Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File:                     dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier:          qzg0DYeCtrUSrJkgy+QaBpPf6Gd5Gylx5p5atP4s56g=
Subject key identifier:   52:4C:B2:0D:10:08:06:C2:92:EC:6A:F8:36:B7:E1:6E:E9:3C:5D:6C
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer:       /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial:       0198D5F17E96171AC476CA059C1B7D8C323E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number:          0364
Signing time:             Sat 23 Aug 2025 08:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:30 +0000
Files and hashes:         1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
                          2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: 7tDkyojAkEjlAKaav010yOJC0heZfm2Q50qDJyVVkWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:7e:96:17:1a:c4:76:ca:05:9c:1b:7d:8c:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
        Validity
            Not Before: Aug 23 08:00:30 2025 GMT
            Not After : Aug 24 08:00:30 2025 GMT
        Subject: CN=524cb20d100806c292ec6af836b7e16ee93c5d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:41:7e:68:5f:63:22:52:3b:a9:9c:66:19:
                    7a:d6:81:83:45:67:58:09:87:59:91:32:2e:3f:63:
                    98:3e:f2:c8:12:b5:75:d6:69:89:ee:c7:c2:b7:dd:
                    5d:d9:0d:f7:2e:08:a1:4d:11:69:41:5c:62:37:85:
                    e1:c5:e5:15:19:bb:88:1b:d0:5b:d4:e6:08:c5:21:
                    ac:05:2c:ac:a6:b3:50:7c:37:f4:6c:f5:0a:c4:fb:
                    1d:fa:75:28:f0:21:42:79:f5:33:fd:dd:e5:5f:33:
                    1a:46:bf:9a:53:cb:81:9e:59:d6:18:d3:61:03:a4:
                    fa:c3:55:0f:9c:0f:84:bf:40:d3:59:d8:67:c4:ee:
                    c3:9c:49:ec:f9:24:a5:ff:26:7c:fe:e2:9d:aa:d2:
                    9c:03:8b:7a:97:e7:d8:3d:87:40:ea:31:4f:8b:e9:
                    16:75:0e:78:67:41:17:b9:73:94:47:b7:60:76:e0:
                    ea:ca:63:0c:f6:e5:da:01:d5:c6:82:b8:96:b2:b9:
                    30:58:48:ec:ee:00:f7:95:fa:6f:89:60:3e:f4:67:
                    97:f7:92:ee:78:d5:f9:46:a5:60:4c:c0:cd:19:25:
                    e9:2f:c9:16:8e:7f:c3:c7:b6:f6:71:93:d5:d0:6f:
                    d0:e1:d2:24:98:5d:af:04:65:0e:23:ec:5d:4d:14:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:B2:0D:10:08:06:C2:92:EC:6A:F8:36:B7:E1:6E:E9:3C:5D:6C
            X509v3 Authority Key Identifier:
                keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:74:e4:24:49:55:b3:25:3b:ab:b2:fb:1f:3e:c4:aa:41:01:
         ae:1f:8e:fe:4e:a0:90:54:ba:0a:51:f2:42:48:1f:5e:bf:6b:
         38:1e:ee:e1:cf:7d:ee:1e:aa:b8:08:59:2e:6a:fc:d9:bd:30:
         02:2e:57:4b:f1:02:24:33:ab:69:6e:49:ca:53:8f:b4:67:d6:
         1c:44:0f:12:ef:af:75:a1:2f:bb:f8:e4:ae:4d:f4:d1:88:1b:
         9c:0f:73:5a:b1:60:ec:2e:69:f6:04:b5:d5:5d:a0:b5:ed:b9:
         ca:08:15:cc:5c:31:46:2d:85:13:d0:8f:4b:92:06:39:15:df:
         f1:36:c2:ba:50:6f:b4:ed:7c:3b:5a:3e:38:48:4b:fa:ef:bb:
         51:fd:9e:de:ff:30:ee:73:e3:53:8d:cf:8a:32:87:4f:3e:3e:
         87:29:67:57:46:80:2d:ea:e5:03:3f:77:fe:3f:c3:d0:13:01:
         34:ba:a9:ff:02:ed:e2:86:db:2c:56:03:70:01:fc:6d:16:e6:
         89:7a:3a:92:69:3f:23:6a:8a:a8:36:70:69:69:e8:01:4f:dd:
         61:16:fa:5a:40:de:a9:16:1d:5b:4d:25:fe:6d:c3:40:94:b0:
         7d:79:df:3b:03:7f:5d:c6:ac:14:af:77:d5:26:98:2e:3b:23:
         2f:45:b1:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8X6WFxrEdsoFnBt9jDI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh
OGE5ZGMwHhcNMjUwODIzMDgwMDMwWhcNMjUwODI0MDgwMDMwWjAzMTEwLwYDVQQD
Eyg1MjRjYjIwZDEwMDgwNmMyOTJlYzZhZjgzNmI3ZTE2ZWU5M2M1ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA535BfmhfYyJSO6mcZhl61oGDRWdY
CYdZkTIuP2OYPvLIErV11mmJ7sfCt91d2Q33LgihTRFpQVxiN4XhxeUVGbuIG9Bb
1OYIxSGsBSysprNQfDf0bPUKxPsd+nUo8CFCefUz/d3lXzMaRr+aU8uBnlnWGNNh
A6T6w1UPnA+Ev0DTWdhnxO7DnEns+SSl/yZ8/uKdqtKcA4t6l+fYPYdA6jFPi+kW
dQ54Z0EXuXOUR7dgduDqymMM9uXaAdXGgriWsrkwWEjs7gD3lfpviWA+9GeX95Lu
eNX5RqVgTMDNGSXpL8kWjn/Dx7b2cZPV0G/Q4dIkmF2vBGUOI+xdTRQwBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJMsg0QCAbCkuxq+Da34W7pPF1sMB8GA1UdIwQY
MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt
YjVlNTZlMGVjY2RlLzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl
LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXTkJElV
syU7q7L7Hz7EqkEBrh+O/k6gkFS6ClHyQkgfXr9rOB7u4c997h6quAhZLmr82b0w
Ai5XS/ECJDOraW5JylOPtGfWHEQPEu+vdaEvu/jkrk300YgbnA9zWrFg7C5p9gS1
1V2gte25yggVzFwxRi2FE9CPS5IGORXf8TbCulBvtO18O1o+OEhL+u+7Uf2e3v8w
7nPjU43PijKHTz4+hylnV0aALerlAz93/j/D0BMBNLqp/wLt4obbLFYDcAH8bRbm
iXo6kmk/I2qKqDZwaWnoAU/dYRb6WkDeqRYdW00l/m3DQJSwfXnfOwN/XcasFK93
1SaYLjsjL0WxUg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:14 2025 by rpki-client