Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File:                     nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier:          KkpTAopPevKjWWFLVNtlAzTYfdGcY1gxXFNzMfwyu/0=
Subject key identifier:   C7:51:26:01:A1:38:36:21:60:01:51:A4:F2:AF:53:90:7E:E0:03:09
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer:       /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial:       0198D6614EE89702FB38CC4F23049A16E54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number:          07D0
Signing time:             Sat 23 Aug 2025 10:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:38 +0000
Files and hashes:         1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
                          2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: JMIrHEHfVQ8gmCZtl2s8KkGVM/VtxyBFGXxDfnq17J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:4e:e8:97:02:fb:38:cc:4f:23:04:9a:16:e5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
        Validity
            Not Before: Aug 23 10:02:38 2025 GMT
            Not After : Aug 24 10:02:38 2025 GMT
        Subject: CN=c7512601a1383621600151a4f2af53907ee00309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:da:f2:98:75:f6:eb:a5:f5:7e:c6:74:3a:
                    25:44:14:f5:e7:c2:07:47:56:e3:c7:bf:59:d4:40:
                    ae:02:2e:cc:a8:37:e3:3b:65:65:cc:50:e4:a0:2e:
                    0f:38:07:dd:96:70:98:a0:0c:f4:54:69:5b:15:a6:
                    01:83:56:77:0d:8f:11:44:61:69:f8:e1:81:ff:d6:
                    dd:20:ea:ef:55:13:12:c3:16:b3:a6:e4:a9:50:f6:
                    56:81:b9:90:9d:cb:ad:66:51:c8:4f:74:6f:fc:32:
                    7c:29:25:19:db:a0:9f:85:e6:ca:20:24:c7:a0:3b:
                    2e:17:74:1d:be:1b:78:a3:46:97:38:b8:fe:33:7b:
                    c4:ce:10:a4:d6:49:3c:b2:62:a5:77:de:3c:b9:57:
                    fd:37:2b:e1:2d:2a:53:fb:bb:38:09:ab:4f:8c:1b:
                    50:59:ff:5d:03:57:c1:79:0c:71:15:c9:79:84:b1:
                    31:4e:ba:14:ca:88:36:68:c6:b1:6f:77:7a:80:ea:
                    f7:97:a0:e1:a1:b9:59:99:3f:86:f5:4a:66:cf:21:
                    bb:23:80:4a:69:57:f5:f3:52:80:5d:c1:08:a9:ae:
                    7a:25:df:b8:70:a2:18:4a:42:fd:a3:7a:fd:9a:50:
                    a9:48:ee:3c:c0:e9:e6:d2:b8:b6:8a:e2:31:df:79:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:51:26:01:A1:38:36:21:60:01:51:A4:F2:AF:53:90:7E:E0:03:09
            X509v3 Authority Key Identifier:
                keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:92:c3:76:c4:94:d9:a5:bf:6e:0a:25:5a:a3:3e:7a:fa:
         90:b4:e1:75:a2:cb:af:13:eb:3b:5a:ba:1f:8a:20:3b:39:ff:
         25:47:a2:53:09:b4:7f:50:61:c4:d2:1d:60:f6:75:48:a6:9c:
         de:ad:86:84:19:8a:ff:a9:1b:85:9d:4c:5e:5f:28:3d:a3:04:
         87:6c:bf:6a:d5:58:62:2b:0f:a0:34:16:85:d9:c7:6b:f3:b3:
         ed:11:b4:c0:b3:b9:94:a5:5a:7d:cd:8f:f9:0d:c1:b3:49:17:
         74:c4:ae:87:56:a0:e8:4e:1c:ea:e2:11:b2:2a:4b:3c:ca:53:
         00:e8:af:24:4d:27:a3:65:a0:0c:2a:d6:4a:d3:13:3e:d1:a7:
         c2:0d:80:19:ed:2a:1d:ac:a8:42:df:f5:11:0f:01:c7:be:08:
         e3:36:90:72:31:8b:f5:28:a1:68:05:2b:7e:35:68:45:be:7d:
         27:77:e0:f7:4a:f4:8f:49:9a:22:cd:c5:54:3f:94:8f:6a:0e:
         b7:04:14:cd:27:fa:bf:5a:8d:c2:3a:85:97:bf:d9:0f:2a:b4:
         be:22:3a:bb:57:f1:f6:f7:b6:0d:1f:c1:a5:cb:07:fd:2b:6d:
         9b:7e:10:4e:a0:fc:12:3b:a0:74:ca:98:43:5f:b4:67:63:ff:
         fb:c5:46:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYU7olwL7OMxPIwSaFuVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmI3N2JhYjQzOGE5M2QzNGQ5ZDVjMGE4ZTBiOWVmMzJh
ZTVkYTAwHhcNMjUwODIzMTAwMjM4WhcNMjUwODI0MTAwMjM4WjAzMTEwLwYDVQQD
EyhjNzUxMjYwMWExMzgzNjIxNjAwMTUxYTRmMmFmNTM5MDdlZTAwMzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyna8ph19uul9X7GdDolRBT158IH
R1bjx79Z1ECuAi7MqDfjO2VlzFDkoC4POAfdlnCYoAz0VGlbFaYBg1Z3DY8RRGFp
+OGB/9bdIOrvVRMSwxazpuSpUPZWgbmQncutZlHIT3Rv/DJ8KSUZ26CfhebKICTH
oDsuF3Qdvht4o0aXOLj+M3vEzhCk1kk8smKld948uVf9NyvhLSpT+7s4CatPjBtQ
Wf9dA1fBeQxxFcl5hLExTroUyog2aMaxb3d6gOr3l6DhoblZmT+G9UpmzyG7I4BK
aVf181KAXcEIqa56Jd+4cKIYSkL9o3r9mlCpSO48wOnm0ri2iuIx33kw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdRJgGhODYhYAFRpPKvU5B+4AMJMB8GA1UdIwQY
MBaAFJy7d7q0OKk9NNnVwKjgue8yrl2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODkt
OTBkNThjNjAzMjU2LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODktOTBkNThjNjAzMjU2
LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAis+Sw3bE
lNmlv24KJVqjPnr6kLThdaLLrxPrO1q6H4ogOzn/JUeiUwm0f1BhxNIdYPZ1SKac
3q2GhBmK/6kbhZ1MXl8oPaMEh2y/atVYYisPoDQWhdnHa/Oz7RG0wLO5lKVafc2P
+Q3Bs0kXdMSuh1ag6E4c6uIRsipLPMpTAOivJE0no2WgDCrWStMTPtGnwg2AGe0q
HayoQt/1EQ8Bx74I4zaQcjGL9SihaAUrfjVoRb59J3fg90r0j0maIs3FVD+Uj2oO
twQUzSf6v1qNwjqFl7/ZDyq0viI6u1fx9ve2DR/BpcsH/Sttm34QTqD8EjugdMqY
Q1+0Z2P/+8VG5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:25 2025 by rpki-client