Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File:                     386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier:          bnoxg677UkgozMT8w1oKCvLYPgcWLjCwTnEDR27Nhb8=
Subject key identifier:   9A:5C:92:AE:BA:7E:5F:BD:A3:85:2E:B5:8E:7C:20:57:44:86:B1:6F
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer:       /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial:       0198D65FC9619ADD406750E90DC738150FA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number:          0583
Signing time:             Sat 23 Aug 2025 10:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:58 +0000
Files and hashes:         1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: Mx8pH13LksYuY7d7YEbmmnb5DqaRJepWXGZ8+CNA7U0=)
                          2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:c9:61:9a:dd:40:67:50:e9:0d:c7:38:15:0f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
        Validity
            Not Before: Aug 23 10:00:58 2025 GMT
            Not After : Aug 24 10:00:58 2025 GMT
        Subject: CN=9a5c92aeba7e5fbda3852eb58e7c20574486b16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:56:1d:57:c5:b4:97:53:37:96:aa:fb:a5:
                    a1:47:e1:9e:58:c4:57:f4:06:b7:76:37:5e:6f:c6:
                    47:1a:4f:9d:6f:e4:a4:25:66:a9:14:88:5c:4c:3f:
                    a6:6d:62:8d:bd:41:e0:ed:8b:c6:66:e3:81:7d:70:
                    d6:68:85:ee:b4:f5:90:0a:41:99:cc:99:cb:02:d8:
                    a7:9a:d0:ea:16:dc:2f:41:63:1e:00:c3:7e:fd:d6:
                    8d:08:0c:28:4b:f9:4a:8d:be:31:60:65:99:e6:4e:
                    eb:d6:66:51:d7:37:c8:4c:b3:30:b3:7e:b1:15:71:
                    99:19:cd:51:82:ca:ca:af:07:21:59:4f:18:bb:f4:
                    95:26:45:53:07:05:50:4d:0a:51:73:67:da:14:b9:
                    56:76:d9:bf:af:08:04:e2:e2:e9:cb:62:37:92:c7:
                    ca:56:02:93:de:87:07:d6:d2:21:0a:61:c8:f6:b7:
                    64:9d:95:aa:85:45:ce:e5:b5:a5:8d:4d:04:99:c6:
                    fd:85:58:dc:d8:d8:26:4b:b7:f5:64:3d:bc:f5:52:
                    0a:86:e4:73:19:9b:cd:6c:ac:2e:bb:7a:53:3d:93:
                    85:45:cf:05:ea:6a:98:07:94:17:0f:d7:5d:3f:3d:
                    a8:97:77:ea:7d:a4:48:2c:97:af:b8:63:a2:cf:d3:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5C:92:AE:BA:7E:5F:BD:A3:85:2E:B5:8E:7C:20:57:44:86:B1:6F
            X509v3 Authority Key Identifier:
                keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:54:a4:8a:b7:c7:88:59:b9:99:35:42:b5:c1:3e:99:c1:e5:
         93:b4:d3:90:b6:a4:bb:90:68:03:c9:fe:e4:fd:36:fa:b6:df:
         c2:41:d0:58:bf:fa:55:78:48:54:f0:fc:70:17:18:5d:21:30:
         b9:fa:28:4c:fe:f5:cd:0f:11:75:b6:4e:22:39:2d:a8:b7:54:
         62:80:bf:b9:d9:00:b0:3f:af:0c:b2:9a:c6:c3:d4:95:98:48:
         68:c6:4d:02:74:db:41:58:e6:a1:89:0a:2e:f7:4d:2a:0b:04:
         f0:e5:a5:a3:de:c3:98:7a:a9:e6:b2:ed:f3:78:b4:16:4e:bf:
         07:b4:f9:3c:50:56:a6:0a:81:f2:24:7a:f4:ec:30:31:ab:89:
         db:e2:54:ba:7a:c2:91:a8:13:c1:9c:df:5b:df:9c:09:c1:67:
         fe:d9:5a:2a:2d:7d:93:8e:8b:87:24:03:7b:5a:c5:8b:d7:4f:
         91:2c:a7:b3:61:3f:a6:e4:11:af:77:bb:df:28:7e:93:13:4d:
         62:67:9b:05:f0:d0:13:0f:1c:46:87:fa:dc:ba:90:21:a1:33:
         88:2e:07:06:50:db:39:ee:1a:70:b9:cd:ea:49:a8:4e:48:b1:
         d2:31:5b:04:ac:5e:1e:6b:09:b6:41:e9:9e:a8:83:4c:19:3a:
         94:8a:92:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8lhmt1AZ1DpDcc4FQ+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmY2U5NjFhZTBlMTYxOGU3NDk5Yzg4YTIyNTU5YmIyMDI1
MDIyYWQwHhcNMjUwODIzMTAwMDU4WhcNMjUwODI0MTAwMDU4WjAzMTEwLwYDVQQD
Eyg5YTVjOTJhZWJhN2U1ZmJkYTM4NTJlYjU4ZTdjMjA1NzQ0ODZiMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndZWHVfFtJdTN5aq+6WhR+GeWMRX
9Aa3djdeb8ZHGk+db+SkJWapFIhcTD+mbWKNvUHg7YvGZuOBfXDWaIXutPWQCkGZ
zJnLAtinmtDqFtwvQWMeAMN+/daNCAwoS/lKjb4xYGWZ5k7r1mZR1zfITLMws36x
FXGZGc1RgsrKrwchWU8Yu/SVJkVTBwVQTQpRc2faFLlWdtm/rwgE4uLpy2I3ksfK
VgKT3ocH1tIhCmHI9rdknZWqhUXO5bWljU0Emcb9hVjc2NgmS7f1ZD289VIKhuRz
GZvNbKwuu3pTPZOFRc8F6mqYB5QXD9ddPz2ol3fqfaRILJevuGOiz9MOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpckq66fl+9o4UutY58IFdEhrFvMB8GA1UdIwQY
MBaAFN/Olhrg4WGOdJnIiiJVm7ICUCKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEt
ZTMzZDYxNmYxOWU4LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mMTZhNGEtZWFiYS00ZTBlLTk3YWEtZTMzZDYxNmYxOWU4
LzEvMzg2V0d1RGhZWTUwbWNpS0lsV2JzZ0pRSXEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVSkirfH
iFm5mTVCtcE+mcHlk7TTkLaku5BoA8n+5P02+rbfwkHQWL/6VXhIVPD8cBcYXSEw
ufooTP71zQ8RdbZOIjktqLdUYoC/udkAsD+vDLKaxsPUlZhIaMZNAnTbQVjmoYkK
LvdNKgsE8OWlo97DmHqp5rLt83i0Fk6/B7T5PFBWpgqB8iR69OwwMauJ2+JUunrC
kagTwZzfW9+cCcFn/tlaKi19k46LhyQDe1rFi9dPkSyns2E/puQRr3e73yh+kxNN
YmebBfDQEw8cRof63LqQIaEziC4HBlDbOe4acLnN6kmoTkix0jFbBKxeHmsJtkHp
nqiDTBk6lIqSgg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:29 2025 by rpki-client