Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File:                     4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier:          X3Glb2ZEzKG8+Fq+h8+G4MYTPEJkgEmUpGg8tq/jLWg=
Subject key identifier:   EC:BD:52:A6:F4:B6:AC:F0:55:36:6C:51:44:75:E0:8F:B0:22:BB:5F
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer:       /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial:       01988166FA5954EBAA7AF01AF314A3FC40E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number:          15B0
Signing time:             Wed 06 Aug 2025 22:01:06 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:06 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:06 +0000
Files and hashes:         1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: cx3/ZZXyI0djYffwa8WCpAvDx7JtjY9NVGVqVS3vM7U=)
                          2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:fa:59:54:eb:aa:7a:f0:1a:f3:14:a3:fc:40:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
        Validity
            Not Before: Aug  6 22:01:06 2025 GMT
            Not After : Aug  7 22:01:06 2025 GMT
        Subject: CN=ecbd52a6f4b6acf055366c514475e08fb022bb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:06:87:e1:6b:6a:f9:59:4a:78:f6:c5:e2:
                    aa:3f:4f:4c:c5:fa:bb:b0:6d:7d:42:8e:52:e1:10:
                    1c:ed:0c:de:5a:5c:14:1f:3d:7f:e8:7b:f2:62:0e:
                    30:a0:ed:77:60:3b:86:f6:aa:1d:b7:d4:9b:64:3d:
                    bf:17:ed:7c:2e:0b:57:88:42:d2:aa:69:6d:fa:c2:
                    ac:35:5f:26:97:e5:d0:7c:5c:f9:93:e9:3e:19:21:
                    71:9a:f9:93:bc:b6:ba:28:e5:fa:fc:bc:05:6c:ce:
                    b3:4e:dd:16:d0:2a:d8:7e:12:f5:4a:f8:b4:1c:d3:
                    44:2c:3c:fd:b0:55:0a:e2:61:ff:da:6a:9c:6b:ff:
                    1b:54:64:32:99:52:29:bb:aa:c7:22:a5:26:08:d9:
                    3c:87:a0:b8:bd:c8:39:9a:66:ca:67:83:af:e6:18:
                    1c:cb:7a:15:d1:c0:2e:d5:66:9e:4e:c8:e3:73:6a:
                    da:0d:83:dc:b0:35:08:1e:c5:75:6b:be:1a:db:31:
                    bf:d0:15:16:25:d0:c9:31:c3:14:d3:55:f4:e0:7b:
                    b6:b6:60:25:47:69:c9:17:bb:f1:a6:26:e2:6f:45:
                    56:b7:63:b0:fc:27:c1:c2:00:48:91:9e:fe:07:fc:
                    54:3c:31:13:fb:f8:e1:b4:e8:32:d2:49:58:02:2d:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BD:52:A6:F4:B6:AC:F0:55:36:6C:51:44:75:E0:8F:B0:22:BB:5F
            X509v3 Authority Key Identifier:
                keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:33:f6:37:7e:91:06:02:fb:a9:2a:17:35:c4:87:9a:8a:
         e4:d7:5a:b0:ca:f7:e4:37:b2:fd:6a:49:c5:c6:c8:f1:05:d7:
         c3:48:c0:c4:06:bd:b8:dd:0a:2e:c0:58:e6:ab:f4:65:86:a9:
         dd:75:87:b0:e8:9b:b9:93:3c:14:0b:3b:1b:dc:ec:e4:06:27:
         a4:e6:06:e9:b9:4d:63:d5:af:6f:71:66:11:25:37:eb:5b:58:
         80:ef:11:06:5c:d2:cd:ad:f5:5b:11:f2:9e:76:bb:96:ba:56:
         f0:46:f2:e9:f2:4d:f3:00:53:0e:a8:02:17:3b:4e:9d:16:d4:
         55:01:95:12:41:da:c0:6f:d7:f5:d4:12:5c:97:8c:5e:7a:47:
         3c:1b:e6:4b:14:c4:10:7a:92:25:74:fb:52:58:06:94:b0:1c:
         e3:29:82:3d:cf:8c:57:ca:33:29:c4:39:7d:2a:65:6d:b0:93:
         79:60:b0:b1:4c:ba:04:20:2c:2b:e0:69:a7:cb:26:f0:76:da:
         ed:f4:56:08:67:50:64:d8:6b:59:17:39:2f:df:cf:29:94:df:
         ba:e6:cc:9c:ba:9b:18:ad:c6:43:5e:c5:a9:ea:65:ee:dc:16:
         be:3d:3c:fc:50:26:fc:14:3a:bd:f2:da:98:39:dc:83:02:f5:
         36:c9:80:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZvpZVOuqevAa8xSj/EDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw
NjMxYjkwHhcNMjUwODA2MjIwMTA2WhcNMjUwODA3MjIwMTA2WjAzMTEwLwYDVQQD
EyhlY2JkNTJhNmY0YjZhY2YwNTUzNjZjNTE0NDc1ZTA4ZmIwMjJiYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w8Gh+FravlZSnj2xeKqP09Mxfq7
sG19Qo5S4RAc7QzeWlwUHz1/6HvyYg4woO13YDuG9qodt9SbZD2/F+18LgtXiELS
qmlt+sKsNV8ml+XQfFz5k+k+GSFxmvmTvLa6KOX6/LwFbM6zTt0W0CrYfhL1Svi0
HNNELDz9sFUK4mH/2mqca/8bVGQymVIpu6rHIqUmCNk8h6C4vcg5mmbKZ4Ov5hgc
y3oV0cAu1WaeTsjjc2raDYPcsDUIHsV1a74a2zG/0BUWJdDJMcMU01X04Hu2tmAl
R2nJF7vxpibib0VWt2Ow/CfBwgBIkZ7+B/xUPDET+/jhtOgy0klYAi0xYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy9Uqb0tqzwVTZsUUR14I+wIrtfMB8GA1UdIwQY
MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt
ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy
LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7gz9jd+
kQYC+6kqFzXEh5qK5NdasMr35Dey/WpJxcbI8QXXw0jAxAa9uN0KLsBY5qv0ZYap
3XWHsOibuZM8FAs7G9zs5AYnpOYG6blNY9Wvb3FmESU361tYgO8RBlzSza31WxHy
nna7lrpW8Eby6fJN8wBTDqgCFztOnRbUVQGVEkHawG/X9dQSXJeMXnpHPBvmSxTE
EHqSJXT7UlgGlLAc4ymCPc+MV8ozKcQ5fSplbbCTeWCwsUy6BCAsK+Bpp8sm8Hba
7fRWCGdQZNhrWRc5L9/PKZTfuubMnLqbGK3GQ17Fqepl7twWvj08/FAm/BQ6vfLa
mDncgwL1NsmA8Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:44 2025 by rpki-client