Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          640laCqNCmUB2hshl+JWdEfs/atQluddxMD6ESDTj9Y=
Subject key identifier:   CC:66:D6:70:FD:2D:0C:F2:49:B7:31:4F:27:13:13:F9:7D:7E:3B:7F
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       0198D58392719BA44D0202CC6702325E2529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          1175
Signing time:             Sat 23 Aug 2025 06:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:26 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: cy0Ju/+8PbzwHPOAU3fgdh8Jsj0hddWBZcX65zN1sDo=)
                          2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:92:71:9b:a4:4d:02:02:cc:67:02:32:5e:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Aug 23 06:00:26 2025 GMT
            Not After : Aug 24 06:00:26 2025 GMT
        Subject: CN=cc66d670fd2d0cf249b7314f271313f97d7e3b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:4b:ca:41:9e:0e:d7:15:7a:96:40:47:e5:
                    32:f3:35:7c:21:14:f8:05:04:c6:29:bb:79:99:0d:
                    1f:b4:6a:27:d0:81:53:18:3c:22:c7:88:32:fa:4d:
                    47:b2:62:f3:ec:ad:df:e7:61:8f:19:88:97:56:60:
                    8c:aa:66:e7:45:26:e9:fe:ce:06:fe:8f:24:8e:cc:
                    a0:c3:29:d8:15:61:75:6d:6a:a0:94:b0:60:f3:3e:
                    e2:ee:a3:1f:a3:d4:88:fb:7f:98:2f:33:6e:46:24:
                    92:44:17:ba:3b:08:3a:29:af:19:76:fd:54:54:19:
                    77:0d:ea:5c:7a:89:23:1d:9d:b7:ec:ea:fe:1d:e5:
                    1b:09:6c:92:67:2f:7b:ec:b4:15:cf:6b:c9:96:a0:
                    5d:48:cd:74:36:79:80:f0:67:4f:4e:85:69:46:d0:
                    4c:16:02:3e:96:a8:d6:b5:9b:4f:bd:c2:1c:63:85:
                    6f:eb:ab:4b:bb:3e:24:99:31:80:52:96:7b:3d:72:
                    19:4e:74:b8:f1:6d:be:30:45:e1:1a:0b:b8:fc:64:
                    30:6e:83:fa:83:c5:09:8e:a5:cb:2b:ae:c9:1f:1b:
                    24:5c:ad:c6:a7:4c:07:0e:ca:76:ac:07:a8:22:10:
                    b4:37:f0:7c:fd:63:69:dc:db:7c:4b:16:88:a4:17:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:D6:70:FD:2D:0C:F2:49:B7:31:4F:27:13:13:F9:7D:7E:3B:7F
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:29:47:75:13:4c:11:ab:ae:54:50:ba:8e:93:89:36:96:cb:
         80:04:0e:ad:71:6d:24:4f:71:32:50:30:bc:65:80:38:87:b6:
         0c:91:7d:f1:95:cb:bb:94:15:77:fa:a2:42:43:e9:45:b9:3b:
         aa:b5:88:66:73:c3:48:6e:a4:1d:ae:7c:60:5a:5c:3e:7c:d3:
         ae:b4:da:2a:af:0c:da:4a:a9:de:3a:3d:8a:c3:58:b3:7f:2c:
         9c:41:4f:23:35:d5:df:bf:97:24:bd:cc:f2:67:f2:00:3f:96:
         77:4b:19:3c:58:38:c1:05:2a:9c:cb:44:5f:f0:34:db:d9:0a:
         5a:3f:c2:0c:30:fe:bd:b5:a1:1e:a0:15:64:14:17:21:5e:02:
         e9:8e:df:ed:24:a2:4c:cd:35:48:7c:07:c9:92:f3:b2:ed:a7:
         49:42:46:f9:0e:30:55:8c:bf:06:6e:e9:77:3a:c6:ae:63:2c:
         11:c5:41:7f:11:47:be:bb:19:8e:ba:3d:f7:c9:99:4b:cc:e3:
         3e:d3:8e:84:65:95:3f:8f:fd:fc:ec:50:f0:de:76:74:2f:71:
         0d:a2:eb:64:31:cd:b9:8b:49:a8:93:f2:e5:dc:c6:ae:b8:21:
         63:0e:fa:c8:1c:db:2e:a7:0f:26:67:4b:91:1a:f1:38:a6:cc:
         3a:b1:2e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5Jxm6RNAgLMZwIyXiUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm
ZGE4MDUwHhcNMjUwODIzMDYwMDI2WhcNMjUwODI0MDYwMDI2WjAzMTEwLwYDVQQD
EyhjYzY2ZDY3MGZkMmQwY2YyNDliNzMxNGYyNzEzMTNmOTdkN2UzYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzplLykGeDtcVepZAR+Uy8zV8IRT4
BQTGKbt5mQ0ftGon0IFTGDwix4gy+k1HsmLz7K3f52GPGYiXVmCMqmbnRSbp/s4G
/o8kjsygwynYFWF1bWqglLBg8z7i7qMfo9SI+3+YLzNuRiSSRBe6Owg6Ka8Zdv1U
VBl3DepceokjHZ237Or+HeUbCWySZy977LQVz2vJlqBdSM10NnmA8GdPToVpRtBM
FgI+lqjWtZtPvcIcY4Vv66tLuz4kmTGAUpZ7PXIZTnS48W2+MEXhGgu4/GQwboP6
g8UJjqXLK67JHxskXK3Gp0wHDsp2rAeoIhC0N/B8/WNp3Nt8SxaIpBcd4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxm1nD9LQzySbcxTycTE/l9fjt/MB8GA1UdIwQY
MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt
MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk
LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANilHdRNM
EauuVFC6jpOJNpbLgAQOrXFtJE9xMlAwvGWAOIe2DJF98ZXLu5QVd/qiQkPpRbk7
qrWIZnPDSG6kHa58YFpcPnzTrrTaKq8M2kqp3jo9isNYs38snEFPIzXV37+XJL3M
8mfyAD+Wd0sZPFg4wQUqnMtEX/A029kKWj/CDDD+vbWhHqAVZBQXIV4C6Y7f7SSi
TM01SHwHyZLzsu2nSUJG+Q4wVYy/Bm7pdzrGrmMsEcVBfxFHvrsZjro998mZS8zj
PtOOhGWVP4/9/OxQ8N52dC9xDaLrZDHNuYtJqJPy5dzGrrghYw76yBzbLqcPJmdL
kRrxOKbMOrEuSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:23 2025 by rpki-client