Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File:                     ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier:          rh1EwK5O9XUy3oYkyt9tPSqHpIQWmm3dLcBBYm1W2XU=
Subject key identifier:   46:F4:F8:9F:24:47:80:94:D0:F8:3F:A1:B3:4C:C6:16:93:93:75:FE
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer:       /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial:       01988EEC86A1CE06C6C001FE0628B5AE584F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number:          0E8C
Signing time:             Sat 09 Aug 2025 13:02:02 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:02 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:02 +0000
Files and hashes:         1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: ZEnH6p3Zt+JxxTji6hyuXxUTv1HaK1GRgPr0cRvm7EY=)
                          2: f_4bnJXdMBrWxpYtFBJpH8Bqm-U.roa (hash: 7mT2nXJRoDTq1rwwF8w2+5XwWETvVnI796Gd4d+Aoxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:86:a1:ce:06:c6:c0:01:fe:06:28:b5:ae:58:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
        Validity
            Not Before: Aug  9 13:02:02 2025 GMT
            Not After : Aug 10 13:02:02 2025 GMT
        Subject: CN=46f4f89f24478094d0f83fa1b34cc616939375fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:43:ca:48:56:b9:41:bf:60:a7:1b:4a:f4:
                    13:32:cb:e2:2d:6b:48:38:c4:1b:14:b6:87:8d:fc:
                    9a:c5:f4:a1:d2:39:a7:85:95:47:5f:07:f2:91:9e:
                    1f:45:92:74:eb:de:75:83:8a:34:6d:16:b8:1e:79:
                    a2:dd:92:be:95:9c:21:47:a6:e9:27:8f:83:ee:e3:
                    4b:11:c6:52:1b:cc:72:6d:0e:35:05:d9:69:14:7c:
                    43:ce:c5:27:f2:e6:f3:3b:6f:35:8b:41:21:fb:17:
                    8f:1a:55:32:46:d8:da:a6:66:34:a4:37:da:a4:ca:
                    f3:61:d6:63:9b:b5:ba:55:bc:c4:96:65:22:8f:3d:
                    e5:83:04:de:8b:d2:7f:6b:94:74:39:36:fa:19:09:
                    84:5e:07:f1:17:f9:7b:6a:f7:07:af:01:48:58:51:
                    cf:5a:67:52:8e:93:12:ec:ca:e7:4b:a5:0b:ee:5a:
                    56:ae:e5:0f:4a:cf:3e:15:cb:55:d0:fe:02:e4:2b:
                    ff:2f:09:ee:39:06:0d:6e:60:e0:69:d8:43:dc:60:
                    9a:f3:1b:77:cd:25:ff:a2:d8:df:0d:42:54:fa:ce:
                    33:66:9f:fc:67:1a:11:5c:7c:25:91:ed:8d:f9:9f:
                    9d:80:4b:d4:aa:5f:fb:18:11:e2:96:e3:72:a7:f8:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F4:F8:9F:24:47:80:94:D0:F8:3F:A1:B3:4C:C6:16:93:93:75:FE
            X509v3 Authority Key Identifier:
                keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ee:3c:b5:2d:ee:95:c8:2d:1c:fc:c3:b6:e2:1a:c1:ae:6b:
         e9:7b:10:a9:f4:f0:f3:f5:ce:56:e5:6e:0b:f5:eb:68:c4:d0:
         8e:54:17:78:bb:9a:cc:b4:17:e8:d3:a9:23:a8:85:13:aa:db:
         2e:47:75:58:f2:94:46:8b:97:61:5a:ed:fa:0d:0c:66:df:a2:
         f7:7d:4f:d0:93:c8:b7:21:3a:63:c8:30:1d:4a:6a:98:e4:30:
         31:fc:75:48:f0:ab:7f:9c:49:57:fa:3f:2a:09:f4:e1:70:cd:
         d8:e7:8b:59:83:f2:07:6b:40:bf:08:23:a6:c0:1f:a0:11:d1:
         45:93:79:28:67:b8:d3:82:c0:66:40:be:80:83:e1:61:d7:93:
         e4:bd:02:46:e2:c9:0d:54:94:8d:cc:7b:0f:3a:78:cb:ba:0d:
         f3:4c:5c:ce:40:22:24:4d:3c:f8:bc:f5:1a:14:74:88:6b:59:
         bb:60:4e:c4:06:7b:7e:3a:ec:61:3e:41:24:21:86:fb:1d:66:
         6d:a3:6b:1b:72:9e:70:01:63:92:49:0e:64:aa:43:3f:e2:38:
         b1:80:47:ad:d4:38:b4:50:36:46:2d:0f:96:e8:51:53:a3:30:
         d9:9e:6d:1e:b3:e8:74:e2:00:cc:ee:93:09:db:e9:eb:4a:56:
         dc:15:c9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7IahzgbGwAH+Bii1rlhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTQ1ZmRlMDFhZjgxMDc2MGVlNjFiY2YzNTRjZjk2MmFj
NDYwZDkwHhcNMjUwODA5MTMwMjAyWhcNMjUwODEwMTMwMjAyWjAzMTEwLwYDVQQD
Eyg0NmY0Zjg5ZjI0NDc4MDk0ZDBmODNmYTFiMzRjYzYxNjkzOTM3NWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk1DykhWuUG/YKcbSvQTMsviLWtI
OMQbFLaHjfyaxfSh0jmnhZVHXwfykZ4fRZJ06951g4o0bRa4Hnmi3ZK+lZwhR6bp
J4+D7uNLEcZSG8xybQ41BdlpFHxDzsUn8ubzO281i0Eh+xePGlUyRtjapmY0pDfa
pMrzYdZjm7W6VbzElmUijz3lgwTei9J/a5R0OTb6GQmEXgfxF/l7avcHrwFIWFHP
WmdSjpMS7MrnS6UL7lpWruUPSs8+FctV0P4C5Cv/LwnuOQYNbmDgadhD3GCa8xt3
zSX/otjfDUJU+s4zZp/8ZxoRXHwlke2N+Z+dgEvUql/7GBHiluNyp/ipLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb0+J8kR4CU0Pg/obNMxhaTk3X+MB8GA1UdIwQY
MBaAFBEUX94Br4EHYO5hvPNUz5YqxGDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUt
YzMwNWM4ZDlhMzE5LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUtYzMwNWM4ZDlhMzE5
LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANe48tS3u
lcgtHPzDtuIawa5r6XsQqfTw8/XOVuVuC/XraMTQjlQXeLuazLQX6NOpI6iFE6rb
Lkd1WPKURouXYVrt+g0MZt+i931P0JPItyE6Y8gwHUpqmOQwMfx1SPCrf5xJV/o/
Kgn04XDN2OeLWYPyB2tAvwgjpsAfoBHRRZN5KGe404LAZkC+gIPhYdeT5L0CRuLJ
DVSUjcx7Dzp4y7oN80xczkAiJE08+Lz1GhR0iGtZu2BOxAZ7fjrsYT5BJCGG+x1m
baNrG3KecAFjkkkOZKpDP+I4sYBHrdQ4tFA2Ri0PluhRU6Mw2Z5tHrPodOIAzO6T
Cdvp60pW3BXJNg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:27:55 2025 by rpki-client