Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File:                     RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier:          bFk5Uo1HGNrf8m8Cu6C4dXq13x3DtMweA1IWvf/U7FY=
Subject key identifier:   6B:28:36:C9:A1:A3:E3:34:11:71:5C:46:51:F2:6C:A6:46:C2:0C:32
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer:       /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial:       01988054E9052DB6ABCDCC8CF1BFB32B3212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number:          0150
Signing time:             Wed 06 Aug 2025 17:01:44 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:44 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:44 +0000
Files and hashes:         1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
                          2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: RWbJ12lG7xAgapMCB2gQBifbVQICH4A1SKuVyxw3FOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:e9:05:2d:b6:ab:cd:cc:8c:f1:bf:b3:2b:32:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
        Validity
            Not Before: Aug  6 17:01:44 2025 GMT
            Not After : Aug  7 17:01:44 2025 GMT
        Subject: CN=6b2836c9a1a3e33411715c4651f26ca646c20c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:21:c1:dc:5e:be:94:9a:ea:58:26:2a:8d:
                    ef:a1:9c:88:b4:93:ed:18:a1:d3:8e:c1:31:f8:9f:
                    71:69:85:cd:e2:77:ff:c6:4d:88:7f:1c:5a:e0:1a:
                    af:22:68:71:6d:5a:51:91:ba:52:1f:ed:88:76:17:
                    b3:01:33:f5:e6:38:2b:51:4e:6a:b6:a2:b8:21:89:
                    b3:5c:0b:fc:06:b0:91:bc:f9:1d:d0:2f:71:8b:d7:
                    81:5a:56:f1:e5:01:26:9f:5c:39:3c:73:f7:ff:86:
                    fb:13:f8:f3:aa:2d:89:6b:a2:4f:25:c3:93:a0:65:
                    be:ce:d6:8b:84:bb:f3:33:3b:04:11:43:cc:e0:e2:
                    f3:dd:8e:0d:ed:de:cc:ad:07:ec:4b:cd:6e:c4:04:
                    21:03:a8:06:6e:68:7f:71:b4:eb:20:26:7b:a5:dc:
                    8e:f2:58:6d:11:3f:f1:cf:f5:a5:cd:f0:1f:e9:d4:
                    b0:5c:9e:e4:e4:ba:73:7d:c7:0e:00:96:14:88:a4:
                    93:95:0c:1f:18:c5:49:55:6e:77:94:14:e0:96:de:
                    cf:f1:7f:13:e3:e5:3f:00:b3:6a:78:a0:18:4e:43:
                    28:f0:2d:ae:d9:25:c8:41:db:ef:c2:6c:eb:1b:65:
                    90:0d:7c:65:62:a4:c5:5d:9d:3b:90:be:17:a7:fb:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:36:C9:A1:A3:E3:34:11:71:5C:46:51:F2:6C:A6:46:C2:0C:32
            X509v3 Authority Key Identifier:
                keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:65:7e:3b:d0:de:d6:e5:cf:0b:25:cc:d8:5e:1f:27:89:fd:
         eb:a0:ca:09:04:0b:58:0b:a3:31:32:86:93:c0:92:11:28:be:
         a5:bd:5a:67:3c:8a:fb:18:0a:13:e8:3e:32:f2:8f:4f:7d:0c:
         92:ce:cc:82:e1:fa:7f:66:a6:2c:38:e0:ec:97:36:a7:02:af:
         27:f8:4a:1a:e2:31:ad:66:b4:1d:4b:81:12:b2:92:25:3d:5d:
         b0:a9:53:a6:8d:2e:e6:13:26:5c:00:7b:2f:39:4a:d9:88:ce:
         1d:a5:10:93:3a:63:91:4a:7a:9b:c9:55:40:b7:77:9a:8d:f9:
         b6:07:02:72:98:40:5f:8f:ef:bb:c8:0a:88:54:da:d1:54:c3:
         bc:6d:fe:b4:53:6f:13:33:55:a3:57:1b:8d:2f:7b:0d:db:58:
         e5:ce:31:56:32:f5:25:39:82:b2:45:10:c9:fc:e4:a9:87:c2:
         a3:66:bc:29:f7:55:66:07:50:7a:bd:1f:99:26:a0:33:fc:1c:
         78:8b:2e:8a:20:22:9a:55:da:6b:6c:3a:4f:ae:d5:69:24:b4:
         c1:96:57:2b:cf:36:07:bc:d1:38:0f:65:02:8a:b6:19:7d:45:
         50:52:2a:50:30:0e:78:c8:2a:57:be:56:59:d2:0b:63:39:68:
         6c:a9:6b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVOkFLbarzcyM8b+zKzISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2
ZTQ4ZmIwHhcNMjUwODA2MTcwMTQ0WhcNMjUwODA3MTcwMTQ0WjAzMTEwLwYDVQQD
Eyg2YjI4MzZjOWExYTNlMzM0MTE3MTVjNDY1MWYyNmNhNjQ2YzIwYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1IhwdxevpSa6lgmKo3voZyItJPt
GKHTjsEx+J9xaYXN4nf/xk2Ifxxa4BqvImhxbVpRkbpSH+2IdhezATP15jgrUU5q
tqK4IYmzXAv8BrCRvPkd0C9xi9eBWlbx5QEmn1w5PHP3/4b7E/jzqi2Ja6JPJcOT
oGW+ztaLhLvzMzsEEUPM4OLz3Y4N7d7MrQfsS81uxAQhA6gGbmh/cbTrICZ7pdyO
8lhtET/xz/WlzfAf6dSwXJ7k5LpzfccOAJYUiKSTlQwfGMVJVW53lBTglt7P8X8T
4+U/ALNqeKAYTkMo8C2u2SXIQdvvwmzrG2WQDXxlYqTFXZ07kL4Xp/uoEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsoNsmho+M0EXFcRlHybKZGwgwyMB8GA1UdIwQY
MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It
MzQ2MDI2MjQ1NWIyLzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy
LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWV+O9De
1uXPCyXM2F4fJ4n966DKCQQLWAujMTKGk8CSESi+pb1aZzyK+xgKE+g+MvKPT30M
ks7MguH6f2amLDjg7Jc2pwKvJ/hKGuIxrWa0HUuBErKSJT1dsKlTpo0u5hMmXAB7
LzlK2YjOHaUQkzpjkUp6m8lVQLd3mo35tgcCcphAX4/vu8gKiFTa0VTDvG3+tFNv
EzNVo1cbjS97DdtY5c4xVjL1JTmCskUQyfzkqYfCo2a8KfdVZgdQer0fmSagM/wc
eIsuiiAimlXaa2w6T67VaSS0wZZXK882B7zROA9lAoq2GX1FUFIqUDAOeMgqV75W
WdILYzlobKlrXQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:47 2025 by rpki-client