Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File:                     i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier:          IrDASMw5X0OiTXxz65WtP5gx+UcoTtfBKRq6oVVL5lU=
Subject key identifier:   50:0F:8A:88:4A:E2:C9:B1:59:DD:F3:29:DC:CA:EC:F7:3E:A4:F1:9A
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer:       /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial:       01989FA87B1B9116D31A15F560A156255976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number:          022F
Signing time:             Tue 12 Aug 2025 19:01:15 +0000
Manifest this update:     Tue 12 Aug 2025 19:01:15 +0000
Manifest next update:     Wed 13 Aug 2025 19:01:15 +0000
Files and hashes:         1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: CjpYdUBVJg2Yaz5Oelit53nFwsdczfO2qN4wiNV9NL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:a8:7b:1b:91:16:d3:1a:15:f5:60:a1:56:25:59:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
        Validity
            Not Before: Aug 12 19:01:15 2025 GMT
            Not After : Aug 13 19:01:15 2025 GMT
        Subject: CN=500f8a884ae2c9b159ddf329dccaecf73ea4f19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:0b:13:2d:99:e7:8a:89:ff:ee:68:15:bc:
                    1e:ed:d7:da:38:0a:ef:f5:99:eb:68:2e:d5:6b:c1:
                    61:c5:6d:a8:e8:2c:74:32:fe:ba:5f:2e:90:aa:f0:
                    2e:a5:52:5e:81:12:74:fd:87:7b:b8:a6:10:ca:4e:
                    d2:4c:17:67:d3:61:15:90:d0:27:5d:28:a0:78:13:
                    1a:68:b6:49:04:5b:c8:0a:bf:30:da:57:8f:40:15:
                    1b:96:1c:2a:71:90:39:53:54:65:99:9f:06:60:b2:
                    9d:01:cc:63:81:0a:90:7e:d4:e3:c0:5c:86:cd:1d:
                    ae:11:9e:43:d3:2e:47:fd:82:7b:bf:b4:13:c4:26:
                    a5:2f:3d:fb:61:5b:c3:d5:31:21:ff:62:a5:13:53:
                    05:cb:01:fa:78:f1:fd:28:d5:f1:0f:d7:be:eb:d6:
                    b0:45:1c:33:5f:f7:94:a3:1d:69:54:62:37:af:98:
                    2a:1b:32:da:30:22:8e:a8:00:4e:5b:ae:71:3a:19:
                    c7:57:8c:ad:00:9d:d2:9d:fd:05:ab:7b:ad:0e:1b:
                    6b:7b:88:35:4e:0a:55:88:5a:86:6a:d5:a3:ee:a3:
                    bd:53:f9:d1:5d:ec:c4:28:ba:83:d8:bf:84:83:08:
                    50:d7:31:e6:d5:a7:15:5d:79:21:6c:8f:d4:dd:9b:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:8A:88:4A:E2:C9:B1:59:DD:F3:29:DC:CA:EC:F7:3E:A4:F1:9A
            X509v3 Authority Key Identifier:
                keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:59:e0:96:1f:8d:6f:7a:57:1f:0b:4b:46:54:24:47:c5:82:
         83:9f:85:19:22:7d:d5:c3:dd:c1:a1:ea:f0:bb:4b:c0:a2:03:
         5a:e9:e1:f5:70:29:ed:1f:c0:32:47:44:7f:a5:4e:f9:2b:21:
         ee:34:db:e9:2d:bf:01:5d:cb:38:d6:8f:92:96:17:92:e0:e4:
         da:9f:85:06:cd:40:cc:cc:42:75:a9:d3:09:b0:bc:b0:8a:9a:
         dd:e6:40:44:c7:05:1a:28:bb:e8:38:10:48:e6:5d:a9:64:30:
         cd:74:62:b7:19:b4:8d:d1:62:b8:cd:ef:f5:bd:b2:b6:0a:46:
         dc:21:bf:06:c2:2a:24:c2:d3:e5:a8:f6:ac:19:39:75:32:6b:
         ea:59:cf:76:b3:a6:55:3a:79:fb:29:86:13:4a:48:56:90:09:
         e0:b6:8f:f6:8d:ea:fe:b7:a6:eb:03:41:e8:a2:95:8f:69:b0:
         7e:ac:6a:95:6d:17:d6:f7:ab:e4:c4:e1:c3:28:29:7c:8d:e3:
         77:9e:9b:d7:c7:be:aa:4f:b0:59:8a:62:4a:b4:e9:aa:1b:5e:
         ef:37:03:d5:aa:15:9f:be:a2:04:1c:1e:f8:a5:0d:52:1d:c1:
         63:e4:7b:cf:f9:ae:74:aa:c0:ce:19:75:82:8b:39:52:b3:a8:
         5f:f7:4d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifqHsbkRbTGhX1YKFWJVl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjUwODEyMTkwMTE1WhcNMjUwODEzMTkwMTE1WjAzMTEwLwYDVQQD
Eyg1MDBmOGE4ODRhZTJjOWIxNTlkZGYzMjlkY2NhZWNmNzNlYTRmMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRkLEy2Z54qJ/+5oFbwe7dfaOArv
9ZnraC7Va8FhxW2o6Cx0Mv66Xy6QqvAupVJegRJ0/Yd7uKYQyk7STBdn02EVkNAn
XSigeBMaaLZJBFvICr8w2lePQBUblhwqcZA5U1RlmZ8GYLKdAcxjgQqQftTjwFyG
zR2uEZ5D0y5H/YJ7v7QTxCalLz37YVvD1TEh/2KlE1MFywH6ePH9KNXxD9e+69aw
RRwzX/eUox1pVGI3r5gqGzLaMCKOqABOW65xOhnHV4ytAJ3Snf0Fq3utDhtre4g1
TgpViFqGatWj7qO9U/nRXezEKLqD2L+EgwhQ1zHm1acVXXkhbI/U3ZsCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAPiohK4smxWd3zKdzK7Pc+pPGaMB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1nglh+N
b3pXHwtLRlQkR8WCg5+FGSJ91cPdwaHq8LtLwKIDWunh9XAp7R/AMkdEf6VO+Ssh
7jTb6S2/AV3LONaPkpYXkuDk2p+FBs1AzMxCdanTCbC8sIqa3eZARMcFGii76DgQ
SOZdqWQwzXRitxm0jdFiuM3v9b2ytgpG3CG/BsIqJMLT5aj2rBk5dTJr6lnPdrOm
VTp5+ymGE0pIVpAJ4LaP9o3q/rem6wNB6KKVj2mwfqxqlW0X1ver5MThwygpfI3j
d56b18e+qk+wWYpiSrTpqhte7zcD1aoVn76iBBwe+KUNUh3BY+R7z/mudKrAzhl1
gos5UrOoX/dNCw==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:41:59 2025 by rpki-client