Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          IQgTD8qWXr9toFBpBHMh4Ky8Y50gZe4K+4CBz0PI4n8=
Subject key identifier:   51:AF:9E:14:61:5D:27:E6:23:C8:7A:3B:E5:35:73:45:02:70:FB:4C
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       019888B268CC24FDA7D267730EDE3A78C59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 08:00:50 +0000
Manifest this update:     Fri 08 Aug 2025 08:00:50 +0000
Manifest next update:     Sat 09 Aug 2025 08:00:50 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: 4lK/kWYL0MzLQzC29RRMKAPeU6XJawkJv5mq1WJQETs=)
                          2: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (hash: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=)
                          3: QQXV9PR2UUw9UDrT_DWglwU8ZS8.roa (hash: uF9Uh/MfGV5Li33CKiFO0iwqxXl5ow/SpNSUJI6hYY8=)
                          4: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (hash: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:b2:68:cc:24:fd:a7:d2:67:73:0e:de:3a:78:c5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: Aug  8 08:00:50 2025 GMT
            Not After : Aug  9 08:00:50 2025 GMT
        Subject: CN=51af9e14615d27e623c87a3be53573450270fb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:c1:12:2c:74:a4:b8:b4:6a:8c:f5:97:c9:
                    47:89:dc:bc:5d:3e:22:d6:9f:9f:9d:38:7b:35:45:
                    2e:50:22:58:3d:3e:e1:da:1a:db:ce:f2:7f:fc:6b:
                    71:5b:47:93:73:90:86:1b:2f:1c:5a:5e:94:72:6b:
                    5b:f7:2a:f7:51:aa:2a:f2:18:43:e4:cd:80:83:01:
                    bd:88:e4:ac:11:e0:56:10:d4:27:3d:99:1d:34:de:
                    c5:6e:38:56:8f:b8:fb:ab:84:f5:01:80:c6:6b:04:
                    f1:04:93:bb:8a:8b:c4:a0:53:9f:ed:00:16:00:75:
                    3f:37:e8:45:fa:04:c6:04:31:3f:15:ba:3e:0b:b1:
                    e9:77:4f:fd:df:06:9b:c9:8b:ca:1a:3d:8f:95:2b:
                    78:31:e4:e2:09:8a:84:ff:70:34:c4:13:1d:75:b5:
                    05:dc:b1:33:76:2d:3c:fb:a7:ed:2d:33:f8:4a:4d:
                    bd:a1:ef:c8:ed:6c:e7:3f:b4:55:3d:05:e6:fd:09:
                    2a:fc:65:b6:5e:6c:4f:f7:e5:e5:d1:4f:8f:d7:d0:
                    e4:0a:5d:d2:f1:5d:31:38:3c:30:ae:2c:66:1b:f3:
                    69:0e:43:e5:98:31:c0:e7:f0:c8:fa:25:4b:5c:73:
                    7e:c6:e6:50:74:90:f9:31:7f:43:40:47:85:4b:64:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AF:9E:14:61:5D:27:E6:23:C8:7A:3B:E5:35:73:45:02:70:FB:4C
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0c:33:a5:bb:18:0f:3a:75:5e:01:7b:6b:81:c6:aa:b6:98:
         86:64:f8:e6:b1:b5:97:54:19:10:b4:00:97:8c:68:39:53:86:
         dd:9a:dd:3f:e8:bf:fd:58:14:f2:93:a2:7a:df:6b:ec:47:7d:
         c3:eb:14:9f:b1:b0:48:62:42:88:ec:21:49:54:79:74:df:45:
         d8:98:fa:5c:18:94:c9:7a:30:f0:9a:e0:74:4d:c6:0d:0f:ee:
         9d:f0:44:4a:ef:a5:c5:c7:ec:6f:df:02:2d:a8:ef:e3:5a:d9:
         a0:ce:f6:36:05:09:f5:96:39:14:b5:d7:fb:39:26:5a:84:af:
         88:2a:6c:4f:56:14:c1:3b:31:f5:7e:ce:3d:bb:6b:0a:e7:c4:
         4d:ea:6e:a5:9c:35:5e:70:d1:ff:0d:bd:01:fd:be:fc:40:61:
         1f:17:87:7b:48:9f:5c:52:ab:86:f2:8b:61:92:15:35:b0:cd:
         3c:e4:ee:cd:ca:45:a1:cc:49:6a:5b:c8:36:cc:7c:e1:0a:c0:
         9e:d6:16:c1:8e:2c:fd:5d:97:d0:a2:c8:53:60:fd:53:26:7b:
         4f:1b:b2:c9:83:79:74:cd:69:7c:b0:31:e2:0f:f5:da:89:e1:
         f3:b9:66:25:4d:03:1e:f4:bc:fd:25:fa:42:4b:8c:68:fe:22:
         1e:29:c7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIsmjMJP2n0mdzDt46eMWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz
MGY4ZDgwHhcNMjUwODA4MDgwMDUwWhcNMjUwODA5MDgwMDUwWjAzMTEwLwYDVQQD
Eyg1MWFmOWUxNDYxNWQyN2U2MjNjODdhM2JlNTM1NzM0NTAyNzBmYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSPBEix0pLi0aoz1l8lHidy8XT4i
1p+fnTh7NUUuUCJYPT7h2hrbzvJ//GtxW0eTc5CGGy8cWl6Ucmtb9yr3Uaoq8hhD
5M2AgwG9iOSsEeBWENQnPZkdNN7FbjhWj7j7q4T1AYDGawTxBJO7iovEoFOf7QAW
AHU/N+hF+gTGBDE/Fbo+C7Hpd0/93wabyYvKGj2PlSt4MeTiCYqE/3A0xBMddbUF
3LEzdi08+6ftLTP4Sk29oe/I7WznP7RVPQXm/Qkq/GW2XmxP9+Xl0U+P19DkCl3S
8V0xODwwrixmG/NpDkPlmDHA5/DI+iVLXHN+xuZQdJD5MX9DQEeFS2S4PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGvnhRhXSfmI8h6O+U1c0UCcPtMMB8GA1UdIwQY
MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt
ODIxNzA3ZTJjMDAyLzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy
LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQwzpbsY
Dzp1XgF7a4HGqraYhmT45rG1l1QZELQAl4xoOVOG3ZrdP+i//VgU8pOiet9r7Ed9
w+sUn7GwSGJCiOwhSVR5dN9F2Jj6XBiUyXow8JrgdE3GDQ/unfBESu+lxcfsb98C
Lajv41rZoM72NgUJ9ZY5FLXX+zkmWoSviCpsT1YUwTsx9X7OPbtrCufETepupZw1
XnDR/w29Af2+/EBhHxeHe0ifXFKrhvKLYZIVNbDNPOTuzcpFocxJalvINsx84QrA
ntYWwY4s/V2X0KLIU2D9UyZ7TxuyyYN5dM1pfLAx4g/12onh87lmJU0DHvS8/SX6
QkuMaP4iHinHDg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:59:07 2025 by rpki-client