Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          nGZJrVC/CGEAkCrFuklWXoVCE5xtWXqJF3no6IKA4uM=
Subject key identifier:   B3:8B:F7:78:89:DC:FA:37:98:BF:9C:5F:6B:3B:F8:7E:5B:44:0F:73
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       01988B7CB8FEF0EA77C1C14D2963E1B215C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          0238
Signing time:             Fri 08 Aug 2025 21:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:03 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: BUM+qDkSAzf044Wv05OUHjYpwhETdmjGznopWsRza5A=)
                          2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:b8:fe:f0:ea:77:c1:c1:4d:29:63:e1:b2:15:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Aug  8 21:01:03 2025 GMT
            Not After : Aug  9 21:01:03 2025 GMT
        Subject: CN=b38bf77889dcfa3798bf9c5f6b3bf87e5b440f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:78:7d:21:49:6a:38:c3:2d:7e:ca:97:47:
                    40:58:a4:e0:f6:13:cf:7d:9c:06:48:be:4d:c0:67:
                    40:12:d8:f2:59:77:2e:55:f3:f1:64:34:c1:f7:ce:
                    7b:7d:a2:49:71:73:3f:1f:92:39:7e:f5:52:8e:6b:
                    42:1e:00:37:d9:db:0d:b6:36:7b:3c:f8:c7:e6:c2:
                    65:09:8e:b3:28:fd:95:02:62:09:f0:be:91:10:cb:
                    de:7d:ca:0e:1c:12:60:3f:b8:dd:b3:b1:fe:8b:a9:
                    cf:e0:f8:10:84:0a:cb:44:ff:63:97:e3:fa:7d:52:
                    89:dd:aa:1f:80:eb:ab:32:43:10:6b:c7:60:fc:9a:
                    53:ed:a7:ba:6e:02:dc:46:96:b0:e4:5f:ef:ab:5f:
                    b6:2f:8a:5f:68:d4:ac:a6:65:35:d2:d7:20:dc:6b:
                    c3:50:48:6b:ef:0a:f9:19:8e:53:bd:56:8b:56:f7:
                    4d:78:a8:05:09:8f:25:d9:de:95:c1:02:d1:76:86:
                    db:b6:2b:0f:22:96:aa:f3:ea:da:6f:45:f6:15:a8:
                    09:02:69:79:bf:b0:48:cb:c4:50:2a:1a:c7:f7:8a:
                    b1:c2:64:ed:f2:4f:64:5a:1e:8d:22:01:95:25:44:
                    83:84:99:e2:71:6e:98:84:7e:20:a9:2c:f0:91:7b:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:F7:78:89:DC:FA:37:98:BF:9C:5F:6B:3B:F8:7E:5B:44:0F:73
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:70:69:ea:94:a6:8a:1a:c6:d7:14:99:e8:13:2c:da:80:
         41:bf:3a:bd:0a:e2:09:dc:2d:f1:3e:10:88:40:e0:33:19:96:
         2f:cb:b1:2a:43:5e:ac:c0:a9:af:b9:d6:45:1d:bd:3f:f0:48:
         6b:25:ea:68:12:5a:1e:4d:61:65:af:dc:44:1e:de:1b:ca:ac:
         67:cc:24:91:42:27:f0:f1:31:de:45:68:1e:c7:72:9e:83:03:
         fb:42:43:e8:29:d6:3f:60:17:cc:24:b9:23:9f:2c:8e:ac:1b:
         9e:f9:0a:be:09:bc:71:ce:87:9b:6f:ba:f6:b7:d2:31:21:e1:
         22:19:b6:d5:66:0a:69:b9:8a:38:85:24:00:60:a0:fd:22:47:
         7a:dd:67:46:66:ff:be:c1:8a:18:83:bb:b4:1d:dd:34:03:f2:
         9d:7c:02:e0:b4:7a:38:28:53:f5:a1:3b:99:90:a4:2d:a6:5f:
         80:1b:a3:b5:c7:96:af:c0:3f:5e:74:ff:5a:66:1f:5e:8d:59:
         e4:1a:ad:f9:39:39:f3:c8:a6:78:b8:11:5b:2f:a9:d2:80:a9:
         e9:17:2d:b9:36:2e:58:e7:a9:48:f5:b7:bd:ea:d7:b4:93:ba:
         ab:1f:4d:37:ac:2b:1d:66:f6:6b:6c:6a:c9:8e:23:46:3b:da:
         8d:cd:76:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfLj+8Op3wcFNKWPhshXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTI1NzUyNjdmZjgzMmQ5NzllMzhkZGFmM2RkNjc0MjAx
NjJjZGEwHhcNMjUwODA4MjEwMTAzWhcNMjUwODA5MjEwMTAzWjAzMTEwLwYDVQQD
EyhiMzhiZjc3ODg5ZGNmYTM3OThiZjljNWY2YjNiZjg3ZTViNDQwZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhJ4fSFJajjDLX7Kl0dAWKTg9hPP
fZwGSL5NwGdAEtjyWXcuVfPxZDTB9857faJJcXM/H5I5fvVSjmtCHgA32dsNtjZ7
PPjH5sJlCY6zKP2VAmIJ8L6REMvefcoOHBJgP7jds7H+i6nP4PgQhArLRP9jl+P6
fVKJ3aofgOurMkMQa8dg/JpT7ae6bgLcRpaw5F/vq1+2L4pfaNSspmU10tcg3GvD
UEhr7wr5GY5TvVaLVvdNeKgFCY8l2d6VwQLRdobbtisPIpaq8+rab0X2FagJAml5
v7BIy8RQKhrH94qxwmTt8k9kWh6NIgGVJUSDhJnicW6YhH4gqSzwkXu8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOL93iJ3Po3mL+cX2s7+H5bRA9zMB8GA1UdIwQY
MBaAFObiV1Jn/4Mtl5443a891nQgFizaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVKWFVtZl9neTJYbmpqZHJ6M1dkQ0FXTE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kZDUwMzItOTRiOS00M2Y1LTlkYmIt
NzgyY2Y3MWM4MmNjLzEvNXVKWFVtZl9neTJYbmpqZHJ6M1dkQ0FXTE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kZDUwMzItOTRiOS00M2Y1LTlkYmItNzgyY2Y3MWM4MmNj
LzEvNXVKWFVtZl9neTJYbmpqZHJ6M1dkQ0FXTE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0ZwaeqU
pooaxtcUmegTLNqAQb86vQriCdwt8T4QiEDgMxmWL8uxKkNerMCpr7nWRR29P/BI
ayXqaBJaHk1hZa/cRB7eG8qsZ8wkkUIn8PEx3kVoHsdynoMD+0JD6CnWP2AXzCS5
I58sjqwbnvkKvgm8cc6Hm2+69rfSMSHhIhm21WYKabmKOIUkAGCg/SJHet1nRmb/
vsGKGIO7tB3dNAPynXwC4LR6OChT9aE7mZCkLaZfgBujtceWr8A/XnT/WmYfXo1Z
5Bqt+Tk588imeLgRWy+p0oCp6RctuTYuWOepSPW3verXtJO6qx9NN6wrHWb2a2xq
yY4jRjvajc12pw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:12 2025 by rpki-client