Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File:                     fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier:          5YN4SS2HTgfsXED5LKniUkFSEvadCOoo4SG1exkCDL8=
Subject key identifier:   52:78:A2:AD:09:2E:21:AC:4E:33:BC:AC:D2:FE:FB:B4:1E:91:0C:C3
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer:       /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial:       01988B104F47869F7D6BEF471AEA1C81DD9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number:          1118
Signing time:             Fri 08 Aug 2025 19:02:38 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:38 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:38 +0000
Files and hashes:         1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: wrAJbV3NXE59cqWhhsbFjBJyK5mAhJ8sfB+4xcwjDeM=)
                          2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:4f:47:86:9f:7d:6b:ef:47:1a:ea:1c:81:dd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
        Validity
            Not Before: Aug  8 19:02:38 2025 GMT
            Not After : Aug  9 19:02:38 2025 GMT
        Subject: CN=5278a2ad092e21ac4e33bcacd2fefbb41e910cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:20:6a:2d:a4:02:6f:68:49:f2:85:44:d6:
                    8b:06:da:bb:71:df:65:99:bc:02:dd:c6:5a:e6:98:
                    55:84:14:32:4b:f1:c0:e2:50:ba:58:f5:3c:f1:a3:
                    98:40:a4:f0:90:fc:7d:c6:f8:7b:af:6f:aa:e1:d2:
                    15:c5:00:72:13:f9:f2:b9:a2:d3:74:21:30:8f:c9:
                    11:5b:37:98:3f:90:8e:9c:1e:5f:bc:df:47:8e:77:
                    17:48:a2:c0:f5:4f:de:18:c6:66:b2:c8:0f:ac:21:
                    43:c3:ef:3c:c3:06:4a:88:b0:6a:6b:04:8d:04:01:
                    e0:3e:13:5a:81:38:b5:44:e4:c2:fa:85:0b:8b:bb:
                    8f:ba:c6:3d:13:db:6c:8a:f5:5d:f8:5c:9d:e9:1b:
                    6a:31:31:a6:17:b2:1c:6a:02:a6:6d:7e:29:cd:30:
                    1e:f6:06:91:c9:c8:76:e7:bf:a1:61:7a:e7:06:e0:
                    18:34:96:32:04:ea:16:f2:0e:b3:ce:5e:94:aa:ad:
                    19:1a:75:ce:2c:a9:52:48:d9:a6:2c:7c:08:bd:39:
                    6a:56:5b:5d:50:32:83:eb:e1:9e:0a:b3:9d:d8:81:
                    cd:32:b0:9e:97:4e:b2:14:4b:92:55:eb:35:83:fd:
                    83:52:0e:25:2d:b3:56:46:8c:73:bd:eb:9f:88:c8:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:A2:AD:09:2E:21:AC:4E:33:BC:AC:D2:FE:FB:B4:1E:91:0C:C3
            X509v3 Authority Key Identifier:
                keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:58:69:7b:c5:d4:cb:9c:75:ec:0b:2d:cd:77:ca:18:6c:7e:
         c1:40:13:96:7d:d4:82:e8:54:9b:82:72:65:f8:d0:fa:60:c7:
         0b:33:ea:95:9e:b0:fe:56:2a:30:f8:23:66:8b:91:56:82:5e:
         37:3e:bf:4c:9b:c9:c5:8a:55:01:8d:87:67:c2:93:8c:15:85:
         5e:ed:fb:96:0d:d5:e6:58:82:93:70:67:1b:c1:f0:76:5a:55:
         f1:6c:37:f2:c5:b5:25:97:99:8b:a5:18:1e:ec:3e:71:8e:9b:
         12:c3:b0:20:8d:08:a0:6f:46:77:ca:3d:bf:8d:b1:68:8d:3f:
         11:06:89:b0:b7:38:ab:08:b4:fe:fb:0f:66:2d:08:3e:fb:25:
         c3:b0:b8:a3:a4:60:ac:7b:c4:72:b9:59:ad:62:3a:17:01:62:
         b2:ae:20:69:3b:a4:85:08:f4:ef:57:68:05:25:84:6d:e7:54:
         63:0a:c3:5e:76:a7:ec:15:c0:31:ed:c2:fc:29:fc:e6:d3:ca:
         92:96:11:3b:57:d7:c2:57:e9:35:52:a6:13:a6:92:a8:a6:01:
         33:46:9b:8e:81:1c:fb:bc:3e:c9:fe:2b:ee:d0:90:41:a7:f7:
         54:9d:a4:a3:a3:0a:68:5a:de:38:cb:02:4c:43:1e:8e:56:c9:
         67:16:76:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEE9Hhp99a+9HGuocgd2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjUwODA4MTkwMjM4WhcNMjUwODA5MTkwMjM4WjAzMTEwLwYDVQQD
Eyg1Mjc4YTJhZDA5MmUyMWFjNGUzM2JjYWNkMmZlZmJiNDFlOTEwY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UAgai2kAm9oSfKFRNaLBtq7cd9l
mbwC3cZa5phVhBQyS/HA4lC6WPU88aOYQKTwkPx9xvh7r2+q4dIVxQByE/nyuaLT
dCEwj8kRWzeYP5COnB5fvN9HjncXSKLA9U/eGMZmssgPrCFDw+88wwZKiLBqawSN
BAHgPhNagTi1ROTC+oULi7uPusY9E9tsivVd+Fyd6RtqMTGmF7IcagKmbX4pzTAe
9gaRych257+hYXrnBuAYNJYyBOoW8g6zzl6Uqq0ZGnXOLKlSSNmmLHwIvTlqVltd
UDKD6+GeCrOd2IHNMrCel06yFEuSVes1g/2DUg4lLbNWRoxzveufiMgfowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ4oq0JLiGsTjO8rNL++7QekQzDMB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFhpe8XU
y5x17AstzXfKGGx+wUATln3UguhUm4JyZfjQ+mDHCzPqlZ6w/lYqMPgjZouRVoJe
Nz6/TJvJxYpVAY2HZ8KTjBWFXu37lg3V5liCk3BnG8HwdlpV8Ww38sW1JZeZi6UY
Huw+cY6bEsOwII0IoG9Gd8o9v42xaI0/EQaJsLc4qwi0/vsPZi0IPvslw7C4o6Rg
rHvEcrlZrWI6FwFisq4gaTukhQj071doBSWEbedUYwrDXnan7BXAMe3C/Cn85tPK
kpYRO1fXwlfpNVKmE6aSqKYBM0abjoEc+7w+yf4r7tCQQaf3VJ2ko6MKaFreOMsC
TEMejlbJZxZ2Zw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:22 2025 by rpki-client