Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          8nwJpl01Idbl04B+9ACphUX1pu2aaimQWIPHvNlhQuQ=
Subject key identifier:   1D:DC:8D:F9:B7:D6:0A:C6:32:27:DA:AC:5E:32:11:2E:7C:88:4E:C6
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       019884319C0C3A6030F63643B2A848B1D77D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          153D
Signing time:             Thu 07 Aug 2025 11:01:40 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:40 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:40 +0000
Files and hashes:         1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
                          2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: H28yvEabKFASd6loXcW3F8CtxfMY0zOFmgOAW8/cREI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:31:9c:0c:3a:60:30:f6:36:43:b2:a8:48:b1:d7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: Aug  7 11:01:40 2025 GMT
            Not After : Aug  8 11:01:40 2025 GMT
        Subject: CN=1ddc8df9b7d60ac63227daac5e32112e7c884ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:80:f5:8c:9d:67:3b:b7:63:b2:be:eb:d6:
                    1f:eb:9c:20:73:25:5a:a1:de:9b:b9:4f:03:4a:50:
                    c4:c2:13:d6:0d:4d:ef:3b:1e:95:fa:da:2d:6f:c9:
                    f3:19:65:19:00:63:c7:0e:b0:12:e4:f0:6d:b9:c0:
                    19:3c:c8:06:68:fd:35:65:1e:78:67:3d:d7:01:9e:
                    02:25:83:38:66:ed:d2:8a:72:40:e2:0b:b6:1d:9d:
                    8d:6c:f6:4d:26:f3:be:be:82:b2:8e:51:c4:9e:db:
                    e2:f7:68:ca:d9:f6:6f:f9:f8:e6:fa:80:f4:c5:e9:
                    95:ac:a4:17:ef:fe:99:26:ce:1f:af:e1:09:34:24:
                    d6:0a:ba:f6:9f:13:ec:c3:d4:63:e6:29:0d:10:69:
                    74:8d:ea:e7:9d:39:32:cc:79:48:c0:db:ce:66:d0:
                    da:fd:87:c9:5d:af:01:9e:e3:09:eb:bf:48:2e:0f:
                    2f:a8:eb:d7:68:90:7a:a2:f2:a4:79:4d:ef:fb:79:
                    c6:23:ac:35:e3:4f:4f:aa:78:5d:01:fd:fe:23:83:
                    f1:f9:fa:96:54:45:55:59:0f:ac:1b:c1:94:76:c9:
                    f9:b0:87:98:98:5d:c8:2c:1a:88:4f:47:bc:df:40:
                    29:ba:c3:58:61:96:01:90:f1:44:65:8e:ae:68:9c:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:8D:F9:B7:D6:0A:C6:32:27:DA:AC:5E:32:11:2E:7C:88:4E:C6
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:66:c8:13:6f:d0:b2:76:7e:9d:bd:6e:3e:d5:07:c3:34:26:
         d3:bc:cb:13:dd:48:49:d2:ee:e1:8a:25:d0:71:60:69:4a:c8:
         37:ab:b0:36:57:46:c7:ef:06:b1:ad:fe:05:cc:6a:00:24:d5:
         40:71:b6:af:48:7b:ef:ab:0a:ee:f4:b3:b7:99:67:37:cf:1b:
         e6:2f:37:c6:a2:c4:24:91:4c:c5:f2:8b:23:dc:4d:1e:90:26:
         06:9d:f2:e4:d5:95:0a:17:0e:d3:22:6a:a7:5f:f4:a7:e5:f4:
         7c:9a:4c:7e:45:a2:05:58:81:f2:0e:79:46:2c:75:cc:45:b3:
         ab:45:fa:6d:a6:61:c2:b3:31:17:5c:34:60:f5:5b:9a:68:9a:
         d2:e7:90:c4:95:5e:9d:42:77:c1:1b:f2:a3:19:f7:a8:64:b1:
         08:28:22:74:16:99:c9:94:fa:fb:d3:ee:1c:ee:76:33:9d:58:
         cd:05:4c:af:10:6c:c0:ea:09:01:fc:0e:f0:25:b6:a8:10:97:
         d0:e9:59:51:ad:1c:d5:dc:d4:6a:9c:14:09:ac:0d:35:28:49:
         1f:84:94:b1:f8:b6:50:f2:40:ee:49:a9:e0:f0:ba:87:46:4c:
         9d:be:bf:f8:9f:9c:1a:1a:b0:e1:ed:ab:2b:ca:6e:65:3c:1e:
         22:09:0f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMZwMOmAw9jZDsqhIsdd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGFmOTczOGM5Zjc5OWI1NmY0YjkwMTdiZjgyMWI0ZmNh
MTM1YjgwHhcNMjUwODA3MTEwMTQwWhcNMjUwODA4MTEwMTQwWjAzMTEwLwYDVQQD
EygxZGRjOGRmOWI3ZDYwYWM2MzIyN2RhYWM1ZTMyMTEyZTdjODg0ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLqA9YydZzu3Y7K+69Yf65wgcyVa
od6buU8DSlDEwhPWDU3vOx6V+totb8nzGWUZAGPHDrAS5PBtucAZPMgGaP01ZR54
Zz3XAZ4CJYM4Zu3SinJA4gu2HZ2NbPZNJvO+voKyjlHEntvi92jK2fZv+fjm+oD0
xemVrKQX7/6ZJs4fr+EJNCTWCrr2nxPsw9Rj5ikNEGl0jernnTkyzHlIwNvOZtDa
/YfJXa8BnuMJ679ILg8vqOvXaJB6ovKkeU3v+3nGI6w1409PqnhdAf3+I4Px+fqW
VEVVWQ+sG8GUdsn5sIeYmF3ILBqIT0e830ApusNYYZYBkPFEZY6uaJwFGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3cjfm31grGMifarF4yES58iE7GMB8GA1UdIwQY
MBaAFHsK+XOMn3mbVvS5AXv4IbT8oTW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAt
Y2ExMmY1M2Q3YjM0LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MjFlNzAtZjQ0Mi00MjUyLWFlYTAtY2ExMmY1M2Q3YjM0
LzEvZXdyNWM0eWZlWnRXOUxrQmVfZ2h0UHloTmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmbIE2/Q
snZ+nb1uPtUHwzQm07zLE91ISdLu4Yol0HFgaUrIN6uwNldGx+8Gsa3+BcxqACTV
QHG2r0h776sK7vSzt5lnN88b5i83xqLEJJFMxfKLI9xNHpAmBp3y5NWVChcO0yJq
p1/0p+X0fJpMfkWiBViB8g55Rix1zEWzq0X6baZhwrMxF1w0YPVbmmia0ueQxJVe
nUJ3wRvyoxn3qGSxCCgidBaZyZT6+9PuHO52M51YzQVMrxBswOoJAfwO8CW2qBCX
0OlZUa0c1dzUapwUCawNNShJH4SUsfi2UPJA7kmp4PC6h0ZMnb6/+J+cGhqw4e2r
K8puZTweIgkPwg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:35:54 2025 by rpki-client