Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File:                     r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier:          INjMTVW40GuYHCjNynkOk8qg4zIZTSE2kI8BCh1+LGM=
Subject key identifier:   9D:7A:F6:F6:C9:79:41:D3:C7:2B:69:B0:56:B8:B9:B9:63:70:ED:B9
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer:       /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial:       019873E2BE070B3AC5B78B858997BFC74EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number:          10D8
Signing time:             Mon 04 Aug 2025 07:01:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:36 +0000
Files and hashes:         1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
                          2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
                          3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: ZqJsccdAEXpg2BWEJpeti5Ep0MtF4UTFluiKS43OKyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:be:07:0b:3a:c5:b7:8b:85:89:97:bf:c7:4e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
        Validity
            Not Before: Aug  4 07:01:36 2025 GMT
            Not After : Aug  5 07:01:36 2025 GMT
        Subject: CN=9d7af6f6c97941d3c72b69b056b8b9b96370edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:ff:cf:40:cf:59:b8:97:1c:5a:9d:c0:e8:
                    af:62:e7:0f:68:17:c1:01:d1:f9:a6:8f:97:6f:f0:
                    cc:15:85:75:79:d3:d9:ec:29:e7:da:2a:2e:ea:3e:
                    99:ad:c4:d3:f2:54:ec:b1:24:46:69:de:c7:6c:f1:
                    0b:73:94:dc:e4:e6:0c:14:ee:3a:10:02:21:2b:3f:
                    88:02:4c:d3:5f:22:53:b6:a6:b3:97:cc:fb:97:6b:
                    d3:00:0b:be:27:3b:b7:df:ab:98:ae:ad:43:39:d2:
                    11:12:f6:a6:58:9e:6b:b6:6b:c0:9f:d9:d6:78:44:
                    d0:f4:13:97:0a:f3:36:5c:b6:19:0c:8c:7b:25:a3:
                    d1:95:55:cd:f1:1f:86:9a:97:a4:87:e6:61:13:cd:
                    aa:76:fb:1a:c3:3a:50:9f:1a:4b:f0:be:af:94:31:
                    17:56:56:81:02:c2:77:55:1c:ae:02:ea:15:b9:30:
                    e8:53:6a:c8:b9:12:80:71:f3:a4:78:e1:14:8d:47:
                    9f:7d:1e:5c:dc:47:2d:a7:44:23:47:9b:42:29:ea:
                    e0:d9:9d:6e:2a:11:55:06:3e:ef:82:b4:da:72:a9:
                    8f:79:53:e0:d8:50:0f:03:06:49:68:c4:37:a5:11:
                    68:00:f4:64:f5:46:15:a6:5b:49:5e:4a:18:45:47:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:F6:F6:C9:79:41:D3:C7:2B:69:B0:56:B8:B9:B9:63:70:ED:B9
            X509v3 Authority Key Identifier:
                keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:51:94:c5:d7:9e:1e:61:36:90:59:7d:3e:e8:87:1c:47:
         cc:be:38:73:93:da:e3:d1:2b:57:0b:75:58:09:f5:06:4b:ef:
         d4:e4:c2:e8:55:03:0e:dd:8d:00:17:87:5b:e6:41:e4:af:cd:
         05:25:c4:23:9e:e7:13:36:d1:ec:83:c9:0c:b2:4f:7e:64:77:
         47:6a:f6:00:57:bb:99:79:00:95:8e:f7:81:b4:e6:be:52:9e:
         1c:dd:25:2e:4a:88:e7:5b:bd:a0:60:c5:5b:83:fe:c0:c0:fd:
         9f:8f:88:e0:39:d3:51:d4:f7:5a:2f:79:4c:2b:d0:c9:40:43:
         12:e5:36:74:0a:e9:a4:17:32:86:97:86:f9:7d:4e:33:43:d9:
         89:98:95:25:63:ca:98:0b:fe:7b:4a:cd:ad:5b:b8:70:d2:f8:
         3c:09:14:d9:f6:60:b5:aa:95:cc:97:42:30:51:8f:86:46:06:
         e7:a7:ac:23:db:13:64:6d:b6:91:71:f4:88:5b:07:cb:dc:a3:
         e6:91:d5:7d:01:a7:31:d6:2a:17:40:6d:0b:ce:d3:45:42:e0:
         bd:93:39:bc:ed:87:53:ce:c9:56:4c:34:b4:72:1b:c1:66:13:
         b5:70:99:fe:bf:f4:39:5f:f2:26:35:12:b8:2b:65:07:c7:96:
         68:67:e4:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4r4HCzrFt4uFiZe/x06jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTZmOGNhZTc0OTJkMDY0ZTAzMDcxYzkxNDczOTJlZWRk
NDViYzcwHhcNMjUwODA0MDcwMTM2WhcNMjUwODA1MDcwMTM2WjAzMTEwLwYDVQQD
Eyg5ZDdhZjZmNmM5Nzk0MWQzYzcyYjY5YjA1NmI4YjliOTYzNzBlZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw7/z0DPWbiXHFqdwOivYucPaBfB
AdH5po+Xb/DMFYV1edPZ7Cnn2iou6j6ZrcTT8lTssSRGad7HbPELc5Tc5OYMFO46
EAIhKz+IAkzTXyJTtqazl8z7l2vTAAu+Jzu336uYrq1DOdIREvamWJ5rtmvAn9nW
eETQ9BOXCvM2XLYZDIx7JaPRlVXN8R+Gmpekh+ZhE82qdvsawzpQnxpL8L6vlDEX
VlaBAsJ3VRyuAuoVuTDoU2rIuRKAcfOkeOEUjUeffR5c3Ectp0QjR5tCKerg2Z1u
KhFVBj7vgrTacqmPeVPg2FAPAwZJaMQ3pRFoAPRk9UYVpltJXkoYRUfdUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ169vbJeUHTxytpsFa4ubljcO25MB8GA1UdIwQY
MBaAFK/m+MrnSS0GTgMHHJFHOS7t1FvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUt
NjU0OWNkNTlhYTRmLzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUtNjU0OWNkNTlhYTRm
LzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhntRlMXX
nh5hNpBZfT7ohxxHzL44c5Pa49ErVwt1WAn1Bkvv1OTC6FUDDt2NABeHW+ZB5K/N
BSXEI57nEzbR7IPJDLJPfmR3R2r2AFe7mXkAlY73gbTmvlKeHN0lLkqI51u9oGDF
W4P+wMD9n4+I4DnTUdT3Wi95TCvQyUBDEuU2dArppBcyhpeG+X1OM0PZiZiVJWPK
mAv+e0rNrVu4cNL4PAkU2fZgtaqVzJdCMFGPhkYG56esI9sTZG22kXH0iFsHy9yj
5pHVfQGnMdYqF0BtC87TRULgvZM5vO2HU87JVkw0tHIbwWYTtXCZ/r/0OV/yJjUS
uCtlB8eWaGfkZw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:23 2025 by rpki-client