Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          0JFRqnhM8TnrTldrfXrPhGxJ/ajwRAKT8anpS9pFa5U=
Subject key identifier:   2C:9F:58:94:F8:F3:16:19:C4:A9:9B:66:07:8D:8C:6E:AF:7A:B0:42
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       01989110DB5EE793C423223700BD306505EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          1130
Signing time:             Sat 09 Aug 2025 23:00:57 +0000
Manifest this update:     Sat 09 Aug 2025 23:00:57 +0000
Manifest next update:     Sun 10 Aug 2025 23:00:57 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: Api5+2OdhV8aHrgUqnkaonr9HsKcrIGmvjYo+20HJvA=)
                          2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:10:db:5e:e7:93:c4:23:22:37:00:bd:30:65:05:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Aug  9 23:00:57 2025 GMT
            Not After : Aug 10 23:00:57 2025 GMT
        Subject: CN=2c9f5894f8f31619c4a99b66078d8c6eaf7ab042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:bc:b9:51:da:f7:b4:13:4e:3b:da:de:fb:
                    1d:9e:a1:e6:51:55:1c:5b:a0:6b:1a:b2:d4:3a:8b:
                    42:0f:8b:34:5a:a1:ba:7b:63:b8:89:2c:9b:29:af:
                    6c:1e:4e:84:95:cd:14:ce:8e:5c:79:75:f3:4c:28:
                    f6:64:a7:41:97:dd:d3:5e:46:02:04:c4:33:3f:bd:
                    dd:80:b4:60:ea:cb:4e:52:e0:db:52:de:af:22:89:
                    8a:4b:8e:f9:05:c3:28:17:da:c7:e2:24:25:5c:28:
                    62:68:ee:79:72:20:d1:ce:74:ee:96:b2:a6:bc:9d:
                    9f:66:98:05:c8:b9:54:6e:80:36:df:64:b2:d2:e8:
                    c8:b0:83:75:c1:8a:7b:59:34:f8:8f:92:dc:d7:eb:
                    00:b4:1a:ab:c4:43:71:2a:f7:56:71:63:8d:af:36:
                    50:93:fd:03:8d:4d:d9:8c:14:31:4b:5d:e7:4e:9a:
                    b6:b9:28:26:23:c2:68:6b:58:dc:aa:29:7a:c9:01:
                    f3:b0:92:da:6a:fb:40:fc:45:2d:0c:07:df:d2:e1:
                    ad:10:4c:69:7e:5a:e5:23:94:38:36:a5:4e:c2:bb:
                    c9:21:14:05:4b:c6:5e:79:36:a4:2f:9c:c4:e7:99:
                    b6:95:18:62:ef:af:5e:94:91:c9:85:be:41:35:8a:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:58:94:F8:F3:16:19:C4:A9:9B:66:07:8D:8C:6E:AF:7A:B0:42
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:b8:30:d6:68:96:3d:8e:06:aa:09:6d:93:b1:89:42:20:
         a8:97:ac:8d:d0:50:8f:88:0c:b2:c3:ac:58:ac:d0:33:e1:5c:
         3f:5d:43:b0:df:19:f5:38:ba:44:86:10:31:ec:08:f5:eb:96:
         33:ac:ff:d1:c3:ab:7c:2d:bf:67:98:b4:0a:70:2a:b1:ac:0b:
         84:b7:79:d1:f9:7a:ab:c2:7d:ab:82:10:51:f2:03:dc:f0:c6:
         bd:54:01:99:98:e2:27:7d:67:2c:18:65:d0:e3:82:e1:f2:92:
         f4:b4:05:43:ec:50:0d:73:7d:1b:a4:6a:0a:4b:07:3b:71:32:
         52:af:8a:1d:14:48:a3:0e:13:1b:77:c4:bf:4d:2e:2e:52:96:
         fb:10:cd:c3:e9:ac:e1:e3:4e:43:d6:d5:d3:42:ba:57:24:ee:
         ce:c8:c2:12:5b:a2:d4:45:b3:c1:ab:e0:58:f2:59:07:cc:c8:
         5d:47:70:4c:81:93:22:ac:7b:c2:77:20:a1:a4:ff:2e:0f:fb:
         2b:54:25:da:ee:34:6b:43:8c:0b:3c:58:74:24:d0:84:07:b4:
         31:2c:d7:93:71:82:ab:79:10:09:ea:68:63:7a:10:a7:77:2d:
         8c:29:60:42:6f:06:16:27:54:19:0b:fe:cc:2a:53:ed:7d:35:
         b9:9a:8f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRENte55PEIyI3AL0wZQXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjUwODA5MjMwMDU3WhcNMjUwODEwMjMwMDU3WjAzMTEwLwYDVQQD
EygyYzlmNTg5NGY4ZjMxNjE5YzRhOTliNjYwNzhkOGM2ZWFmN2FiMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonK8uVHa97QTTjva3vsdnqHmUVUc
W6BrGrLUOotCD4s0WqG6e2O4iSybKa9sHk6Elc0Uzo5ceXXzTCj2ZKdBl93TXkYC
BMQzP73dgLRg6stOUuDbUt6vIomKS475BcMoF9rH4iQlXChiaO55ciDRznTulrKm
vJ2fZpgFyLlUboA232Sy0ujIsIN1wYp7WTT4j5Lc1+sAtBqrxENxKvdWcWONrzZQ
k/0DjU3ZjBQxS13nTpq2uSgmI8Joa1jcqil6yQHzsJLaavtA/EUtDAff0uGtEExp
flrlI5Q4NqVOwrvJIRQFS8ZeeTakL5zE55m2lRhi769elJHJhb5BNYqb5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyfWJT48xYZxKmbZgeNjG6verBCMB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGou4MNZo
lj2OBqoJbZOxiUIgqJesjdBQj4gMssOsWKzQM+FcP11DsN8Z9Ti6RIYQMewI9euW
M6z/0cOrfC2/Z5i0CnAqsawLhLd50fl6q8J9q4IQUfID3PDGvVQBmZjiJ31nLBhl
0OOC4fKS9LQFQ+xQDXN9G6RqCksHO3EyUq+KHRRIow4TG3fEv00uLlKW+xDNw+ms
4eNOQ9bV00K6VyTuzsjCElui1EWzwavgWPJZB8zIXUdwTIGTIqx7wncgoaT/Lg/7
K1Ql2u40a0OMCzxYdCTQhAe0MSzXk3GCq3kQCepoY3oQp3ctjClgQm8GFidUGQv+
zCpT7X01uZqPdg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:52 2025 by rpki-client