Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File:                     e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier:          /H8T0o5anGB9kQcJGe2nMDWYsiUkQdeRe+y7P/gcrzU=
Subject key identifier:   93:12:D8:26:BE:AA:EA:47:71:4E:E5:50:0B:6E:83:E6:C7:4A:E5:0C
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer:       /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial:       019873E28BA54D7059974221A5F14328C223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number:          05D3
Signing time:             Mon 04 Aug 2025 07:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:23 +0000
Files and hashes:         1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: HT+lsSM36ErZB7rzG7sQIEzZQaidtodfdYkqrVTnbnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:8b:a5:4d:70:59:97:42:21:a5:f1:43:28:c2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
        Validity
            Not Before: Aug  4 07:01:23 2025 GMT
            Not After : Aug  5 07:01:23 2025 GMT
        Subject: CN=9312d826beaaea47714ee5500b6e83e6c74ae50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:77:43:db:29:27:36:55:e1:da:73:60:d5:
                    05:28:2c:94:c2:40:bf:c4:0d:a3:09:c9:39:22:7d:
                    a0:b7:de:35:58:4b:de:9b:10:12:8d:1d:ec:c4:39:
                    7b:c6:24:70:67:5c:6f:8e:a9:24:65:42:c4:b3:3a:
                    0e:73:cf:6b:3b:17:8c:90:7c:4d:ef:1d:95:2e:e3:
                    a7:6a:10:32:37:06:e4:57:0a:87:1d:8c:76:8f:95:
                    a1:13:df:66:44:72:a4:da:39:8d:7e:71:46:ee:05:
                    b6:09:d6:5f:a1:45:6a:34:22:f6:c0:e6:a3:6b:fc:
                    e6:d4:0e:10:71:72:10:71:dd:0c:ec:c7:4c:33:db:
                    86:de:ef:f2:a5:a1:f9:a5:5c:bb:2d:06:57:3a:8c:
                    76:14:45:e7:94:7c:2e:27:21:28:97:8f:4c:b1:49:
                    67:0d:5c:32:3e:d2:a0:0f:83:af:ce:07:38:5f:c5:
                    d5:87:be:e3:c7:d2:19:f6:07:90:6c:92:f9:ef:ff:
                    3a:3b:ee:76:86:92:f6:11:6d:dd:ac:5d:f1:c3:39:
                    c8:74:c4:af:ea:66:ac:b4:23:64:7f:b4:1c:b6:6e:
                    b0:06:b2:3a:a2:c3:5a:92:a1:70:d4:70:48:8b:35:
                    ec:ea:a5:9c:2b:af:83:d9:74:39:e3:a5:b0:17:67:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:D8:26:BE:AA:EA:47:71:4E:E5:50:0B:6E:83:E6:C7:4A:E5:0C
            X509v3 Authority Key Identifier:
                keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:03:b0:84:ac:80:43:bb:a1:f7:97:26:14:1f:0f:9f:78:
         62:75:a6:87:68:b6:dd:73:fb:17:fb:44:5b:5f:52:d4:b8:9e:
         20:71:1c:35:ea:56:4d:9c:3c:82:c3:4f:25:3e:12:f6:0f:a8:
         4b:78:ef:2c:cc:03:0f:5a:a4:4e:ae:fc:69:1b:b1:f9:80:ab:
         79:94:af:8d:04:ac:a7:8e:68:1a:4a:ba:85:3a:84:32:e0:ac:
         b7:28:b6:1a:fe:0d:d0:57:11:81:d2:69:b0:1f:34:f1:fe:4d:
         03:43:88:d4:dd:2f:4c:3f:6e:82:44:9c:7e:e0:16:22:76:54:
         ed:71:76:fc:7a:fa:98:30:fd:f5:70:c4:cf:66:7f:96:f2:92:
         87:1a:ef:56:75:8c:4b:f8:f6:c2:23:54:29:69:57:4c:80:01:
         14:3c:13:4a:04:a3:49:da:27:80:cf:94:f5:82:4d:d3:db:ef:
         78:c3:09:b4:b1:73:87:7a:b4:97:67:ce:21:21:70:cb:44:83:
         64:d3:32:5a:b0:a4:eb:e2:fc:24:03:f4:08:18:90:df:06:17:
         cf:7a:87:89:c1:b7:30:16:2d:d5:cb:2c:c7:b8:c6:a6:9e:92:
         91:d0:21:bc:7d:37:97:9a:fc:a2:66:0d:d3:ed:89:d3:86:d7:
         37:0f:60:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4oulTXBZl0IhpfFDKMIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzdiZTUyMWQxN2E2YTU5MmNjNjFmNzkxNGMyNWYxNjk1
N2NjOWMwHhcNMjUwODA0MDcwMTIzWhcNMjUwODA1MDcwMTIzWjAzMTEwLwYDVQQD
Eyg5MzEyZDgyNmJlYWFlYTQ3NzE0ZWU1NTAwYjZlODNlNmM3NGFlNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8x3Q9spJzZV4dpzYNUFKCyUwkC/
xA2jCck5In2gt941WEvemxASjR3sxDl7xiRwZ1xvjqkkZULEszoOc89rOxeMkHxN
7x2VLuOnahAyNwbkVwqHHYx2j5WhE99mRHKk2jmNfnFG7gW2CdZfoUVqNCL2wOaj
a/zm1A4QcXIQcd0M7MdMM9uG3u/ypaH5pVy7LQZXOox2FEXnlHwuJyEol49MsUln
DVwyPtKgD4Ovzgc4X8XVh77jx9IZ9geQbJL57/86O+52hpL2EW3drF3xwznIdMSv
6mastCNkf7Qctm6wBrI6osNakqFw1HBIizXs6qWcK6+D2XQ546WwF2cjeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMS2Ca+qupHcU7lUAtug+bHSuUMMB8GA1UdIwQY
MBaAFHvHvlIdF6alksxh95FMJfFpV8ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzIt
MTA1ZDgwMDIxNDlkLzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzItMTA1ZDgwMDIxNDlk
LzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhMDsISs
gEO7ofeXJhQfD594YnWmh2i23XP7F/tEW19S1LieIHEcNepWTZw8gsNPJT4S9g+o
S3jvLMwDD1qkTq78aRux+YCreZSvjQSsp45oGkq6hTqEMuCstyi2Gv4N0FcRgdJp
sB808f5NA0OI1N0vTD9ugkScfuAWInZU7XF2/Hr6mDD99XDEz2Z/lvKShxrvVnWM
S/j2wiNUKWlXTIABFDwTSgSjSdongM+U9YJN09vveMMJtLFzh3q0l2fOISFwy0SD
ZNMyWrCk6+L8JAP0CBiQ3wYXz3qHicG3MBYt1cssx7jGpp6SkdAhvH03l5r8omYN
0+2J04bXNw9gbg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:45 2025 by rpki-client