Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File:                     4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier:          smOHechktWVJUKrLVdFGU2Ntf9b6uLd96ZNoVjHO5TA=
Subject key identifier:   53:5E:2D:5D:0F:ED:B0:E7:38:01:FD:F4:8D:60:C9:40:89:51:60:40
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       01987CAE343A7CE6835B2C0B6E34E738BD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number:          0CFC
Signing time:             Wed 06 Aug 2025 00:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:47 +0000
Files and hashes:         1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: 98wU8Qg2LGbfEAS4hmztxwQTVK48hIdhq9xcyYf9uT0=)
                          2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:34:3a:7c:e6:83:5b:2c:0b:6e:34:e7:38:bd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: Aug  6 00:00:47 2025 GMT
            Not After : Aug  7 00:00:47 2025 GMT
        Subject: CN=535e2d5d0fedb0e73801fdf48d60c94089516040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:ee:35:39:1f:a0:83:ed:4b:e3:54:ce:65:
                    35:21:a8:88:48:80:5a:9c:0e:9e:85:a6:9b:b5:7d:
                    3f:63:20:1c:7a:b6:95:74:4d:74:0a:87:9e:c7:32:
                    98:e1:eb:5c:83:c5:45:70:18:1a:b2:87:69:6d:5b:
                    46:14:c0:09:20:e0:0d:7b:c7:f3:bb:1f:7d:b6:25:
                    80:a8:74:db:bb:c4:8f:bb:14:7a:1a:7b:51:ee:86:
                    f6:e8:46:b1:1f:b9:53:57:b8:52:15:72:c3:00:35:
                    d7:43:67:0b:b3:bb:f2:ac:1d:9a:a2:21:e3:27:2b:
                    17:92:3c:27:3e:f6:02:37:12:30:64:0e:de:db:29:
                    2f:14:48:c8:32:04:fc:03:4b:d1:e3:28:49:55:23:
                    3f:dd:0b:a9:40:1b:f1:08:be:78:c9:12:38:31:0f:
                    e3:5c:46:4c:1d:30:32:e9:07:b8:cb:73:b4:22:0b:
                    bd:0c:a7:32:30:77:e0:96:53:a5:67:12:fe:9e:bf:
                    9f:25:7f:84:71:db:40:29:29:c8:93:fa:7c:94:b7:
                    58:4d:80:b0:9c:f5:68:c6:79:10:7b:88:39:86:6e:
                    14:7b:51:f2:68:b6:bb:a7:50:bb:d8:e4:a4:11:dd:
                    aa:a6:77:36:6b:3d:dc:76:29:4c:46:fd:e0:b3:03:
                    b6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5E:2D:5D:0F:ED:B0:E7:38:01:FD:F4:8D:60:C9:40:89:51:60:40
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:81:18:9b:c4:82:30:bd:6d:a3:69:76:2b:50:ed:87:ae:
         39:52:11:9e:95:66:be:e3:7d:82:a3:42:47:0e:27:c3:79:39:
         04:de:5d:73:5e:10:9e:1a:3b:85:53:f1:3c:37:bf:8e:6c:ab:
         f0:98:ed:4c:2e:1e:27:46:01:e1:0a:5d:36:ef:8a:02:33:c1:
         5a:c3:cd:f8:d0:7b:ff:1c:62:d4:bb:ed:43:52:df:98:e3:e9:
         5a:43:2c:42:36:21:18:45:8a:6d:4a:71:0d:5f:ca:3a:c1:9a:
         bb:c9:9d:dd:f3:a8:ce:67:a4:ce:31:d4:b2:39:ee:fe:03:ca:
         d3:5b:61:a6:2d:ff:84:f9:3a:2c:b2:52:f1:61:79:38:30:c2:
         59:6e:5d:46:a5:f8:9e:3d:68:d8:24:d8:77:d0:b0:8e:13:8a:
         4a:78:bd:3d:18:92:2b:88:c5:2e:b6:6b:fc:67:22:bf:81:b9:
         93:04:b5:26:a1:99:42:cd:66:0f:01:95:3c:2f:92:de:02:14:
         ff:8f:d2:71:a0:c5:1c:6e:4f:bd:eb:27:f3:ee:9d:6e:57:6a:
         5f:2c:9b:1a:70:45:f6:e3:c5:72:e5:56:67:1f:0a:28:12:9a:
         70:e2:09:c1:bb:4c:51:2c:b6:1f:8b:de:fe:96:0a:7e:a5:b3:
         32:64:45:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rjQ6fOaDWywLbjTnOL11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWJmNmQzZGY1MzliYjdjMTY4NGZiNGY0NjE3OWQwZGEw
NmIwODMwHhcNMjUwODA2MDAwMDQ3WhcNMjUwODA3MDAwMDQ3WjAzMTEwLwYDVQQD
Eyg1MzVlMmQ1ZDBmZWRiMGU3MzgwMWZkZjQ4ZDYwYzk0MDg5NTE2MDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkbuNTkfoIPtS+NUzmU1IaiISIBa
nA6ehaabtX0/YyAceraVdE10CoeexzKY4etcg8VFcBgasodpbVtGFMAJIOANe8fz
ux99tiWAqHTbu8SPuxR6GntR7ob26EaxH7lTV7hSFXLDADXXQ2cLs7vyrB2aoiHj
JysXkjwnPvYCNxIwZA7e2ykvFEjIMgT8A0vR4yhJVSM/3QupQBvxCL54yRI4MQ/j
XEZMHTAy6Qe4y3O0Igu9DKcyMHfgllOlZxL+nr+fJX+EcdtAKSnIk/p8lLdYTYCw
nPVoxnkQe4g5hm4Ue1HyaLa7p1C72OSkEd2qpnc2az3cdilMRv3gswO2ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNeLV0P7bDnOAH99I1gyUCJUWBAMB8GA1UdIwQY
MBaAFOKr9tPfU5u3wWhPtPRhedDaBrCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQt
YjdhMWI0YWUxNTExLzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQtYjdhMWI0YWUxNTEx
LzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBaBGJvE
gjC9baNpditQ7YeuOVIRnpVmvuN9gqNCRw4nw3k5BN5dc14Qnho7hVPxPDe/jmyr
8JjtTC4eJ0YB4QpdNu+KAjPBWsPN+NB7/xxi1LvtQ1LfmOPpWkMsQjYhGEWKbUpx
DV/KOsGau8md3fOozmekzjHUsjnu/gPK01thpi3/hPk6LLJS8WF5ODDCWW5dRqX4
nj1o2CTYd9CwjhOKSni9PRiSK4jFLrZr/Gciv4G5kwS1JqGZQs1mDwGVPC+S3gIU
/4/ScaDFHG5Pvesn8+6dbldqXyybGnBF9uPFcuVWZx8KKBKacOIJwbtMUSy2H4ve
/pYKfqWzMmRF4A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:59 2025 by rpki-client