Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          aa4ByZARNEFF8FR+KUF+rZj6yOC9xQNEq2zdBmCCsko=
Subject key identifier:   B6:72:6B:73:8A:B5:B6:AC:DB:42:6D:2B:22:48:E4:FF:70:95:C1:E9
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       0198744FD8AEEFEA153BC65C9C7D33365BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          15A7
Signing time:             Mon 04 Aug 2025 09:00:46 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:46 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:46 +0000
Files and hashes:         1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: uZn7yGxq/Z5PXO+B398ASDW8I/D1lNUX0AXTJMafjaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:d8:ae:ef:ea:15:3b:c6:5c:9c:7d:33:36:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: Aug  4 09:00:46 2025 GMT
            Not After : Aug  5 09:00:46 2025 GMT
        Subject: CN=b6726b738ab5b6acdb426d2b2248e4ff7095c1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:c7:c6:8d:cc:2c:4d:f6:fd:db:43:5f:5a:
                    4f:41:22:3b:1a:44:e6:71:bc:3d:da:47:70:20:48:
                    e8:98:51:54:9e:c0:36:82:e8:53:8c:fc:cd:36:a0:
                    4d:e3:8f:70:c9:35:c8:1d:f0:ed:f5:51:6c:22:5e:
                    7e:01:50:8f:6f:b9:f3:0c:be:33:d8:63:9c:96:0c:
                    da:9e:e4:75:11:f8:f6:a8:d1:e7:9c:72:12:27:48:
                    d1:fc:41:26:f0:82:a8:7f:4c:76:b4:35:3f:2d:9d:
                    dc:0a:7c:c9:5f:d1:bb:99:6d:e4:c2:a0:78:28:34:
                    d4:5c:82:da:ec:ad:34:b3:50:23:8a:af:27:da:87:
                    54:ed:13:c6:d5:05:be:e1:9e:21:2c:e8:cf:8b:0a:
                    67:4f:1f:6d:97:e3:cc:08:69:0b:01:ff:af:6f:a1:
                    7f:55:36:a2:c3:d4:c4:50:c7:13:b7:9b:75:c7:78:
                    fa:3c:d2:48:82:c0:3f:ca:7e:a5:93:91:2b:a9:9c:
                    ed:b7:5b:96:a8:28:4b:5f:b3:c8:54:67:76:1c:f8:
                    93:05:e5:ba:c9:26:8c:45:99:e6:1c:15:55:20:a2:
                    a5:24:3e:1b:61:16:c0:c7:ba:98:ef:da:26:63:ff:
                    60:11:39:05:a2:05:dc:ad:2f:7d:37:bc:6f:47:98:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:72:6B:73:8A:B5:B6:AC:DB:42:6D:2B:22:48:E4:FF:70:95:C1:E9
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:87:9d:23:22:7f:09:34:c7:cf:74:21:a5:66:17:1b:02:be:
         be:d5:d7:4b:c6:68:e0:55:99:94:0f:3c:de:0e:ca:96:d2:ac:
         0a:4e:c6:c9:37:12:e7:63:2e:de:92:e2:56:e5:aa:b0:52:33:
         bd:c6:d9:d5:87:d2:7d:88:b5:ba:1b:c2:ae:c0:d7:44:15:f8:
         b0:98:a6:4b:16:13:1c:1a:b9:bc:a5:87:2a:fe:51:ca:ef:1b:
         7d:77:8c:57:0a:9f:2e:30:5d:76:eb:1e:9e:b5:78:23:a4:48:
         02:45:60:ee:57:e7:18:2f:42:0f:50:4e:c0:71:0c:e7:e3:57:
         e0:03:fc:c4:68:19:62:de:64:ce:08:6a:1b:c5:ce:ed:90:33:
         00:f8:35:7c:82:db:99:89:51:8a:97:a6:3e:a1:4e:f3:70:32:
         55:75:9b:b8:ba:46:3b:f9:9a:91:43:55:57:ca:92:e6:50:1e:
         9c:3e:63:d7:5d:80:33:5c:14:04:88:6e:9b:54:5e:f3:4c:34:
         a0:21:38:75:69:4d:04:bf:58:4c:4b:64:96:3a:1c:a8:5b:fd:
         52:08:be:db:69:55:ae:aa:5b:44:c7:b6:8d:16:9f:f6:75:8d:
         b6:21:43:d1:fe:d9:f8:94:e7:96:d2:4d:79:6f:fa:9b:79:ae:
         5e:aa:9e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T9iu7+oVO8ZcnH0zNlvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5
ZjRmNGMwHhcNMjUwODA0MDkwMDQ2WhcNMjUwODA1MDkwMDQ2WjAzMTEwLwYDVQQD
EyhiNjcyNmI3MzhhYjViNmFjZGI0MjZkMmIyMjQ4ZTRmZjcwOTVjMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWPHxo3MLE32/dtDX1pPQSI7GkTm
cbw92kdwIEjomFFUnsA2guhTjPzNNqBN449wyTXIHfDt9VFsIl5+AVCPb7nzDL4z
2GOclgzanuR1Efj2qNHnnHISJ0jR/EEm8IKof0x2tDU/LZ3cCnzJX9G7mW3kwqB4
KDTUXILa7K00s1Ajiq8n2odU7RPG1QW+4Z4hLOjPiwpnTx9tl+PMCGkLAf+vb6F/
VTaiw9TEUMcTt5t1x3j6PNJIgsA/yn6lk5ErqZztt1uWqChLX7PIVGd2HPiTBeW6
ySaMRZnmHBVVIKKlJD4bYRbAx7qY79omY/9gETkFogXcrS99N7xvR5hUlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZya3OKtbas20JtKyJI5P9wlcHpMB8GA1UdIwQY
MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt
MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh
LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4edIyJ/
CTTHz3QhpWYXGwK+vtXXS8Zo4FWZlA883g7KltKsCk7GyTcS52Mu3pLiVuWqsFIz
vcbZ1YfSfYi1uhvCrsDXRBX4sJimSxYTHBq5vKWHKv5Ryu8bfXeMVwqfLjBdduse
nrV4I6RIAkVg7lfnGC9CD1BOwHEM5+NX4AP8xGgZYt5kzghqG8XO7ZAzAPg1fILb
mYlRipemPqFO83AyVXWbuLpGO/makUNVV8qS5lAenD5j112AM1wUBIhum1Re80w0
oCE4dWlNBL9YTEtkljocqFv9Ugi+22lVrqpbRMe2jRaf9nWNtiFD0f7Z+JTnltJN
eW/6m3muXqqeLg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:17 2025 by rpki-client