Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File:                     ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier:          J05VlXDPJ1wHkczYzCtMxoaJMPukfgPfLeVhrq5Vmbo=
Subject key identifier:   03:A2:9A:37:22:45:7E:E6:4E:10:52:9E:7A:F5:CF:84:B3:3B:1E:62
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer:       /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial:       01987D8ADA60522134220B45245BC364B641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number:          1108
Signing time:             Wed 06 Aug 2025 04:01:48 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:48 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:48 +0000
Files and hashes:         1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: 6eAL1Qsn7lsGnbL4v0JINdDr2VJTp+vq/K1/jlN1bkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:da:60:52:21:34:22:0b:45:24:5b:c3:64:b6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
        Validity
            Not Before: Aug  6 04:01:48 2025 GMT
            Not After : Aug  7 04:01:48 2025 GMT
        Subject: CN=03a29a3722457ee64e10529e7af5cf84b33b1e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:b8:7f:e6:18:f0:6b:9a:af:1b:08:de:11:
                    38:ec:67:84:56:5c:5c:cf:e6:cf:aa:b2:c0:56:9a:
                    96:d6:b5:64:31:7e:7b:b2:5c:fc:7b:81:b1:f7:19:
                    c7:3b:68:c8:8b:67:8a:ce:82:62:92:91:a7:6d:c3:
                    89:15:ae:c0:89:b5:1e:a8:4b:e9:3a:5a:33:40:39:
                    29:01:31:93:7c:a8:b5:7f:e7:ed:66:89:ef:5e:72:
                    f8:de:dc:b9:77:a6:92:99:ec:fb:60:24:61:cc:46:
                    8a:93:32:95:82:43:88:f3:c3:60:a0:4f:66:b2:d6:
                    12:f2:a0:36:fc:1c:0f:6e:e9:0c:24:c3:ee:b8:d5:
                    4a:b6:24:51:7e:17:82:f9:32:fe:b0:49:dc:cc:b5:
                    46:13:6a:36:48:13:40:7c:44:ac:db:aa:40:b1:0f:
                    46:a3:eb:f1:11:5a:34:f2:1c:ef:dd:08:14:5c:3a:
                    21:c5:a5:f8:4e:25:a5:9d:69:c7:4b:21:63:e4:83:
                    5d:f0:f3:aa:3a:4d:37:b4:00:39:9e:05:6a:b1:1a:
                    cb:05:6b:23:ab:f0:f2:8c:04:8d:76:11:37:03:c6:
                    b0:af:e7:14:5e:08:0d:20:22:81:a3:5a:54:91:6e:
                    67:ca:b5:5a:e5:ed:18:c2:8c:d5:8e:f7:7b:8f:7d:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:9A:37:22:45:7E:E6:4E:10:52:9E:7A:F5:CF:84:B3:3B:1E:62
            X509v3 Authority Key Identifier:
                keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:88:4a:33:ee:92:0b:2b:24:37:ba:a8:9b:d0:30:1a:d8:
         5f:a8:0c:c2:2e:2a:00:f1:b0:40:fa:02:9c:78:83:35:89:d5:
         d8:db:44:de:22:18:f0:ce:39:aa:07:53:0f:ab:da:16:26:55:
         4e:02:8d:a8:b6:45:c1:9d:c8:30:ab:36:db:b5:1b:11:7f:16:
         96:23:1a:dc:a3:6e:a5:c9:fa:8c:74:04:10:77:bf:11:0b:a2:
         22:5f:ba:e4:43:20:dd:e1:0e:eb:ce:6f:f9:a9:e3:28:1e:ac:
         33:cf:22:56:e9:c6:21:13:0b:a2:5d:62:99:46:db:06:f1:1c:
         1f:e6:dd:ea:94:69:ca:04:0c:58:2c:cb:a7:11:23:9c:e4:3d:
         eb:79:a6:98:ab:9c:1b:ec:2d:8c:56:f0:ef:59:c5:e2:93:bf:
         7e:e0:b8:33:8f:0f:6e:cc:53:95:c4:9e:6b:0d:f7:de:66:5d:
         60:1c:3c:f3:1d:a9:3f:ea:38:96:55:fe:e7:c2:26:59:3e:c2:
         03:7f:0a:5c:ff:aa:6f:25:c4:4f:9f:81:a8:4f:9a:0a:07:a0:
         cf:b2:4b:0b:fc:96:96:95:50:2e:23:6f:9a:31:81:0b:f8:c2:
         a7:2b:17:f6:00:c4:50:42:23:d1:39:ba:17:7a:ad:24:cc:b5:
         3f:24:56:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9itpgUiE0IgtFJFvDZLZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0
NGNjNmEwHhcNMjUwODA2MDQwMTQ4WhcNMjUwODA3MDQwMTQ4WjAzMTEwLwYDVQQD
EygwM2EyOWEzNzIyNDU3ZWU2NGUxMDUyOWU3YWY1Y2Y4NGIzM2IxZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9S4f+YY8GuarxsI3hE47GeEVlxc
z+bPqrLAVpqW1rVkMX57slz8e4Gx9xnHO2jIi2eKzoJikpGnbcOJFa7AibUeqEvp
OlozQDkpATGTfKi1f+ftZonvXnL43ty5d6aSmez7YCRhzEaKkzKVgkOI88NgoE9m
stYS8qA2/BwPbukMJMPuuNVKtiRRfheC+TL+sEnczLVGE2o2SBNAfESs26pAsQ9G
o+vxEVo08hzv3QgUXDohxaX4TiWlnWnHSyFj5INd8POqOk03tAA5ngVqsRrLBWsj
q/DyjASNdhE3A8awr+cUXggNICKBo1pUkW5nyrVa5e0YwozVjvd7j304NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOimjciRX7mThBSnnr1z4SzOx5iMB8GA1UdIwQY
MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt
MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl
LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqSISjPu
kgsrJDe6qJvQMBrYX6gMwi4qAPGwQPoCnHiDNYnV2NtE3iIY8M45qgdTD6vaFiZV
TgKNqLZFwZ3IMKs227UbEX8WliMa3KNupcn6jHQEEHe/EQuiIl+65EMg3eEO685v
+anjKB6sM88iVunGIRMLol1imUbbBvEcH+bd6pRpygQMWCzLpxEjnOQ963mmmKuc
G+wtjFbw71nF4pO/fuC4M48PbsxTlcSeaw333mZdYBw88x2pP+o4llX+58ImWT7C
A38KXP+qbyXET5+BqE+aCgegz7JLC/yWlpVQLiNvmjGBC/jCpysX9gDEUEIj0Tm6
F3qtJMy1PyRWDg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:03 2025 by rpki-client