Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          5kCoEyoJo4axu7ApQOpJdrdKm7u/C7HW9Tr+d5+Y+Xo=
Subject key identifier:   B5:9C:C9:5F:C9:49:09:83:39:EF:1F:1F:70:7E:2B:3D:0A:DC:AA:0A
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       01988B0F8A493F4B22E34A384049A03A8C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          0A25
Signing time:             Fri 08 Aug 2025 19:01:47 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:47 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:47 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: qsvMi2x4HqcbWrWUpyrEBNV9bTQAB+HBUF4484EnAjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:8a:49:3f:4b:22:e3:4a:38:40:49:a0:3a:8c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Aug  8 19:01:47 2025 GMT
            Not After : Aug  9 19:01:47 2025 GMT
        Subject: CN=b59cc95fc949098339ef1f1f707e2b3d0adcaa0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:1d:39:f4:65:a5:c6:7d:75:5c:2e:58:de:
                    49:75:65:c9:a8:ee:a6:ba:89:1a:2f:d4:11:48:35:
                    f9:d7:30:a7:96:31:79:fb:7a:23:c2:4a:1a:4a:fe:
                    a7:5f:68:98:a2:47:af:27:98:ca:ef:73:fc:b7:e6:
                    e2:1f:01:45:b9:51:82:f2:da:c4:70:cf:9a:49:5d:
                    23:fe:4f:b6:69:24:be:e1:9e:cc:ec:48:c6:4c:34:
                    f0:0f:4b:ed:23:43:78:2f:6c:18:4b:ea:84:93:69:
                    d2:44:91:12:ea:88:15:87:9f:51:43:3c:bc:f1:51:
                    6e:55:21:73:98:f4:af:19:76:05:c3:cc:91:7c:c0:
                    b2:4e:be:85:0c:c8:39:00:a3:de:e9:6e:99:eb:77:
                    1b:90:f7:5f:90:3d:de:e8:84:11:fa:24:82:69:66:
                    74:88:42:00:cb:bb:7c:db:ee:24:fa:97:20:18:a0:
                    aa:de:4c:05:f9:0c:a4:06:24:79:a9:10:a7:97:f5:
                    5f:66:92:75:0b:d5:a3:fa:52:c9:0c:3c:d7:1d:24:
                    cf:b6:3c:d9:3c:01:ea:8b:25:3d:60:31:c3:4d:4c:
                    8b:e2:ba:4f:14:9c:bc:71:ef:db:73:08:2e:83:60:
                    62:b5:12:d8:69:e8:7f:31:44:72:8b:a8:07:39:5e:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:C9:5F:C9:49:09:83:39:EF:1F:1F:70:7E:2B:3D:0A:DC:AA:0A
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:38:85:d0:8d:7c:09:a1:88:76:20:d5:af:24:94:97:c4:e5:
         7f:c8:9c:0e:de:0f:80:62:98:97:46:22:bb:d0:2c:d0:5c:b7:
         73:c3:37:33:18:aa:6b:5e:9d:4b:07:db:7f:9d:55:24:64:51:
         96:c6:45:2c:a3:00:2d:dd:80:d1:3e:f8:ae:ff:18:a1:ac:b4:
         c7:88:ea:a1:fe:89:5c:d8:68:c1:94:a0:8a:57:2c:1e:16:fb:
         8d:4b:6d:00:ae:28:de:6a:48:cd:97:94:25:dd:01:7e:6b:11:
         30:6d:27:07:e3:35:d7:da:40:39:7d:5a:03:13:f3:bf:e9:06:
         a6:37:a0:d6:ff:66:c5:17:63:a9:8c:36:10:11:d9:8b:24:24:
         1e:18:ef:65:25:ee:6a:6c:fd:74:a0:e1:52:38:7d:e6:e2:ab:
         d0:2f:81:d3:76:7a:ed:d0:88:37:00:13:25:46:3c:0a:f9:a1:
         62:b0:17:78:99:bd:3e:dc:72:4b:32:3b:66:b9:de:43:fa:49:
         82:b0:d3:2a:df:79:d1:b7:23:92:1a:0e:cc:7e:be:6b:e9:c2:
         11:c5:10:f1:bb:8a:5e:5b:21:8f:47:b6:0b:d3:b3:40:f9:47:
         1f:a4:61:ae:5a:bf:36:a6:68:8c:82:71:81:ad:81:c4:a8:7b:
         8e:10:8a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD4pJP0si40o4QEmgOoyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDkxMWYxZjRkMGJjM2VlNjJlZjgzMzIzMDdhMTM1NDU2
MmI1MjUwHhcNMjUwODA4MTkwMTQ3WhcNMjUwODA5MTkwMTQ3WjAzMTEwLwYDVQQD
EyhiNTljYzk1ZmM5NDkwOTgzMzllZjFmMWY3MDdlMmIzZDBhZGNhYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIgdOfRlpcZ9dVwuWN5JdWXJqO6m
uokaL9QRSDX51zCnljF5+3ojwkoaSv6nX2iYokevJ5jK73P8t+biHwFFuVGC8trE
cM+aSV0j/k+2aSS+4Z7M7EjGTDTwD0vtI0N4L2wYS+qEk2nSRJES6ogVh59RQzy8
8VFuVSFzmPSvGXYFw8yRfMCyTr6FDMg5AKPe6W6Z63cbkPdfkD3e6IQR+iSCaWZ0
iEIAy7t82+4k+pcgGKCq3kwF+QykBiR5qRCnl/VfZpJ1C9Wj+lLJDDzXHSTPtjzZ
PAHqiyU9YDHDTUyL4rpPFJy8ce/bcwgug2BitRLYaeh/MURyi6gHOV5j5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWcyV/JSQmDOe8fH3B+Kz0K3KoKMB8GA1UdIwQY
MBaAFHvZEfH00Lw+5i74MyMHoTVFYrUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MWYyNWYtNjM1My00YjhjLTkzY2Mt
ZGEyNTUwNjRkM2RjLzEvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MWYyNWYtNjM1My00YjhjLTkzY2MtZGEyNTUwNjRkM2Rj
LzEvZTlrUjhmVFF2RDdtTHZnekl3ZWhOVVZpdFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDiF0I18
CaGIdiDVrySUl8Tlf8icDt4PgGKYl0Yiu9As0Fy3c8M3Mxiqa16dSwfbf51VJGRR
lsZFLKMALd2A0T74rv8Yoay0x4jqof6JXNhowZSgilcsHhb7jUttAK4o3mpIzZeU
Jd0BfmsRMG0nB+M119pAOX1aAxPzv+kGpjeg1v9mxRdjqYw2EBHZiyQkHhjvZSXu
amz9dKDhUjh95uKr0C+B03Z67dCINwATJUY8CvmhYrAXeJm9PtxySzI7ZrneQ/pJ
grDTKt950bcjkhoOzH6+a+nCEcUQ8buKXlshj0e2C9OzQPlHH6Rhrlq/NqZojIJx
ga2BxKh7jhCKLg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:42 2025 by rpki-client