Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File:                     eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier:          VfHFzn9dh6vzqeT/Inr9Dj1GPjpgj7G7U/23OL/4quE=
Subject key identifier:   61:93:B7:97:16:E8:E4:6F:E6:91:FB:6F:A0:52:B7:58:74:23:65:F6
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer:       /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial:       019894B85239034E2C7131F18E4E8A971BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number:          0CF9
Signing time:             Sun 10 Aug 2025 16:02:44 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:44 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:44 +0000
Files and hashes:         1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: cH2rBhSvSLSE7DUorUHPgngk8vHt7EZVtiKUnDIk0UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b8:52:39:03:4e:2c:71:31:f1:8e:4e:8a:97:1b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
        Validity
            Not Before: Aug 10 16:02:44 2025 GMT
            Not After : Aug 11 16:02:44 2025 GMT
        Subject: CN=6193b79716e8e46fe691fb6fa052b758742365f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:c2:55:52:36:02:13:bb:bc:6a:8b:88:ba:
                    89:be:e7:50:0e:99:f4:4b:e4:e1:7d:d1:b5:b7:83:
                    28:68:5f:78:e1:09:ec:7b:82:63:19:78:0d:db:1c:
                    0e:c3:69:22:83:a6:ab:18:32:de:b1:c9:18:19:6f:
                    3b:c9:8a:f3:30:29:a5:a7:7e:09:6e:29:f8:00:15:
                    0d:23:8c:f5:41:c0:0c:24:dd:31:29:88:ce:c2:63:
                    d0:c9:1b:6a:94:52:4c:14:98:ce:ac:e7:97:82:db:
                    c0:da:17:f0:e3:a4:9c:ff:9d:09:1a:de:e3:14:0f:
                    53:c8:59:70:f6:ce:f7:1c:b0:86:e8:18:9f:99:e2:
                    1f:e3:3c:56:f1:ac:51:35:3d:08:b5:1f:51:52:a4:
                    df:89:15:75:a1:a1:c5:0d:18:2a:7f:6b:7b:ac:32:
                    ae:34:a9:46:65:de:96:a2:d4:69:f1:6b:84:94:36:
                    25:5a:54:d4:c4:b0:75:b0:ee:72:6b:10:20:ca:a1:
                    93:23:d7:b8:83:d9:04:ca:3f:d1:c3:5a:2c:b2:6b:
                    6f:80:6d:ea:7a:85:f9:23:86:de:f3:31:51:64:4d:
                    6d:34:5a:21:39:ea:3d:8c:31:6b:7a:f0:8a:06:ec:
                    45:9c:a7:f1:ed:ed:a1:6d:a1:1f:f8:2d:c1:59:f9:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:B7:97:16:E8:E4:6F:E6:91:FB:6F:A0:52:B7:58:74:23:65:F6
            X509v3 Authority Key Identifier:
                keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:c8:25:9d:0f:41:a4:99:03:92:01:c5:e9:a7:13:48:14:
         84:f0:54:be:fa:dd:f5:f3:52:f6:81:e9:fc:28:df:2f:f8:17:
         b9:fe:4f:a7:24:7a:d2:b6:74:ea:db:39:79:3f:08:f8:3c:fb:
         ad:c3:53:e4:af:d2:6b:30:8d:47:17:60:f6:48:65:1c:8f:ec:
         20:db:77:be:87:62:d0:06:5a:d2:52:fc:dd:2c:93:b8:d7:b2:
         0c:39:6c:42:70:cd:af:ca:d6:e4:27:d5:5c:58:6a:f5:e3:ed:
         ee:62:97:27:ac:b7:ea:13:c6:16:53:2b:58:52:fd:47:4f:4d:
         af:ad:47:96:2e:e6:07:a9:14:bb:a1:95:98:c5:4a:f7:5f:44:
         6d:d4:82:83:fb:41:18:c3:ec:61:b5:ce:bc:7c:47:e4:4d:8d:
         f0:98:3f:d0:ca:f3:ec:36:60:53:7d:9f:8b:1e:74:4a:e3:ea:
         ea:19:c3:ac:73:5f:c8:d9:0f:0b:13:f6:19:69:28:e3:61:9a:
         f2:6b:d8:1b:52:29:3d:58:92:7d:9c:2b:05:f7:c6:bd:3c:eb:
         e0:39:a6:49:3b:32:82:39:a8:09:61:f3:d9:20:9c:22:fb:d3:
         43:35:3f:c3:fd:e5:a1:03:41:3d:89:60:86:38:39:f9:fc:8b:
         f4:e3:23:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUuFI5A04scTHxjk6KlxunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2YzYjlmMjkwOTdiYTViZjc1ZDQ2NDZlMDI1OWY1MWM0
MjFhNTgwHhcNMjUwODEwMTYwMjQ0WhcNMjUwODExMTYwMjQ0WjAzMTEwLwYDVQQD
Eyg2MTkzYjc5NzE2ZThlNDZmZTY5MWZiNmZhMDUyYjc1ODc0MjM2NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fHCVVI2AhO7vGqLiLqJvudQDpn0
S+ThfdG1t4MoaF944Qnse4JjGXgN2xwOw2kig6arGDLesckYGW87yYrzMCmlp34J
bin4ABUNI4z1QcAMJN0xKYjOwmPQyRtqlFJMFJjOrOeXgtvA2hfw46Sc/50JGt7j
FA9TyFlw9s73HLCG6BifmeIf4zxW8axRNT0ItR9RUqTfiRV1oaHFDRgqf2t7rDKu
NKlGZd6WotRp8WuElDYlWlTUxLB1sO5yaxAgyqGTI9e4g9kEyj/Rw1ossmtvgG3q
eoX5I4be8zFRZE1tNFohOeo9jDFrevCKBuxFnKfx7e2hbaEf+C3BWfnfHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGTt5cW6ORv5pH7b6BSt1h0I2X2MB8GA1UdIwQY
MBaAFHl/O58pCXulv3XUZG4CWfUcQhpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQt
YzFhY2YwMTJiOWJjLzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQtYzFhY2YwMTJiOWJj
LzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC/IJZ0P
QaSZA5IBxemnE0gUhPBUvvrd9fNS9oHp/CjfL/gXuf5PpyR60rZ06ts5eT8I+Dz7
rcNT5K/SazCNRxdg9khlHI/sINt3vodi0AZa0lL83SyTuNeyDDlsQnDNr8rW5CfV
XFhq9ePt7mKXJ6y36hPGFlMrWFL9R09Nr61Hli7mB6kUu6GVmMVK919EbdSCg/tB
GMPsYbXOvHxH5E2N8Jg/0Mrz7DZgU32fix50SuPq6hnDrHNfyNkPCxP2GWko42Ga
8mvYG1IpPViSfZwrBffGvTzr4DmmSTsygjmoCWHz2SCcIvvTQzU/w/3loQNBPYlg
hjg5+fyL9OMj1w==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:48 2025 by rpki-client