Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File:                     fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier:          CkqekUfKGFTI0wJEDGzR3zd8/hzlBBGoKJVxffNq4Fw=
Subject key identifier:   54:49:0F:FE:56:DB:15:6B:67:73:F3:4F:8E:F1:0C:35:B9:A7:C1:86
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer:       /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial:       0198D4743A8C09D66FC725C9BEC78D5E9785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number:          0E4E
Signing time:             Sat 23 Aug 2025 01:04:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:03 +0000
Files and hashes:         1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
                          2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: 1PKgG04fBLwcVQ2kW6OSYenqJ3lbQPjvCEIioe6AEa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:3a:8c:09:d6:6f:c7:25:c9:be:c7:8d:5e:97:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
        Validity
            Not Before: Aug 23 01:04:03 2025 GMT
            Not After : Aug 24 01:04:03 2025 GMT
        Subject: CN=54490ffe56db156b6773f34f8ef10c35b9a7c186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:06:f5:1b:15:f6:71:f1:62:a8:0e:fa:25:
                    b6:64:3d:8b:40:16:2b:46:fe:83:60:f9:e8:70:83:
                    77:ca:d2:99:73:f4:ce:87:f6:e6:a9:fd:63:7e:03:
                    f7:03:86:10:3c:8f:4a:75:36:85:c0:da:00:34:f0:
                    54:51:15:b6:6a:27:31:f1:d9:be:10:ca:1a:60:2a:
                    3b:69:0c:f7:a1:31:50:23:92:4d:30:25:09:4e:90:
                    67:4b:81:28:36:bf:79:6f:a2:29:a8:f1:55:c5:dc:
                    79:49:2f:9e:a0:a9:42:55:dc:53:e4:6f:46:55:cd:
                    b9:a0:f0:78:d7:44:36:f4:e7:23:6d:da:57:14:33:
                    65:6d:5c:a9:d9:d6:62:3e:bd:11:c8:15:b5:52:41:
                    14:d8:56:af:6b:47:70:c2:94:81:bd:3a:20:79:3c:
                    aa:d6:01:fa:80:4f:2d:58:70:38:00:7f:50:9b:96:
                    04:7a:20:3c:8a:82:9e:aa:ba:d4:57:e6:f7:22:3e:
                    64:6f:75:66:5e:56:e0:f1:bf:8b:0b:73:4a:77:97:
                    7e:51:18:4d:a5:a2:09:71:d0:16:fb:ec:ae:54:51:
                    29:af:3a:f9:d2:6c:8e:19:57:89:c9:ce:9c:ef:5b:
                    89:20:35:ab:dd:a4:dd:3a:e7:66:e2:b2:9d:6a:69:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:0F:FE:56:DB:15:6B:67:73:F3:4F:8E:F1:0C:35:B9:A7:C1:86
            X509v3 Authority Key Identifier:
                keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:a1:21:ff:74:c2:79:1e:94:58:dd:25:46:78:d0:c4:dd:
         79:b4:42:12:b9:f4:0f:a5:d0:01:dc:9d:fb:2d:89:76:e1:f2:
         1a:d4:fa:15:dc:94:d3:bf:3c:6f:c4:0d:53:66:39:81:94:05:
         07:66:1c:a9:d2:dd:00:33:8b:42:19:1e:6b:d4:e1:00:47:72:
         84:80:d8:42:ce:e3:ce:58:09:96:46:83:b9:cf:8c:df:ad:cb:
         db:2c:f2:f3:4e:55:1e:21:dd:65:9e:c0:76:10:f9:d3:db:87:
         ca:dd:84:e8:e5:1c:de:3f:b9:9d:10:30:9a:b0:41:10:65:7c:
         61:4f:d3:d3:d2:55:4b:e6:c4:34:7d:65:3f:21:65:81:7a:e9:
         d9:f3:18:eb:4c:4c:c7:9e:a3:20:5b:52:fb:2a:1e:97:81:34:
         60:2d:6b:a8:7f:d2:fe:da:c9:72:70:0d:f8:5b:6f:fd:38:89:
         2b:c9:ba:1b:c0:91:4f:9f:e3:15:97:5b:21:3c:e0:95:f0:db:
         d6:4e:ac:10:cd:29:0f:cd:bc:f2:cc:14:05:33:e9:19:00:bb:
         82:c1:ea:2a:2b:b4:af:cb:a8:bd:7a:b1:da:3f:0f:6b:5d:04:
         4c:59:1c:ff:38:1d:12:ae:b3:5c:0a:f6:f4:66:7b:98:98:06:
         9a:fc:47:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDqMCdZvxyXJvseNXpeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDBlZjRmM2JmNjViODdjZmEwMmVmN2I0YTY1ODliYTJk
ZTRmZjcwHhcNMjUwODIzMDEwNDAzWhcNMjUwODI0MDEwNDAzWjAzMTEwLwYDVQQD
Eyg1NDQ5MGZmZTU2ZGIxNTZiNjc3M2YzNGY4ZWYxMGMzNWI5YTdjMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZkG9RsV9nHxYqgO+iW2ZD2LQBYr
Rv6DYPnocIN3ytKZc/TOh/bmqf1jfgP3A4YQPI9KdTaFwNoANPBUURW2aicx8dm+
EMoaYCo7aQz3oTFQI5JNMCUJTpBnS4EoNr95b6IpqPFVxdx5SS+eoKlCVdxT5G9G
Vc25oPB410Q29OcjbdpXFDNlbVyp2dZiPr0RyBW1UkEU2Fava0dwwpSBvTogeTyq
1gH6gE8tWHA4AH9Qm5YEeiA8ioKeqrrUV+b3Ij5kb3VmXlbg8b+LC3NKd5d+URhN
paIJcdAW++yuVFEprzr50myOGVeJyc6c71uJIDWr3aTdOudm4rKdammN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRJD/5W2xVrZ3PzT47xDDW5p8GGMB8GA1UdIwQY
MBaAFH0A70879luHz6Au97SmWJui3k/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQt
ZGU5ZDA0MDFhNmY2LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQtZGU5ZDA0MDFhNmY2
LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyOhIf90
wnkelFjdJUZ40MTdebRCErn0D6XQAdyd+y2JduHyGtT6FdyU0788b8QNU2Y5gZQF
B2YcqdLdADOLQhkea9ThAEdyhIDYQs7jzlgJlkaDuc+M363L2yzy805VHiHdZZ7A
dhD509uHyt2E6OUc3j+5nRAwmrBBEGV8YU/T09JVS+bENH1lPyFlgXrp2fMY60xM
x56jIFtS+yoel4E0YC1rqH/S/trJcnAN+Ftv/TiJK8m6G8CRT5/jFZdbITzglfDb
1k6sEM0pD8288swUBTPpGQC7gsHqKiu0r8uovXqx2j8Pa10ETFkc/zgdEq6zXAr2
9GZ7mJgGmvxHyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:23 2025 by rpki-client