Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File:                     pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier:          5CzfNHNPSaohSEMTGXaLsg5xl4WXHKAt/x0T/SI0d7Q=
Subject key identifier:   09:5B:09:FF:A5:E3:15:DB:F2:9E:E4:F3:1C:82:4D:31:9F:52:9E:02
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer:       /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial:       01987419574220E8DFE27D99C30A522DDDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number:          084B
Signing time:             Mon 04 Aug 2025 08:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:14 +0000
Files and hashes:         1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
                          2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: ZzN1iMQdhIg5GZbl3pGKTHPomuU682yL6xUU2y9q1ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:57:42:20:e8:df:e2:7d:99:c3:0a:52:2d:dd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
        Validity
            Not Before: Aug  4 08:01:14 2025 GMT
            Not After : Aug  5 08:01:14 2025 GMT
        Subject: CN=095b09ffa5e315dbf29ee4f31c824d319f529e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:5f:61:f2:71:02:31:13:af:9f:1e:d3:0e:
                    f8:0c:c5:62:8e:40:86:80:08:fa:0b:3c:31:46:ea:
                    7d:81:ac:7b:f4:4a:e0:e8:3e:01:35:65:73:07:75:
                    96:21:f2:27:d1:f6:38:57:b2:fa:21:52:a8:d0:cb:
                    c7:34:74:29:f9:a5:73:e5:92:8c:d0:cb:b6:1d:1e:
                    43:91:dc:5c:e0:35:90:e5:0e:f6:9e:1e:89:d9:d9:
                    a4:f0:5e:c6:e2:2b:5a:47:50:27:a0:d5:02:b9:b1:
                    b1:78:fb:8e:55:cb:97:cf:a8:5f:2b:18:ea:08:36:
                    fc:36:59:74:09:9b:91:e8:52:01:f5:62:19:a7:6d:
                    38:43:4c:38:c4:24:14:21:42:70:d7:29:bc:7d:27:
                    a0:11:0f:48:0f:07:d8:16:6c:34:0d:64:d0:47:1f:
                    65:74:3f:3d:27:90:e6:6c:06:6b:69:03:01:59:6d:
                    5b:f7:1b:8e:0f:66:93:a9:08:7b:1b:ae:96:e4:58:
                    17:54:f9:ef:6d:2d:f2:e7:08:0a:b5:3f:1d:51:e6:
                    e3:80:76:ef:ac:e1:cb:86:72:64:cf:69:ac:48:06:
                    cc:4b:fd:32:3c:6b:87:71:c1:91:cc:63:82:16:6b:
                    26:d2:f0:d7:4e:d3:c6:5b:be:1c:21:0e:23:ef:26:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:09:FF:A5:E3:15:DB:F2:9E:E4:F3:1C:82:4D:31:9F:52:9E:02
            X509v3 Authority Key Identifier:
                keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:b3:08:c3:b9:ed:cb:f9:51:8b:b7:2f:52:7a:91:a1:54:
         8a:77:63:0a:51:14:df:c4:8d:ea:de:3c:28:24:7e:06:4f:3f:
         3f:eb:d4:8e:39:bb:23:dc:39:91:c7:91:6e:84:02:f3:e0:54:
         82:ed:c8:8f:f4:29:20:16:06:04:99:a1:cd:de:c2:93:05:99:
         b2:64:d1:e3:01:d8:16:24:e4:c6:64:01:cd:8e:e3:ad:8d:03:
         8b:15:e4:37:f7:ab:2e:a5:33:53:85:2b:e0:6d:47:43:cd:65:
         58:8d:69:2f:f1:ec:8a:16:f2:6b:71:7b:7a:51:0b:29:c6:da:
         3a:8f:3d:03:ec:a9:d5:10:2b:7c:e5:e8:aa:dc:00:f2:fb:9b:
         90:36:67:55:87:c1:ce:60:70:1f:0e:62:25:44:27:dc:53:58:
         b2:73:97:c1:4e:8a:de:47:84:2f:98:8f:9e:0e:47:e2:69:c8:
         bf:2b:18:64:f6:45:b6:1d:6f:48:4b:1f:fe:4b:cf:85:19:be:
         d9:38:fc:fe:2f:23:85:a5:e9:1c:44:36:1d:68:70:2a:bd:d4:
         62:c8:bf:d1:4a:69:a5:32:30:4c:39:36:d5:93:40:94:fe:85:
         fe:ed:9e:df:60:91:08:52:d9:bc:c8:1c:23:09:bb:c6:b6:9e:
         9c:ca:5d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GVdCIOjf4n2ZwwpSLd3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MWQ4MzNkMzQ3ZTZjNmNhNjllYTBhOGFiMmE4M2Y0OTI2
N2FkZTQwHhcNMjUwODA0MDgwMTE0WhcNMjUwODA1MDgwMTE0WjAzMTEwLwYDVQQD
EygwOTViMDlmZmE1ZTMxNWRiZjI5ZWU0ZjMxYzgyNGQzMTlmNTI5ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJfYfJxAjETr58e0w74DMVijkCG
gAj6CzwxRup9gax79Erg6D4BNWVzB3WWIfIn0fY4V7L6IVKo0MvHNHQp+aVz5ZKM
0Mu2HR5Dkdxc4DWQ5Q72nh6J2dmk8F7G4itaR1AnoNUCubGxePuOVcuXz6hfKxjq
CDb8Nll0CZuR6FIB9WIZp204Q0w4xCQUIUJw1ym8fSegEQ9IDwfYFmw0DWTQRx9l
dD89J5DmbAZraQMBWW1b9xuOD2aTqQh7G66W5FgXVPnvbS3y5wgKtT8dUebjgHbv
rOHLhnJkz2msSAbMS/0yPGuHccGRzGOCFmsm0vDXTtPGW74cIQ4j7ybI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlbCf+l4xXb8p7k8xyCTTGfUp4CMB8GA1UdIwQY
MBaAFKUdgz00fmxspp6gqKsqg/SSZ63kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUt
NDc4MmI3YThlYTI5LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUtNDc4MmI3YThlYTI5
LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMmzCMO5
7cv5UYu3L1J6kaFUindjClEU38SN6t48KCR+Bk8/P+vUjjm7I9w5kceRboQC8+BU
gu3Ij/QpIBYGBJmhzd7CkwWZsmTR4wHYFiTkxmQBzY7jrY0DixXkN/erLqUzU4Ur
4G1HQ81lWI1pL/Hsihbya3F7elELKcbaOo89A+yp1RArfOXoqtwA8vubkDZnVYfB
zmBwHw5iJUQn3FNYsnOXwU6K3keEL5iPng5H4mnIvysYZPZFth1vSEsf/kvPhRm+
2Tj8/i8jhaXpHEQ2HWhwKr3UYsi/0UpppTIwTDk21ZNAlP6F/u2e32CRCFLZvMgc
Iwm7xraenMpdrg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:29 2025 by rpki-client