Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File:                     nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier:          QwQu3ipVdZMMBlnbyeREU6u4cTAsPEzGNS1ynDzw8dM=
Subject key identifier:   0E:33:DD:AF:F4:68:5B:C8:05:E7:E6:FF:AB:F1:1F:66:F5:E1:0E:09
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer:       /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial:       019893DADF154531E1748C522600E27CAA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number:          115C
Signing time:             Sun 10 Aug 2025 12:00:51 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:51 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:51 +0000
Files and hashes:         1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
                          2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: ebuc4wsEJ13MA1DTZioya80kZVR13YxmrbxiBiOf/QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:df:15:45:31:e1:74:8c:52:26:00:e2:7c:aa:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
        Validity
            Not Before: Aug 10 12:00:51 2025 GMT
            Not After : Aug 11 12:00:51 2025 GMT
        Subject: CN=0e33ddaff4685bc805e7e6ffabf11f66f5e10e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:a6:f6:29:8c:a6:03:54:24:56:d5:90:93:
                    98:55:aa:e7:f6:16:f6:ae:92:7a:f0:4c:40:33:6c:
                    ca:f6:6d:4b:05:b1:10:c1:10:87:31:67:a6:72:8c:
                    3b:d7:92:78:b5:a1:30:62:98:73:a8:2a:b0:2f:01:
                    47:54:42:34:9d:4f:34:cf:81:55:90:2b:8a:b8:4b:
                    b2:0e:32:3a:d3:ce:95:b1:4f:97:a6:84:a5:15:39:
                    7e:4c:ce:b5:a4:f7:3c:8d:61:80:1d:48:23:77:15:
                    30:ff:33:af:e8:2f:f8:24:30:99:4e:68:a1:5e:87:
                    3c:50:e9:3c:9c:a0:da:a4:3d:fd:06:c5:7f:a4:3e:
                    6b:7d:77:e2:81:a2:1e:a9:19:5e:97:32:75:b2:b3:
                    f5:b9:f6:1c:e4:00:61:b4:61:58:68:93:ce:c9:c0:
                    84:8a:d3:44:54:63:75:67:04:28:f1:c0:36:fc:57:
                    d5:52:93:91:e6:ff:7c:4d:76:17:41:a2:32:92:24:
                    a7:5c:05:01:41:5d:19:8d:37:9c:b6:22:4e:51:ce:
                    04:48:14:e6:99:85:8b:3e:f5:ac:4c:dd:16:76:24:
                    ce:67:6f:7b:19:ee:71:1f:3b:38:97:e4:c8:5c:a7:
                    05:70:26:d0:77:e1:a0:b4:6e:2e:67:11:00:e5:ff:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:DD:AF:F4:68:5B:C8:05:E7:E6:FF:AB:F1:1F:66:F5:E1:0E:09
            X509v3 Authority Key Identifier:
                keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:46:33:50:5c:13:62:da:5f:c8:6e:a9:ab:03:b9:12:04:16:
         e9:6d:85:d9:01:82:da:f6:b7:5a:89:35:68:6c:1f:df:9d:62:
         cc:a3:c8:86:67:00:a0:34:34:87:06:36:e5:76:15:f2:de:8c:
         d5:d2:b2:d3:2b:24:51:4b:f9:e2:5c:85:59:71:73:c5:36:e5:
         8a:f3:5f:c1:eb:52:49:00:7f:e6:2f:94:4a:80:d9:1c:c5:6c:
         3d:02:de:60:85:a8:e6:02:78:a2:98:67:51:0b:ce:6e:00:c4:
         7c:ce:02:98:f2:97:14:59:d3:72:a4:c2:e2:ce:45:5c:4c:83:
         e3:02:1d:00:24:53:96:45:a5:2a:ce:97:fb:39:29:3b:e6:30:
         39:5f:ae:0f:fb:45:9d:36:9f:dd:65:03:49:46:38:4f:45:ba:
         9d:e9:e7:07:dd:3c:ff:08:e7:ab:e2:d1:25:20:4c:bd:50:de:
         29:9d:56:b7:74:ce:ec:4f:6a:39:48:01:64:48:6b:1f:ea:c1:
         59:6a:d7:fc:0e:22:ca:ec:cb:fa:b6:fd:54:79:5e:4e:df:dc:
         12:86:6d:f0:ca:c8:b2:4c:03:66:8e:0c:72:74:2f:1f:40:f1:
         22:6b:e4:14:2c:7a:ff:49:af:27:e2:af:64:8a:3a:99:0f:87:
         ac:19:c5:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2t8VRTHhdIxSJgDifKpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljODMxMzNhN2UwNTkzYmIzOThlYWRiOTI3NThjYmM5MmM5
ZDY1YTUwHhcNMjUwODEwMTIwMDUxWhcNMjUwODExMTIwMDUxWjAzMTEwLwYDVQQD
EygwZTMzZGRhZmY0Njg1YmM4MDVlN2U2ZmZhYmYxMWY2NmY1ZTEwZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/um9imMpgNUJFbVkJOYVarn9hb2
rpJ68ExAM2zK9m1LBbEQwRCHMWemcow715J4taEwYphzqCqwLwFHVEI0nU80z4FV
kCuKuEuyDjI6086VsU+XpoSlFTl+TM61pPc8jWGAHUgjdxUw/zOv6C/4JDCZTmih
Xoc8UOk8nKDapD39BsV/pD5rfXfigaIeqRlelzJ1srP1ufYc5ABhtGFYaJPOycCE
itNEVGN1ZwQo8cA2/FfVUpOR5v98TXYXQaIykiSnXAUBQV0ZjTectiJOUc4ESBTm
mYWLPvWsTN0WdiTOZ297Ge5xHzs4l+TIXKcFcCbQd+GgtG4uZxEA5f//0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4z3a/0aFvIBefm/6vxH2b14Q4JMB8GA1UdIwQY
MBaAFJyDEzp+BZO7OY6tuSdYy8ksnWWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEt
NTIxNDdhYWUwZWI0LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEtNTIxNDdhYWUwZWI0
LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkYzUFwT
YtpfyG6pqwO5EgQW6W2F2QGC2va3Wok1aGwf351izKPIhmcAoDQ0hwY25XYV8t6M
1dKy0yskUUv54lyFWXFzxTblivNfwetSSQB/5i+USoDZHMVsPQLeYIWo5gJ4ophn
UQvObgDEfM4CmPKXFFnTcqTC4s5FXEyD4wIdACRTlkWlKs6X+zkpO+YwOV+uD/tF
nTaf3WUDSUY4T0W6nennB908/wjnq+LRJSBMvVDeKZ1Wt3TO7E9qOUgBZEhrH+rB
WWrX/A4iyuzL+rb9VHleTt/cEoZt8MrIskwDZo4McnQvH0DxImvkFCx6/0mvJ+Kv
ZIo6mQ+HrBnFLA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:09 2025 by rpki-client