Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File:                     fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier:          jP8V/ItwEm59jj1Kk7PMf2yb1SLlhwXd4mYutStZ7Y8=
Subject key identifier:   DF:77:F4:1F:B3:0B:DA:91:05:3A:AC:CF:A9:DB:25:6F:03:1A:ED:81
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer:       /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial:       01989F0353C441FF50AD6DF8A3F510B319BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number:          0D89
Signing time:             Tue 12 Aug 2025 16:00:51 +0000
Manifest this update:     Tue 12 Aug 2025 16:00:51 +0000
Manifest next update:     Wed 13 Aug 2025 16:00:51 +0000
Files and hashes:         1: WBWNPZAIG5TxeFXlAVS083RLBkk.roa (hash: qjzS4SOpKRY0Euyn5aPWAnwBT2wsSH59WxJEL/JtBjg=)
                          2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: iD2ykpRFSs0uy5XCuA/L3TbWcvcSKir8nap3tsl30K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:03:53:c4:41:ff:50:ad:6d:f8:a3:f5:10:b3:19:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
        Validity
            Not Before: Aug 12 16:00:51 2025 GMT
            Not After : Aug 13 16:00:51 2025 GMT
        Subject: CN=df77f41fb30bda91053aaccfa9db256f031aed81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:9f:fc:e4:f2:e3:3e:9e:bf:2d:4c:26:3a:
                    39:54:04:78:71:71:1d:66:49:68:83:69:3e:80:e3:
                    29:04:88:3e:57:a0:97:21:12:42:bc:dd:e8:83:d8:
                    e0:1a:bc:1f:07:92:fa:96:28:08:62:92:50:92:12:
                    20:b6:da:b8:b0:cf:a5:de:77:09:21:58:60:54:7a:
                    c7:7f:67:75:7e:ff:a6:ae:e1:9f:98:3f:52:c3:43:
                    93:96:05:e6:c1:cd:a4:0f:5f:88:53:13:8c:ac:12:
                    2f:89:d0:8d:a4:ad:03:d1:78:ac:67:54:24:9d:7c:
                    28:3a:02:43:0c:e5:8f:58:94:a1:c5:80:b2:67:30:
                    61:05:6e:5f:82:87:59:c4:11:02:ad:e4:f4:6f:0d:
                    38:63:c4:5b:23:34:34:ad:6f:62:bd:26:f3:42:f6:
                    06:ee:68:a0:99:43:3b:ca:c3:9f:3f:eb:4c:30:ba:
                    20:fe:ec:c1:65:63:4d:4d:f7:d7:da:7d:96:f7:f9:
                    b7:1a:a4:f7:59:a2:5f:c3:77:9f:c7:25:8a:3f:94:
                    7a:50:61:bf:2d:06:eb:d1:18:e5:6d:22:a4:57:f3:
                    ec:d8:ad:14:3a:85:32:69:14:27:d9:74:a4:c6:80:
                    47:29:3b:fd:35:fe:f6:d9:b9:46:c0:b6:37:65:6b:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:77:F4:1F:B3:0B:DA:91:05:3A:AC:CF:A9:DB:25:6F:03:1A:ED:81
            X509v3 Authority Key Identifier:
                keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:83:da:6e:29:13:3f:71:07:59:f5:4c:b0:76:36:35:5f:f5:
         9a:2a:af:7e:b9:53:98:47:ff:1e:8b:4c:a8:6b:da:21:bf:e1:
         c3:59:4f:aa:56:18:0c:dd:bf:f0:08:c9:a2:32:aa:cd:96:6a:
         f6:d3:a3:b4:66:b1:c6:5f:56:19:dd:09:43:19:63:68:2c:f4:
         03:3f:44:8e:d3:a5:bc:1d:8b:be:f8:e6:af:f9:f7:94:60:4c:
         e9:18:7c:7a:37:c5:ce:a1:97:14:6d:57:3f:25:2c:a7:51:28:
         f6:77:74:f4:9f:74:a4:a0:74:b5:7a:2d:7b:27:c3:cc:be:87:
         7e:6d:92:e7:d0:1c:fe:5e:d7:2d:bd:13:9d:36:c4:1d:06:4c:
         80:69:c2:46:42:c5:d1:b9:30:df:8f:3d:ca:ae:c8:89:be:06:
         f5:18:0d:43:f9:44:89:5d:2e:25:1b:ea:d5:3c:4b:12:9f:0c:
         4f:c3:e1:d3:6f:c9:9f:fa:27:9e:bb:2c:da:b9:93:35:d2:fc:
         60:14:60:62:31:50:1b:54:3b:20:90:69:68:0b:ca:97:27:ed:
         94:67:da:c1:0f:a2:39:fb:6d:45:cf:d0:aa:1a:f1:5b:6d:eb:
         91:b1:1e:04:77:78:b2:ef:e5:2d:4d:2f:f8:00:08:3a:29:31:
         6f:db:fd:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifA1PEQf9QrW34o/UQsxm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk
NTI3YmIwHhcNMjUwODEyMTYwMDUxWhcNMjUwODEzMTYwMDUxWjAzMTEwLwYDVQQD
EyhkZjc3ZjQxZmIzMGJkYTkxMDUzYWFjY2ZhOWRiMjU2ZjAzMWFlZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFyf/OTy4z6evy1MJjo5VAR4cXEd
Zklog2k+gOMpBIg+V6CXIRJCvN3og9jgGrwfB5L6ligIYpJQkhIgttq4sM+l3ncJ
IVhgVHrHf2d1fv+mruGfmD9Sw0OTlgXmwc2kD1+IUxOMrBIvidCNpK0D0XisZ1Qk
nXwoOgJDDOWPWJShxYCyZzBhBW5fgodZxBECreT0bw04Y8RbIzQ0rW9ivSbzQvYG
7migmUM7ysOfP+tMMLog/uzBZWNNTffX2n2W9/m3GqT3WaJfw3efxyWKP5R6UGG/
LQbr0RjlbSKkV/Ps2K0UOoUyaRQn2XSkxoBHKTv9Nf722blGwLY3ZWuYSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN939B+zC9qRBTqsz6nbJW8DGu2BMB8GA1UdIwQY
MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt
ZDI2ZDdkNGMyNTA1LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1
LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYPabikT
P3EHWfVMsHY2NV/1miqvfrlTmEf/HotMqGvaIb/hw1lPqlYYDN2/8AjJojKqzZZq
9tOjtGaxxl9WGd0JQxljaCz0Az9EjtOlvB2Lvvjmr/n3lGBM6Rh8ejfFzqGXFG1X
PyUsp1Eo9nd09J90pKB0tXoteyfDzL6Hfm2S59Ac/l7XLb0TnTbEHQZMgGnCRkLF
0bkw3489yq7Iib4G9RgNQ/lEiV0uJRvq1TxLEp8MT8Ph02/Jn/onnrss2rmTNdL8
YBRgYjFQG1Q7IJBpaAvKlyftlGfawQ+iOfttRc/QqhrxW23rkbEeBHd4su/lLU0v
+AAIOikxb9v9BA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 20:33:55 2025 by rpki-client