Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File:                     5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier:          HsUeUekZ/iIgymMWyAj0vnDyuWu9W+vZ81GbU8hiybw=
Subject key identifier:   FC:66:F8:64:0B:14:CF:0E:5D:06:86:BA:C1:6B:4C:2D:00:19:FC:14
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       0198D54E7798E73294F85D3D8EB7409E980A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number:          04B1
Signing time:             Sat 23 Aug 2025 05:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:25 +0000
Files and hashes:         1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: +k01NQJoabiHPuzylsqiV3VfXW4mAUJa4CFsiDpiF5s=)
                          2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:77:98:e7:32:94:f8:5d:3d:8e:b7:40:9e:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Aug 23 05:02:25 2025 GMT
            Not After : Aug 24 05:02:25 2025 GMT
        Subject: CN=fc66f8640b14cf0e5d0686bac16b4c2d0019fc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:e5:6b:62:a3:f8:5d:7b:c1:d3:36:6a:08:
                    18:53:9e:be:bd:28:b9:ba:4d:b3:00:9d:e7:f7:09:
                    45:6b:75:54:c4:09:68:14:6e:3f:02:ff:25:89:ba:
                    77:2f:d5:d9:0a:32:55:ab:c4:f0:4c:3e:c9:9e:83:
                    4d:fd:d6:45:54:83:30:66:5d:cc:5a:6b:b2:0d:35:
                    bd:26:28:f1:0a:88:c5:db:e6:2b:98:dc:0b:88:50:
                    db:cd:14:69:8c:34:ca:4b:a8:18:93:a4:ba:42:86:
                    cf:d5:26:65:65:f6:78:69:9d:87:e1:4a:4b:90:0c:
                    d3:2c:3b:5c:1b:1f:b8:90:cb:a1:3f:b0:46:eb:66:
                    4b:1a:9d:79:45:12:e6:01:b1:c1:f2:2a:4d:ee:02:
                    69:f6:f2:76:2c:5f:80:5c:6d:23:ee:58:09:72:ea:
                    98:3d:02:e7:9f:2a:9d:c8:08:71:fb:fe:d0:c1:3b:
                    bd:3f:8c:d6:82:b2:cf:3c:75:43:58:a1:b8:ce:2d:
                    0e:cd:63:dd:69:13:67:3b:d4:b9:2b:f7:8a:30:a3:
                    11:76:97:a4:eb:fa:bc:16:3c:eb:e3:75:13:0f:b1:
                    8f:74:90:4c:ed:3e:27:2a:d1:59:6e:c5:80:a9:39:
                    a4:c6:41:e1:6b:8d:ac:b7:c9:6a:99:e0:59:af:32:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:66:F8:64:0B:14:CF:0E:5D:06:86:BA:C1:6B:4C:2D:00:19:FC:14
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:be:34:85:5a:13:77:7c:23:ca:17:99:5e:0f:fc:c3:48:
         29:f3:e0:07:c2:0f:8a:db:93:d5:ee:38:b9:ed:ce:44:85:65:
         63:e7:25:5d:de:00:e7:70:0c:e6:f7:3d:39:c0:43:54:ba:91:
         8a:cb:0f:17:62:f9:dc:2a:6c:3b:cb:f5:86:37:df:4e:ae:e0:
         fb:a3:c2:bf:f3:d2:4b:1c:0e:77:b5:88:e0:91:72:26:95:68:
         46:61:1d:f6:61:64:f0:f5:51:7d:8d:42:b1:9f:88:a3:9e:d1:
         87:bf:e4:ea:97:b6:7a:64:52:02:e2:7b:c4:95:1a:55:25:0b:
         e7:21:c5:5a:7c:06:ac:b6:58:6e:3e:30:60:03:b5:de:0e:9d:
         52:09:75:51:a9:a6:81:c0:fa:a1:a1:cb:12:c1:ba:0c:5e:e1:
         e0:ab:c3:f6:3e:fb:c8:ef:59:9e:17:46:52:04:9b:6f:23:f7:
         09:4e:87:46:f2:46:98:d9:78:79:7b:57:0e:ef:ac:0e:36:86:
         9a:c8:2a:9a:8f:2a:e0:fd:93:2b:5e:9d:95:60:75:27:cc:9f:
         2a:0f:a2:98:30:6c:dd:37:8a:25:fc:7a:99:52:9e:5a:e2:43:
         c4:1e:88:44:c2:d1:7f:1c:db:0e:e6:a8:07:58:d3:69:e0:26:
         d0:58:bc:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTneY5zKU+F09jrdAnpgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZThhODE1ZmQzNThhZTc2ZDI3NGIwNDViMGE3MTViZDUx
YzYyNzgwHhcNMjUwODIzMDUwMjI1WhcNMjUwODI0MDUwMjI1WjAzMTEwLwYDVQQD
EyhmYzY2Zjg2NDBiMTRjZjBlNWQwNjg2YmFjMTZiNGMyZDAwMTlmYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiHla2Kj+F17wdM2aggYU56+vSi5
uk2zAJ3n9wlFa3VUxAloFG4/Av8libp3L9XZCjJVq8TwTD7JnoNN/dZFVIMwZl3M
WmuyDTW9JijxCojF2+YrmNwLiFDbzRRpjDTKS6gYk6S6QobP1SZlZfZ4aZ2H4UpL
kAzTLDtcGx+4kMuhP7BG62ZLGp15RRLmAbHB8ipN7gJp9vJ2LF+AXG0j7lgJcuqY
PQLnnyqdyAhx+/7QwTu9P4zWgrLPPHVDWKG4zi0OzWPdaRNnO9S5K/eKMKMRdpek
6/q8Fjzr43UTD7GPdJBM7T4nKtFZbsWAqTmkxkHha42st8lqmeBZrzLxMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxm+GQLFM8OXQaGusFrTC0AGfwUMB8GA1UdIwQY
MBaAFOXoqBX9NYrnbSdLBFsKcVvVHGJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2Mt
Nzg2ZGUzZDFhYmU0LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2MtNzg2ZGUzZDFhYmU0
LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtO+NIVa
E3d8I8oXmV4P/MNIKfPgB8IPituT1e44ue3ORIVlY+clXd4A53AM5vc9OcBDVLqR
issPF2L53CpsO8v1hjffTq7g+6PCv/PSSxwOd7WI4JFyJpVoRmEd9mFk8PVRfY1C
sZ+Io57Rh7/k6pe2emRSAuJ7xJUaVSUL5yHFWnwGrLZYbj4wYAO13g6dUgl1Uamm
gcD6oaHLEsG6DF7h4KvD9j77yO9ZnhdGUgSbbyP3CU6HRvJGmNl4eXtXDu+sDjaG
msgqmo8q4P2TK16dlWB1J8yfKg+imDBs3TeKJfx6mVKeWuJDxB6IRMLRfxzbDuao
B1jTaeAm0Fi8DA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:49 2025 by rpki-client