Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          5Dk6yLc10LK/dClo1w8RMLCRBkIo9iWCUAxfmCzi3oQ=
Subject key identifier:   51:33:BE:46:08:0C:3D:69:2B:E5:AC:52:78:34:B5:3B:02:75:E0:0D
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       01988FFDF5B13C6BC21EEACEC9B62FB0D1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          0AEF
Signing time:             Sat 09 Aug 2025 18:00:41 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:41 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:41 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: /ga48DobXv+noelXSqL8L6u1jwiJ4m9MSsdHwniJYAE=)
                          2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fd:f5:b1:3c:6b:c2:1e:ea:ce:c9:b6:2f:b0:d1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Aug  9 18:00:41 2025 GMT
            Not After : Aug 10 18:00:41 2025 GMT
        Subject: CN=5133be46080c3d692be5ac527834b53b0275e00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:d0:cb:74:3c:cc:f2:56:71:55:3b:14:c4:
                    73:be:82:fd:2e:6b:04:03:a0:0a:3f:90:e4:15:f7:
                    ff:48:5a:9a:2a:53:72:de:32:8b:0e:f8:b1:b2:ea:
                    a5:b4:39:99:09:fb:47:03:a5:4d:af:fd:45:0c:8c:
                    da:3f:e5:82:fd:16:a4:26:2f:85:5b:3f:88:f5:46:
                    9f:af:73:f8:58:5d:46:c0:db:db:95:57:b1:fc:ea:
                    ed:97:03:5e:6c:fb:97:f0:3a:10:c1:0d:c4:b9:4a:
                    9b:f7:36:35:09:a8:fc:ae:01:d0:20:75:c7:fc:29:
                    4d:a2:eb:1a:8d:8c:76:18:a0:7e:a8:2c:94:9a:f4:
                    0b:69:e0:21:b9:91:11:1c:0a:55:77:5f:0c:5e:94:
                    01:66:ea:ee:28:4b:df:66:2e:89:23:9e:47:51:70:
                    67:4c:99:af:e6:74:d3:4a:16:c8:8b:36:57:d2:83:
                    d2:26:27:8a:54:82:e1:9a:ef:60:ed:62:fb:f9:e9:
                    68:75:8b:a4:d3:0c:35:30:86:e4:7f:fc:a6:74:a2:
                    9d:bf:54:15:e9:f4:bd:91:57:bd:e9:fe:93:4d:e2:
                    07:22:c1:dd:d0:f6:19:e5:0a:3b:78:7d:ab:d2:38:
                    9a:7e:51:6f:43:ce:d2:df:89:75:d2:d0:70:23:2c:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:BE:46:08:0C:3D:69:2B:E5:AC:52:78:34:B5:3B:02:75:E0:0D
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:23:86:43:0e:72:08:b3:6c:c4:c6:10:94:39:3e:e7:5d:
         cc:0c:80:20:d5:39:e7:89:fd:62:9f:df:7f:17:3e:45:79:5a:
         d9:34:9d:9a:93:1b:b3:a3:59:25:92:24:d5:e4:8a:82:21:ec:
         76:21:77:8d:21:8a:25:64:bb:c2:d4:65:2e:14:96:f6:9c:a8:
         e4:50:30:7c:35:2b:14:50:02:8d:1e:f9:83:34:81:27:ad:3b:
         1f:5c:e9:81:61:fa:52:ca:b3:fd:bf:a7:b0:9c:54:f3:a7:eb:
         ca:8a:ae:f9:3a:b1:bb:56:31:6c:17:4e:df:32:87:2d:b6:0f:
         d5:a9:f4:fd:bc:4f:8d:11:07:74:e5:b1:e4:00:84:5d:68:e3:
         e2:3a:86:3b:01:d5:ec:8e:82:ae:6d:17:c8:d4:f5:af:7e:82:
         d8:7b:68:2e:9d:35:0b:0d:12:a5:6d:78:ed:19:58:1c:2e:e0:
         78:64:b6:e8:c7:df:9d:f6:59:b8:88:a5:e5:87:81:7f:ea:b0:
         3a:93:df:76:df:e8:bf:e0:f9:9c:91:39:d6:2e:cd:5b:db:82:
         d4:e6:9a:2b:32:85:e4:48:cf:1d:d4:41:ee:a7:dd:db:97:6e:
         72:1d:46:e8:b2:a7:b9:2b:ee:e4:e1:4d:f5:fa:96:a6:51:cf:
         0e:9f:37:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/fWxPGvCHurOybYvsNGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz
NmVjZDQwHhcNMjUwODA5MTgwMDQxWhcNMjUwODEwMTgwMDQxWjAzMTEwLwYDVQQD
Eyg1MTMzYmU0NjA4MGMzZDY5MmJlNWFjNTI3ODM0YjUzYjAyNzVlMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS/Qy3Q8zPJWcVU7FMRzvoL9LmsE
A6AKP5DkFff/SFqaKlNy3jKLDvixsuqltDmZCftHA6VNr/1FDIzaP+WC/RakJi+F
Wz+I9Uafr3P4WF1GwNvblVex/OrtlwNebPuX8DoQwQ3EuUqb9zY1Caj8rgHQIHXH
/ClNousajYx2GKB+qCyUmvQLaeAhuZERHApVd18MXpQBZuruKEvfZi6JI55HUXBn
TJmv5nTTShbIizZX0oPSJieKVILhmu9g7WL7+elodYuk0ww1MIbkf/ymdKKdv1QV
6fS9kVe96f6TTeIHIsHd0PYZ5Qo7eH2r0jiaflFvQ87S34l10tBwIyy1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEzvkYIDD1pK+WsUng0tTsCdeANMB8GA1UdIwQY
MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt
ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3
LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPYjhkMO
cgizbMTGEJQ5PuddzAyAINU554n9Yp/ffxc+RXla2TSdmpMbs6NZJZIk1eSKgiHs
diF3jSGKJWS7wtRlLhSW9pyo5FAwfDUrFFACjR75gzSBJ607H1zpgWH6Usqz/b+n
sJxU86fryoqu+Tqxu1YxbBdO3zKHLbYP1an0/bxPjREHdOWx5ACEXWjj4jqGOwHV
7I6Crm0XyNT1r36C2HtoLp01Cw0SpW147RlYHC7geGS26MffnfZZuIil5YeBf+qw
OpPfdt/ov+D5nJE51i7NW9uC1OaaKzKF5EjPHdRB7qfd25duch1G6LKnuSvu5OFN
9fqWplHPDp832Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:48 2025 by rpki-client