Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          8kBIwk9tIx1mqwIwAgOaph6dJeFL3xIyvX0zDQfV3oA=
Subject key identifier:   A1:41:4E:8D:60:32:CA:B4:53:A8:DB:3E:21:1E:FB:C2:21:82:96:86
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       01989592F082CC2164987B19F9DAF495A713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          0D88
Signing time:             Sun 10 Aug 2025 20:01:31 +0000
Manifest this update:     Sun 10 Aug 2025 20:01:31 +0000
Manifest next update:     Mon 11 Aug 2025 20:01:31 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: iRR+KnqtB9WVDh3r1Few74Voyo5UQ4+pj5u6KMOh3TA=)
                          2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
                          3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
                          4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:f0:82:cc:21:64:98:7b:19:f9:da:f4:95:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Aug 10 20:01:31 2025 GMT
            Not After : Aug 11 20:01:31 2025 GMT
        Subject: CN=a1414e8d6032cab453a8db3e211efbc221829686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:fc:8f:51:51:4a:36:68:4f:05:f3:9c:a0:
                    1d:ea:52:6c:aa:92:9d:66:a2:9e:f5:97:6f:46:22:
                    03:f0:76:33:0c:7a:71:6c:2f:4e:9e:dc:ac:e0:1c:
                    17:4a:fb:7d:d5:5b:dd:aa:92:ef:46:18:65:04:67:
                    64:97:40:5e:24:9d:f8:3f:38:9d:9e:60:6a:46:2a:
                    41:65:25:b7:13:64:6e:48:83:a2:fa:a4:c3:60:b6:
                    08:3a:04:b8:96:89:95:c2:75:2d:9f:98:fa:97:83:
                    33:57:5f:d2:02:c3:af:8c:e9:13:8f:73:5d:97:af:
                    15:45:0e:91:8b:fb:b3:9e:cf:08:83:9a:f0:37:8c:
                    e8:89:be:70:52:d9:06:27:35:33:83:d7:a0:2a:96:
                    eb:33:5c:2c:2b:fe:74:06:59:47:ed:f2:fd:27:c5:
                    a0:f3:eb:b5:8b:39:49:6b:f8:8b:d6:f8:25:39:90:
                    33:51:69:50:0e:cd:9f:ce:4b:51:77:3b:4e:b4:ab:
                    f9:e6:1e:4e:18:02:dd:58:96:1e:27:1c:28:43:c0:
                    0c:5f:57:f5:0d:3c:f0:6f:3a:d8:bc:7c:1a:50:91:
                    fd:8a:49:4d:ac:7e:1c:73:b0:92:80:59:23:cd:41:
                    bd:ab:44:2b:43:6a:37:a1:c0:b9:6b:66:b3:a7:48:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:41:4E:8D:60:32:CA:B4:53:A8:DB:3E:21:1E:FB:C2:21:82:96:86
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:73:14:87:f6:1a:e8:57:4b:c7:40:2f:b3:82:68:55:0b:f4:
         ba:1f:0a:60:ed:15:38:af:99:f6:3d:ec:2c:dd:1f:9f:be:89:
         2c:a3:23:b2:c8:4a:f4:68:9f:0f:f3:e2:bc:f3:24:9b:b2:c7:
         b6:29:f9:c2:32:7c:94:bd:e0:b5:f0:28:9e:25:3e:96:90:37:
         90:14:4e:40:ee:b6:37:5a:e5:5e:dd:06:46:44:13:6a:38:9e:
         bf:fc:73:f1:90:63:50:ec:d8:18:ad:8b:d3:f7:9b:dc:23:67:
         0c:bb:20:73:0e:92:b2:6f:a3:22:95:45:4d:64:ec:b9:e5:23:
         11:4e:56:4a:35:c7:e2:ce:2f:82:a9:36:99:b2:6c:70:c1:f3:
         0d:57:34:f7:e9:02:07:ef:b9:fa:b3:59:a3:d6:3d:28:71:c1:
         2b:cb:f1:30:e9:3d:72:36:d8:3d:c9:44:ae:5d:f6:51:20:05:
         e6:96:df:c0:b2:ff:9f:b9:73:ef:af:71:b6:16:29:8b:38:72:
         b7:bf:75:02:27:a3:05:44:e2:0e:1e:3a:5a:4a:ba:d3:de:8e:
         b5:c5:3d:17:78:9a:b0:f0:38:b6:23:72:e7:ac:3e:8d:58:87:
         39:67:00:57:fb:dd:c0:26:a9:33:5b:c2:01:90:0b:37:c0:28:
         7d:b9:a4:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkvCCzCFkmHsZ+dr0lacTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1
M2VlMmIwHhcNMjUwODEwMjAwMTMxWhcNMjUwODExMjAwMTMxWjAzMTEwLwYDVQQD
EyhhMTQxNGU4ZDYwMzJjYWI0NTNhOGRiM2UyMTFlZmJjMjIxODI5Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZL8j1FRSjZoTwXznKAd6lJsqpKd
ZqKe9ZdvRiID8HYzDHpxbC9Ontys4BwXSvt91VvdqpLvRhhlBGdkl0BeJJ34Pzid
nmBqRipBZSW3E2RuSIOi+qTDYLYIOgS4lomVwnUtn5j6l4MzV1/SAsOvjOkTj3Nd
l68VRQ6Ri/uzns8Ig5rwN4zoib5wUtkGJzUzg9egKpbrM1wsK/50BllH7fL9J8Wg
8+u1izlJa/iL1vglOZAzUWlQDs2fzktRdztOtKv55h5OGALdWJYeJxwoQ8AMX1f1
DTzwbzrYvHwaUJH9iklNrH4cc7CSgFkjzUG9q0QrQ2o3ocC5a2azp0i97QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFBTo1gMsq0U6jbPiEe+8IhgpaGMB8GA1UdIwQY
MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt
ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0
LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnMUh/Ya
6FdLx0Avs4JoVQv0uh8KYO0VOK+Z9j3sLN0fn76JLKMjsshK9GifD/PivPMkm7LH
tin5wjJ8lL3gtfAoniU+lpA3kBROQO62N1rlXt0GRkQTajiev/xz8ZBjUOzYGK2L
0/eb3CNnDLsgcw6Ssm+jIpVFTWTsueUjEU5WSjXH4s4vgqk2mbJscMHzDVc09+kC
B++5+rNZo9Y9KHHBK8vxMOk9cjbYPclErl32USAF5pbfwLL/n7lz769xthYpizhy
t791AiejBUTiDh46Wkq6096OtcU9F3iasPA4tiNy56w+jViHOWcAV/vdwCapM1vC
AZALN8AofbmkUA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:09 2025 by rpki-client