Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File:                     r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier:          WBBARniV0L5m7cOJOFLptBDHDUqclw8fUjG+lXsvTlI=
Subject key identifier:   D3:B8:21:A8:BC:28:6D:EC:57:04:55:DD:73:DA:78:0F:61:3A:6B:09
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer:       /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial:       0198D84F9B7BE30BF89241A46A5C61526EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number:          EB
Signing time:             Sat 23 Aug 2025 19:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:32 +0000
Files and hashes:         1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
                          2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: GGH+SVwKI7lKUFksHDHHM890OmdKg1zl1kua4rq7dSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:9b:7b:e3:0b:f8:92:41:a4:6a:5c:61:52:6e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
        Validity
            Not Before: Aug 23 19:02:32 2025 GMT
            Not After : Aug 24 19:02:32 2025 GMT
        Subject: CN=d3b821a8bc286dec570455dd73da780f613a6b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:85:58:12:6d:d5:7e:97:18:45:de:93:d9:
                    fb:6d:75:33:bc:ea:65:92:4b:54:c8:fe:30:ba:3f:
                    9b:f1:6d:f0:43:18:d8:29:ca:ac:17:f2:4c:ca:b1:
                    c8:b0:8a:07:65:06:92:56:74:b8:c4:c2:e0:bf:79:
                    ce:cc:99:6e:13:a7:9b:ee:4a:e5:bc:f9:89:eb:c1:
                    f4:67:3f:ca:fb:57:7c:26:d4:60:29:d3:e8:3c:01:
                    a5:02:49:73:71:fa:45:b3:1f:ac:77:f1:26:0d:1e:
                    05:44:31:93:e7:12:50:45:17:5d:cd:d6:e9:44:c9:
                    34:a0:7c:7c:bb:4a:f3:12:f4:15:22:ee:4f:71:0f:
                    cd:00:ab:d1:42:35:59:50:4c:49:1f:7a:c6:44:db:
                    ae:5d:86:2b:41:80:7e:82:c9:10:45:98:2d:a0:01:
                    5a:c4:1d:b6:79:de:d1:a5:ea:58:db:ee:09:02:61:
                    a3:33:17:b7:1e:4e:dc:a6:71:a7:ca:43:58:f3:2f:
                    9c:6c:0b:a0:8d:20:b6:d6:60:74:89:72:45:d9:f9:
                    e5:1d:cc:15:c5:cb:fa:ab:5f:c8:13:7d:06:7f:e5:
                    76:d1:0c:bf:b4:e6:2d:9b:25:c5:c9:aa:f9:7d:13:
                    46:89:90:31:e0:19:c7:0a:09:a7:b8:0e:da:a1:7a:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:21:A8:BC:28:6D:EC:57:04:55:DD:73:DA:78:0F:61:3A:6B:09
            X509v3 Authority Key Identifier:
                keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:be:76:ce:13:ea:40:f0:e5:65:5e:3e:09:69:79:d8:fc:
         ad:45:92:98:7b:bf:13:bc:68:5a:34:7a:48:9e:bc:9a:37:cb:
         e5:c8:8a:96:2f:fa:1b:67:7b:6c:e6:22:22:10:8c:90:36:01:
         bb:a8:d6:60:71:81:7e:a0:6d:1a:8c:86:ea:b0:3d:3d:dd:30:
         d6:6b:d1:b4:0f:0d:8f:83:21:ae:53:72:bc:19:f6:eb:dd:e3:
         9a:93:0a:bc:5c:fb:56:c2:69:34:ca:2c:80:fb:e5:08:de:ec:
         95:64:ac:49:f2:85:ab:21:a6:5a:cd:a2:2e:fc:ef:ff:89:f1:
         1a:16:e3:13:13:28:22:e7:1e:44:6c:70:44:3d:d8:85:50:a0:
         f4:95:e9:e0:f4:31:1c:9d:af:d3:73:49:eb:f3:11:58:ce:00:
         1c:40:c7:89:78:16:87:ae:55:ca:ba:14:fe:31:8b:75:92:17:
         c4:4d:b9:7a:53:4d:ff:60:41:47:0b:3d:b1:6a:60:17:b3:be:
         ee:cb:eb:d0:f5:aa:16:e2:9b:a6:3f:e1:2f:d9:19:6b:d5:bc:
         ef:63:09:4a:58:69:53:b4:f7:bb:7d:aa:6d:7d:4b:db:b7:2c:
         55:02:34:3a:d6:ca:b4:cb:86:94:b4:22:70:93:ff:1f:c2:30:
         a6:76:a4:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT5t74wv4kkGkalxhUm7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODRlM2QyM2ZmNjBiODI5ZTE0NmViZGFiNGEwYWU2MWRl
MGY0ZmIwHhcNMjUwODIzMTkwMjMyWhcNMjUwODI0MTkwMjMyWjAzMTEwLwYDVQQD
EyhkM2I4MjFhOGJjMjg2ZGVjNTcwNDU1ZGQ3M2RhNzgwZjYxM2E2YjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEqFWBJt1X6XGEXek9n7bXUzvOpl
kktUyP4wuj+b8W3wQxjYKcqsF/JMyrHIsIoHZQaSVnS4xMLgv3nOzJluE6eb7krl
vPmJ68H0Zz/K+1d8JtRgKdPoPAGlAklzcfpFsx+sd/EmDR4FRDGT5xJQRRddzdbp
RMk0oHx8u0rzEvQVIu5PcQ/NAKvRQjVZUExJH3rGRNuuXYYrQYB+gskQRZgtoAFa
xB22ed7RpepY2+4JAmGjMxe3Hk7cpnGnykNY8y+cbAugjSC21mB0iXJF2fnlHcwV
xcv6q1/IE30Gf+V20Qy/tOYtmyXFyar5fRNGiZAx4BnHCgmnuA7aoXrn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO4Iai8KG3sVwRV3XPaeA9hOmsJMB8GA1UdIwQY
MBaAFK+E49I/9guCnhRuvatKCuYd4PT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQt
ZTVkOGUzNzUwMDA5LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQtZTVkOGUzNzUwMDA5
LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfm+ds4T
6kDw5WVePglpedj8rUWSmHu/E7xoWjR6SJ68mjfL5ciKli/6G2d7bOYiIhCMkDYB
u6jWYHGBfqBtGoyG6rA9Pd0w1mvRtA8Nj4MhrlNyvBn2693jmpMKvFz7VsJpNMos
gPvlCN7slWSsSfKFqyGmWs2iLvzv/4nxGhbjExMoIuceRGxwRD3YhVCg9JXp4PQx
HJ2v03NJ6/MRWM4AHEDHiXgWh65VyroU/jGLdZIXxE25elNN/2BBRws9sWpgF7O+
7svr0PWqFuKbpj/hL9kZa9W872MJSlhpU7T3u32qbX1L27csVQI0OtbKtMuGlLQi
cJP/H8Iwpnak2Q==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:38 2025 by rpki-client