Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          +j5wiL7qPsbUXTh5YvW41iUq1q0ZTzwlPAOU9EsBG10=
Subject key identifier:   1B:04:2C:16:E3:B0:29:9B:C5:6B:D4:47:E4:B4:9F:F7:A3:AF:58:EC
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       0198D54E01AC3D58F1311040419A717DC765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          0CB1
Signing time:             Sat 23 Aug 2025 05:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:55 +0000
Files and hashes:         1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
                          2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
                          3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: +FzxJVzhtrh5KXjDsv0wy6NSQrCnClHmMCdAxaUdciQ=)
                          4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
                          5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:01:ac:3d:58:f1:31:10:40:41:9a:71:7d:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Aug 23 05:01:55 2025 GMT
            Not After : Aug 24 05:01:55 2025 GMT
        Subject: CN=1b042c16e3b0299bc56bd447e4b49ff7a3af58ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:fa:24:af:03:07:d6:ec:8b:4b:df:7c:64:
                    d1:82:50:7e:a3:20:ce:8b:a1:ea:1f:40:de:06:5c:
                    92:13:56:bc:94:48:93:ad:8f:da:f6:b9:6a:3c:85:
                    cb:02:3f:6c:5c:ee:7c:e8:53:d9:00:e3:60:92:e5:
                    54:8d:d5:45:47:2e:64:8a:34:d3:4f:2a:d1:a2:f8:
                    72:7b:e1:a2:dd:19:06:3a:9e:2f:03:44:07:ad:40:
                    81:a2:36:fc:41:8a:ea:28:2f:85:bb:d6:dd:fb:0f:
                    60:bd:1b:b8:5d:97:2d:bd:34:9f:df:dc:85:f1:17:
                    1e:54:0f:b5:4f:7d:70:60:86:9b:95:09:42:c6:00:
                    4d:41:40:ce:84:75:7f:25:13:4f:16:02:31:1e:d0:
                    a3:08:c6:6d:ab:1a:87:51:40:57:01:b1:7b:7e:c6:
                    06:0c:da:77:bb:72:5f:92:63:d7:dc:74:94:72:c5:
                    b6:7c:71:40:d7:a3:5e:71:2d:bd:77:86:ba:c6:19:
                    7a:f2:8c:63:6c:57:33:fb:9d:79:77:b9:f3:73:4b:
                    5c:c4:d4:9e:19:1e:b2:d3:2b:85:31:89:2f:98:c6:
                    4f:39:15:0b:61:b5:b6:b3:e0:93:08:4f:a6:ce:d6:
                    9e:98:49:ff:73:c6:32:8f:38:b6:20:84:0e:b5:fc:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:04:2C:16:E3:B0:29:9B:C5:6B:D4:47:E4:B4:9F:F7:A3:AF:58:EC
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:0d:07:90:83:ef:22:d6:71:3a:97:b9:15:ad:d3:1c:d7:89:
         7e:57:1c:b8:9d:32:3b:f6:a8:b4:99:92:14:c7:fd:59:91:6a:
         c5:3b:9a:4f:69:44:5f:36:65:00:5e:9d:04:27:9e:0f:07:38:
         1b:c8:f1:cb:6d:68:9d:92:df:bd:cd:71:81:84:11:a0:7a:47:
         60:0d:9a:24:dd:27:bf:96:91:37:61:b5:1b:1f:56:bb:c7:48:
         4c:bc:09:5d:5b:9d:00:3a:4b:34:6b:5b:f9:e6:82:15:a5:ee:
         95:32:89:c9:f8:a0:b7:bc:00:df:ce:b2:73:c8:26:1e:73:02:
         80:35:46:c3:53:cd:ef:51:90:ba:13:1b:b4:dd:e2:23:d1:d0:
         17:b0:64:40:6f:25:04:8b:1f:4f:5d:98:69:08:ac:0b:95:15:
         6c:08:83:21:a1:f1:ac:af:f1:ef:c4:d0:c3:c2:97:86:8f:94:
         23:97:aa:43:da:ce:ca:62:9c:bf:c3:7f:0a:7e:df:40:26:78:
         12:95:84:10:9a:21:af:49:ce:ec:b6:f8:c1:4a:c3:e3:ed:ab:
         33:c3:c0:83:fa:a1:8b:58:9b:8d:e0:94:dd:36:13:20:49:c4:
         11:d1:f9:d3:da:07:ba:91:09:40:d3:d9:35:12:33:c6:f4:b0:
         a0:8d:14:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgGsPVjxMRBAQZpxfcdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy
YTBlZDYwHhcNMjUwODIzMDUwMTU1WhcNMjUwODI0MDUwMTU1WjAzMTEwLwYDVQQD
EygxYjA0MmMxNmUzYjAyOTliYzU2YmQ0NDdlNGI0OWZmN2EzYWY1OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaH6JK8DB9bsi0vffGTRglB+oyDO
i6HqH0DeBlySE1a8lEiTrY/a9rlqPIXLAj9sXO586FPZAONgkuVUjdVFRy5kijTT
TyrRovhye+Gi3RkGOp4vA0QHrUCBojb8QYrqKC+Fu9bd+w9gvRu4XZctvTSf39yF
8RceVA+1T31wYIablQlCxgBNQUDOhHV/JRNPFgIxHtCjCMZtqxqHUUBXAbF7fsYG
DNp3u3JfkmPX3HSUcsW2fHFA16NecS29d4a6xhl68oxjbFcz+515d7nzc0tcxNSe
GR6y0yuFMYkvmMZPORULYbW2s+CTCE+mztaemEn/c8Yyjzi2IIQOtfyMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsELBbjsCmbxWvUR+S0n/ejr1jsMB8GA1UdIwQY
MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt
ZmQzYjMwMDJjMGJiLzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi
LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxA0HkIPv
ItZxOpe5Fa3THNeJflccuJ0yO/aotJmSFMf9WZFqxTuaT2lEXzZlAF6dBCeeDwc4
G8jxy21onZLfvc1xgYQRoHpHYA2aJN0nv5aRN2G1Gx9Wu8dITLwJXVudADpLNGtb
+eaCFaXulTKJyfigt7wA386yc8gmHnMCgDVGw1PN71GQuhMbtN3iI9HQF7BkQG8l
BIsfT12YaQisC5UVbAiDIaHxrK/x78TQw8KXho+UI5eqQ9rOymKcv8N/Cn7fQCZ4
EpWEEJohr0nO7Lb4wUrD4+2rM8PAg/qhi1ibjeCU3TYTIEnEEdH509oHupEJQNPZ
NRIzxvSwoI0UJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:51 2025 by rpki-client