Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          n8V7l1zIYVeqGqP8dUXyx5yQtDzTwAkkf+FK1NfATvk=
Subject key identifier:   52:CC:13:5D:AD:A5:1E:94:D7:D5:2C:3F:7E:E8:07:3E:1D:2A:A0:25
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       0198D65F5716A605BC7713DCC4731674763D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          143E
Signing time:             Sat 23 Aug 2025 10:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:29 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: YSXBuEHao0hM2iZjQNavYdQVa4YnKtbfEdtila5l8k4=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
                          5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:57:16:a6:05:bc:77:13:dc:c4:73:16:74:76:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Aug 23 10:00:29 2025 GMT
            Not After : Aug 24 10:00:29 2025 GMT
        Subject: CN=52cc135dada51e94d7d52c3f7ee8073e1d2aa025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:0b:4c:cb:34:bd:dd:c6:5e:8e:b0:fb:26:
                    f9:f8:45:54:18:33:86:69:3f:9d:68:10:33:d9:50:
                    f9:3c:af:54:2f:a4:5b:1f:ea:41:0a:83:48:b9:92:
                    66:ad:37:40:7c:8d:7a:a6:f7:e4:f9:02:bb:1d:77:
                    be:14:53:ea:2d:76:30:93:82:23:bd:3d:69:69:fc:
                    29:18:88:ec:ef:ab:68:ec:c5:0f:9f:d2:87:eb:94:
                    e1:dd:67:09:2c:81:b9:c9:55:e5:38:26:e9:01:1a:
                    47:e1:66:0c:70:e9:57:e6:c0:13:a6:a6:5d:7b:f5:
                    e4:eb:c4:cf:97:59:09:7b:f8:3b:8c:8d:82:61:57:
                    13:10:01:e0:fd:dd:71:20:a8:1d:e6:3b:a8:0f:03:
                    65:cb:bc:5b:d7:7c:b9:5f:04:58:ab:4c:01:6d:0c:
                    ac:e7:94:a7:ca:82:00:9e:0c:bb:68:b9:5f:f8:d6:
                    e7:50:64:ed:3a:b2:3c:16:0a:56:f5:3c:90:25:9a:
                    9e:4e:7c:22:49:e8:ff:68:a6:f6:09:48:46:97:66:
                    d0:d0:6d:7f:9b:a9:f4:cf:b3:ae:8e:36:0d:ad:77:
                    1e:29:39:62:76:0f:4d:33:92:bf:85:c4:64:0b:b7:
                    e6:7e:ef:c7:9d:1f:68:f3:f9:28:66:5d:7b:4b:15:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:13:5D:AD:A5:1E:94:D7:D5:2C:3F:7E:E8:07:3E:1D:2A:A0:25
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:e7:c4:db:74:69:46:21:0b:66:77:84:9b:78:e5:27:44:
         d7:b3:ac:29:dd:cc:bf:c3:23:db:52:36:f7:66:f5:5c:27:62:
         8f:c3:ac:e9:3b:9a:10:0b:11:f5:3e:72:ac:64:c1:b4:36:9d:
         8d:8e:e4:1d:14:d0:8a:76:ae:70:80:c1:56:0b:e9:07:df:8a:
         e9:ee:ab:0a:31:59:f3:eb:5a:19:13:fb:b3:c2:56:2c:14:f4:
         ad:5f:85:8c:a5:1d:40:9e:5e:81:8d:eb:09:31:3a:c0:22:e8:
         a9:ee:46:0d:42:c1:bc:06:89:fc:35:b0:c0:a3:c4:8c:e9:af:
         ee:6f:fe:72:53:19:33:d7:c9:4e:f7:ee:5d:a3:41:72:54:f5:
         a1:20:13:7b:e0:52:cf:f5:97:5c:54:04:eb:c4:92:bf:69:8e:
         2f:a6:74:7c:1e:1d:d6:15:ef:ef:46:d3:79:72:a9:1f:d7:b0:
         31:a3:4a:07:de:f4:51:0a:48:c5:d0:14:d5:56:3e:82:31:b3:
         19:18:f6:6b:37:57:71:e6:b1:52:bf:df:94:30:6e:ae:e1:6d:
         fa:3d:fb:5e:33:58:47:b5:2d:71:86:5b:fd:c2:f6:77:b3:74:
         70:fd:63:38:3a:38:0d:33:0a:1a:a0:b5:de:23:dc:5d:a8:b0:
         20:39:9d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX1cWpgW8dxPcxHMWdHY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjUwODIzMTAwMDI5WhcNMjUwODI0MTAwMDI5WjAzMTEwLwYDVQQD
Eyg1MmNjMTM1ZGFkYTUxZTk0ZDdkNTJjM2Y3ZWU4MDczZTFkMmFhMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BYLTMs0vd3GXo6w+yb5+EVUGDOG
aT+daBAz2VD5PK9UL6RbH+pBCoNIuZJmrTdAfI16pvfk+QK7HXe+FFPqLXYwk4Ij
vT1pafwpGIjs76to7MUPn9KH65Th3WcJLIG5yVXlOCbpARpH4WYMcOlX5sATpqZd
e/Xk68TPl1kJe/g7jI2CYVcTEAHg/d1xIKgd5juoDwNly7xb13y5XwRYq0wBbQys
55SnyoIAngy7aLlf+NbnUGTtOrI8FgpW9TyQJZqeTnwiSej/aKb2CUhGl2bQ0G1/
m6n0z7OujjYNrXceKTlidg9NM5K/hcRkC7fmfu/HnR9o8/koZl17SxXcMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLME12tpR6U19UsP37oBz4dKqAlMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDHnxNt0
aUYhC2Z3hJt45SdE17OsKd3Mv8Mj21I292b1XCdij8Os6TuaEAsR9T5yrGTBtDad
jY7kHRTQinaucIDBVgvpB9+K6e6rCjFZ8+taGRP7s8JWLBT0rV+FjKUdQJ5egY3r
CTE6wCLoqe5GDULBvAaJ/DWwwKPEjOmv7m/+clMZM9fJTvfuXaNBclT1oSATe+BS
z/WXXFQE68SSv2mOL6Z0fB4d1hXv70bTeXKpH9ewMaNKB970UQpIxdAU1VY+gjGz
GRj2azdXceaxUr/flDBuruFt+j37XjNYR7UtcYZb/cL2d7N0cP1jODo4DTMKGqC1
3iPcXaiwIDmd0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:34 2025 by rpki-client