Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          bHF9ZxHMlxyonBikWJz7xr7TrKZRG6SC6Zr8N6SlkaY=
Subject key identifier:   A1:77:C7:54:04:2A:E0:94:2D:7E:BF:DE:03:BA:35:42:5F:23:2B:24
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       0198D5839AE2FD21455838E5782E2ACAB4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          05DE
Signing time:             Sat 23 Aug 2025 06:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:28 +0000
Files and hashes:         1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: eMsULinYsBVkcJtILJZTpPY2vBZfNnzOcpBj+EydHyo=)
                          2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:9a:e2:fd:21:45:58:38:e5:78:2e:2a:ca:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Aug 23 06:00:28 2025 GMT
            Not After : Aug 24 06:00:28 2025 GMT
        Subject: CN=a177c754042ae0942d7ebfde03ba35425f232b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:c3:ae:e1:c1:f3:b0:de:d8:09:72:38:38:
                    8f:f8:0f:09:6e:06:65:83:d4:fa:ac:d2:51:2e:98:
                    4e:28:98:c6:28:ba:06:f3:95:9f:b5:c6:cc:c4:12:
                    16:0a:be:2c:88:85:89:fc:91:82:89:42:85:6c:fb:
                    a9:e9:5d:2a:74:54:af:4a:5e:e4:7f:cf:10:55:e1:
                    ee:fd:05:d5:ee:42:a8:e1:f0:94:fb:e0:67:0f:ff:
                    99:a3:c1:0e:e4:c9:3c:44:9c:ec:6b:9d:9d:4d:44:
                    b3:0a:75:7d:4c:d3:17:71:bb:7d:dd:6d:6b:15:e3:
                    58:d8:9a:9d:4e:13:0b:1b:fc:50:ae:bd:79:46:c5:
                    12:e2:80:b8:fc:2f:ff:2c:ef:a0:45:c8:3b:cb:7b:
                    1a:4c:ef:d0:d8:34:63:6b:6e:d5:c1:aa:37:5e:29:
                    5a:b1:6d:f3:a6:ba:88:4e:3e:cb:fa:e2:a6:29:47:
                    88:2d:e9:d7:01:2a:65:95:b7:da:2f:be:14:95:c6:
                    08:7c:bd:d1:e1:de:54:d0:07:02:7a:7e:df:8e:79:
                    d3:f2:67:67:81:33:73:c1:0c:1b:7a:a0:a7:1e:94:
                    eb:ed:52:9b:0e:2a:43:b9:1b:92:67:35:05:45:1d:
                    fe:ea:05:52:ee:90:fd:a6:9a:00:e9:30:d7:e6:42:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:C7:54:04:2A:E0:94:2D:7E:BF:DE:03:BA:35:42:5F:23:2B:24
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:4e:c5:73:23:fd:38:b8:3a:84:e4:33:0a:27:b4:0d:a5:
         09:04:14:41:f3:87:37:6c:ff:54:b8:2b:94:9d:ed:aa:fd:6f:
         b9:0e:77:34:34:d2:fe:81:7c:df:40:f5:48:5c:2d:c1:cc:60:
         5c:d8:74:26:2e:55:03:d6:ca:49:fd:ca:31:2e:01:b8:f6:25:
         46:8c:32:70:b9:c1:e1:bb:0f:ae:14:ba:dd:b9:1c:06:4a:68:
         89:72:35:fe:f4:f6:ce:5d:c9:ca:d4:62:d7:2c:4a:48:5b:d3:
         1b:9b:4c:40:51:88:da:5a:9b:52:2f:76:ba:61:b7:6d:d9:24:
         e2:20:d7:0e:c5:4e:4d:b0:52:48:6e:4e:20:7f:ec:75:63:e5:
         25:16:b0:12:57:1e:3e:cc:69:8a:1c:6d:bd:f3:fa:a2:5f:6c:
         b2:b2:91:ef:7f:23:98:01:64:53:03:2d:74:eb:92:80:67:2b:
         4f:08:e5:61:9b:43:b2:1c:f0:79:dc:ea:83:a9:4b:43:b0:18:
         f9:0e:e5:2b:10:d9:1b:2d:73:36:9d:19:32:79:f1:07:56:de:
         04:dd:4d:d0:1e:50:15:c0:28:58:f5:f3:e8:e2:99:82:7d:c3:
         22:d2:4c:42:2f:ab:63:11:00:11:34:78:ec:6d:08:8e:dc:bd:
         7e:9d:7e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg5ri/SFFWDjleC4qyrS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWRiYTU2Y2YxZmZjMmNmYzFkMDVmNGZhODMzMTE3ZWZk
N2M3OGEwHhcNMjUwODIzMDYwMDI4WhcNMjUwODI0MDYwMDI4WjAzMTEwLwYDVQQD
EyhhMTc3Yzc1NDA0MmFlMDk0MmQ3ZWJmZGUwM2JhMzU0MjVmMjMyYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iDDruHB87De2AlyODiP+A8JbgZl
g9T6rNJRLphOKJjGKLoG85WftcbMxBIWCr4siIWJ/JGCiUKFbPup6V0qdFSvSl7k
f88QVeHu/QXV7kKo4fCU++BnD/+Zo8EO5Mk8RJzsa52dTUSzCnV9TNMXcbt93W1r
FeNY2JqdThMLG/xQrr15RsUS4oC4/C//LO+gRcg7y3saTO/Q2DRja27Vwao3Xila
sW3zprqITj7L+uKmKUeILenXASpllbfaL74UlcYIfL3R4d5U0AcCen7fjnnT8mdn
gTNzwQwbeqCnHpTr7VKbDipDuRuSZzUFRR3+6gVS7pD9ppoA6TDX5kKuhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF3x1QEKuCULX6/3gO6NUJfIyskMB8GA1UdIwQY
MBaAFHRdulbPH/ws/B0F9PqDMRfv18eKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4Zjgt
MGEzMjcxMTY2NWFkLzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4ZjgtMGEzMjcxMTY2NWFk
LzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnxOxXMj
/Ti4OoTkMwontA2lCQQUQfOHN2z/VLgrlJ3tqv1vuQ53NDTS/oF830D1SFwtwcxg
XNh0Ji5VA9bKSf3KMS4BuPYlRowycLnB4bsPrhS63bkcBkpoiXI1/vT2zl3JytRi
1yxKSFvTG5tMQFGI2lqbUi92umG3bdkk4iDXDsVOTbBSSG5OIH/sdWPlJRawElce
PsxpihxtvfP6ol9ssrKR738jmAFkUwMtdOuSgGcrTwjlYZtDshzwedzqg6lLQ7AY
+Q7lKxDZGy1zNp0ZMnnxB1beBN1N0B5QFcAoWPXz6OKZgn3DItJMQi+rYxEAETR4
7G0Ijty9fp1+aA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:26 2025 by rpki-client