Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
File:                     J0iJxEELQxcvQcjBSuqJm7sq2r0.mft (raw, json)
Hash identifier:          rrKfVcQdgtzTuSG1SMl9PLVhhB8fubP3fUl1A9MzSmg=
Subject key identifier:   58:E1:5D:00:6E:8A:47:DD:66:FC:97:59:E2:5E:C2:E8:C3:EB:EA:F3
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Certificate issuer:       /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial:       0198D5BB76C4E546E2AA4366996B4D1C7CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
Manifest number:          0C3D
Signing time:             Sat 23 Aug 2025 07:01:29 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:29 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:29 +0000
Files and hashes:         1: J0iJxEELQxcvQcjBSuqJm7sq2r0.crl (hash: 0lr7GTqB+b+etKPgKKfG52aPoLIY8ipxhSrZr/NYjWM=)
                          2: gFEXxLFUU8a__opADc1vfw8jMw8.roa (hash: GCpDj9Bn6kn9jlHLv2Vqxyqzwpl4Us46FPPhGtO7UYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:76:c4:e5:46:e2:aa:43:66:99:6b:4d:1c:7c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
        Validity
            Not Before: Aug 23 07:01:29 2025 GMT
            Not After : Aug 24 07:01:29 2025 GMT
        Subject: CN=58e15d006e8a47dd66fc9759e25ec2e8c3ebeaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:85:ee:8b:73:1a:01:68:da:5f:a1:94:1f:
                    25:e3:87:97:12:2d:4c:b5:29:a6:2e:4b:d0:27:bc:
                    83:18:a1:2a:ce:cb:0e:b8:c3:b0:33:5c:13:04:a8:
                    eb:d8:df:57:fc:e4:d6:d9:94:4f:43:0f:1f:2c:e7:
                    6d:86:0a:65:06:d1:59:14:06:51:af:b4:4b:80:ae:
                    a5:50:4e:83:65:7d:d0:e6:20:c0:69:a5:a3:48:66:
                    85:9c:31:37:c2:b6:bf:39:7e:bd:b9:23:2a:e4:2f:
                    2a:01:bf:5d:c2:95:e5:86:58:df:57:44:db:d2:7a:
                    6a:5f:47:b0:19:ee:18:f1:7c:66:2f:c5:93:d9:e0:
                    32:7f:cf:92:50:26:d3:70:af:aa:a6:cd:b2:a9:81:
                    e6:c3:2b:14:ed:33:d7:e3:d1:6c:ff:8c:86:c7:d6:
                    15:d0:ea:cd:37:82:4b:2e:d3:a4:f8:c0:18:a2:02:
                    93:63:f9:32:b3:c0:20:82:f6:c2:f2:dc:36:67:d7:
                    10:78:29:2b:db:74:df:3f:0f:00:4a:88:23:8d:0e:
                    c6:0d:d0:16:97:ae:aa:e8:eb:32:0b:67:e0:b3:cb:
                    47:38:36:89:f3:bf:07:cf:92:ea:dc:15:c7:96:48:
                    02:77:ce:cb:80:9d:4e:35:a2:73:5f:20:2d:c7:76:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E1:5D:00:6E:8A:47:DD:66:FC:97:59:E2:5E:C2:E8:C3:EB:EA:F3
            X509v3 Authority Key Identifier:
                keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:96:fc:67:da:04:ad:2a:fb:d6:71:ff:6c:35:f7:7e:98:c7:
         b4:2c:06:1d:08:e9:9c:b1:1b:42:e6:c1:b0:4c:ba:16:80:54:
         87:ce:bc:ac:40:bd:c9:03:df:92:75:d2:32:fb:d7:18:77:d7:
         7e:6b:46:ba:1a:6d:5f:93:3a:07:1e:9e:34:19:1c:15:69:56:
         ce:45:93:8a:a1:14:57:18:29:5c:ae:9c:f3:4e:90:4d:c1:5c:
         24:a7:8f:24:ee:25:2c:25:f0:91:b3:8e:9e:a1:95:25:47:c8:
         c9:4c:54:1e:ea:27:b5:c6:1d:9f:64:52:ba:19:b9:8d:87:75:
         23:5c:fc:94:54:f1:41:49:2d:30:b2:e0:f2:0e:0a:f9:af:49:
         57:9e:88:1b:9e:17:47:2e:be:a5:b8:90:9c:4b:d8:dd:29:43:
         91:7a:b9:3a:b4:fe:9d:ae:98:ef:71:d8:78:6d:b3:fc:ad:d7:
         e7:f4:fd:06:f7:e7:44:ff:d7:87:60:2a:14:fb:ad:bb:cb:19:
         61:52:33:e2:7f:65:af:78:60:d4:d2:03:db:8c:10:ff:54:ea:
         de:7c:65:98:98:6b:2e:00:01:b7:cd:89:f2:ca:65:7f:94:90:
         52:2d:9e:4b:ef:08:8e:6e:02:d8:08:9d:b0:19:56:a7:1d:30:
         01:d7:ec:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu3bE5UbiqkNmmWtNHHz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg4OWM0NDEwYjQzMTcyZjQxYzhjMTRhZWE4OTliYmIy
YWRhYmQwHhcNMjUwODIzMDcwMTI5WhcNMjUwODI0MDcwMTI5WjAzMTEwLwYDVQQD
Eyg1OGUxNWQwMDZlOGE0N2RkNjZmYzk3NTllMjVlYzJlOGMzZWJlYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXiF7otzGgFo2l+hlB8l44eXEi1M
tSmmLkvQJ7yDGKEqzssOuMOwM1wTBKjr2N9X/OTW2ZRPQw8fLOdthgplBtFZFAZR
r7RLgK6lUE6DZX3Q5iDAaaWjSGaFnDE3wra/OX69uSMq5C8qAb9dwpXlhljfV0Tb
0npqX0ewGe4Y8XxmL8WT2eAyf8+SUCbTcK+qps2yqYHmwysU7TPX49Fs/4yGx9YV
0OrNN4JLLtOk+MAYogKTY/kys8AggvbC8tw2Z9cQeCkr23TfPw8ASogjjQ7GDdAW
l66q6OsyC2fgs8tHODaJ878Hz5Lq3BXHlkgCd87LgJ1ONaJzXyAtx3bzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjhXQBuikfdZvyXWeJewujD6+rzMB8GA1UdIwQY
MBaAFCdIicRBC0MXL0HIwUrqiZu7Ktq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjkt
MTlhM2VkYTA1MjRlLzEvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjktMTlhM2VkYTA1MjRl
LzEvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZb8Z9oE
rSr71nH/bDX3fpjHtCwGHQjpnLEbQubBsEy6FoBUh868rEC9yQPfknXSMvvXGHfX
fmtGuhptX5M6Bx6eNBkcFWlWzkWTiqEUVxgpXK6c806QTcFcJKePJO4lLCXwkbOO
nqGVJUfIyUxUHuontcYdn2RSuhm5jYd1I1z8lFTxQUktMLLg8g4K+a9JV56IG54X
Ry6+pbiQnEvY3SlDkXq5OrT+na6Y73HYeG2z/K3X5/T9BvfnRP/Xh2AqFPutu8sZ
YVIz4n9lr3hg1NID24wQ/1Tq3nxlmJhrLgABt82J8splf5SQUi2eS+8Ijm4C2Aid
sBlWpx0wAdfs2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:14 2025 by rpki-client