E0:E5:D7:86:16:74:BE:5B:F9:65:C5:76:6E:3A:E9:AE
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       0198D472BBC90DC5FC97790B65EC6A26B155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number:          15DC
Signing time:             Sat 23 Aug 2025 01:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:25 +0000
Files and hashes:         1: IqkEA-rqe3obsi9U0tATjcGiORw.roa (hash: pdv/Uop5nT0xWWcfbMOXH1ucooA/J/I4hHoF5p2oy/A=)
                          2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: 3N5iGqIk0Mf2yXG6kxh2ALXIdOKxQaDTE5nPHzXE2/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:bb:c9:0d:c5:fc:97:79:0b:65:ec:6a:26:b1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Aug 23 01:02:25 2025 GMT
            Not After : Aug 24 01:02:25 2025 GMT
        Subject: CN=c001c8c9e0e5d7861674be5bf965c5766e3ae9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:16:48:24:59:2d:d5:08:b2:af:31:8c:67:
                    e2:f0:b9:46:e9:c2:20:24:e0:08:a1:17:77:f8:1e:
                    d3:1e:0f:cd:77:54:8a:25:d2:13:3c:06:f6:6f:48:
                    4e:24:9f:53:63:0c:d6:b4:58:31:60:e9:43:87:88:
                    8a:d8:33:71:fc:ef:2e:35:d3:67:b4:d8:30:67:e7:
                    f1:1d:f5:9c:23:45:2e:35:de:f4:d6:b4:6e:10:43:
                    f3:28:12:9a:20:4a:57:7f:84:d4:9b:01:63:77:1f:
                    78:c1:bf:4f:91:a0:7b:cc:51:f8:5b:c5:71:a9:48:
                    c6:cd:81:0c:cb:a5:93:58:35:94:95:87:69:29:36:
                    5a:75:44:02:a0:55:58:53:e6:7f:18:d3:48:01:8d:
                    4c:98:e2:36:15:48:67:6b:91:7b:73:94:c7:e8:c4:
                    04:86:f6:53:a8:3d:d9:b0:8a:f5:9c:4a:d9:32:42:
                    d7:8b:59:01:6b:97:59:00:c7:6b:47:9d:59:2c:3c:
                    fe:1a:15:34:71:d8:03:8e:5e:ef:b1:9a:6c:1c:66:
                    d0:67:54:37:70:e5:9c:55:9b:ec:ed:cf:e0:1d:d6:
                    3a:b1:88:1a:fa:5b:ac:90:bf:fa:37:f2:34:65:11:
                    17:5f:be:e3:d0:b3:df:89:95:84:4f:95:c8:a9:ac:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:01:C8:C9:E0:E5:D7:86:16:74:BE:5B:F9:65:C5:76:6E:3A:E9:AE
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:38:da:b8:4e:7a:50:7a:b6:92:f8:cc:72:43:c9:c3:14:
         05:86:1e:f6:04:21:90:75:e7:b1:34:8c:0c:03:a9:ad:3f:0d:
         1f:8e:fb:59:2b:2a:8e:64:c7:5f:5b:6d:29:11:9f:f3:ed:49:
         a5:1e:5d:df:74:39:2e:6a:19:c4:35:89:93:ff:a3:96:02:00:
         66:fc:2e:e0:66:a9:52:a6:31:cd:2a:4a:d0:8a:02:a7:4b:39:
         ca:6c:ba:f3:ee:a6:c5:ae:f7:db:c8:10:e2:2b:ac:64:34:27:
         93:5b:e1:03:48:13:a9:1d:0d:24:eb:22:e3:ad:b7:58:f3:d5:
         39:d3:83:89:84:d5:ef:9f:49:18:69:55:bc:66:5c:41:c1:ff:
         05:72:34:99:e5:ec:e7:bb:bc:da:3c:ba:5d:e5:66:55:2f:3f:
         72:c8:a0:7e:cd:e6:dd:cd:fa:7a:46:0d:f7:b3:02:1a:e4:40:
         06:50:df:f4:11:f4:07:b5:3d:65:59:b2:92:14:68:37:93:e6:
         a8:eb:79:ac:c5:62:3b:8a:2a:f7:24:1b:cb:f7:50:42:94:cf:
         81:08:cb:2c:2b:97:c0:b8:02:b3:32:3b:c5:64:86:0f:c5:17:
         a9:e2:dd:3e:c7:0b:48:07:20:7e:2f:ac:f7:e4:be:cb:9d:91:
         97:a7:08:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcrvJDcX8l3kLZexqJrFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGU3YzBjZWI0YmEyYTZmNGI5NmZjNGJhZTFhYmI4NTMw
MzVhYmEwHhcNMjUwODIzMDEwMjI1WhcNMjUwODI0MDEwMjI1WjAzMTEwLwYDVQQD
EyhjMDAxYzhjOWUwZTVkNzg2MTY3NGJlNWJmOTY1YzU3NjZlM2FlOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAoWSCRZLdUIsq8xjGfi8LlG6cIg
JOAIoRd3+B7THg/Nd1SKJdITPAb2b0hOJJ9TYwzWtFgxYOlDh4iK2DNx/O8uNdNn
tNgwZ+fxHfWcI0UuNd701rRuEEPzKBKaIEpXf4TUmwFjdx94wb9PkaB7zFH4W8Vx
qUjGzYEMy6WTWDWUlYdpKTZadUQCoFVYU+Z/GNNIAY1MmOI2FUhna5F7c5TH6MQE
hvZTqD3ZsIr1nErZMkLXi1kBa5dZAMdrR51ZLDz+GhU0cdgDjl7vsZpsHGbQZ1Q3
cOWcVZvs7c/gHdY6sYga+luskL/6N/I0ZREXX77j0LPfiZWET5XIqawEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAByMng5deGFnS+W/llxXZuOumuMB8GA1UdIwQY
MBaAFDIOfAzrS6Km9LlvxLrhq7hTA1q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUt
MThhYWRkNjU5NTY2LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUtMThhYWRkNjU5NTY2
LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/s42rhO
elB6tpL4zHJDycMUBYYe9gQhkHXnsTSMDAOprT8NH477WSsqjmTHX1ttKRGf8+1J
pR5d33Q5LmoZxDWJk/+jlgIAZvwu4GapUqYxzSpK0IoCp0s5ymy68+6mxa7328gQ
4iusZDQnk1vhA0gTqR0NJOsi4623WPPVOdODiYTV759JGGlVvGZcQcH/BXI0meXs
57u82jy6XeVmVS8/csigfs3m3c36ekYN97MCGuRABlDf9BH0B7U9ZVmykhRoN5Pm
qOt5rMViO4oq9yQby/dQQpTPgQjLLCuXwLgCszI7xWSGD8UXqeLdPscLSAcgfi+s
9+S+y52Rl6cI1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:29 2025 by rpki-client