Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File:                     SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier:          mcoPcHqG5G2lcTKNRDyxzHwRyfCbQQMd+CDx+0rDYvM=
Subject key identifier:   94:66:78:AC:7C:F1:66:70:86:AA:6A:D2:23:B9:78:0E:DA:3A:E1:5D
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer:       /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial:       01987418E0FD1B4018E1705F377A871435EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number:          0769
Signing time:             Mon 04 Aug 2025 08:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:44 +0000
Files and hashes:         1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: tnISFUmu4Sf5Xr8hedfLUaa3/bDCWggBAtUEDhLP6Wg=)
                          2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:e0:fd:1b:40:18:e1:70:5f:37:7a:87:14:35:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
        Validity
            Not Before: Aug  4 08:00:44 2025 GMT
            Not After : Aug  5 08:00:44 2025 GMT
        Subject: CN=946678ac7cf1667086aa6ad223b9780eda3ae15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:bd:fc:0b:26:c0:82:2a:66:40:2b:34:7b:
                    ef:b0:13:22:6f:e4:c0:13:ae:24:3b:40:2f:d1:6e:
                    6d:75:87:bb:a4:08:e6:c9:2f:bf:3d:e8:9b:a1:12:
                    e5:a4:98:a7:9d:de:1d:81:b4:c9:25:67:12:b2:d9:
                    74:1e:15:43:f3:5d:86:68:dd:de:f5:9d:54:1a:81:
                    e2:95:f5:34:6e:f5:97:4b:3c:61:55:1a:c2:db:cd:
                    b4:d6:54:9c:66:4d:01:a0:49:ee:57:2c:72:5f:37:
                    b5:86:24:ec:1f:d0:84:60:c4:05:aa:cb:e9:84:77:
                    56:76:9a:ca:a5:4a:bd:0e:5f:cb:28:f7:31:25:69:
                    7d:bc:e1:e5:74:01:bf:53:c3:4a:a7:f5:de:50:c4:
                    62:73:5f:27:05:31:2e:64:3e:4d:8b:b8:36:ff:44:
                    39:ed:7e:8b:03:44:62:7f:3e:98:b3:0b:b2:9a:4a:
                    82:a3:2c:72:3c:49:7f:90:2d:0b:d1:2f:8e:fe:d8:
                    4b:bd:2a:7c:8b:18:31:8e:5c:ca:d3:f3:b2:c6:ed:
                    cb:bc:cb:6d:43:44:74:c1:d9:02:d7:6e:0d:ef:b9:
                    77:10:c3:1a:90:48:b0:40:a3:b6:45:21:6f:2a:8e:
                    46:b2:38:22:ee:a8:de:2e:3a:6f:a7:79:17:e4:aa:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:78:AC:7C:F1:66:70:86:AA:6A:D2:23:B9:78:0E:DA:3A:E1:5D
            X509v3 Authority Key Identifier:
                keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:cb:24:79:36:51:31:12:d5:a9:05:b6:ee:18:a8:47:58:
         af:c5:ea:32:33:94:27:b7:81:c0:75:33:49:ab:44:e2:a3:de:
         c6:20:ae:5d:b5:c6:fc:4c:60:dc:d2:d1:9f:9e:64:fe:02:06:
         1a:a2:f0:73:7c:ea:36:7d:e9:b8:d5:1c:74:28:b6:ec:a9:53:
         a3:e3:ca:37:ae:b9:cd:95:d7:68:ee:fc:b2:57:c1:65:85:8f:
         43:12:9d:33:de:66:60:10:7b:8a:f2:7b:db:e9:67:a5:c0:44:
         f3:c3:de:2f:24:22:a5:00:0a:68:85:d9:51:2e:01:4e:02:7e:
         9e:dd:b3:52:ed:88:5d:e0:2a:e1:49:1b:5c:34:83:28:f1:da:
         3c:db:cd:d2:9a:7a:53:49:27:3e:cd:a7:51:cf:37:ce:26:d5:
         e1:39:dd:0e:35:36:c5:5b:fc:50:49:79:5a:cf:70:a2:9d:22:
         0a:8f:9e:8c:b6:5c:84:77:fe:46:cd:96:d3:db:0e:75:ca:b6:
         e7:fe:fb:a5:8e:62:00:45:b4:cb:83:ed:ec:dd:44:1a:1d:6f:
         6b:cd:e0:c4:3f:ec:7e:3d:1d:70:ca:68:e5:c9:eb:98:b8:23:
         42:2b:2f:4e:f9:b0:78:18:5e:b1:42:c9:c6:44:c9:a4:44:0e:
         cd:d3:43:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GOD9G0AY4XBfN3qHFDXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzU1YTZkZTVjMTY3ODA5ZjgxOWM4NWY4YzhlNWE2ZTRj
ZTEyN2QwHhcNMjUwODA0MDgwMDQ0WhcNMjUwODA1MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg5NDY2NzhhYzdjZjE2NjcwODZhYTZhZDIyM2I5NzgwZWRhM2FlMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AG9/AsmwIIqZkArNHvvsBMib+TA
E64kO0Av0W5tdYe7pAjmyS+/PeiboRLlpJinnd4dgbTJJWcSstl0HhVD812GaN3e
9Z1UGoHilfU0bvWXSzxhVRrC28201lScZk0BoEnuVyxyXze1hiTsH9CEYMQFqsvp
hHdWdprKpUq9Dl/LKPcxJWl9vOHldAG/U8NKp/XeUMRic18nBTEuZD5Ni7g2/0Q5
7X6LA0Rifz6YswuymkqCoyxyPEl/kC0L0S+O/thLvSp8ixgxjlzK0/Oyxu3LvMtt
Q0R0wdkC124N77l3EMMakEiwQKO2RSFvKo5Gsjgi7qjeLjpvp3kX5KoRlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRmeKx88WZwhqpq0iO5eA7aOuFdMB8GA1UdIwQY
MBaAFEp1Wm3lwWeAn4GchfjI5abkzhJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAt
OTZjNGRjMTM3YjI3LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAtOTZjNGRjMTM3YjI3
LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIzLJHk2
UTES1akFtu4YqEdYr8XqMjOUJ7eBwHUzSatE4qPexiCuXbXG/Exg3NLRn55k/gIG
GqLwc3zqNn3puNUcdCi27KlTo+PKN665zZXXaO78slfBZYWPQxKdM95mYBB7ivJ7
2+lnpcBE88PeLyQipQAKaIXZUS4BTgJ+nt2zUu2IXeAq4UkbXDSDKPHaPNvN0pp6
U0knPs2nUc83zibV4TndDjU2xVv8UEl5Ws9wop0iCo+ejLZchHf+Rs2W09sOdcq2
5/77pY5iAEW0y4Pt7N1EGh1va83gxD/sfj0dcMpo5cnrmLgjQisvTvmweBhesULJ
xkTJpEQOzdND8Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:45 2025 by rpki-client