Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          6+0Z7913zF3tWng29MrAv8XMnxRxmSFbwYda6TqIOZ0=
Subject key identifier:   21:C8:7A:D0:5F:F3:CB:27:C8:A3:D2:6E:AE:39:02:01:61:92:5A:42
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       01987E9C8479F192C6A150434C322A395261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          0834
Signing time:             Wed 06 Aug 2025 09:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:43 +0000
Files and hashes:         1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: 5Cr2TUXCPR2gXuCrz49NFMDPyfgracHIW7AmsDQuVII=)
                          2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:84:79:f1:92:c6:a1:50:43:4c:32:2a:39:52:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Aug  6 09:00:43 2025 GMT
            Not After : Aug  7 09:00:43 2025 GMT
        Subject: CN=21c87ad05ff3cb27c8a3d26eae39020161925a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:db:1b:a8:97:17:6e:22:43:c5:1d:33:89:
                    98:3c:01:72:5a:2b:ae:9a:89:7d:1c:31:87:10:86:
                    bf:02:63:f8:81:8d:5b:65:aa:ab:7b:99:1c:73:54:
                    2e:ec:7b:3a:53:66:6f:bc:b3:fd:7d:d6:d9:ed:94:
                    35:8d:b9:26:37:d4:a6:06:00:3b:4d:88:54:ce:16:
                    a4:e6:ea:71:61:ae:f3:a9:9e:c0:35:1e:4f:b6:4d:
                    e9:44:b6:96:1f:bc:9d:94:30:f9:14:ab:02:27:d5:
                    39:dd:95:7d:a3:b5:de:7e:cd:75:26:6c:5f:a9:81:
                    c8:9b:c9:8b:91:6a:f8:07:75:e7:85:27:72:c6:79:
                    ae:70:0e:9c:b4:3b:03:e7:cc:1c:95:c0:f9:d1:33:
                    22:28:ca:92:81:0e:34:85:04:ce:b5:a0:ec:37:f6:
                    1e:aa:6a:14:b8:fa:f5:2e:59:cf:64:3a:c7:03:b0:
                    21:dd:e6:1f:8f:80:06:26:a2:49:2b:e6:d2:59:bc:
                    1b:c0:12:5f:87:6e:e4:31:19:bf:93:7b:a3:90:98:
                    f0:d2:f7:bb:ff:5a:ad:97:76:f0:e0:a1:7f:fe:4d:
                    b0:96:f2:70:c3:b1:c4:fd:2f:5b:84:65:9a:45:97:
                    b1:57:56:ba:37:38:75:c7:ef:96:2d:7f:39:6f:03:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:7A:D0:5F:F3:CB:27:C8:A3:D2:6E:AE:39:02:01:61:92:5A:42
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:03:8a:0d:60:7f:c5:fb:8a:33:80:6f:2f:3f:72:39:3e:
         54:0a:9b:cb:3f:55:6f:12:9c:76:be:55:c5:e2:4d:3c:04:41:
         52:74:06:64:0e:d4:fb:d9:f7:ee:b9:46:cf:cc:80:45:e4:e2:
         74:6c:c7:f2:28:00:b3:0a:08:39:61:2a:c9:05:df:cd:2f:82:
         cb:9f:d1:03:a4:4a:d2:da:1a:a0:e5:d2:62:b5:54:4f:42:11:
         a4:08:5a:0d:26:61:68:b0:f5:4a:5a:25:9b:3d:2a:2a:f5:8c:
         54:34:18:c3:37:c8:db:f6:59:73:ce:32:b7:bd:1a:2a:26:ff:
         78:cd:01:66:bf:04:2e:0d:76:19:74:53:ef:68:98:e4:71:75:
         e3:d5:5a:40:ea:8f:a9:a8:99:ef:c2:9b:e1:90:5e:68:1a:01:
         36:c2:1e:1c:1a:fd:5e:b6:7e:0e:9f:c5:dd:ac:63:7c:d7:8e:
         c2:36:78:2f:8b:e4:8e:9a:0e:49:95:9a:75:70:51:5c:31:a4:
         91:9e:b6:4f:40:86:78:51:c5:d7:b2:89:7b:c0:a2:f9:90:bf:
         23:e6:7f:d5:32:14:ca:e8:d6:e8:9a:67:c0:7b:3f:fb:48:dc:
         34:d6:9a:ae:2e:bb:80:58:26:26:ed:d5:86:c2:21:34:09:0b:
         44:b2:ee:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nIR58ZLGoVBDTDIqOVJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhM2JjYjQwYTFjOGM4ZjlmNzU4ZGNkZTFjMjkwNzkzOGQ4
Njg1MmYwHhcNMjUwODA2MDkwMDQzWhcNMjUwODA3MDkwMDQzWjAzMTEwLwYDVQQD
EygyMWM4N2FkMDVmZjNjYjI3YzhhM2QyNmVhZTM5MDIwMTYxOTI1YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGDbG6iXF24iQ8UdM4mYPAFyWiuu
mol9HDGHEIa/AmP4gY1bZaqre5kcc1Qu7Hs6U2ZvvLP9fdbZ7ZQ1jbkmN9SmBgA7
TYhUzhak5upxYa7zqZ7ANR5Ptk3pRLaWH7ydlDD5FKsCJ9U53ZV9o7Xefs11Jmxf
qYHIm8mLkWr4B3XnhSdyxnmucA6ctDsD58wclcD50TMiKMqSgQ40hQTOtaDsN/Ye
qmoUuPr1LlnPZDrHA7Ah3eYfj4AGJqJJK+bSWbwbwBJfh27kMRm/k3ujkJjw0ve7
/1qtl3bw4KF//k2wlvJww7HE/S9bhGWaRZexV1a6Nzh1x++WLX85bwOkcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHIetBf88snyKPSbq45AgFhklpCMB8GA1UdIwQY
MBaAFHo7y0ChyMj591jc3hwpB5ONhoUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgt
MDE2NTI1NzZmNWEyLzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iYjNjNmItY2Q5Mi00MjJmLTk1MTgtMDE2NTI1NzZmNWEy
LzEvZWp2TFFLSEl5UG4zV056ZUhDa0hrNDJHaFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNYDig1g
f8X7ijOAby8/cjk+VAqbyz9VbxKcdr5VxeJNPARBUnQGZA7U+9n37rlGz8yAReTi
dGzH8igAswoIOWEqyQXfzS+Cy5/RA6RK0toaoOXSYrVUT0IRpAhaDSZhaLD1Slol
mz0qKvWMVDQYwzfI2/ZZc84yt70aKib/eM0BZr8ELg12GXRT72iY5HF149VaQOqP
qaiZ78Kb4ZBeaBoBNsIeHBr9XrZ+Dp/F3axjfNeOwjZ4L4vkjpoOSZWadXBRXDGk
kZ62T0CGeFHF17KJe8Ci+ZC/I+Z/1TIUyujW6JpnwHs/+0jcNNaari67gFgmJu3V
hsIhNAkLRLLuUA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:24 2025 by rpki-client