Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File:                     4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier:          ZwsMP7fso7UF0hZRJcsGYgeu5ztTKcU9o974nmKd4oI=
Subject key identifier:   FC:D8:32:FD:3D:BA:E9:15:64:C2:99:FF:D0:F8:0A:7A:2A:8A:B1:94
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       01988FC70BA846CDC8AD924A36C023EEA060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number:          1627
Signing time:             Sat 09 Aug 2025 17:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 17:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 17:00:43 +0000
Files and hashes:         1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: ZcrO/sYMZilJGqrWjpYR4KKegohxcAUGBqKRsLQrVmg=)
                          2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:0b:a8:46:cd:c8:ad:92:4a:36:c0:23:ee:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: Aug  9 17:00:43 2025 GMT
            Not After : Aug 10 17:00:43 2025 GMT
        Subject: CN=fcd832fd3dbae91564c299ffd0f80a7a2a8ab194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1e:c8:c5:24:35:f9:e1:a1:c2:a9:65:4f:e5:
                    99:a7:f9:fa:94:d1:10:56:c0:aa:8a:2a:2a:23:4d:
                    73:05:2c:98:44:71:96:25:fa:29:67:a1:39:ce:c1:
                    d9:4d:1c:c1:36:ec:6f:95:fa:24:da:63:39:8f:1a:
                    8a:6d:eb:c1:d0:77:6e:7e:cf:35:2f:a3:0d:fb:15:
                    f2:f4:aa:b3:09:2a:2e:5f:93:d8:d5:46:b1:88:f9:
                    cc:a8:d6:fd:be:d0:33:e7:2f:46:1a:61:e1:60:9f:
                    10:a8:d7:80:21:28:c6:43:a8:41:dd:7d:b8:a0:7b:
                    13:d9:01:d0:f6:0b:ce:08:50:6c:2e:e4:86:62:94:
                    bd:53:ba:a1:ad:22:30:20:2a:c2:ad:f9:59:81:94:
                    f7:a0:57:3f:86:8b:03:39:ea:de:de:a7:5d:01:55:
                    f3:ff:78:53:85:c6:0e:80:8a:7e:d1:b3:62:02:0a:
                    31:ee:2e:54:fb:0f:ec:1c:42:f5:bf:69:0b:05:e6:
                    71:12:4f:0c:4a:73:f7:39:ce:a8:c8:89:94:bf:f1:
                    8f:82:e2:16:0a:85:94:e9:50:63:b2:eb:59:01:81:
                    6f:5b:ca:28:41:63:d0:e2:a2:d7:df:c3:9c:9d:5b:
                    0e:24:b5:2a:78:93:7c:60:4f:df:98:fb:e5:b9:4b:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D8:32:FD:3D:BA:E9:15:64:C2:99:FF:D0:F8:0A:7A:2A:8A:B1:94
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:c6:4c:dd:c6:8a:5b:21:3f:03:a5:5f:eb:4e:b5:59:42:
         93:da:dc:2d:5d:c7:f8:83:44:02:92:7b:ed:d5:77:31:0d:74:
         43:3c:bd:a1:c5:65:cd:f9:cf:16:08:e1:20:c2:fe:4d:51:78:
         9e:81:54:ff:a6:c7:6a:cf:68:b5:f0:31:19:da:47:1a:25:32:
         dd:61:a1:c6:bf:1c:f6:12:aa:41:9a:99:61:29:c4:30:e1:f2:
         e7:e2:c4:83:ee:be:81:52:14:20:00:fe:9e:17:f4:61:2f:1f:
         93:7b:5e:8d:2f:1f:34:5a:0f:0a:a6:5b:23:03:7c:ab:c7:45:
         af:d4:63:e0:46:67:94:89:3b:44:7d:20:9e:59:c2:df:b0:bd:
         fa:ad:20:25:7f:06:45:7c:7c:db:9f:a8:82:9e:a9:7b:9f:a6:
         4d:8e:5e:62:79:f1:96:75:dc:e9:4c:23:b7:2e:3e:72:39:cf:
         54:46:cb:b2:67:67:b6:be:6e:7c:25:1a:ad:75:fb:39:21:26:
         9b:26:fe:b6:e7:83:3f:d1:cf:9d:6f:56:f4:e2:ed:4e:3a:6d:
         3f:ef:51:8a:1c:96:7d:b3:e6:ff:2f:e0:84:88:ce:dd:cb:1b:
         3c:83:e0:1d:ad:bb:dc:05:60:9f:fb:2a:fe:3a:50:9c:7e:ba:
         5d:4f:04:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPxwuoRs3IrZJKNsAj7qBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3
YTY1ZTgwHhcNMjUwODA5MTcwMDQzWhcNMjUwODEwMTcwMDQzWjAzMTEwLwYDVQQD
EyhmY2Q4MzJmZDNkYmFlOTE1NjRjMjk5ZmZkMGY4MGE3YTJhOGFiMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9B7IxSQ1+eGhwqllT+WZp/n6lNEQ
VsCqiioqI01zBSyYRHGWJfopZ6E5zsHZTRzBNuxvlfok2mM5jxqKbevB0Hdufs81
L6MN+xXy9KqzCSouX5PY1UaxiPnMqNb9vtAz5y9GGmHhYJ8QqNeAISjGQ6hB3X24
oHsT2QHQ9gvOCFBsLuSGYpS9U7qhrSIwICrCrflZgZT3oFc/hosDOere3qddAVXz
/3hThcYOgIp+0bNiAgox7i5U+w/sHEL1v2kLBeZxEk8MSnP3Oc6oyImUv/GPguIW
CoWU6VBjsutZAYFvW8ooQWPQ4qLX38OcnVsOJLUqeJN8YE/fmPvluUvVKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzYMv09uukVZMKZ/9D4CnoqirGUMB8GA1UdIwQY
MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt
MjhlNzczZGI5MWMyLzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy
LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6nGTN3G
ilshPwOlX+tOtVlCk9rcLV3H+INEApJ77dV3MQ10Qzy9ocVlzfnPFgjhIML+TVF4
noFU/6bHas9otfAxGdpHGiUy3WGhxr8c9hKqQZqZYSnEMOHy5+LEg+6+gVIUIAD+
nhf0YS8fk3tejS8fNFoPCqZbIwN8q8dFr9Rj4EZnlIk7RH0gnlnC37C9+q0gJX8G
RXx825+ogp6pe5+mTY5eYnnxlnXc6Uwjty4+cjnPVEbLsmdntr5ufCUarXX7OSEm
myb+tueDP9HPnW9W9OLtTjptP+9RihyWfbPm/y/ghIjO3csbPIPgHa273AVgn/sq
/jpQnH66XU8ELg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:17 2025 by rpki-client