Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File:                     CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier:          baEMYKzEE0OvzEn3yeRXOxYl7XxjN0dX2HWCCpR1y4o=
Subject key identifier:   34:9A:55:35:87:92:A9:7F:C3:6A:03:5F:34:A3:E5:85:43:F1:6C:E0
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer:       /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial:       0198D6CD298546BD34F133A0800E2C2651D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number:          0F34
Signing time:             Sat 23 Aug 2025 12:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:26 +0000
Files and hashes:         1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: Nv+Rxr+Um2seCemxcNJrnGexxsA0yM6EPKxWmiup6Rs=)
                          2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:29:85:46:bd:34:f1:33:a0:80:0e:2c:26:51:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
        Validity
            Not Before: Aug 23 12:00:26 2025 GMT
            Not After : Aug 24 12:00:26 2025 GMT
        Subject: CN=349a55358792a97fc36a035f34a3e58543f16ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:68:92:58:c3:af:36:eb:c6:12:03:02:f2:
                    f7:35:f6:00:25:c4:1d:fb:47:6c:9f:2c:2c:e7:9c:
                    6f:24:1b:89:73:e7:e0:0e:bb:ea:a7:8c:f5:b1:a1:
                    e2:e7:03:88:ca:08:db:37:7d:0c:7a:f6:af:fb:d8:
                    70:2c:16:e0:23:18:0c:9e:52:3d:e6:20:b0:f7:03:
                    53:7a:55:c3:53:e5:5e:29:ca:95:94:eb:27:7f:55:
                    14:e8:ca:8e:67:44:b5:45:2d:ff:fb:6b:5e:2f:9a:
                    23:91:a0:fe:ef:da:92:60:dd:a2:64:68:94:18:90:
                    db:60:a7:1c:94:42:55:74:43:7f:d9:72:62:a0:9b:
                    07:65:d0:52:4e:1c:b2:09:fc:82:fd:82:b9:9d:07:
                    8f:de:55:57:e0:c3:6b:57:a8:b8:5f:f6:4e:5b:d9:
                    b9:5e:62:79:78:e1:b1:dd:e7:6e:96:e8:a3:6a:90:
                    7f:97:97:4f:8a:10:e0:5d:31:48:49:3e:a2:8e:17:
                    30:4a:eb:fe:5f:a3:d4:23:c1:27:f2:66:95:bb:05:
                    9c:5d:87:d3:6b:f3:4f:44:8a:d8:b9:4f:98:fd:ed:
                    89:49:a7:af:20:14:d0:e1:2c:9d:af:ff:fc:bc:2d:
                    8c:83:24:d6:24:af:ff:e2:93:b6:37:cf:ce:0b:e1:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9A:55:35:87:92:A9:7F:C3:6A:03:5F:34:A3:E5:85:43:F1:6C:E0
            X509v3 Authority Key Identifier:
                keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:75:91:58:3f:1d:32:d9:8f:ca:eb:8b:6c:29:9a:f7:6b:
         05:32:cc:5b:ed:38:80:99:e6:42:c0:d4:4d:f5:39:1f:6f:2e:
         16:6c:e4:b6:38:8b:c2:54:a4:6e:d5:ce:9b:d4:1f:5c:2c:0c:
         ef:70:b1:bb:95:14:19:a1:15:0c:83:ed:b1:84:ac:69:0a:8f:
         a6:a6:95:fc:92:43:7b:e3:3f:9e:ff:82:73:e8:79:b3:6c:92:
         a3:44:76:35:1d:96:b0:b4:ee:65:5d:6c:62:48:16:a4:5b:e1:
         5b:b8:bf:4c:88:25:7f:84:f6:ff:bd:95:70:65:a9:ce:28:a0:
         5a:9c:ed:19:9c:06:bc:bf:50:b1:2c:fe:26:cc:69:08:4c:de:
         a5:7c:1e:39:24:e2:7d:94:1b:a0:7e:7b:03:ef:22:07:0a:0b:
         19:97:d5:39:15:92:36:8b:7a:a7:89:c3:14:84:b2:1a:06:a8:
         9e:be:16:12:30:3e:3a:37:a4:1f:3b:05:72:6b:19:6c:cc:6a:
         54:01:f4:c2:38:62:19:85:9c:f9:27:a8:36:81:d8:6a:86:be:
         f8:42:f1:d2:6c:e2:5c:74:f7:1a:22:ba:62:d3:e6:71:44:dd:
         01:51:1a:0d:b1:35:6d:1e:b7:7e:9d:0c:a2:a7:23:ed:49:7f:
         2a:48:d9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzSmFRr008TOggA4sJlHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx
ODBmNTMwHhcNMjUwODIzMTIwMDI2WhcNMjUwODI0MTIwMDI2WjAzMTEwLwYDVQQD
EygzNDlhNTUzNTg3OTJhOTdmYzM2YTAzNWYzNGEzZTU4NTQzZjE2Y2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNokljDrzbrxhIDAvL3NfYAJcQd
+0dsnyws55xvJBuJc+fgDrvqp4z1saHi5wOIygjbN30Mevav+9hwLBbgIxgMnlI9
5iCw9wNTelXDU+VeKcqVlOsnf1UU6MqOZ0S1RS3/+2teL5ojkaD+79qSYN2iZGiU
GJDbYKcclEJVdEN/2XJioJsHZdBSThyyCfyC/YK5nQeP3lVX4MNrV6i4X/ZOW9m5
XmJ5eOGx3eduluijapB/l5dPihDgXTFIST6ijhcwSuv+X6PUI8En8maVuwWcXYfT
a/NPRIrYuU+Y/e2JSaevIBTQ4Sydr//8vC2MgyTWJK//4pO2N8/OC+GczQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSaVTWHkql/w2oDXzSj5YVD8WzgMB8GA1UdIwQY
MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt
MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1
LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALON1kVg/
HTLZj8rri2wpmvdrBTLMW+04gJnmQsDUTfU5H28uFmzktjiLwlSkbtXOm9QfXCwM
73Cxu5UUGaEVDIPtsYSsaQqPpqaV/JJDe+M/nv+Cc+h5s2ySo0R2NR2WsLTuZV1s
YkgWpFvhW7i/TIglf4T2/72VcGWpziigWpztGZwGvL9QsSz+JsxpCEzepXweOSTi
fZQboH57A+8iBwoLGZfVORWSNot6p4nDFISyGgaonr4WEjA+OjekHzsFcmsZbMxq
VAH0wjhiGYWc+SeoNoHYaoa++ELx0mziXHT3GiK6YtPmcUTdAVEaDbE1bR63fp0M
oqcj7Ul/KkjZxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:17 2025 by rpki-client