Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          L6ebyJeS9aW0PYH62FcDkgekovQ2mRaPb/IhYC93AvM=
Subject key identifier:   D5:F3:88:D0:C7:A2:A1:7D:54:33:2E:76:AF:2F:FA:2D:15:97:6D:2D
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       0198D404A014475038125A47318C6908453E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          0411
Signing time:             Fri 22 Aug 2025 23:02:09 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:09 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:09 +0000
Files and hashes:         1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: U4FWLzl2qgWOtRciZtArRHmQVr/KviCoSfq47jbGrhs=)
                          2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:a0:14:47:50:38:12:5a:47:31:8c:69:08:45:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Aug 22 23:02:09 2025 GMT
            Not After : Aug 23 23:02:09 2025 GMT
        Subject: CN=d5f388d0c7a2a17d54332e76af2ffa2d15976d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:11:ae:ce:c0:41:eb:8b:fe:8c:52:f7:24:
                    7d:73:9f:87:49:a0:c9:a8:c9:b6:1b:52:b8:5d:6c:
                    f9:ab:71:54:f4:cf:06:5e:4e:be:cb:1c:23:2a:0e:
                    a1:3b:4b:79:67:36:84:1a:30:ce:e4:24:7d:d7:51:
                    f5:36:1a:e9:47:51:c6:4b:f1:42:58:2d:6c:9b:02:
                    bf:41:a9:90:af:f9:de:a0:b5:09:bf:45:08:fe:7d:
                    48:86:14:9d:77:59:87:f9:78:c5:af:cd:db:64:ec:
                    ae:4a:ca:da:da:67:2b:25:d0:b7:9a:a5:9e:0c:ed:
                    5b:be:ec:15:20:d2:59:d0:34:a8:03:86:70:0b:7a:
                    d9:2d:4d:11:6b:74:19:34:af:a5:5d:4e:58:29:01:
                    51:86:54:91:ef:ab:b3:88:98:6d:6a:e0:49:77:f5:
                    01:01:0c:75:c1:4c:51:c6:42:b2:b8:cc:72:2e:aa:
                    66:66:79:e8:5a:ef:a7:0b:2e:1e:6b:d5:20:47:0d:
                    76:47:b0:10:43:c7:07:18:cf:86:84:11:9c:be:ad:
                    4f:9d:d5:57:b0:02:22:b9:a2:d6:23:5a:84:76:cd:
                    fd:3b:fa:95:52:12:99:67:ab:3b:18:45:0a:91:98:
                    28:87:a6:f5:a2:24:57:e4:e5:96:94:b0:93:88:50:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:88:D0:C7:A2:A1:7D:54:33:2E:76:AF:2F:FA:2D:15:97:6D:2D
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:96:0c:6d:c8:61:21:fa:3e:83:39:28:5b:4d:30:ff:b4:
         59:98:2d:9d:6f:43:82:f4:77:dc:a5:7b:40:75:86:6f:fb:3b:
         99:5e:29:da:97:47:63:2c:cc:36:10:ff:56:ef:a6:64:0b:b4:
         21:91:b1:d1:4e:7c:ed:b6:84:12:dd:1c:9f:83:bb:c2:27:23:
         b0:13:d3:09:28:68:69:37:50:7a:06:3f:c4:8a:14:bc:f2:84:
         ce:62:c7:8d:df:ac:94:a6:57:cf:0e:ef:e3:22:b9:18:ac:1b:
         5a:e3:86:9b:af:e7:52:db:51:a9:fb:39:be:56:b7:88:ea:c1:
         75:1c:d0:ca:fe:a5:6f:92:37:7c:e9:4a:cf:d7:e7:59:f8:64:
         e3:84:e4:cf:6a:80:9a:3a:c4:60:a9:9e:f5:04:2b:68:5f:fe:
         3a:d3:f0:f5:83:99:10:4b:25:53:e6:9c:b1:ac:cb:a4:b2:39:
         07:2d:ef:1d:8f:9d:ea:3e:0f:73:46:b7:92:67:41:1e:0b:c2:
         f8:f0:f3:85:04:da:bb:07:72:71:ec:fa:95:3f:32:98:23:a6:
         9a:46:f1:f4:d2:c2:8a:3a:fb:73:48:9f:cd:fd:35:cb:ac:e4:
         dd:61:cd:95:35:0d:6b:a6:b4:42:4b:fc:1b:e6:9c:f8:f9:60:
         f0:8b:14:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBKAUR1A4ElpHMYxpCEU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjUwODIyMjMwMjA5WhcNMjUwODIzMjMwMjA5WjAzMTEwLwYDVQQD
EyhkNWYzODhkMGM3YTJhMTdkNTQzMzJlNzZhZjJmZmEyZDE1OTc2ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZsRrs7AQeuL/oxS9yR9c5+HSaDJ
qMm2G1K4XWz5q3FU9M8GXk6+yxwjKg6hO0t5ZzaEGjDO5CR911H1NhrpR1HGS/FC
WC1smwK/QamQr/neoLUJv0UI/n1IhhSdd1mH+XjFr83bZOyuSsra2mcrJdC3mqWe
DO1bvuwVINJZ0DSoA4ZwC3rZLU0Ra3QZNK+lXU5YKQFRhlSR76uziJhtauBJd/UB
AQx1wUxRxkKyuMxyLqpmZnnoWu+nCy4ea9UgRw12R7AQQ8cHGM+GhBGcvq1PndVX
sAIiuaLWI1qEds39O/qVUhKZZ6s7GEUKkZgoh6b1oiRX5OWWlLCTiFDAIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXziNDHoqF9VDMudq8v+i0Vl20tMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYuWDG3I
YSH6PoM5KFtNMP+0WZgtnW9DgvR33KV7QHWGb/s7mV4p2pdHYyzMNhD/Vu+mZAu0
IZGx0U587baEEt0cn4O7wicjsBPTCShoaTdQegY/xIoUvPKEzmLHjd+slKZXzw7v
4yK5GKwbWuOGm6/nUttRqfs5vla3iOrBdRzQyv6lb5I3fOlKz9fnWfhk44Tkz2qA
mjrEYKme9QQraF/+OtPw9YOZEEslU+acsazLpLI5By3vHY+d6j4Pc0a3kmdBHgvC
+PDzhQTauwdycez6lT8ymCOmmkbx9NLCijr7c0ifzf01y6zk3WHNlTUNa6a0Qkv8
G+ac+Plg8IsUzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:40 2025 by rpki-client