Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File:                     4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier:          SVCBT7mKCw6LJmOI5NhbVhyblTaGzWivd0EyHv/zgjg=
Subject key identifier:   E0:9A:14:A5:18:7F:3A:72:FE:89:5C:DA:4C:D0:69:59:6F:5D:E5:86
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer:       /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial:       01988BEA13A97566B6FF34079F9E9FB7DBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number:          0CA2
Signing time:             Fri 08 Aug 2025 23:00:30 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:30 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:30 +0000
Files and hashes:         1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: NRB85JtoxiNKX6/+zSt3Qf8Rw4o7aPmmqameyelR54I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:13:a9:75:66:b6:ff:34:07:9f:9e:9f:b7:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
        Validity
            Not Before: Aug  8 23:00:30 2025 GMT
            Not After : Aug  9 23:00:30 2025 GMT
        Subject: CN=e09a14a5187f3a72fe895cda4cd069596f5de586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:6e:2f:80:3b:e6:c5:fd:0e:de:c4:45:22:
                    95:b9:3e:5a:9c:eb:2e:c4:da:df:38:56:e2:64:fa:
                    e3:a2:e3:dc:0f:03:c4:33:40:4c:5c:64:ed:ab:54:
                    46:27:68:a3:2e:5d:c7:f1:14:9f:e0:73:f5:aa:d5:
                    b4:39:3c:91:0a:71:3a:98:b2:3d:16:28:d9:da:6a:
                    5f:00:ba:d9:14:72:bb:4d:34:e3:21:06:56:a0:65:
                    20:93:47:a4:75:31:25:06:ef:26:61:70:df:6f:cf:
                    49:a4:8b:9f:eb:49:f2:1a:13:bb:90:ff:c5:8b:16:
                    89:11:c5:29:a5:bd:91:c8:58:4a:fd:ac:53:67:ff:
                    20:86:81:61:f3:db:a5:35:6c:e1:00:1c:a0:e5:42:
                    3e:d2:8e:6b:51:97:99:32:ed:e4:bb:7e:fe:ad:27:
                    63:f7:8b:49:35:4e:4d:44:32:92:42:1c:e2:3a:9d:
                    76:87:50:85:36:5d:35:5d:a2:66:51:3c:4b:69:ae:
                    2a:e6:fa:fb:dc:28:31:cc:1f:6c:d1:5e:ea:ed:ff:
                    14:d5:da:c8:da:1c:8d:5a:9d:f5:1a:b7:1c:78:0e:
                    83:e1:07:07:39:35:5d:72:80:67:df:44:93:85:03:
                    3e:26:76:fa:d2:d3:f5:79:44:ad:cc:2d:00:ed:ab:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9A:14:A5:18:7F:3A:72:FE:89:5C:DA:4C:D0:69:59:6F:5D:E5:86
            X509v3 Authority Key Identifier:
                keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:d7:23:89:85:30:62:ed:c6:e5:da:83:e6:e4:fb:78:b3:
         01:ad:32:ed:82:4f:62:e5:8b:73:9c:8a:34:b2:3b:5d:e7:92:
         66:d5:b8:ff:39:7a:0c:57:eb:17:cb:8a:21:ba:d6:3c:4e:5e:
         ce:01:6d:55:17:70:d1:de:9b:9c:bc:c7:e8:13:dc:8f:e5:41:
         4b:ca:9a:01:78:b8:46:38:ee:a7:eb:f0:d3:6d:e7:a9:63:d4:
         88:b0:f7:6a:c4:d6:68:d7:ce:6a:8f:20:32:15:00:3e:d9:f0:
         de:a0:9f:07:54:59:f7:a3:8f:69:e0:ff:ba:39:78:42:ab:e1:
         f2:f4:66:76:11:88:e4:34:98:73:0c:53:c7:d5:54:77:fc:46:
         d3:6f:8b:ef:18:cd:31:88:4f:3e:bb:88:de:19:11:c8:13:dc:
         ae:f1:cd:d2:e8:89:47:b4:37:3a:bf:c0:d7:53:97:01:9a:28:
         3e:4f:62:8c:4f:ef:e6:a1:a3:e6:24:e5:2a:36:93:0f:13:a4:
         7a:6c:75:80:55:58:8f:46:bb:e4:ad:ce:6d:bf:8e:be:e6:b8:
         a3:48:1a:51:fd:ff:e9:db:01:cd:cc:5f:be:a1:2e:c2:c1:c1:
         83:1b:a5:0a:a2:60:7d:11:31:af:b4:76:0b:de:f4:1b:ff:eb:
         93:de:0a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6hOpdWa2/zQHn56ft9v6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWM3Y2Q1YTkxYjQ0NTg2NjBkMDcwZTA0NzdmYmU2OTVj
MTJiMGIwHhcNMjUwODA4MjMwMDMwWhcNMjUwODA5MjMwMDMwWjAzMTEwLwYDVQQD
EyhlMDlhMTRhNTE4N2YzYTcyZmU4OTVjZGE0Y2QwNjk1OTZmNWRlNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSBuL4A75sX9Dt7ERSKVuT5anOsu
xNrfOFbiZPrjouPcDwPEM0BMXGTtq1RGJ2ijLl3H8RSf4HP1qtW0OTyRCnE6mLI9
FijZ2mpfALrZFHK7TTTjIQZWoGUgk0ekdTElBu8mYXDfb89JpIuf60nyGhO7kP/F
ixaJEcUppb2RyFhK/axTZ/8ghoFh89ulNWzhAByg5UI+0o5rUZeZMu3ku37+rSdj
94tJNU5NRDKSQhziOp12h1CFNl01XaJmUTxLaa4q5vr73CgxzB9s0V7q7f8U1drI
2hyNWp31GrcceA6D4QcHOTVdcoBn30SThQM+Jnb60tP1eUStzC0A7au5yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCaFKUYfzpy/olc2kzQaVlvXeWGMB8GA1UdIwQY
MBaAFOBcfNWpG0RYZg0HDgR3++aVwSsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEt
ODMyYjVkZWY1YWQ4LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEtODMyYjVkZWY1YWQ4
LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfzXI4mF
MGLtxuXag+bk+3izAa0y7YJPYuWLc5yKNLI7XeeSZtW4/zl6DFfrF8uKIbrWPE5e
zgFtVRdw0d6bnLzH6BPcj+VBS8qaAXi4Rjjup+vw023nqWPUiLD3asTWaNfOao8g
MhUAPtnw3qCfB1RZ96OPaeD/ujl4Qqvh8vRmdhGI5DSYcwxTx9VUd/xG02+L7xjN
MYhPPruI3hkRyBPcrvHN0uiJR7Q3Or/A11OXAZooPk9ijE/v5qGj5iTlKjaTDxOk
emx1gFVYj0a75K3Obb+Ovua4o0gaUf3/6dsBzcxfvqEuwsHBgxulCqJgfRExr7R2
C970G//rk94Kxw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:03 2025 by rpki-client