Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          sZoOOcQ1IMpb/fmuGQn/GFJQFyCmv0V6tf3zicRGx0I=
Subject key identifier:   63:0D:35:B0:77:30:9C:A6:E3:52:30:00:B2:C5:2B:78:EC:58:DF:E6
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       0198D73BD759118EA55C505E73289E2BA30E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0E67
Signing time:             Sat 23 Aug 2025 14:01:19 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:19 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:19 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: 1cu9pJT8Pr+JV9Ko63tmU1j0J/F06B55uKJLt8V7gZ8=)
                          2: XZCD2ozMadKu5ppRclcjA81adQM.roa (hash: 5bgsDhtiRsAZtWQwU54/e6IL5DKPg91iF0EEc9dqPDs=)
                          3: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
                          4: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
                          5: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:d7:59:11:8e:a5:5c:50:5e:73:28:9e:2b:a3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Aug 23 14:01:19 2025 GMT
            Not After : Aug 24 14:01:19 2025 GMT
        Subject: CN=630d35b077309ca6e3523000b2c52b78ec58dfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:8f:54:4f:03:2d:c2:f1:86:36:2b:66:16:
                    21:5f:11:4a:30:15:10:3f:7b:f6:e1:2b:43:03:7c:
                    ae:56:a6:0f:ae:fa:f0:7d:41:e8:d5:42:2c:bc:c9:
                    bd:a0:d2:a6:d7:df:a8:b2:42:02:38:60:b6:65:77:
                    95:54:3a:27:f9:41:be:5e:3a:15:f0:ab:b2:89:fc:
                    22:36:06:5a:29:ca:e1:b5:83:6f:6d:28:13:0e:9f:
                    52:7f:d7:fa:cb:47:cf:cd:8f:db:e1:e0:b4:66:98:
                    a3:52:11:e3:af:de:db:6e:39:90:d9:81:f8:0f:e1:
                    b1:2a:4e:af:f0:7c:fa:fa:41:ca:5f:2d:40:88:11:
                    2f:62:57:58:9f:aa:60:3d:2e:c6:08:69:c8:92:f7:
                    35:22:fc:79:2c:df:2e:da:3f:f7:be:67:57:f4:c4:
                    cd:dc:d8:1d:4b:7e:08:30:84:1b:e9:f3:52:0b:b3:
                    4c:76:06:6e:58:54:90:d1:91:33:5d:9c:39:ff:53:
                    73:86:95:1c:74:f1:98:3f:f8:fd:bd:df:10:bb:ae:
                    29:bf:3d:49:6e:42:33:10:36:a8:ba:f7:8c:d8:39:
                    b1:ae:88:64:bb:22:9f:15:12:3a:3c:dc:5e:9f:20:
                    d1:dd:3c:7b:0a:a5:2b:fa:91:39:0f:aa:41:73:ca:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0D:35:B0:77:30:9C:A6:E3:52:30:00:B2:C5:2B:78:EC:58:DF:E6
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:24:55:86:82:10:6f:83:58:39:a5:6b:d8:94:57:75:8d:
         1e:29:9a:c0:f0:e2:21:dc:ed:88:c4:01:96:5d:43:eb:b7:8a:
         89:4b:98:fa:59:df:3e:01:8d:d6:c5:43:bd:5d:cb:50:a5:dc:
         c6:b4:e0:40:87:5a:05:14:27:5b:29:c4:33:be:dc:18:c8:ef:
         64:f4:74:85:94:61:b3:03:a0:c9:8d:68:2e:94:4d:6a:cc:4b:
         d6:1d:e8:2f:88:25:72:ba:ee:1f:5a:74:c5:e7:26:26:3f:27:
         70:ce:39:be:49:f4:71:27:c7:ce:02:9f:cc:bc:43:9e:21:fa:
         e3:73:87:a0:a5:cf:68:74:da:90:a4:22:6e:1c:43:4d:f9:4e:
         6f:da:89:e6:54:05:d0:24:b5:bb:61:3b:2b:b0:4f:d5:b8:d7:
         c2:1b:fb:71:57:4d:c2:17:68:8b:6b:c1:a2:31:32:9e:65:05:
         93:21:df:c5:d2:96:0f:0c:a8:25:bf:73:bd:53:08:31:c9:ab:
         33:43:a8:4c:41:c9:17:b0:56:b5:59:76:0b:7b:c6:a6:fc:f0:
         37:d6:1d:2f:f1:72:6d:ca:a3:77:55:e4:83:4f:10:f3:c8:ab:
         6c:21:00:88:91:e6:9f:8b:9e:67:da:cd:1f:98:92:7c:4e:63:
         a1:d2:05:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO9dZEY6lXFBecyieK6MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDBlNWViYTJmOGJmYzhmZThmZTU2Y2M4OGE0Mjg5NjUy
MzkwYmEwHhcNMjUwODIzMTQwMTE5WhcNMjUwODI0MTQwMTE5WjAzMTEwLwYDVQQD
Eyg2MzBkMzViMDc3MzA5Y2E2ZTM1MjMwMDBiMmM1MmI3OGVjNThkZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMiPVE8DLcLxhjYrZhYhXxFKMBUQ
P3v24StDA3yuVqYPrvrwfUHo1UIsvMm9oNKm19+oskICOGC2ZXeVVDon+UG+XjoV
8KuyifwiNgZaKcrhtYNvbSgTDp9Sf9f6y0fPzY/b4eC0ZpijUhHjr97bbjmQ2YH4
D+GxKk6v8Hz6+kHKXy1AiBEvYldYn6pgPS7GCGnIkvc1Ivx5LN8u2j/3vmdX9MTN
3NgdS34IMIQb6fNSC7NMdgZuWFSQ0ZEzXZw5/1NzhpUcdPGYP/j9vd8Qu64pvz1J
bkIzEDaouveM2DmxrohkuyKfFRI6PNxenyDR3Tx7CqUr+pE5D6pBc8p1zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMNNbB3MJym41IwALLFK3jsWN/mMB8GA1UdIwQY
MBaAFPRA5eui+L/I/o/lbMiKQollI5C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2Yt
MDBiOTJjMWMxZWY0LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2YtMDBiOTJjMWMxZWY0
LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSokVYaC
EG+DWDmla9iUV3WNHimawPDiIdztiMQBll1D67eKiUuY+lnfPgGN1sVDvV3LUKXc
xrTgQIdaBRQnWynEM77cGMjvZPR0hZRhswOgyY1oLpRNasxL1h3oL4glcrruH1p0
xecmJj8ncM45vkn0cSfHzgKfzLxDniH643OHoKXPaHTakKQibhxDTflOb9qJ5lQF
0CS1u2E7K7BP1bjXwhv7cVdNwhdoi2vBojEynmUFkyHfxdKWDwyoJb9zvVMIMcmr
M0OoTEHJF7BWtVl2C3vGpvzwN9YdL/Fybcqjd1Xkg08Q88irbCEAiJHmn4ueZ9rN
H5iSfE5jodIFtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:45 2025 by rpki-client