Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File:                     n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier:          1Uy5URgyxqs6GecYj+IpPsupSz1IjOOvF30KcFdvXaQ=
Subject key identifier:   A0:27:52:36:C1:92:05:95:BB:6A:EA:57:21:75:A6:DE:01:4A:DA:F0
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer:       /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial:       019873E371623AE828FA86625767D34DE094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number:          0A55
Signing time:             Mon 04 Aug 2025 07:02:22 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:22 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:22 +0000
Files and hashes:         1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
                          2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: vAsz/cmQX6/RzwAXekhdUeZnfMPg+TuqYExh5hkVSGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:71:62:3a:e8:28:fa:86:62:57:67:d3:4d:e0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
        Validity
            Not Before: Aug  4 07:02:22 2025 GMT
            Not After : Aug  5 07:02:22 2025 GMT
        Subject: CN=a0275236c1920595bb6aea572175a6de014adaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:2f:54:24:88:8d:d8:52:ba:64:b8:46:8c:
                    ea:75:3b:a4:4c:23:0e:70:84:fe:10:ef:dd:6b:58:
                    2c:54:04:44:5e:43:3f:31:cf:8d:e6:38:e6:39:ac:
                    ff:2c:6d:20:9b:2f:cc:1e:26:48:cf:17:9c:b5:c4:
                    a4:9f:ff:72:fe:db:8b:df:0e:9e:e1:2a:10:bc:ec:
                    80:be:c3:49:3b:26:18:40:b3:fa:8e:df:d5:c6:2b:
                    0d:d6:a3:3c:0e:bb:f5:ca:eb:a1:f7:bf:9a:4b:66:
                    31:94:39:b2:f0:f4:a6:41:25:d8:b4:d2:17:be:1f:
                    4d:00:d8:54:7c:8c:5a:55:b9:fc:da:51:04:7d:70:
                    d0:88:da:22:22:fc:94:5a:79:de:1a:cd:20:38:97:
                    9e:e2:73:1f:0d:9c:a2:05:eb:ba:60:04:aa:a2:38:
                    43:13:95:0a:d3:85:d3:f1:91:8b:81:41:c0:c9:01:
                    be:62:d5:c9:09:39:72:c3:5e:06:e5:c9:5e:22:49:
                    bd:b2:66:4a:bc:f0:c6:91:cc:ec:50:13:fb:85:4c:
                    d8:f8:6c:d0:7b:4f:7f:15:d4:af:66:ec:b5:89:f2:
                    7c:b2:30:cb:1b:8c:3a:cc:4c:1b:d0:0c:26:fb:51:
                    6b:63:59:16:06:61:de:c7:68:bb:22:b6:26:fd:3a:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:27:52:36:C1:92:05:95:BB:6A:EA:57:21:75:A6:DE:01:4A:DA:F0
            X509v3 Authority Key Identifier:
                keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:03:23:ef:8c:42:40:dc:7d:90:e7:b3:56:ea:80:3a:5c:18:
         40:16:82:86:f5:8d:6c:b7:84:9c:16:ca:34:b7:f9:36:ce:e7:
         eb:3f:d9:dc:b7:dd:39:b5:af:2a:b5:df:e2:87:d6:c2:c2:17:
         d9:b3:9f:b4:5e:27:4e:78:71:9e:fe:6c:79:27:e9:e6:fa:9e:
         e5:c7:da:4d:c1:51:75:fe:44:fe:0a:a3:62:83:48:f8:96:ad:
         68:2c:6a:d8:d1:f1:31:1e:ac:76:a9:a4:45:28:ce:f1:63:ee:
         a1:db:94:59:4c:3d:d7:70:e8:7a:52:a2:76:60:d4:8b:75:cd:
         2e:27:a0:8a:42:17:71:4d:a2:c6:69:bf:5f:f9:87:a3:25:e5:
         0b:e6:0f:0d:98:8d:0d:18:ad:eb:d9:fd:3e:5d:10:81:6c:68:
         f1:11:7d:6d:df:6b:b4:e4:6a:91:3f:16:4b:8a:df:73:35:97:
         c5:3c:b3:11:d5:61:17:e4:c4:0c:38:df:68:e2:f7:14:d1:99:
         8f:9e:c7:5e:6b:a0:0f:44:f7:da:48:38:e9:36:5e:f7:26:eb:
         ec:fc:79:2d:55:69:ac:c4:59:7c:5c:18:28:42:82:f7:0e:41:
         d2:6b:de:cc:ea:3b:44:32:11:80:f9:84:4f:11:db:54:0e:7d:
         8a:3c:05:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz43FiOugo+oZiV2fTTeCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODkxZmYzNDc3ZWQ3ZmRhYWNmYWUyZTNmMGRmYTY0ZmQ5
MmFjMGMwHhcNMjUwODA0MDcwMjIyWhcNMjUwODA1MDcwMjIyWjAzMTEwLwYDVQQD
EyhhMDI3NTIzNmMxOTIwNTk1YmI2YWVhNTcyMTc1YTZkZTAxNGFkYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+QvVCSIjdhSumS4RozqdTukTCMO
cIT+EO/da1gsVAREXkM/Mc+N5jjmOaz/LG0gmy/MHiZIzxectcSkn/9y/tuL3w6e
4SoQvOyAvsNJOyYYQLP6jt/VxisN1qM8Drv1yuuh97+aS2YxlDmy8PSmQSXYtNIX
vh9NANhUfIxaVbn82lEEfXDQiNoiIvyUWnneGs0gOJee4nMfDZyiBeu6YASqojhD
E5UK04XT8ZGLgUHAyQG+YtXJCTlyw14G5cleIkm9smZKvPDGkczsUBP7hUzY+GzQ
e09/FdSvZuy1ifJ8sjDLG4w6zEwb0Awm+1FrY1kWBmHex2i7IrYm/TqS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAnUjbBkgWVu2rqVyF1pt4BStrwMB8GA1UdIwQY
MBaAFJ+JH/NHftf9qs+uLj8N+mT9kqwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDkt
NzBhNGE4ZDdjNDNmLzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDktNzBhNGE4ZDdjNDNm
LzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAMj74xC
QNx9kOezVuqAOlwYQBaChvWNbLeEnBbKNLf5Ns7n6z/Z3LfdObWvKrXf4ofWwsIX
2bOftF4nTnhxnv5seSfp5vqe5cfaTcFRdf5E/gqjYoNI+JataCxq2NHxMR6sdqmk
RSjO8WPuoduUWUw913DoelKidmDUi3XNLiegikIXcU2ixmm/X/mHoyXlC+YPDZiN
DRit69n9Pl0QgWxo8RF9bd9rtORqkT8WS4rfczWXxTyzEdVhF+TEDDjfaOL3FNGZ
j57HXmugD0T32kg46TZe9ybr7Px5LVVprMRZfFwYKEKC9w5B0mvezOo7RDIRgPmE
TxHbVA59ijwFRQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:47 2025 by rpki-client