Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File:                     D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier:          v6NgqxUd9gqevmr5gxlVNeSs44dNOtYRkRcPALZuqtc=
Subject key identifier:   87:17:76:DF:F1:22:DB:D8:11:8C:B8:E2:3E:0B:E1:25:30:CE:CF:49
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer:       /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial:       0198D7061BBD7E2AF01850318E7DCE21C8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number:          1539
Signing time:             Sat 23 Aug 2025 13:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:38 +0000
Files and hashes:         1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: A9X3VXLBzQv7NdejUlkAhSribPzAAY//oHortoVAxFA=)
                          2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:1b:bd:7e:2a:f0:18:50:31:8e:7d:ce:21:c8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
        Validity
            Not Before: Aug 23 13:02:38 2025 GMT
            Not After : Aug 24 13:02:38 2025 GMT
        Subject: CN=871776dff122dbd8118cb8e23e0be12530cecf49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:d4:52:31:ea:28:c1:2a:9c:3e:86:04:ea:
                    f1:17:04:66:ec:f1:d9:84:41:d3:60:e3:2a:b4:04:
                    62:34:79:92:2d:86:1d:db:11:c0:56:e7:66:72:b6:
                    d8:26:9d:5a:b1:9d:bd:51:3c:4b:73:f3:59:c3:52:
                    f8:9b:01:09:bb:e4:3f:71:3b:0b:36:64:d3:fa:1f:
                    fb:f2:58:2e:0e:de:05:a4:61:70:29:f4:e9:48:77:
                    6f:19:35:be:c2:23:5d:de:8b:17:97:82:08:e1:55:
                    c9:be:c0:0c:fa:c1:82:ca:c0:d7:f4:f9:f6:cf:ed:
                    a1:64:b9:01:d9:87:cd:70:64:41:8f:0c:43:a6:fa:
                    88:0b:df:2d:c9:34:e5:08:65:08:3e:1f:43:98:14:
                    c4:67:f6:96:10:ba:03:73:e4:54:3a:f8:d1:f1:3d:
                    70:46:26:92:2f:fe:e0:ad:c0:3a:6b:81:07:00:cc:
                    5d:12:9f:d1:bc:f3:ef:29:07:1e:77:aa:97:8d:c5:
                    a5:6c:79:39:f7:f0:b9:64:6b:15:56:3e:1f:77:c1:
                    40:25:f9:95:4b:42:7a:e7:c1:5c:24:3a:52:82:8c:
                    47:6a:59:96:af:61:da:6a:eb:8d:12:db:93:28:3b:
                    59:07:8f:ee:c4:d4:e1:fb:11:cc:93:f3:86:4a:ab:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:76:DF:F1:22:DB:D8:11:8C:B8:E2:3E:0B:E1:25:30:CE:CF:49
            X509v3 Authority Key Identifier:
                keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:ad:e1:cc:20:67:8b:ff:e1:5d:bb:28:5e:58:a2:86:b1:
         a4:50:39:a5:b8:ee:d0:86:a9:e1:23:5d:00:20:8a:cd:be:15:
         ff:0f:e6:31:59:ec:6c:70:6f:d0:ca:7e:57:c1:5f:43:5f:14:
         be:a8:7f:e5:4a:a1:d9:9d:87:f3:a0:56:df:4e:99:e8:db:17:
         f8:89:c3:b9:79:1e:ca:9c:97:b0:c6:d7:57:c6:2e:d8:0b:ff:
         08:f5:66:2a:42:4f:0a:12:c0:cb:ec:7e:f3:43:5c:da:f3:fb:
         1c:ff:86:30:22:80:11:b0:06:ac:24:b1:25:de:ea:af:26:63:
         2b:21:65:57:58:c3:cd:82:ba:f8:fa:c3:5f:18:0a:81:b0:9b:
         65:c6:35:9e:4b:6b:4b:3f:2d:33:8a:04:74:5c:97:53:66:26:
         45:78:ac:5b:cb:0f:50:f3:d4:44:d8:14:4e:f5:66:9e:ac:b1:
         37:cd:3e:70:c5:92:36:2b:f6:04:c2:ab:df:f3:70:11:bc:03:
         69:71:fb:99:37:a9:ca:e3:64:6f:2a:b4:79:48:48:13:f3:09:
         9e:64:a2:28:a4:f2:c4:8c:da:13:c0:78:43:62:57:e2:37:21:
         6c:84:63:c6:18:94:9d:a2:77:63:8d:77:b9:28:75:a6:5a:cd:
         f7:39:da:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBhu9firwGFAxjn3OIcirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj
MjAzNzcwHhcNMjUwODIzMTMwMjM4WhcNMjUwODI0MTMwMjM4WjAzMTEwLwYDVQQD
Eyg4NzE3NzZkZmYxMjJkYmQ4MTE4Y2I4ZTIzZTBiZTEyNTMwY2VjZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq77UUjHqKMEqnD6GBOrxFwRm7PHZ
hEHTYOMqtARiNHmSLYYd2xHAVudmcrbYJp1asZ29UTxLc/NZw1L4mwEJu+Q/cTsL
NmTT+h/78lguDt4FpGFwKfTpSHdvGTW+wiNd3osXl4II4VXJvsAM+sGCysDX9Pn2
z+2hZLkB2YfNcGRBjwxDpvqIC98tyTTlCGUIPh9DmBTEZ/aWELoDc+RUOvjR8T1w
RiaSL/7grcA6a4EHAMxdEp/RvPPvKQced6qXjcWlbHk59/C5ZGsVVj4fd8FAJfmV
S0J658FcJDpSgoxHalmWr2HaauuNEtuTKDtZB4/uxNTh+xHMk/OGSqss9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcXdt/xItvYEYy44j4L4SUwzs9JMB8GA1UdIwQY
MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt
YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw
LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEGt4cwg
Z4v/4V27KF5YooaxpFA5pbju0Iap4SNdACCKzb4V/w/mMVnsbHBv0Mp+V8FfQ18U
vqh/5Uqh2Z2H86BW306Z6NsX+InDuXkeypyXsMbXV8Yu2Av/CPVmKkJPChLAy+x+
80Nc2vP7HP+GMCKAEbAGrCSxJd7qryZjKyFlV1jDzYK6+PrDXxgKgbCbZcY1nktr
Sz8tM4oEdFyXU2YmRXisW8sPUPPURNgUTvVmnqyxN80+cMWSNiv2BMKr3/NwEbwD
aXH7mTepyuNkbyq0eUhIE/MJnmSiKKTyxIzaE8B4Q2JX4jchbIRjxhiUnaJ3Y413
uSh1plrN9znaQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:13 2025 by rpki-client