Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          DDH63HSCGs7awSvjLY7evaak/LCkwKRcq5q/SbHy5Uk=
Subject key identifier:   50:7E:B7:79:B6:5B:10:17:40:1A:6E:39:52:C7:9F:EF:90:A8:9A:24
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       0198D69849A1E2CCD096959827373C8D8D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0D70
Signing time:             Sat 23 Aug 2025 11:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:41 +0000
Files and hashes:         1: 9GGhdBoDldQk4TRK3Mt8lXvX6Vk.roa (hash: C1hQxWybXv6LB3lU6rmAeS741/P8EPjlQiiELyVw4bc=)
                          2: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          3: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: wCj5yKFcXE1RrKE2NRAuRliiAzhapeo38xOH1qmupLo=)
                          5: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=)
                          6: XrYoU1Qtu7kIh7k3ghCaVq1ANas.roa (hash: kmlQRZbBuxfjCIFV/FuQ/zRXRyQ+HVmYIQmDEjdu3CE=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:49:a1:e2:cc:d0:96:95:98:27:37:3c:8d:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Aug 23 11:02:41 2025 GMT
            Not After : Aug 24 11:02:41 2025 GMT
        Subject: CN=507eb779b65b1017401a6e3952c79fef90a89a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:8a:42:8c:35:87:1a:3d:c8:94:1c:66:5a:
                    e0:dc:8b:c5:ff:97:2b:ce:f2:d7:dd:54:d7:84:39:
                    2d:52:e2:84:a3:8a:b0:31:09:f1:cb:17:36:a4:e7:
                    bf:b7:a1:36:4d:6d:1f:be:ac:62:a7:0b:9e:83:16:
                    af:3d:5f:33:1a:05:27:b5:4c:5f:76:3c:88:ee:6e:
                    9d:f9:3b:09:44:db:5f:78:bc:a2:3c:e3:d4:1a:a0:
                    da:cf:2a:98:91:c9:ad:97:57:10:c1:4d:27:5d:57:
                    9c:b9:d1:66:8e:a1:99:df:79:cc:dd:2a:94:7f:0e:
                    49:0a:bc:28:7c:79:17:06:70:76:5a:ff:f8:7e:9b:
                    c9:b3:12:6e:97:11:bb:bf:52:61:16:84:e0:05:30:
                    d8:e4:f2:04:f5:a9:d9:ed:8f:3b:bb:df:e3:b3:76:
                    9b:e4:76:09:aa:b8:c1:8c:d6:83:d8:0a:8d:d7:40:
                    8a:b9:95:50:38:c5:65:46:d2:ad:01:e2:e5:f8:e9:
                    ca:f1:46:c4:c2:05:35:15:41:fa:e2:31:c7:9a:16:
                    37:81:8a:44:80:cc:f6:8f:7f:78:f9:98:fb:9e:ea:
                    ca:9b:55:d7:ae:da:f2:b8:82:77:1a:73:ef:73:13:
                    13:15:eb:34:e9:9e:28:c5:73:d8:64:3e:9b:e3:8b:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:B7:79:B6:5B:10:17:40:1A:6E:39:52:C7:9F:EF:90:A8:9A:24
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:08:fc:4f:2d:2f:68:5e:4a:d0:02:fc:88:06:c7:87:f4:
         7b:8b:bd:68:0a:34:e6:d4:a4:4f:8c:4a:44:e5:56:52:fe:2b:
         49:32:ca:2d:93:a9:06:66:54:a3:5e:4a:3b:2b:63:19:bc:89:
         be:b5:c6:91:63:95:d4:e5:ed:d5:69:b0:25:96:83:02:3c:ba:
         a4:40:c7:7e:7a:34:9f:70:79:64:d1:d7:b0:b7:47:69:5a:69:
         9a:72:1a:7b:40:df:16:f7:e3:bb:2a:d1:20:13:c7:37:d2:13:
         48:18:cc:3b:15:67:d9:42:03:80:46:ab:71:d1:73:c0:4a:07:
         86:21:8b:19:f8:e0:8d:f5:55:cf:c9:b3:77:bf:55:b4:30:ee:
         f3:27:32:f3:4d:67:89:a8:2e:f6:d5:8f:82:b5:30:ba:a2:62:
         cd:87:2c:84:3f:f2:30:bb:8b:5c:67:a5:6e:94:4b:cb:9b:1a:
         bd:1c:13:e7:6e:f0:e4:5b:52:46:d6:7e:e4:24:1b:33:f3:43:
         30:58:d6:63:4f:14:79:cd:a3:6e:bc:0e:ca:af:66:ce:29:6b:
         34:10:c0:22:55:c2:14:d6:2b:c3:1c:29:67:22:49:08:85:9a:
         11:fd:2b:40:4a:fb:c8:38:bd:00:b4:25:bb:9f:c3:c8:29:9d:
         ac:b2:99:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEmh4szQlpWYJzc8jY1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3
NDIxYTYwHhcNMjUwODIzMTEwMjQxWhcNMjUwODI0MTEwMjQxWjAzMTEwLwYDVQQD
Eyg1MDdlYjc3OWI2NWIxMDE3NDAxYTZlMzk1MmM3OWZlZjkwYTg5YTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbyKQow1hxo9yJQcZlrg3IvF/5cr
zvLX3VTXhDktUuKEo4qwMQnxyxc2pOe/t6E2TW0fvqxipwuegxavPV8zGgUntUxf
djyI7m6d+TsJRNtfeLyiPOPUGqDazyqYkcmtl1cQwU0nXVecudFmjqGZ33nM3SqU
fw5JCrwofHkXBnB2Wv/4fpvJsxJulxG7v1JhFoTgBTDY5PIE9anZ7Y87u9/js3ab
5HYJqrjBjNaD2AqN10CKuZVQOMVlRtKtAeLl+OnK8UbEwgU1FUH64jHHmhY3gYpE
gMz2j394+Zj7nurKm1XXrtryuIJ3GnPvcxMTFes06Z4oxXPYZD6b44tvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB+t3m2WxAXQBpuOVLHn++QqJokMB8GA1UdIwQY
MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt
N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy
LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeUI/E8t
L2heStAC/IgGx4f0e4u9aAo05tSkT4xKROVWUv4rSTLKLZOpBmZUo15KOytjGbyJ
vrXGkWOV1OXt1WmwJZaDAjy6pEDHfno0n3B5ZNHXsLdHaVppmnIae0DfFvfjuyrR
IBPHN9ITSBjMOxVn2UIDgEarcdFzwEoHhiGLGfjgjfVVz8mzd79VtDDu8ycy801n
iagu9tWPgrUwuqJizYcshD/yMLuLXGelbpRLy5savRwT527w5FtSRtZ+5CQbM/ND
MFjWY08Uec2jbrwOyq9mzilrNBDAIlXCFNYrwxwpZyJJCIWaEf0rQEr7yDi9ALQl
u5/DyCmdrLKZuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:27 2025 by rpki-client