Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          5qVwi3AvWF78EZ+7tOH0gLLIWmEOB2gLZ57qSFXVQrU=
Subject key identifier:   04:81:F5:8B:0B:D7:5F:2B:03:A8:57:E6:76:49:44:FE:F0:E7:3A:2E
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       01987D8A7C186D0C623126675AEFB6F41C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          050E
Signing time:             Wed 06 Aug 2025 04:01:24 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:24 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:24 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: xf1jvASXrZF8Eejy7C8RKgjw5jxBnAwK/tGhLHCC4uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:7c:18:6d:0c:62:31:26:67:5a:ef:b6:f4:1c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: Aug  6 04:01:24 2025 GMT
            Not After : Aug  7 04:01:24 2025 GMT
        Subject: CN=0481f58b0bd75f2b03a857e6764944fef0e73a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:e4:a2:cd:ce:56:41:ab:fb:b5:4c:6c:4b:
                    f2:57:02:66:ca:35:b2:7f:9b:bf:b2:73:e6:5a:dc:
                    59:de:15:6b:0b:b3:a2:b5:87:fb:7c:9c:22:ca:4f:
                    bb:89:b5:d5:d6:c9:18:2b:b1:b6:41:89:c0:04:44:
                    c5:73:ae:a0:b0:4f:24:0e:40:a7:c6:6e:74:fc:e0:
                    db:d0:3f:34:06:21:43:1f:99:64:88:a7:dc:34:05:
                    28:a6:53:10:03:fe:f1:13:8c:f7:3b:60:0e:b5:46:
                    62:c9:0b:d5:a7:f7:9f:c8:b6:ed:71:c7:e7:49:fb:
                    ca:55:50:8a:a8:3e:06:25:95:c5:ed:4c:ec:82:9a:
                    e5:73:0a:02:1a:d6:a4:d2:52:4c:25:75:ca:fb:d2:
                    5a:c3:c2:e3:11:87:77:10:74:25:8b:86:87:b2:61:
                    e4:21:f0:56:63:8e:86:5a:b7:12:7b:1b:b0:ab:c1:
                    50:d7:bf:bf:21:91:f8:4b:60:d0:28:5f:e6:0e:a3:
                    85:64:a8:59:ba:e6:8f:f5:26:22:a8:39:1a:48:56:
                    03:0b:38:76:a3:61:ab:07:29:1a:22:0b:97:77:f0:
                    b1:39:1d:f3:7c:48:a2:41:53:09:f9:aa:84:a1:c5:
                    bf:51:d6:89:97:ff:95:c0:e1:9d:18:6e:4f:8e:33:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:81:F5:8B:0B:D7:5F:2B:03:A8:57:E6:76:49:44:FE:F0:E7:3A:2E
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:de:7c:d5:39:2a:37:89:2e:ab:85:39:2a:a5:eb:da:20:40:
         dd:a4:a8:52:c7:ae:78:b9:3a:55:c3:b6:05:fd:82:fd:7d:67:
         3e:fb:8c:19:54:da:f5:07:83:c5:2a:ca:c0:52:40:1b:fc:ee:
         e3:0c:31:5f:7e:cd:3f:42:cf:64:13:e3:bd:ba:be:b2:75:b3:
         70:63:47:26:80:af:24:d4:4e:43:a8:48:4d:ef:04:97:56:33:
         a5:33:25:5a:43:01:6b:6e:a0:b4:3b:6e:70:02:eb:ba:6d:fb:
         09:5f:23:e9:c9:e6:a0:9a:30:61:97:5c:e3:8d:62:5f:79:33:
         04:b7:fd:53:93:86:ec:bd:8c:d0:00:3f:9b:be:65:59:15:36:
         8b:2b:5e:04:24:34:07:06:4a:cd:df:9a:fc:ee:dc:f4:92:93:
         d6:0b:df:20:98:50:21:09:82:0a:12:b9:17:81:05:92:f5:61:
         aa:a8:26:4a:0f:ca:65:7e:87:3f:3e:d2:63:98:39:b6:67:3c:
         fd:00:4d:1c:1d:c4:6d:12:98:3b:96:98:52:d3:f7:26:e2:a6:
         79:6c:19:6c:f0:8f:cc:56:94:a8:b9:6f:dd:91:35:f2:96:c9:
         be:c8:58:01:de:1a:56:69:cd:66:53:26:70:16:87:e6:b3:8b:
         31:a2:b0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9inwYbQxiMSZnWu+29BxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTVmMTUyY2NhMjQxMWQ0MGIxZjUyMDU5MWJlM2IzYTEx
YmNkZjAwHhcNMjUwODA2MDQwMTI0WhcNMjUwODA3MDQwMTI0WjAzMTEwLwYDVQQD
EygwNDgxZjU4YjBiZDc1ZjJiMDNhODU3ZTY3NjQ5NDRmZWYwZTczYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMrkos3OVkGr+7VMbEvyVwJmyjWy
f5u/snPmWtxZ3hVrC7OitYf7fJwiyk+7ibXV1skYK7G2QYnABETFc66gsE8kDkCn
xm50/ODb0D80BiFDH5lkiKfcNAUoplMQA/7xE4z3O2AOtUZiyQvVp/efyLbtccfn
SfvKVVCKqD4GJZXF7UzsgprlcwoCGtak0lJMJXXK+9Jaw8LjEYd3EHQli4aHsmHk
IfBWY46GWrcSexuwq8FQ17+/IZH4S2DQKF/mDqOFZKhZuuaP9SYiqDkaSFYDCzh2
o2GrBykaIguXd/CxOR3zfEiiQVMJ+aqEocW/UdaJl/+VwOGdGG5PjjMzFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASB9YsL118rA6hX5nZJRP7w5zouMB8GA1UdIwQY
MBaAFJqV8VLMokEdQLH1IFkb47OhG83wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYjY4ZDYtZjZjMy00MzE4LTllODMt
YjNiNmM4ZmVjYzY0LzEvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYjY4ZDYtZjZjMy00MzE4LTllODMtYjNiNmM4ZmVjYzY0
LzEvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd581Tkq
N4kuq4U5KqXr2iBA3aSoUseueLk6VcO2Bf2C/X1nPvuMGVTa9QeDxSrKwFJAG/zu
4wwxX37NP0LPZBPjvbq+snWzcGNHJoCvJNROQ6hITe8El1YzpTMlWkMBa26gtDtu
cALrum37CV8j6cnmoJowYZdc441iX3kzBLf9U5OG7L2M0AA/m75lWRU2iyteBCQ0
BwZKzd+a/O7c9JKT1gvfIJhQIQmCChK5F4EFkvVhqqgmSg/KZX6HPz7SY5g5tmc8
/QBNHB3EbRKYO5aYUtP3JuKmeWwZbPCPzFaUqLlv3ZE18pbJvshYAd4aVmnNZlMm
cBaH5rOLMaKwnA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:23 2025 by rpki-client