Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File:                     v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier:          9gGo+vldZFO2I8L6B0wCoE5Wo73PLjv3pKZkwe2GedQ=
Subject key identifier:   ED:AA:F2:30:93:0E:E5:E2:5D:A2:6B:06:DA:24:94:3F:B7:01:59:02
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer:       /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial:       0198D69819D64220B1D9E6E4675D6F5DD32E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number:          046C
Signing time:             Sat 23 Aug 2025 11:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:28 +0000
Files and hashes:         1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: Ht1XRbrhN2JC/ud19Gy3/U7bi0M364jUJ0W7hiLbBi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:19:d6:42:20:b1:d9:e6:e4:67:5d:6f:5d:d3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
        Validity
            Not Before: Aug 23 11:02:28 2025 GMT
            Not After : Aug 24 11:02:28 2025 GMT
        Subject: CN=edaaf230930ee5e25da26b06da24943fb7015902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:ee:b5:a5:bf:56:a1:a8:8a:20:73:0c:dd:
                    2f:ae:3f:7a:0e:0a:77:37:f1:cd:74:8b:93:66:80:
                    4f:c0:49:bb:b0:1c:79:f6:5f:c2:23:d6:87:8a:96:
                    0c:ef:2f:e0:28:df:d4:3a:f8:88:80:19:37:15:db:
                    18:db:f7:ba:8c:d7:63:5e:05:53:6a:3b:45:c7:a7:
                    30:ff:23:db:c2:db:6a:08:74:6f:c1:1f:57:e1:0b:
                    19:ea:a7:e1:fd:53:23:62:02:e1:cf:d7:b7:41:53:
                    45:21:fe:69:88:d1:43:8c:f9:09:74:49:01:e2:85:
                    59:92:a5:b6:b6:91:a4:37:05:17:40:b1:e7:9e:ee:
                    3b:d3:a1:98:6e:9e:b2:2b:14:5e:90:27:02:8e:4d:
                    69:b7:3a:13:44:58:17:38:50:7b:1b:ad:cb:d0:1c:
                    9a:5e:54:20:12:26:7d:53:84:1c:b3:83:ee:95:83:
                    c9:5d:9e:61:57:da:ef:40:49:2f:0d:00:63:2f:b7:
                    1c:16:44:cb:1c:91:05:97:0c:9e:18:9b:98:f7:7f:
                    0b:e5:bf:b4:0a:a1:ce:33:f3:24:66:ce:84:f3:65:
                    c1:d1:d3:0c:20:41:b9:bc:57:7d:48:0d:eb:55:33:
                    c2:26:d6:40:a8:cc:f8:85:55:2e:47:65:a2:75:4c:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:F2:30:93:0E:E5:E2:5D:A2:6B:06:DA:24:94:3F:B7:01:59:02
            X509v3 Authority Key Identifier:
                keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:1a:7a:4c:95:dc:5a:57:99:3a:cb:9b:5f:30:26:eb:30:
         d0:92:37:c3:8b:3e:cb:06:00:6f:3f:57:cb:d4:f0:73:bf:b4:
         23:92:df:a1:4a:dd:82:fa:bf:9f:63:5c:7d:87:94:38:da:4d:
         df:cf:e3:df:b9:ad:9f:be:59:b1:b6:d8:8f:8a:9d:11:46:bf:
         f2:7f:ca:2b:7a:21:d6:50:90:9c:6d:47:44:36:9c:3d:fd:4f:
         25:14:a2:cf:91:28:24:31:17:14:c8:a7:59:e6:c9:f5:b9:c5:
         93:e1:97:ad:e9:d6:26:0b:93:62:43:85:41:85:89:6b:b4:7f:
         cb:ed:73:d6:2c:55:d1:b6:67:97:eb:a4:b8:3c:41:78:34:fd:
         df:4f:77:b4:77:34:dc:6b:83:48:68:49:cd:37:af:0d:72:d8:
         b3:13:3e:04:dd:cf:eb:d4:33:8a:67:2b:7c:a9:dd:6a:8d:66:
         6c:c0:b0:b8:23:3c:52:58:3c:24:33:f7:10:94:b5:94:31:f8:
         f0:c9:0b:a2:d9:30:bf:14:1b:4c:9e:16:9a:4a:34:9b:40:b4:
         b1:c2:7c:27:43:7f:25:e2:a1:6a:14:6a:fc:e0:16:79:5f:79:
         ca:f0:0b:e0:3a:11:65:92:36:e0:76:e9:dc:46:73:64:d1:13:
         3e:d4:3d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmBnWQiCx2ebkZ11vXdMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWU1MzExNTU2MDcxNDYzMDRkYzY1ZGQ1NzZmYmVlOWYw
ZDZlNGUwHhcNMjUwODIzMTEwMjI4WhcNMjUwODI0MTEwMjI4WjAzMTEwLwYDVQQD
EyhlZGFhZjIzMDkzMGVlNWUyNWRhMjZiMDZkYTI0OTQzZmI3MDE1OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6futaW/VqGoiiBzDN0vrj96Dgp3
N/HNdIuTZoBPwEm7sBx59l/CI9aHipYM7y/gKN/UOviIgBk3FdsY2/e6jNdjXgVT
ajtFx6cw/yPbwttqCHRvwR9X4QsZ6qfh/VMjYgLhz9e3QVNFIf5piNFDjPkJdEkB
4oVZkqW2tpGkNwUXQLHnnu4706GYbp6yKxRekCcCjk1ptzoTRFgXOFB7G63L0Bya
XlQgEiZ9U4Qcs4PulYPJXZ5hV9rvQEkvDQBjL7ccFkTLHJEFlwyeGJuY938L5b+0
CqHOM/MkZs6E82XB0dMMIEG5vFd9SA3rVTPCJtZAqMz4hVUuR2WidUzVcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2q8jCTDuXiXaJrBtoklD+3AVkCMB8GA1UdIwQY
MBaAFL/uUxFVYHFGME3GXdV2++6fDW5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTIt
ZDRmODMzODBhOWM1LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTItZDRmODMzODBhOWM1
LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSMaekyV
3FpXmTrLm18wJusw0JI3w4s+ywYAbz9Xy9Twc7+0I5LfoUrdgvq/n2NcfYeUONpN
38/j37mtn75ZsbbYj4qdEUa/8n/KK3oh1lCQnG1HRDacPf1PJRSiz5EoJDEXFMin
WebJ9bnFk+GXrenWJguTYkOFQYWJa7R/y+1z1ixV0bZnl+ukuDxBeDT93093tHc0
3GuDSGhJzTevDXLYsxM+BN3P69QzimcrfKndao1mbMCwuCM8Ulg8JDP3EJS1lDH4
8MkLotkwvxQbTJ4Wmko0m0C0scJ8J0N/JeKhahRq/OAWeV95yvAL4DoRZZI24Hbp
3EZzZNETPtQ9nQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:00 2025 by rpki-client