Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File:                     eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier:          Lxg6zQ97kzeBHjtIBlxfi96dVgrU/YlJbAH1fWRXMb8=
Subject key identifier:   35:3E:4A:88:AB:30:87:E7:0B:9C:A6:4C:D1:A8:C0:FE:F5:EC:C4:21
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer:       /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial:       01987E661D130DCC0D694A400C0173B12DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number:          14A1
Signing time:             Wed 06 Aug 2025 08:01:17 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:17 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:17 +0000
Files and hashes:         1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: ozb4lS+sU2EagLKDQ0qYm7UKLvrqbjJpojnrXgWcgBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:1d:13:0d:cc:0d:69:4a:40:0c:01:73:b1:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
        Validity
            Not Before: Aug  6 08:01:17 2025 GMT
            Not After : Aug  7 08:01:17 2025 GMT
        Subject: CN=353e4a88ab3087e70b9ca64cd1a8c0fef5ecc421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:ca:7b:3a:8f:fd:4f:87:77:50:d7:fe:68:
                    7d:2e:f7:3b:46:0b:24:58:6b:ae:e9:ca:36:c8:82:
                    04:53:cc:5f:0d:e8:3c:24:c5:1e:38:ac:00:db:28:
                    55:81:85:8f:6a:77:2f:2a:c9:ad:5b:ac:5e:81:e6:
                    7c:ff:18:8b:20:db:c5:a4:81:69:0c:67:f8:9d:86:
                    54:ff:fe:05:e8:48:42:2b:6d:fc:e2:72:4e:e3:c0:
                    3f:6d:10:c1:1c:ac:28:54:4b:57:1f:2f:b6:7b:ec:
                    3c:3e:6d:fc:0f:9e:89:3e:23:45:99:69:a1:61:5d:
                    e4:63:a0:74:c8:21:5d:24:bc:c1:da:c6:ce:65:f7:
                    95:db:16:b5:2b:3b:cc:51:fe:47:23:10:0c:3b:0f:
                    f9:0e:2e:82:e9:c8:5d:bd:73:da:4c:a4:ec:97:d6:
                    6e:d2:56:83:4b:00:89:c6:63:16:12:cd:b0:37:ef:
                    93:d6:2e:ef:90:05:ee:aa:57:8f:08:26:fe:ae:d6:
                    b5:0f:d7:dc:dc:b2:a3:8c:a0:2d:d8:6b:ec:8f:f4:
                    bd:f5:5e:c1:5e:95:fd:f5:8c:1b:ab:b8:54:f0:e0:
                    4e:e1:7d:ba:5c:19:51:40:8c:6c:cf:39:62:c6:f5:
                    1c:d5:63:2b:e6:fa:68:b8:17:2a:98:a5:01:ec:a7:
                    4b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3E:4A:88:AB:30:87:E7:0B:9C:A6:4C:D1:A8:C0:FE:F5:EC:C4:21
            X509v3 Authority Key Identifier:
                keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:50:fd:cf:66:d1:f9:2b:58:19:d2:e1:dd:ec:c2:59:65:
         03:ca:6a:76:09:25:9f:12:f9:7a:97:cf:f1:c7:de:2d:08:7c:
         96:2c:cc:f7:c3:83:9b:0e:44:b8:56:f2:a8:b6:6e:4f:cd:2d:
         55:57:72:ca:7f:53:f1:91:76:88:ed:22:29:bb:91:ca:24:7e:
         e8:26:d6:65:85:07:35:0c:33:54:ec:00:7a:0c:70:cc:bc:74:
         eb:43:89:e3:71:c2:e8:8c:54:f1:64:7a:a6:c2:7d:6f:69:5d:
         88:36:07:3b:26:b3:39:cf:9e:62:6e:91:6d:71:cc:c0:2c:c9:
         c7:ce:73:7d:55:30:3b:b4:c5:16:a7:1a:83:d5:d6:e1:a0:b6:
         43:d0:3f:6e:6e:ea:aa:ad:0c:a4:c5:9b:38:e9:71:f9:17:78:
         83:04:52:46:50:80:29:d9:01:16:ef:74:05:18:70:b3:6a:ef:
         73:7e:b2:16:89:72:e4:36:da:ec:09:db:34:b8:b8:83:b8:34:
         10:2b:ae:b2:e5:71:cd:18:16:ab:3a:4a:7c:bb:9a:80:e7:39:
         3d:a6:09:89:9d:90:ed:83:19:f9:de:2a:46:56:5a:fc:3d:5b:
         fe:71:6c:30:b6:59:4f:21:c8:91:ea:8d:48:5b:8f:a7:c1:b1:
         f5:cf:25:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Zh0TDcwNaUpADAFzsS3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZThkMDQ5MGQzMGJmOTQ0ZWQ0ZDYzNjg0N2M1OGQ0MzFh
MzhjYmMwHhcNMjUwODA2MDgwMTE3WhcNMjUwODA3MDgwMTE3WjAzMTEwLwYDVQQD
EygzNTNlNGE4OGFiMzA4N2U3MGI5Y2E2NGNkMWE4YzBmZWY1ZWNjNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2DKezqP/U+Hd1DX/mh9Lvc7Rgsk
WGuu6co2yIIEU8xfDeg8JMUeOKwA2yhVgYWPancvKsmtW6xegeZ8/xiLINvFpIFp
DGf4nYZU//4F6EhCK2384nJO48A/bRDBHKwoVEtXHy+2e+w8Pm38D56JPiNFmWmh
YV3kY6B0yCFdJLzB2sbOZfeV2xa1KzvMUf5HIxAMOw/5Di6C6chdvXPaTKTsl9Zu
0laDSwCJxmMWEs2wN++T1i7vkAXuqlePCCb+rta1D9fc3LKjjKAt2Gvsj/S99V7B
XpX99Ywbq7hU8OBO4X26XBlRQIxszzlixvUc1WMr5vpouBcqmKUB7KdLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU+SoirMIfnC5ymTNGowP717MQhMB8GA1UdIwQY
MBaAFHno0EkNML+UTtTWNoR8WNQxo4y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVqUVNRMHd2NVJPMU5ZMmhIeFkxREdqakx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yOTQxZTctNmIwZS00ZTg4LWI3ZDgt
NGJkMGMyN2QzYWVhLzEvZWVqUVNRMHd2NVJPMU5ZMmhIeFkxREdqakx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yOTQxZTctNmIwZS00ZTg4LWI3ZDgtNGJkMGMyN2QzYWVh
LzEvZWVqUVNRMHd2NVJPMU5ZMmhIeFkxREdqakx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk5Q/c9m
0fkrWBnS4d3swlllA8pqdgklnxL5epfP8cfeLQh8lizM98ODmw5EuFbyqLZuT80t
VVdyyn9T8ZF2iO0iKbuRyiR+6CbWZYUHNQwzVOwAegxwzLx060OJ43HC6IxU8WR6
psJ9b2ldiDYHOyazOc+eYm6RbXHMwCzJx85zfVUwO7TFFqcag9XW4aC2Q9A/bm7q
qq0MpMWbOOlx+Rd4gwRSRlCAKdkBFu90BRhws2rvc36yFoly5Dba7AnbNLi4g7g0
ECuusuVxzRgWqzpKfLuagOc5PaYJiZ2Q7YMZ+d4qRlZa/D1b/nFsMLZZTyHIkeqN
SFuPp8Gx9c8lhg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:03 2025 by rpki-client