Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File:                     ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier:          NUbtE8CPIQPp/sH+oT0FP768m4sJIiduvAb59FwPTAA=
Subject key identifier:   A0:11:2D:F8:59:58:1F:D0:DA:2C:2E:DB:0E:9F:82:EF:71:D0:0F:EC
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer:       /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial:       019892FF1B424F72841CA17B38008395090D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number:          0403
Signing time:             Sun 10 Aug 2025 08:00:48 +0000
Manifest this update:     Sun 10 Aug 2025 08:00:48 +0000
Manifest next update:     Mon 11 Aug 2025 08:00:48 +0000
Files and hashes:         1: Y8bxmFfpWoR5ksX0Qq13ZOagVPo.roa (hash: C0DVCgE5f6/2s7WXTWOG0D5IiTtwmNwV6icT5/Rn4Qg=)
                          2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: 74s6GZQVw4BGE32H7jV6hKlNqvL6NnrDFCJfoXXxNos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:1b:42:4f:72:84:1c:a1:7b:38:00:83:95:09:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
        Validity
            Not Before: Aug 10 08:00:48 2025 GMT
            Not After : Aug 11 08:00:48 2025 GMT
        Subject: CN=a0112df859581fd0da2c2edb0e9f82ef71d00fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:71:8c:a3:6a:d2:79:08:97:fa:bd:e8:28:
                    59:96:e1:94:7e:09:6d:0c:99:d3:cb:8a:e6:44:34:
                    0a:fa:0e:ba:23:56:36:1e:bf:de:b4:34:55:79:6d:
                    44:10:a4:aa:43:a1:c2:0a:f8:20:9b:01:2d:7b:fa:
                    3f:65:31:6c:70:2c:d4:f1:a7:74:3e:33:8f:1f:0a:
                    98:57:0a:e1:84:4a:90:a1:c5:52:cd:74:3d:02:06:
                    97:06:9e:b7:14:69:4a:20:bf:24:00:7b:9e:57:64:
                    ff:7b:4c:1e:ba:43:22:10:1c:71:53:1c:0d:9d:17:
                    65:39:ab:0c:2c:ac:42:55:74:0d:8d:35:08:75:2e:
                    84:89:ce:bb:7c:a2:fe:94:dc:20:0c:81:fd:3a:92:
                    53:30:94:26:65:1a:2d:49:13:60:70:3a:be:92:d0:
                    c5:22:6d:2a:40:e7:00:2e:f1:14:73:77:5a:35:d0:
                    ff:b1:8f:a9:d3:36:c4:c6:58:18:0c:f9:98:89:d0:
                    e4:11:2e:ef:6b:14:ba:b4:64:a7:00:ec:63:fe:e9:
                    fc:d0:c9:f3:f6:c9:c2:e7:f3:4d:4e:25:fb:43:5d:
                    4f:85:dd:89:1d:3e:c8:04:db:40:26:0e:ca:69:c9:
                    3a:89:00:17:21:ce:29:10:7e:66:4d:c5:f3:33:31:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:11:2D:F8:59:58:1F:D0:DA:2C:2E:DB:0E:9F:82:EF:71:D0:0F:EC
            X509v3 Authority Key Identifier:
                keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:6b:1c:ba:16:f8:62:91:b6:e7:51:78:7d:7b:2f:83:69:
         4e:db:95:34:07:60:95:86:05:4f:7d:df:93:f7:4e:61:74:16:
         00:1a:8e:ad:c7:df:69:79:d8:89:09:63:2e:64:d7:bf:57:e3:
         0b:b2:fb:4e:59:69:1f:f6:01:d8:6d:13:13:bc:41:de:f9:d7:
         d5:93:b1:a7:ac:6f:bf:ce:b1:14:3f:8f:a2:d3:a1:bc:fa:6f:
         38:6d:98:e6:d6:3b:de:bb:16:f3:2a:23:e9:5e:a3:71:65:17:
         d6:1b:50:2d:40:c1:73:54:aa:01:84:c7:23:47:50:c8:71:07:
         dd:fb:46:8f:19:78:07:e9:4c:59:33:eb:c9:97:b5:c7:28:ed:
         95:d7:06:49:49:cd:71:0f:af:cd:70:55:bf:eb:61:58:67:3c:
         28:de:68:64:b4:62:a5:ab:67:da:59:18:f9:cc:af:7a:e4:2d:
         95:00:7e:fb:2b:65:43:cc:1a:6c:e3:19:9d:dd:f0:47:b0:19:
         6a:cf:a0:ef:f0:24:e5:56:4e:cf:82:2a:ff:49:07:d8:ab:b6:
         69:62:41:4a:e4:15:9f:bb:66:91:e7:cc:1c:2d:a5:0f:ac:ea:
         e2:1e:b2:6c:3c:16:e6:10:63:1b:8a:3b:ad:78:c0:aa:b6:7a:
         cc:c4:4e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiS/xtCT3KEHKF7OACDlQkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTFkM2E0MjVlZGJkOWQ4YWRhZDA0MTA2YWIxMmQ3Yzc2
YWMxMzIwHhcNMjUwODEwMDgwMDQ4WhcNMjUwODExMDgwMDQ4WjAzMTEwLwYDVQQD
EyhhMDExMmRmODU5NTgxZmQwZGEyYzJlZGIwZTlmODJlZjcxZDAwZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMpxjKNq0nkIl/q96ChZluGUfglt
DJnTy4rmRDQK+g66I1Y2Hr/etDRVeW1EEKSqQ6HCCvggmwEte/o/ZTFscCzU8ad0
PjOPHwqYVwrhhEqQocVSzXQ9AgaXBp63FGlKIL8kAHueV2T/e0weukMiEBxxUxwN
nRdlOasMLKxCVXQNjTUIdS6Eic67fKL+lNwgDIH9OpJTMJQmZRotSRNgcDq+ktDF
Im0qQOcALvEUc3daNdD/sY+p0zbExlgYDPmYidDkES7vaxS6tGSnAOxj/un80Mnz
9snC5/NNTiX7Q11Phd2JHT7IBNtAJg7Kack6iQAXIc4pEH5mTcXzMzEbzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKARLfhZWB/Q2iwu2w6fgu9x0A/sMB8GA1UdIwQY
MBaAFK7h06Ql7b2ditrQQQarEtfHasEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAt
ZmJlNWZkY2YwZWQzLzEvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAtZmJlNWZkY2YwZWQz
LzEvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobxrHLoW
+GKRtudReH17L4NpTtuVNAdglYYFT33fk/dOYXQWABqOrcffaXnYiQljLmTXv1fj
C7L7TllpH/YB2G0TE7xB3vnX1ZOxp6xvv86xFD+PotOhvPpvOG2Y5tY73rsW8yoj
6V6jcWUX1htQLUDBc1SqAYTHI0dQyHEH3ftGjxl4B+lMWTPryZe1xyjtldcGSUnN
cQ+vzXBVv+thWGc8KN5oZLRipatn2lkY+cyveuQtlQB++ytlQ8wabOMZnd3wR7AZ
as+g7/Ak5VZOz4Iq/0kH2Ku2aWJBSuQVn7tmkefMHC2lD6zq4h6ybDwW5hBjG4o7
rXjAqrZ6zMRO7Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:06 2025 by rpki-client