Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
File:                     mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json)
Hash identifier:          wALz7gZy5obbvq2nJpMS72YBp/wrR+FzlOhZef30m3Y=
Subject key identifier:   6F:27:89:F8:3B:17:49:75:E3:DE:32:BA:13:AA:95:B4:48:00:28:F8
Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11
Certificate issuer:       /CN=9915558c6897fea224855cf60381857354708411
Certificate serial:       0198D73BE4CE6BD844AD828F5B5245B53970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
Manifest number:          0CB5
Signing time:             Sat 23 Aug 2025 14:01:23 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:23 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:23 +0000
Files and hashes:         1: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: e6ckvVyos0Ly9o6+jSB8718Tr1vu8ZvIfoUy1yv34d8=)
                          2: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (hash: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:e4:ce:6b:d8:44:ad:82:8f:5b:52:45:b5:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9915558c6897fea224855cf60381857354708411
        Validity
            Not Before: Aug 23 14:01:23 2025 GMT
            Not After : Aug 24 14:01:23 2025 GMT
        Subject: CN=6f2789f83b174975e3de32ba13aa95b4480028f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:76:f0:c0:5e:d2:d9:e9:a1:6c:fb:de:10:
                    3f:29:dc:7a:2b:35:da:a6:56:10:80:39:a9:24:88:
                    5e:67:a8:39:51:c0:a3:66:fb:bd:b4:ba:77:c0:37:
                    2f:3b:70:35:25:3e:d7:42:79:89:9e:52:47:cd:8d:
                    b7:ec:e0:19:00:cc:96:01:9a:0b:e9:3f:73:6b:54:
                    f4:32:c1:fd:de:42:5a:fa:33:c6:67:d3:28:92:43:
                    18:24:81:c8:30:13:1f:89:3e:2e:b0:27:3f:7c:7d:
                    74:c0:28:ca:6e:ca:d3:ea:7c:7b:a2:d5:2e:de:19:
                    26:fa:ef:09:fe:3a:9c:26:ef:08:90:45:ff:5c:97:
                    16:14:40:fa:ac:cc:bc:ee:90:3a:f0:38:5d:29:b5:
                    36:61:65:84:65:6c:bf:46:7b:72:b6:30:a0:f4:33:
                    be:14:be:29:7a:a0:d9:22:e0:c1:18:31:ac:30:dd:
                    b3:0e:07:1b:f4:59:f4:0d:f3:ff:d8:9f:89:17:66:
                    75:c5:95:b7:10:90:61:ba:58:4b:74:bb:b1:e4:2c:
                    a9:40:75:f4:29:02:c3:48:5a:2f:ac:7a:8f:e7:9f:
                    02:07:44:a0:9b:ea:1f:d2:16:ad:9c:26:28:0c:ee:
                    64:60:cb:66:28:18:0b:e3:d9:1f:80:5d:59:6f:03:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:27:89:F8:3B:17:49:75:E3:DE:32:BA:13:AA:95:B4:48:00:28:F8
            X509v3 Authority Key Identifier:
                keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:42:4c:00:87:1f:63:43:3c:2d:cf:bd:86:2d:61:ce:d3:
         de:9d:8e:4a:a0:f3:e8:dd:c3:e0:6b:64:67:d9:9b:29:25:09:
         4f:a1:0e:da:00:e0:21:18:f1:10:95:6b:2a:a6:61:1d:51:eb:
         b8:93:1b:da:68:c3:8c:08:b3:ad:3d:93:dc:4e:d0:9b:a6:2b:
         d2:73:e7:f7:3b:4b:68:83:59:db:bb:d3:25:78:c7:fd:97:4b:
         f3:2d:a9:e8:9b:62:84:15:72:c0:30:7b:8b:4e:0a:45:e8:e7:
         1f:5a:17:cf:33:0f:d2:4d:f6:aa:0b:bd:c2:a9:55:95:cf:08:
         cd:2c:f0:d5:1e:fd:83:1b:02:73:01:b0:e5:12:de:4f:9c:96:
         13:15:8f:95:10:d3:f1:a2:7d:05:03:3b:5e:b6:c5:a3:4a:ee:
         cb:97:83:58:bb:92:27:7f:24:9b:55:5b:0f:3d:cc:f5:e0:24:
         41:c0:41:62:c6:4a:03:3e:6b:bf:5a:bb:1f:6a:5d:91:90:44:
         17:23:07:bf:6c:2d:a5:16:64:d0:e8:e1:f8:74:42:9d:bb:89:
         b6:ff:4b:11:0d:e1:3a:fb:3a:0d:06:15:54:1b:26:39:cd:e6:
         17:a5:90:90:bc:dc:be:cb:d9:25:18:40:29:69:cf:7e:05:dc:
         fb:fe:b7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO+TOa9hErYKPW1JFtTlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTU1NThjNjg5N2ZlYTIyNDg1NWNmNjAzODE4NTczNTQ3
MDg0MTEwHhcNMjUwODIzMTQwMTIzWhcNMjUwODI0MTQwMTIzWjAzMTEwLwYDVQQD
Eyg2ZjI3ODlmODNiMTc0OTc1ZTNkZTMyYmExM2FhOTViNDQ4MDAyOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP528MBe0tnpoWz73hA/Kdx6KzXa
plYQgDmpJIheZ6g5UcCjZvu9tLp3wDcvO3A1JT7XQnmJnlJHzY237OAZAMyWAZoL
6T9za1T0MsH93kJa+jPGZ9MokkMYJIHIMBMfiT4usCc/fH10wCjKbsrT6nx7otUu
3hkm+u8J/jqcJu8IkEX/XJcWFED6rMy87pA68DhdKbU2YWWEZWy/RntytjCg9DO+
FL4peqDZIuDBGDGsMN2zDgcb9Fn0DfP/2J+JF2Z1xZW3EJBhulhLdLux5CypQHX0
KQLDSFovrHqP558CB0Sgm+of0hatnCYoDO5kYMtmKBgL49kfgF1ZbwMHkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8nifg7F0l1494yuhOqlbRIACj4MB8GA1UdIwQY
MBaAFJkVVYxol/6iJIVc9gOBhXNUcIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUt
MTY1Yzk2ZmY5NTI5LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUtMTY1Yzk2ZmY5NTI5
LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/FCTACH
H2NDPC3PvYYtYc7T3p2OSqDz6N3D4GtkZ9mbKSUJT6EO2gDgIRjxEJVrKqZhHVHr
uJMb2mjDjAizrT2T3E7Qm6Yr0nPn9ztLaINZ27vTJXjH/ZdL8y2p6JtihBVywDB7
i04KRejnH1oXzzMP0k32qgu9wqlVlc8IzSzw1R79gxsCcwGw5RLeT5yWExWPlRDT
8aJ9BQM7XrbFo0ruy5eDWLuSJ38km1VbDz3M9eAkQcBBYsZKAz5rv1q7H2pdkZBE
FyMHv2wtpRZk0Ojh+HRCnbuJtv9LEQ3hOvs6DQYVVBsmOc3mF6WQkLzcvsvZJRhA
KWnPfgXc+/637g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:49 2025 by rpki-client