Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File:                     INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier:          UsBKXiKkQn/iCAy7872F8R9Zb1VvG7KZYRk+8vu780E=
Subject key identifier:   02:C2:07:1B:57:F5:81:79:E7:1A:A3:FB:3F:0C:6A:E5:6C:3D:20:5A
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer:       /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial:       01988A331157675736E25803A47C8581F28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number:          0416
Signing time:             Fri 08 Aug 2025 15:00:59 +0000
Manifest this update:     Fri 08 Aug 2025 15:00:59 +0000
Manifest next update:     Sat 09 Aug 2025 15:00:59 +0000
Files and hashes:         1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: jclxFpMjloshjO0PISxVI8eiBCXk3STNaBep7qO1vY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:33:11:57:67:57:36:e2:58:03:a4:7c:85:81:f2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
        Validity
            Not Before: Aug  8 15:00:59 2025 GMT
            Not After : Aug  9 15:00:59 2025 GMT
        Subject: CN=02c2071b57f58179e71aa3fb3f0c6ae56c3d205a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:7c:bd:b5:64:88:a0:30:68:03:55:1c:27:
                    00:9c:40:74:4f:29:0d:32:fd:cd:72:8d:73:92:bd:
                    2b:b9:aa:a2:91:a5:8e:ef:c9:67:27:82:b1:af:94:
                    d0:98:06:c1:0e:f9:98:b4:02:29:3e:42:3b:71:bf:
                    f7:ec:30:85:c6:69:db:8a:f6:b7:c7:a3:6f:6b:11:
                    0a:cb:20:fe:7a:23:61:16:45:1d:c6:35:bd:a2:89:
                    e1:ee:13:aa:c3:18:32:18:dd:7e:14:9d:bd:5a:ed:
                    d3:86:d5:f5:8b:ce:f6:1e:d8:79:59:e5:df:9e:18:
                    22:d5:de:cf:ae:02:05:fc:a0:30:64:94:b0:f8:b2:
                    ec:7e:ee:f6:2f:90:ad:ca:c4:81:93:df:8f:63:60:
                    92:da:e2:bb:0b:11:dd:42:0a:a4:7b:f1:a4:18:54:
                    a3:b3:db:57:94:74:a6:61:ad:7d:29:0c:bf:16:f3:
                    58:79:41:a6:ae:24:74:e2:52:94:d8:b1:a8:c7:01:
                    96:1d:79:14:30:ef:a4:bc:3e:66:9a:2b:a8:4e:9b:
                    43:09:eb:52:ce:ce:19:83:84:d4:c4:0b:36:ad:81:
                    2f:ca:fa:ee:2c:1b:c1:4b:c2:bd:b5:6e:f3:81:25:
                    80:3c:e6:e3:2f:65:ab:0e:08:7a:b8:6c:38:1f:17:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:07:1B:57:F5:81:79:E7:1A:A3:FB:3F:0C:6A:E5:6C:3D:20:5A
            X509v3 Authority Key Identifier:
                keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:97:85:23:ec:6c:74:54:b1:e9:78:9f:9b:07:27:73:cb:88:
         76:f8:22:9c:3f:be:87:af:8a:a6:15:ef:1e:d7:8b:12:39:6c:
         94:84:25:9d:e3:66:64:02:15:fd:2c:d8:79:99:ac:a2:87:86:
         ab:c9:01:b1:d2:2f:e9:0e:74:12:93:08:55:df:18:89:3a:52:
         a2:9d:5c:a4:71:6a:e5:ea:c9:ae:06:3e:69:65:31:be:69:39:
         98:3c:c2:95:5b:1b:8b:0e:cc:eb:48:ca:cf:d2:c7:aa:17:88:
         31:af:fe:61:d8:70:74:f1:a8:33:37:62:a7:33:f6:18:01:d1:
         13:a7:6f:a7:0c:ec:8b:f1:f5:5e:03:cf:33:15:65:4e:61:4b:
         04:52:ed:c4:74:c3:87:c5:4b:83:27:e7:f9:32:19:52:10:80:
         27:91:02:65:25:33:c4:47:81:f6:07:9f:95:cc:ef:13:1e:44:
         66:83:7d:61:47:46:70:9c:08:46:67:f6:ac:dd:73:7e:6d:b5:
         d5:bb:b1:b9:9d:04:1c:e4:9b:85:bd:70:ff:58:f9:e2:9c:7f:
         c1:e5:eb:c4:38:0e:f4:1c:3d:1f:65:6a:cd:f2:3c:70:ea:b7:
         7e:e1:7c:24:52:f5:e1:04:dd:dc:7d:e4:c1:dc:61:62:d1:f7:
         ba:81:50:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMxFXZ1c24lgDpHyFgfKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDY4MTgzZDYwMThmNTA0YzVlNmZhZTIyOGUxYjM1MGM2
ZjBmZWYwHhcNMjUwODA4MTUwMDU5WhcNMjUwODA5MTUwMDU5WjAzMTEwLwYDVQQD
EygwMmMyMDcxYjU3ZjU4MTc5ZTcxYWEzZmIzZjBjNmFlNTZjM2QyMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriB8vbVkiKAwaANVHCcAnEB0TykN
Mv3Nco1zkr0ruaqikaWO78lnJ4Kxr5TQmAbBDvmYtAIpPkI7cb/37DCFxmnbiva3
x6NvaxEKyyD+eiNhFkUdxjW9oonh7hOqwxgyGN1+FJ29Wu3ThtX1i872Hth5WeXf
nhgi1d7PrgIF/KAwZJSw+LLsfu72L5CtysSBk9+PY2CS2uK7CxHdQgqke/GkGFSj
s9tXlHSmYa19KQy/FvNYeUGmriR04lKU2LGoxwGWHXkUMO+kvD5mmiuoTptDCetS
zs4Zg4TUxAs2rYEvyvruLBvBS8K9tW7zgSWAPObjL2WrDgh6uGw4HxfrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALCBxtX9YF55xqj+z8MauVsPSBaMB8GA1UdIwQY
MBaAFCDWgYPWAY9QTF5vriKOGzUMbw/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQt
YWI3ODgxYjBkZjJiLzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQtYWI3ODgxYjBkZjJi
LzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZeFI+xs
dFSx6Xifmwcnc8uIdvginD++h6+KphXvHteLEjlslIQlneNmZAIV/SzYeZmsooeG
q8kBsdIv6Q50EpMIVd8YiTpSop1cpHFq5erJrgY+aWUxvmk5mDzClVsbiw7M60jK
z9LHqheIMa/+YdhwdPGoMzdipzP2GAHRE6dvpwzsi/H1XgPPMxVlTmFLBFLtxHTD
h8VLgyfn+TIZUhCAJ5ECZSUzxEeB9geflczvEx5EZoN9YUdGcJwIRmf2rN1zfm21
1buxuZ0EHOSbhb1w/1j54px/weXrxDgO9Bw9H2VqzfI8cOq3fuF8JFL14QTd3H3k
wdxhYtH3uoFQnw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:40 2025 by rpki-client