Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          hbSat4viaX9YbVOQYssQ9apAlgIDMJtxG8PCBbkIvbE=
Subject key identifier:   57:37:12:EA:1F:EC:1E:5F:33:03:DE:14:D4:79:AA:E5:E3:00:A1:FD
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       0198808AE3EEE554FA2D95BB875C520D6ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0C14
Signing time:             Wed 06 Aug 2025 18:00:42 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:42 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:42 +0000
Files and hashes:         1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
                          2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
                          3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
                          4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: aIle1zNy269KzGjUXNRWkGSCDdYjHLsFhI1olyjiHBw=)
                          6: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8a:e3:ee:e5:54:fa:2d:95:bb:87:5c:52:0d:6a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Aug  6 18:00:42 2025 GMT
            Not After : Aug  7 18:00:42 2025 GMT
        Subject: CN=573712ea1fec1e5f3303de14d479aae5e300a1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:33:fa:91:01:c9:02:5d:9d:ea:68:8a:2d:
                    c9:ab:05:74:4c:89:1a:45:36:2b:4d:e4:c8:d3:19:
                    44:96:f4:87:70:49:5b:42:a6:94:30:de:14:06:c6:
                    74:d6:2a:d2:2e:ed:94:9b:76:05:5d:f6:54:dc:ca:
                    c4:c3:98:ec:ed:f1:ef:7d:dc:e7:39:48:53:82:2f:
                    53:f3:d3:6e:4f:8b:a6:3c:f5:8d:2f:4f:4e:ac:d0:
                    c4:1c:3e:a7:7d:5c:15:7f:1b:1c:2e:73:f5:09:0f:
                    c8:ae:57:6b:04:11:d6:ec:42:6c:68:01:8c:94:8a:
                    a2:c1:b3:ac:c8:25:05:24:46:1b:9d:59:1b:83:bc:
                    35:ff:36:ce:9f:f3:12:3a:7b:54:e8:4d:b5:62:c9:
                    cb:39:8d:3c:3f:9a:31:52:1e:23:8d:2b:d6:f9:6e:
                    b4:f1:75:1f:7e:ca:b3:7c:9c:3e:d0:61:e2:59:90:
                    1b:4d:7e:b0:a2:56:7c:ce:65:67:a8:97:af:af:45:
                    7e:a3:a3:66:b0:f5:69:19:19:05:18:a6:2b:28:bb:
                    74:70:8f:f0:ac:5a:f6:02:78:aa:58:85:89:71:21:
                    5e:fe:0d:f7:25:aa:0e:5f:49:15:6a:65:19:d7:df:
                    b0:61:d5:cb:7c:72:69:c8:e3:ce:cb:d0:07:f5:b4:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:12:EA:1F:EC:1E:5F:33:03:DE:14:D4:79:AA:E5:E3:00:A1:FD
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:50:ab:45:0a:75:94:16:0c:d5:15:d3:1e:f9:8a:d8:4c:
         78:9e:ae:51:43:6c:a6:40:9b:b6:fe:51:6d:10:77:c9:af:f7:
         bf:d4:06:05:62:20:72:23:fc:1f:e4:54:59:e4:52:a3:70:40:
         b8:95:24:3a:7d:97:09:e2:30:f3:bf:0b:76:02:56:52:a6:10:
         57:ac:0f:a6:81:3a:f0:60:1a:8c:ee:4b:a2:54:76:69:88:c4:
         08:d3:e2:99:54:f7:06:98:7f:42:20:d8:85:05:77:2e:72:b1:
         2e:64:f6:c2:25:4b:65:ce:08:08:24:bd:ec:e4:5a:d4:70:e6:
         b7:0a:1a:83:8c:99:e5:66:2e:77:68:fd:f4:58:97:15:bb:27:
         9f:d2:21:6b:8c:21:da:47:b1:19:ec:03:62:b0:ab:e3:a8:eb:
         7b:a0:ff:09:ad:15:d2:5f:a1:92:96:f6:00:c0:3c:c1:95:95:
         3e:72:93:a9:69:76:72:f3:e0:ac:1c:7d:63:a2:74:26:39:7d:
         4d:44:b6:87:1e:44:00:75:74:5e:7d:de:36:bd:28:9f:09:f1:
         b1:59:a5:73:d4:a2:73:62:9c:1a:93:a3:b8:66:ce:1f:21:fa:
         8b:86:23:b0:6a:43:00:e8:1d:f0:cd:68:a4:00:90:4c:7d:01:
         36:de:2b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAiuPu5VT6LZW7h1xSDWq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjUwODA2MTgwMDQyWhcNMjUwODA3MTgwMDQyWjAzMTEwLwYDVQQD
Eyg1NzM3MTJlYTFmZWMxZTVmMzMwM2RlMTRkNDc5YWFlNWUzMDBhMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Psz+pEByQJdnepoii3JqwV0TIka
RTYrTeTI0xlElvSHcElbQqaUMN4UBsZ01irSLu2Um3YFXfZU3MrEw5js7fHvfdzn
OUhTgi9T89NuT4umPPWNL09OrNDEHD6nfVwVfxscLnP1CQ/IrldrBBHW7EJsaAGM
lIqiwbOsyCUFJEYbnVkbg7w1/zbOn/MSOntU6E21YsnLOY08P5oxUh4jjSvW+W60
8XUffsqzfJw+0GHiWZAbTX6wolZ8zmVnqJevr0V+o6NmsPVpGRkFGKYrKLt0cI/w
rFr2AniqWIWJcSFe/g33JaoOX0kVamUZ19+wYdXLfHJpyOPOy9AH9bR98wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc3Euof7B5fMwPeFNR5quXjAKH9MB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXpQq0UK
dZQWDNUV0x75ithMeJ6uUUNspkCbtv5RbRB3ya/3v9QGBWIgciP8H+RUWeRSo3BA
uJUkOn2XCeIw878LdgJWUqYQV6wPpoE68GAajO5LolR2aYjECNPimVT3Bph/QiDY
hQV3LnKxLmT2wiVLZc4ICCS97ORa1HDmtwoag4yZ5WYud2j99FiXFbsnn9Iha4wh
2kexGewDYrCr46jre6D/Ca0V0l+hkpb2AMA8wZWVPnKTqWl2cvPgrBx9Y6J0Jjl9
TUS2hx5EAHV0Xn3eNr0onwnxsVmlc9Sic2KcGpOjuGbOHyH6i4YjsGpDAOgd8M1o
pACQTH0BNt4rZQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:09:48 2025 by rpki-client