Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          PzhmbXvTnf3DFY6KAWvzhGDVFI4ugrXICBV5tbQDu0E=
Subject key identifier:   9E:5B:A6:BF:75:20:C0:CE:55:98:16:77:53:5C:50:4E:37:A8:1D:DC
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       0198D54DEA5C88763206EB16F632DA8831D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          0F0B
Signing time:             Sat 23 Aug 2025 05:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:49 +0000
Files and hashes:         1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
                          2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
                          3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
                          4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
                          5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: 8LmzCwPbTmXlsi4eyRYZQq/qccn6HJRWFCn2Eyi7fiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:ea:5c:88:76:32:06:eb:16:f6:32:da:88:31:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Aug 23 05:01:49 2025 GMT
            Not After : Aug 24 05:01:49 2025 GMT
        Subject: CN=9e5ba6bf7520c0ce55981677535c504e37a81ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:2c:a5:34:96:70:bc:47:56:77:a9:17:1e:
                    41:73:08:d9:37:70:e1:a1:13:42:f4:67:30:ae:91:
                    54:f7:eb:a3:04:b5:7f:55:b1:2c:c1:d2:a2:f8:8e:
                    1b:87:26:e8:9e:8e:56:7d:4e:50:3d:f2:44:ef:9d:
                    85:0c:6c:c3:62:bf:89:85:28:e9:ca:56:6b:25:00:
                    23:a3:5c:cd:3e:44:03:aa:54:ed:fd:17:1c:ab:01:
                    21:e8:f5:54:d1:fd:25:b2:e5:a3:6f:f1:8a:89:a5:
                    79:40:07:d6:39:b5:2f:50:d9:e5:f4:3c:ea:91:f3:
                    ad:26:8c:3a:51:b0:0b:d6:fa:2d:3f:34:16:cf:26:
                    e8:88:69:5f:7a:b5:80:0b:68:68:32:0b:fd:f7:62:
                    31:34:5f:8f:00:bf:b4:59:a4:0f:d9:25:e1:a1:a3:
                    ec:18:b5:08:a7:37:02:3f:c3:55:07:56:fc:0f:de:
                    20:af:e2:e9:37:8c:a8:ba:c0:2d:17:53:50:06:d6:
                    96:08:85:44:f5:fe:ef:11:86:07:58:cb:70:5d:5a:
                    9e:10:6d:3e:53:39:22:24:db:d8:3c:3c:dc:46:57:
                    41:e9:15:f4:c2:c4:f3:5e:fd:a0:a1:23:be:da:bb:
                    57:35:ce:51:aa:cf:11:ac:f2:46:b6:f6:7b:98:8b:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5B:A6:BF:75:20:C0:CE:55:98:16:77:53:5C:50:4E:37:A8:1D:DC
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:d6:01:e9:15:ea:57:fe:09:f8:c1:53:df:80:17:a0:f3:
         40:c8:23:bb:0d:7f:8a:81:c9:0c:b3:f2:50:12:b3:12:fd:cb:
         82:a7:17:69:6d:15:f6:68:0e:2b:e0:ec:6e:c0:11:39:c2:8b:
         27:34:da:e2:69:6d:b2:91:b4:65:31:45:49:32:0c:cb:cb:5a:
         53:c8:bc:59:06:ca:72:f7:cd:c7:33:5a:8b:a1:28:fc:25:d4:
         38:56:05:73:e5:04:24:13:2b:93:4c:df:67:b2:17:46:f1:79:
         d6:aa:30:a2:91:03:93:c2:e4:dc:41:c3:d8:50:c8:d3:3f:57:
         47:0d:39:34:53:5b:66:ad:7e:db:88:99:ad:59:5b:0e:46:f2:
         ca:82:7e:a5:2f:2b:6c:c3:51:23:90:f0:93:df:79:25:97:23:
         a7:da:d6:e4:04:39:0c:f9:06:84:d7:6c:60:9f:a2:28:0e:96:
         c3:05:1f:17:ac:3b:4c:36:1a:f0:a6:9a:81:51:46:64:c7:a0:
         45:f3:a3:6f:a1:06:94:8f:1b:82:f1:7f:14:9e:8c:64:2a:db:
         73:2c:7c:31:df:60:6e:c7:e3:6a:89:86:85:5a:6a:e5:03:e0:
         5a:8d:c8:dd:6b:f9:ad:a4:29:c3:13:5f:c7:4b:bf:d8:6a:8d:
         96:26:16:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTepciHYyBusW9jLaiDHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGY3ZjViNjYxOGJkYTIzYzgzYmVkMTFiNDQyMDQxZjFm
YjQ1NmQwHhcNMjUwODIzMDUwMTQ5WhcNMjUwODI0MDUwMTQ5WjAzMTEwLwYDVQQD
Eyg5ZTViYTZiZjc1MjBjMGNlNTU5ODE2Nzc1MzVjNTA0ZTM3YTgxZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvckspTSWcLxHVnepFx5BcwjZN3Dh
oRNC9GcwrpFU9+ujBLV/VbEswdKi+I4bhybono5WfU5QPfJE752FDGzDYr+JhSjp
ylZrJQAjo1zNPkQDqlTt/RccqwEh6PVU0f0lsuWjb/GKiaV5QAfWObUvUNnl9Dzq
kfOtJow6UbAL1votPzQWzyboiGlferWAC2hoMgv992IxNF+PAL+0WaQP2SXhoaPs
GLUIpzcCP8NVB1b8D94gr+LpN4yousAtF1NQBtaWCIVE9f7vEYYHWMtwXVqeEG0+
UzkiJNvYPDzcRldB6RX0wsTzXv2goSO+2rtXNc5Rqs8RrPJGtvZ7mIuHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5bpr91IMDOVZgWd1NcUE43qB3cMB8GA1UdIwQY
MBaAFKDff1tmGL2iPIO+0RtEIEHx+0VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEt
NWY0YmM5MDBjMDNkLzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNTcyOGItYTM2ZC00ZmJhLTkzYWEtNWY0YmM5MDBjMDNk
LzEvb045X1cyWVl2YUk4Zzc3UkcwUWdRZkg3UlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv/WAekV
6lf+CfjBU9+AF6DzQMgjuw1/ioHJDLPyUBKzEv3LgqcXaW0V9mgOK+DsbsAROcKL
JzTa4mltspG0ZTFFSTIMy8taU8i8WQbKcvfNxzNai6Eo/CXUOFYFc+UEJBMrk0zf
Z7IXRvF51qowopEDk8Lk3EHD2FDI0z9XRw05NFNbZq1+24iZrVlbDkbyyoJ+pS8r
bMNRI5Dwk995JZcjp9rW5AQ5DPkGhNdsYJ+iKA6WwwUfF6w7TDYa8KaagVFGZMeg
RfOjb6EGlI8bgvF/FJ6MZCrbcyx8Md9gbsfjaomGhVpq5QPgWo3I3Wv5raQpwxNf
x0u/2GqNliYWPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:27 2025 by rpki-client