Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File:                     1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier:          7utNwJyfbbA4jG4ibqMlU2fFMNbDZtUwR4DwXV/V3hg=
Subject key identifier:   4E:AB:C6:F4:20:10:F2:2A:6A:41:C0:38:A6:19:36:1C:7C:15:B8:B3
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer:       /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial:       01987374A609AFA2535760001ED3C57A636E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number:          0DB1
Signing time:             Mon 04 Aug 2025 05:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:21 +0000
Files and hashes:         1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: CuABkjSbw4XXBC0S69iEuPU+PylYAWwLP79AruHg0Lk=)
                          2: ejFgtEL_yvwBtcTkPUKqVp7iqdE.roa (hash: 91fqX0EGnVHzpPjrAaOzm7AgDnbWTA0eBRKoj2PIzpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:a6:09:af:a2:53:57:60:00:1e:d3:c5:7a:63:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
        Validity
            Not Before: Aug  4 05:01:21 2025 GMT
            Not After : Aug  5 05:01:21 2025 GMT
        Subject: CN=4eabc6f42010f22a6a41c038a619361c7c15b8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:10:8e:73:32:3a:06:0e:55:37:e5:75:d8:
                    c7:12:81:21:0f:31:08:3a:7b:c0:04:8b:99:3f:fe:
                    fb:95:ab:bb:35:d8:dd:ca:c9:57:80:ff:40:81:a0:
                    22:4c:bd:d7:e2:e5:d8:06:24:fc:1a:36:b2:0a:01:
                    f8:59:ce:35:d5:5a:72:8f:14:1a:5c:5a:5a:84:9e:
                    05:7f:2d:05:85:48:12:32:5a:f0:2d:a9:62:32:3f:
                    fb:71:27:0f:24:97:2a:4e:37:7f:3a:e0:95:28:c0:
                    0a:fd:35:cb:40:c7:42:c0:6d:73:13:3b:61:f7:89:
                    a4:05:e9:37:f4:7b:62:19:8b:96:86:49:90:6a:e7:
                    27:92:9a:0e:66:d1:3b:f6:4b:16:01:f2:b0:56:36:
                    cf:2e:ac:c2:86:42:b4:b7:01:eb:bb:bb:48:e2:cf:
                    56:cd:cc:b2:47:51:f5:62:78:2a:d5:da:37:29:0d:
                    af:77:b4:32:7f:25:b0:2e:f0:64:7a:30:f4:c4:7d:
                    4a:22:c8:f8:e7:a2:0b:0a:7e:d4:74:e0:6a:1b:63:
                    64:2c:fb:10:08:50:e1:bc:8b:e0:7c:83:54:ba:ab:
                    4c:e3:d9:5d:fb:eb:bb:24:60:4a:79:69:78:d1:e3:
                    84:08:87:67:1e:39:f6:58:a4:fc:46:90:25:7f:a0:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AB:C6:F4:20:10:F2:2A:6A:41:C0:38:A6:19:36:1C:7C:15:B8:B3
            X509v3 Authority Key Identifier:
                keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:8c:de:ca:2b:0c:8c:91:d3:7d:75:46:17:2a:a8:be:ee:
         10:fb:3d:38:97:ea:45:19:50:cf:c5:55:79:0d:ab:84:bd:98:
         15:99:8c:d6:8d:6b:65:03:ca:3f:a5:d6:01:b3:8f:f0:a0:7c:
         12:ea:7f:79:3f:d0:5f:04:48:54:5f:62:de:20:cf:3e:af:e7:
         7a:89:4b:6b:1e:5c:34:02:ee:8f:6c:73:f6:36:97:8d:f9:c7:
         19:7a:4b:77:77:6a:3c:d9:23:94:df:7d:e2:ed:60:8c:70:3b:
         e8:0f:76:55:fd:41:9c:2e:31:ba:f7:23:c1:56:b8:9b:c2:ba:
         7c:a3:d1:ea:bb:ff:df:90:97:be:ee:c8:0f:72:b7:0a:a2:15:
         36:a2:0c:ec:29:3c:1e:f6:9f:89:c3:a6:00:84:24:4e:3f:16:
         30:87:64:a2:e7:4d:0a:82:9b:e6:28:74:67:49:8b:c1:5e:8e:
         e6:11:24:3e:85:c9:72:fb:36:03:b4:08:b2:d6:0d:45:93:0a:
         0a:8b:66:5a:36:dd:f6:76:15:1e:f1:e5:a8:15:19:0c:9d:c8:
         66:4a:23:8a:ec:16:4c:34:95:e7:d4:69:da:b7:ee:9a:52:06:
         c8:f8:79:4b:36:d2:e2:b8:32:66:4f:c7:54:88:fd:4b:df:2a:
         84:fb:e1:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhzdKYJr6JTV2AAHtPFemNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE0MTc3NDc2NWE0Y2RiMDUwZDgyYWYxMWJhN2QyZDU0
YjZlMTMwHhcNMjUwODA0MDUwMTIxWhcNMjUwODA1MDUwMTIxWjAzMTEwLwYDVQQD
Eyg0ZWFiYzZmNDIwMTBmMjJhNmE0MWMwMzhhNjE5MzYxYzdjMTViOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzIQjnMyOgYOVTflddjHEoEhDzEI
OnvABIuZP/77lau7NdjdyslXgP9AgaAiTL3X4uXYBiT8GjayCgH4Wc411VpyjxQa
XFpahJ4Ffy0FhUgSMlrwLaliMj/7cScPJJcqTjd/OuCVKMAK/TXLQMdCwG1zEzth
94mkBek39HtiGYuWhkmQaucnkpoOZtE79ksWAfKwVjbPLqzChkK0twHru7tI4s9W
zcyyR1H1Yngq1do3KQ2vd7QyfyWwLvBkejD0xH1KIsj456ILCn7UdOBqG2NkLPsQ
CFDhvIvgfINUuqtM49ld++u7JGBKeWl40eOECIdnHjn2WKT8RpAlf6D/sQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE6rxvQgEPIqakHAOKYZNhx8FbizMB8GA1UdIwQY
MBaAFPraQXdHZaTNsFDYKvEbp9LVS24TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cEJkMGRscE0yd1VOZ3E4UnVuMHRWTGJoTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvOWU2N2Y1LWU1ODAtNDY4Ni1iODJh
LTZiOWRjYTljNGVjZS8xLzEtdHBCZDBkbHBNMndVTmdxOFJ1bjB0VkxiaE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzllNjdmNS1lNTgwLTQ2ODYtYjgyYS02YjlkY2E5YzRl
Y2UvMS8xLXRwQmQwZGxwTTJ3VU5ncThSdW4wdFZMYmhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNCM
3sorDIyR0311RhcqqL7uEPs9OJfqRRlQz8VVeQ2rhL2YFZmM1o1rZQPKP6XWAbOP
8KB8Eup/eT/QXwRIVF9i3iDPPq/neolLax5cNALuj2xz9jaXjfnHGXpLd3dqPNkj
lN994u1gjHA76A92Vf1BnC4xuvcjwVa4m8K6fKPR6rv/35CXvu7ID3K3CqIVNqIM
7Ck8HvaficOmAIQkTj8WMIdkoudNCoKb5ih0Z0mLwV6O5hEkPoXJcvs2A7QIstYN
RZMKCotmWjbd9nYVHvHlqBUZDJ3IZkojiuwWTDSV59Rp2rfumlIGyPh5SzbS4rgy
Zk/HVIj9S98qhPvhZA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:55 2025 by rpki-client