Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          /W/hU6g7v+hcP+khKCngQG4/K85osh4kc2nQ40YCyRg=
Subject key identifier:   E0:B8:92:10:61:45:DE:66:41:CA:8C:CD:2D:A5:86:6B:87:B5:D7:72
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019892C8F07B85B54E11066A5BCFC80076BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          06DB
Signing time:             Sun 10 Aug 2025 07:01:38 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:38 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:38 +0000
Files and hashes:         1: BDTH3ILUan6_zfYPTgmdo2aSIEs.roa (hash: vfoMCSza5cDas2vR4Ocwzq0jqksW2l8HAJ0wMflsMqE=)
                          2: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (hash: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=)
                          3: UaT5Q9bX82Bqe6jOA8JUwqN9Vlk.roa (hash: juEH9dDl19+Gh9JzennWIbN6WX5TGedOU3KMBiUkbg4=)
                          4: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (hash: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: 7soNUfZajlU/etln9+zuyRivgIOGF+U/rSkIG4hQ12A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:f0:7b:85:b5:4e:11:06:6a:5b:cf:c8:00:76:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Aug 10 07:01:38 2025 GMT
            Not After : Aug 11 07:01:38 2025 GMT
        Subject: CN=e0b892106145de6641ca8ccd2da5866b87b5d772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:01:a7:e7:5d:af:3a:b8:2f:24:cc:46:e3:
                    49:3e:d1:8b:e4:2e:45:23:91:9c:b1:ab:ed:f4:3d:
                    76:1a:9f:ba:a3:6b:1a:68:da:21:e0:13:37:62:f9:
                    70:ba:6f:ac:5d:8c:2a:48:30:44:98:e1:de:60:a9:
                    a8:18:36:cd:59:3a:8e:ad:9e:4d:ac:98:c0:94:af:
                    84:1b:68:15:22:f9:0d:18:d0:aa:28:91:af:53:83:
                    65:bd:94:4d:37:77:16:27:6e:f9:7d:ce:b4:38:09:
                    b6:e9:0c:6c:85:51:ab:7b:66:6c:36:d6:5b:e3:6c:
                    46:a4:fd:8a:e6:37:fd:7a:1e:06:0e:2e:52:f3:64:
                    27:6f:1d:b0:d6:78:d8:73:e6:27:5b:34:64:8f:d8:
                    aa:83:25:56:d9:54:81:fc:db:c9:b6:d4:5a:ec:09:
                    42:87:ac:34:f0:c8:95:55:fa:b2:ad:0a:91:61:63:
                    d1:c4:7c:d3:cd:70:2e:e8:9b:71:81:36:24:26:d1:
                    d3:6b:8c:78:f5:4e:25:be:54:e8:e1:18:95:27:10:
                    1a:5f:d2:e7:c9:f3:b5:40:07:9d:46:be:8e:fd:93:
                    5d:fd:7e:e7:91:6b:24:c8:46:ed:81:1e:9a:4e:2a:
                    f4:0b:04:7d:2e:11:a0:9d:73:fd:df:04:22:6c:05:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B8:92:10:61:45:DE:66:41:CA:8C:CD:2D:A5:86:6B:87:B5:D7:72
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:44:d2:24:e1:16:06:4a:36:fb:fb:94:4d:4c:dc:42:b6:
         a5:87:e2:57:6e:a7:2a:af:d5:45:64:99:5d:a6:7e:e1:07:cf:
         19:f0:eb:67:66:62:62:5f:e0:bf:e3:a0:53:59:99:42:aa:d5:
         e2:08:e7:45:b7:9d:e9:a3:90:bd:37:5c:de:8d:c5:11:b7:aa:
         ea:b6:6e:62:eb:5d:61:65:d5:e6:85:ba:53:66:25:a9:1b:c3:
         d8:90:3b:fc:c9:11:cd:28:f0:53:a5:7c:92:77:1e:71:94:1b:
         5a:95:58:32:09:8c:d8:56:58:76:e7:1b:37:69:aa:53:95:5a:
         db:ea:b2:df:de:32:ea:71:8d:18:bc:6f:c7:04:b2:8a:70:fc:
         fb:05:aa:a8:04:19:4f:92:ea:aa:b9:c3:ca:14:0e:9d:4f:4d:
         b8:5e:e3:21:aa:c0:52:f1:80:cd:2e:8b:18:dc:96:9f:73:f6:
         e3:9b:ce:0b:57:9b:3c:51:fd:35:f3:41:e6:df:54:9b:c7:b6:
         2a:1a:0e:84:08:0d:78:b9:13:83:86:6a:ae:95:fc:79:36:2a:
         95:96:44:e1:bc:cb:35:d8:e6:00:6a:96:74:58:e3:dc:1a:10:
         5f:49:99:f0:be:cb:d8:ef:62:c2:73:d7:c3:9a:10:b3:c3:f8:
         1f:c2:01:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyPB7hbVOEQZqW8/IAHa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl
NzNmODYwHhcNMjUwODEwMDcwMTM4WhcNMjUwODExMDcwMTM4WjAzMTEwLwYDVQQD
EyhlMGI4OTIxMDYxNDVkZTY2NDFjYThjY2QyZGE1ODY2Yjg3YjVkNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYBp+ddrzq4LyTMRuNJPtGL5C5F
I5Gcsavt9D12Gp+6o2saaNoh4BM3Yvlwum+sXYwqSDBEmOHeYKmoGDbNWTqOrZ5N
rJjAlK+EG2gVIvkNGNCqKJGvU4NlvZRNN3cWJ275fc60OAm26QxshVGre2ZsNtZb
42xGpP2K5jf9eh4GDi5S82Qnbx2w1njYc+YnWzRkj9iqgyVW2VSB/NvJttRa7AlC
h6w08MiVVfqyrQqRYWPRxHzTzXAu6JtxgTYkJtHTa4x49U4lvlTo4RiVJxAaX9Ln
yfO1QAedRr6O/ZNd/X7nkWskyEbtgR6aTir0CwR9LhGgnXP93wQibAXXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC4khBhRd5mQcqMzS2lhmuHtddyMB8GA1UdIwQY
MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt
NDEzZGE2NjdhOGJlLzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl
LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6FE0iTh
FgZKNvv7lE1M3EK2pYfiV26nKq/VRWSZXaZ+4QfPGfDrZ2ZiYl/gv+OgU1mZQqrV
4gjnRbed6aOQvTdc3o3FEbeq6rZuYutdYWXV5oW6U2YlqRvD2JA7/MkRzSjwU6V8
kncecZQbWpVYMgmM2FZYducbN2mqU5Va2+qy394y6nGNGLxvxwSyinD8+wWqqAQZ
T5LqqrnDyhQOnU9NuF7jIarAUvGAzS6LGNyWn3P245vOC1ebPFH9NfNB5t9Um8e2
KhoOhAgNeLkTg4ZqrpX8eTYqlZZE4bzLNdjmAGqWdFjj3BoQX0mZ8L7L2O9iwnPX
w5oQs8P4H8IB0A==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:08 2025 by rpki-client