Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File:                     k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier:          8qJRfCR10UOg89CDSUyAVs8tO4X7RXQ/d8ELuCaoBpE=
Subject key identifier:   4A:0C:83:BD:22:FA:BD:3A:6E:D0:D8:3C:2A:11:77:FF:FA:BB:E2:86
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer:       /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial:       01989034D0AC36E0E03F1758A5E1F1BC8282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number:          0EE8
Signing time:             Sat 09 Aug 2025 19:00:37 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:37 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:37 +0000
Files and hashes:         1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
                          2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
                          3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: d1KzuOV+s5Za9K0zbAuXCv8wVbdBOULSuFLALAP9f3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:d0:ac:36:e0:e0:3f:17:58:a5:e1:f1:bc:82:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
        Validity
            Not Before: Aug  9 19:00:37 2025 GMT
            Not After : Aug 10 19:00:37 2025 GMT
        Subject: CN=4a0c83bd22fabd3a6ed0d83c2a1177fffabbe286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:ea:78:31:86:b0:0c:5d:ad:cb:91:6d:e5:
                    84:1d:1c:22:eb:aa:4a:cb:17:5a:c3:f5:c9:58:49:
                    fb:35:d1:bf:f2:ab:cb:40:be:72:90:22:e9:94:fa:
                    8a:e0:be:9c:4a:de:df:38:8b:93:49:40:3a:a3:90:
                    85:ae:18:cf:82:21:e2:45:37:60:d9:6b:ec:de:e8:
                    50:9f:a5:34:ab:af:e6:8a:26:d1:89:71:ae:66:6c:
                    53:46:84:a0:91:c9:95:87:60:ab:02:4f:6e:9f:9c:
                    fd:8f:6c:1f:40:5c:a2:ab:d0:ec:f7:f7:cb:21:00:
                    71:7e:e4:02:12:e7:66:86:9e:7e:7c:b3:0e:ca:70:
                    f5:30:65:bf:ab:5e:41:bf:53:de:e1:89:9e:d5:0c:
                    5a:90:a8:bd:37:1f:ea:38:64:30:44:59:ef:e9:68:
                    bc:33:2d:31:44:e8:ba:d7:23:61:4b:fa:04:8e:60:
                    0c:85:8b:0d:0c:e5:ad:fa:70:e6:cc:19:64:e0:c5:
                    7c:49:fd:2e:a5:e6:24:fa:dc:9d:95:47:39:76:a5:
                    91:64:92:3a:f1:02:b1:80:e1:e6:cc:4b:b7:90:db:
                    af:5f:6f:e5:e6:8e:57:2b:94:57:db:91:16:d7:dd:
                    7b:0a:76:a9:d8:05:45:f6:4c:a4:19:e9:ef:2d:47:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:83:BD:22:FA:BD:3A:6E:D0:D8:3C:2A:11:77:FF:FA:BB:E2:86
            X509v3 Authority Key Identifier:
                keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:55:e5:8b:e3:61:47:66:f8:fe:92:75:41:6c:b9:2f:d8:
         de:64:a7:cf:3f:21:14:11:f5:da:2e:43:37:d8:f7:8b:4e:d3:
         f9:29:80:7d:c5:16:f3:47:7a:9d:94:e5:0f:d6:41:d4:b7:f5:
         ce:86:2d:60:37:9d:96:8c:d1:69:87:53:9d:51:94:02:30:85:
         14:ba:44:4f:f7:6f:69:0d:93:6a:3d:87:76:b6:ed:12:66:cf:
         39:bc:d3:f1:2a:9b:ff:35:fb:9b:ad:05:66:4a:4a:16:e8:bd:
         f1:08:b3:c4:35:1b:bb:7b:40:6d:1a:02:b9:05:a3:7d:e7:1f:
         56:29:ea:86:de:40:7a:4a:80:d5:38:ce:56:65:0f:aa:c3:3b:
         d2:f3:80:46:47:51:54:09:08:fc:47:e6:65:b1:5e:ad:49:5b:
         b5:a6:95:5d:a8:e7:c3:99:84:39:62:87:f4:f1:e6:f4:ff:03:
         f9:12:3b:e3:e9:f9:fa:02:50:b0:5e:a0:2c:c6:03:c0:9a:65:
         ec:52:78:e8:01:ed:c2:09:85:6d:bc:ad:e3:66:6c:89:a0:15:
         cf:f5:fe:00:60:c4:c7:e2:b5:c7:1f:e2:72:46:ba:19:c1:da:
         7e:84:37:44:00:da:8f:8e:eb:f0:eb:7f:fc:73:3e:e6:08:94:
         ee:81:8b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNNCsNuDgPxdYpeHxvIKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDRjNGFkNzMxZTQ1ZWQzMjBhMmYzOGFiNzBiN2E3YmZm
N2VhNzkwHhcNMjUwODA5MTkwMDM3WhcNMjUwODEwMTkwMDM3WjAzMTEwLwYDVQQD
Eyg0YTBjODNiZDIyZmFiZDNhNmVkMGQ4M2MyYTExNzdmZmZhYmJlMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCnqeDGGsAxdrcuRbeWEHRwi66pK
yxdaw/XJWEn7NdG/8qvLQL5ykCLplPqK4L6cSt7fOIuTSUA6o5CFrhjPgiHiRTdg
2Wvs3uhQn6U0q6/miibRiXGuZmxTRoSgkcmVh2CrAk9un5z9j2wfQFyiq9Ds9/fL
IQBxfuQCEudmhp5+fLMOynD1MGW/q15Bv1Pe4Yme1QxakKi9Nx/qOGQwRFnv6Wi8
My0xROi61yNhS/oEjmAMhYsNDOWt+nDmzBlk4MV8Sf0upeYk+tydlUc5dqWRZJI6
8QKxgOHmzEu3kNuvX2/l5o5XK5RX25EW1917Cnap2AVF9kykGenvLUcKWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoMg70i+r06btDYPCoRd//6u+KGMB8GA1UdIwQY
MBaAFJPUxK1zHkXtMgovOKtwt6e/9+p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDct
YWJhNTVlMjQyNGQyLzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDctYWJhNTVlMjQyNGQy
LzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKo9V5Yvj
YUdm+P6SdUFsuS/Y3mSnzz8hFBH12i5DN9j3i07T+SmAfcUW80d6nZTlD9ZB1Lf1
zoYtYDedlozRaYdTnVGUAjCFFLpET/dvaQ2Taj2HdrbtEmbPObzT8Sqb/zX7m60F
ZkpKFui98QizxDUbu3tAbRoCuQWjfecfVinqht5AekqA1TjOVmUPqsM70vOARkdR
VAkI/EfmZbFerUlbtaaVXajnw5mEOWKH9PHm9P8D+RI74+n5+gJQsF6gLMYDwJpl
7FJ46AHtwgmFbbyt42ZsiaAVz/X+AGDEx+K1xx/icka6GcHafoQ3RADaj47r8Ot/
/HM+5giU7oGL2A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:04 2025 by rpki-client