Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          sb+Ya1WTmg15RTjDLWmv6rO/KhjacoDRUkhETewT7nk=
Subject key identifier:   93:82:99:AC:FC:92:13:C2:76:24:83:A5:AF:CE:1A:20:CC:5C:7E:CF
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       0198729838CE59AC11EDFD13E2B53C7E7EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          0FE5
Signing time:             Mon 04 Aug 2025 01:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:35 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: oflDR7WZRAa1+e/mDXT/trRBhSWqfvRY2VKqu2dxmO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:38:ce:59:ac:11:ed:fd:13:e2:b5:3c:7e:7e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Aug  4 01:00:35 2025 GMT
            Not After : Aug  5 01:00:35 2025 GMT
        Subject: CN=938299acfc9213c2762483a5afce1a20cc5c7ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:fa:4b:ba:9a:cb:c5:20:38:cf:d8:61:2e:
                    db:44:8d:3b:ca:00:cc:b2:13:72:06:8a:96:29:df:
                    ff:3b:eb:e3:12:47:1e:8f:60:96:77:6a:c0:83:33:
                    84:0b:59:9e:b4:ec:10:15:2e:f1:9b:9c:ae:5a:2c:
                    c1:f7:ba:2a:d2:3c:4a:e2:97:0e:79:c3:b9:7c:a2:
                    d8:3f:50:83:41:1a:af:d4:8f:7c:54:d8:55:47:da:
                    45:81:5e:a4:da:6c:10:5b:5e:81:8e:3f:00:7f:36:
                    fa:e6:a7:8e:13:c7:2c:86:fd:f7:53:ea:26:17:10:
                    d0:d2:0a:f7:be:3f:f8:e8:2f:76:48:ea:86:ee:fd:
                    1c:52:cc:ae:bf:70:df:38:94:e4:2f:74:3c:cb:24:
                    04:2e:07:ac:a5:e0:7b:d3:21:c4:f4:dc:1b:af:34:
                    ca:cb:9a:1f:56:d8:9f:84:c6:e5:59:01:db:dd:77:
                    d3:9e:9d:01:85:07:ed:ff:79:d2:57:ec:55:52:66:
                    ba:70:87:e5:48:74:92:37:88:22:d6:40:f8:f7:1a:
                    87:5f:64:ce:ae:d0:3c:63:d0:0e:a4:9e:b9:79:9b:
                    39:9e:05:89:93:fc:b2:3a:e0:93:7a:6c:33:a2:5e:
                    e2:b4:64:cd:86:e2:7f:e8:49:6d:ff:8d:04:ae:c1:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:99:AC:FC:92:13:C2:76:24:83:A5:AF:CE:1A:20:CC:5C:7E:CF
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:46:82:ca:59:cc:11:08:54:28:72:75:b4:df:35:c8:9b:23:
         db:60:5a:92:12:d2:38:f0:de:72:bd:7a:a5:48:20:9d:c4:bd:
         74:fc:74:c9:de:6f:72:3c:25:3d:eb:17:39:1d:25:71:56:69:
         b1:cb:98:db:02:64:c8:be:4e:38:a7:70:e5:6c:77:c0:d7:af:
         95:bb:5e:04:85:b8:9a:2e:8a:bf:27:6a:c7:79:1a:bc:f1:12:
         d4:f3:d3:b8:c0:de:b1:0e:59:df:dc:83:02:60:fd:58:ae:db:
         d2:41:c6:b1:8c:42:8e:cc:e1:28:3d:8b:ee:09:5a:f2:4d:f3:
         55:2c:8a:0b:eb:b4:c2:33:67:83:95:fc:92:96:eb:e2:74:e7:
         78:9c:6c:c8:08:bf:9f:51:fc:56:c4:12:8e:21:86:3c:89:5b:
         eb:22:68:4c:94:89:7f:52:54:f0:b5:33:c5:d6:9d:93:21:cf:
         95:43:99:95:00:51:ba:0f:0e:3e:d2:28:be:97:12:ce:0a:12:
         4f:c9:9e:a9:66:ce:bf:92:00:c7:2d:ad:a2:f1:61:21:33:a4:
         e3:43:5b:35:9f:ad:f9:71:4f:fe:68:08:a8:f6:8a:e7:b4:79:
         f1:1d:be:b5:23:20:28:27:fd:87:d0:53:96:f6:36:ef:0e:fa:
         64:8a:f2:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymDjOWawR7f0T4rU8fn6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZmVlNTYwMWNmMjM4ZTFkZDc5MjFhYzlkODgyOTZlMmNj
Y2RlODgwHhcNMjUwODA0MDEwMDM1WhcNMjUwODA1MDEwMDM1WjAzMTEwLwYDVQQD
Eyg5MzgyOTlhY2ZjOTIxM2MyNzYyNDgzYTVhZmNlMWEyMGNjNWM3ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ab6S7qay8UgOM/YYS7bRI07ygDM
shNyBoqWKd//O+vjEkcej2CWd2rAgzOEC1metOwQFS7xm5yuWizB97oq0jxK4pcO
ecO5fKLYP1CDQRqv1I98VNhVR9pFgV6k2mwQW16Bjj8Afzb65qeOE8cshv33U+om
FxDQ0gr3vj/46C92SOqG7v0cUsyuv3DfOJTkL3Q8yyQELgespeB70yHE9NwbrzTK
y5ofVtifhMblWQHb3XfTnp0BhQft/3nSV+xVUma6cIflSHSSN4gi1kD49xqHX2TO
rtA8Y9AOpJ65eZs5ngWJk/yyOuCTemwzol7itGTNhuJ/6Elt/40ErsHzrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOCmaz8khPCdiSDpa/OGiDMXH7PMB8GA1UdIwQY
MBaAFBH+5WAc8jjh3XkhrJ2IKW4szN6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEt
YzQ2ZTAwNzhlZGY3LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEtYzQ2ZTAwNzhlZGY3
LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukaCylnM
EQhUKHJ1tN81yJsj22BakhLSOPDecr16pUggncS9dPx0yd5vcjwlPesXOR0lcVZp
scuY2wJkyL5OOKdw5Wx3wNevlbteBIW4mi6Kvydqx3kavPES1PPTuMDesQ5Z39yD
AmD9WK7b0kHGsYxCjszhKD2L7gla8k3zVSyKC+u0wjNng5X8kpbr4nTneJxsyAi/
n1H8VsQSjiGGPIlb6yJoTJSJf1JU8LUzxdadkyHPlUOZlQBRug8OPtIovpcSzgoS
T8meqWbOv5IAxy2tovFhITOk40NbNZ+t+XFP/mgIqPaK57R58R2+tSMgKCf9h9BT
lvY27w76ZIrybQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:21 2025 by rpki-client