Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          9MG54SYccnLtm47MaZQ3Q4oKRFmrnFwq3C7+xuHAU/c=
Subject key identifier:   02:C4:1D:DA:7E:45:35:27:FA:44:25:28:89:FB:61:7A:C0:22:D5:AE
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       019879AD0311AE25F8D7D4D89940A7C13D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          08EA
Signing time:             Tue 05 Aug 2025 10:00:38 +0000
Manifest this update:     Tue 05 Aug 2025 10:00:38 +0000
Manifest next update:     Wed 06 Aug 2025 10:00:38 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: 52o/QUy2rrkIoVG2OQCElI2wdQ25pV7oyOeZTwSvKRM=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:03:11:ae:25:f8:d7:d4:d8:99:40:a7:c1:3d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: Aug  5 10:00:38 2025 GMT
            Not After : Aug  6 10:00:38 2025 GMT
        Subject: CN=02c41dda7e453527fa44252889fb617ac022d5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:7e:30:9c:2c:45:6a:57:e4:59:2e:d2:e8:
                    26:85:f2:ce:4d:23:ae:aa:e3:22:a4:4c:7b:3a:48:
                    fb:4f:88:2f:76:b8:0e:b2:af:32:1f:1a:97:0a:89:
                    34:3a:09:20:61:68:4c:af:0d:7d:64:46:ed:fd:f3:
                    7b:7f:3a:3d:cb:2f:91:f9:34:8f:78:2e:03:62:81:
                    2d:e7:7e:cb:45:e5:7e:8a:69:10:aa:be:43:c8:26:
                    c1:fc:56:6c:39:af:42:f7:be:7f:21:27:83:2c:aa:
                    a2:f0:0e:2b:19:b6:9d:bb:75:97:ba:ef:34:30:d5:
                    ab:b0:48:fb:f9:29:0e:e8:9e:c2:21:88:8c:d1:7d:
                    a6:59:43:20:22:64:43:6e:53:82:a9:48:9a:71:e8:
                    d4:58:07:51:22:b8:3a:fc:da:cc:f6:0c:69:bb:11:
                    65:b2:3b:38:d6:bd:68:1c:a9:87:01:00:60:44:14:
                    da:15:be:f7:db:86:35:a0:de:5d:22:0c:fe:83:52:
                    d4:84:8f:11:28:f7:74:bc:b9:4e:c6:a4:ed:00:6c:
                    ad:aa:eb:3c:fc:1c:ed:6d:27:d3:8e:1b:be:c1:38:
                    55:e2:23:35:03:f6:8f:7e:07:1a:08:a1:f1:d2:c2:
                    00:ec:38:66:7d:ba:66:bc:e0:93:52:65:10:ae:da:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C4:1D:DA:7E:45:35:27:FA:44:25:28:89:FB:61:7A:C0:22:D5:AE
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:01:86:1e:3b:e1:a7:c3:0f:db:cd:4f:c9:88:84:de:b3:
         fc:bf:6c:64:45:a7:f1:df:10:5e:51:69:6c:4e:54:a0:4d:af:
         a4:9c:d2:87:a3:6b:78:02:89:f1:dd:b4:40:4c:4f:59:af:d1:
         c7:88:81:b8:2b:b2:de:15:62:18:eb:55:c5:c3:ca:d2:e9:bb:
         35:ea:89:60:d9:bc:f5:4d:11:32:63:27:54:1a:c4:9b:47:a6:
         df:ef:94:ae:d3:12:1e:49:0a:12:66:5c:80:30:6d:14:d9:9d:
         f1:66:9d:80:70:c4:40:e3:e2:9d:84:14:a8:b9:66:51:d3:bf:
         7f:c9:66:35:c0:31:2d:3f:9f:85:00:82:24:29:97:fa:18:99:
         e6:1d:dd:ea:bd:10:91:2d:0c:35:41:cd:fe:c0:c1:db:54:73:
         0e:20:bc:6c:9e:2d:dc:59:5a:17:19:16:8e:08:07:c0:2b:27:
         06:76:36:49:52:7f:ba:84:de:2d:2c:5d:fe:c5:08:a9:ba:d4:
         e4:14:46:20:cf:a7:e4:aa:1a:7f:23:2a:47:b7:ac:24:98:94:
         03:d5:93:72:61:26:b2:64:be:f0:6e:64:54:34:4d:84:d1:1e:
         6f:0a:1b:cb:c3:1b:81:a6:6d:6e:eb:97:70:91:65:f4:43:5d:
         c7:ce:58:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rQMRriX419TYmUCnwT1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi
NDFiMjIwHhcNMjUwODA1MTAwMDM4WhcNMjUwODA2MTAwMDM4WjAzMTEwLwYDVQQD
EygwMmM0MWRkYTdlNDUzNTI3ZmE0NDI1Mjg4OWZiNjE3YWMwMjJkNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM9+MJwsRWpX5Fku0ugmhfLOTSOu
quMipEx7Okj7T4gvdrgOsq8yHxqXCok0OgkgYWhMrw19ZEbt/fN7fzo9yy+R+TSP
eC4DYoEt537LReV+imkQqr5DyCbB/FZsOa9C975/ISeDLKqi8A4rGbadu3WXuu80
MNWrsEj7+SkO6J7CIYiM0X2mWUMgImRDblOCqUiacejUWAdRIrg6/NrM9gxpuxFl
sjs41r1oHKmHAQBgRBTaFb7324Y1oN5dIgz+g1LUhI8RKPd0vLlOxqTtAGytqus8
/BztbSfTjhu+wThV4iM1A/aPfgcaCKHx0sIA7DhmfbpmvOCTUmUQrtqabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALEHdp+RTUn+kQlKIn7YXrAItWuMB8GA1UdIwQY
MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt
NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi
LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabQBhh47
4afDD9vNT8mIhN6z/L9sZEWn8d8QXlFpbE5UoE2vpJzSh6NreAKJ8d20QExPWa/R
x4iBuCuy3hViGOtVxcPK0um7NeqJYNm89U0RMmMnVBrEm0em3++UrtMSHkkKEmZc
gDBtFNmd8WadgHDEQOPinYQUqLlmUdO/f8lmNcAxLT+fhQCCJCmX+hiZ5h3d6r0Q
kS0MNUHN/sDB21RzDiC8bJ4t3FlaFxkWjggHwCsnBnY2SVJ/uoTeLSxd/sUIqbrU
5BRGIM+n5KoafyMqR7esJJiUA9WTcmEmsmS+8G5kVDRNhNEebwoby8MbgaZtbuuX
cJFl9ENdx85YmA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:45 2025 by rpki-client