Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          KqRrGhu6yoZARB5EqH/WvG3+WLPRwKMGj1k86Y1bmEs=
Subject key identifier:   9F:9D:62:D2:C0:50:A2:A5:67:D9:70:DF:B2:84:74:08:53:9F:DA:17
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       0198D8BDE544F21366890F8FEB41372184DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 21:03:00 +0000
Manifest this update:     Sat 23 Aug 2025 21:03:00 +0000
Manifest next update:     Sun 24 Aug 2025 21:03:00 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: E09JeFLWBNcg1Iswjlva8ndAxVPbUYNv2I82Z6ZkBsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bd:e5:44:f2:13:66:89:0f:8f:eb:41:37:21:84:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Aug 23 21:03:00 2025 GMT
            Not After : Aug 24 21:03:00 2025 GMT
        Subject: CN=9f9d62d2c050a2a567d970dfb2847408539fda17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:85:b4:69:02:6d:e2:e4:21:bf:39:f8:40:
                    cb:20:41:c7:98:0d:84:43:8b:62:27:9d:64:9c:0f:
                    aa:e5:33:95:60:c1:71:c6:ec:87:07:d7:32:ed:31:
                    ba:9b:da:23:4c:cb:38:38:53:93:df:5c:4a:92:37:
                    9e:4b:4d:5d:dc:bf:4d:54:98:ff:c4:62:05:a0:9c:
                    21:7c:9b:57:3d:54:b5:b5:95:ea:b9:5c:22:a9:25:
                    90:46:fb:e1:7a:0e:01:3e:95:95:cc:f5:5e:d1:e4:
                    27:60:c5:63:a2:43:c0:f1:8f:d5:c6:5d:86:9a:7f:
                    72:b5:97:05:79:52:a9:b1:81:21:17:2e:34:d8:b9:
                    40:f2:6d:30:aa:10:26:60:3a:86:cb:c0:c0:07:76:
                    68:c4:70:e7:cc:56:14:cf:f2:86:12:dd:ae:70:f8:
                    2e:97:45:47:4a:a3:c1:c2:78:70:97:96:b8:f3:e2:
                    a3:0e:66:18:e6:9e:1d:88:a0:0c:8a:e4:38:9e:98:
                    92:5d:15:6d:4a:21:11:c4:41:a7:4b:63:18:7c:b5:
                    ea:f9:2a:bb:3c:47:fb:ac:ca:15:56:d2:67:f1:fa:
                    5c:0b:1b:67:39:c7:6e:85:81:79:45:be:cd:11:1d:
                    c1:7f:36:a2:e8:01:f0:e8:65:9f:8e:62:e6:b6:ef:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:62:D2:C0:50:A2:A5:67:D9:70:DF:B2:84:74:08:53:9F:DA:17
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:df:a7:29:4f:93:7b:da:ab:76:eb:38:a2:11:0e:30:dd:
         01:a5:6e:0d:9c:8a:3b:9f:99:2a:50:df:1f:20:4f:af:eb:d5:
         3b:cd:ff:81:17:0c:e5:39:fd:d5:a7:19:82:6c:54:45:cc:be:
         48:92:1f:dd:de:e3:99:27:31:3f:35:09:9f:23:f3:2b:f6:13:
         59:77:5e:70:fb:b1:93:ec:29:10:a8:55:d8:c9:b2:12:63:84:
         1a:e5:dc:a1:99:74:ad:dc:5e:e6:3a:bc:15:d4:bb:18:71:5c:
         f6:22:d0:7b:6f:25:bb:69:e5:ab:a2:df:75:8a:3c:43:16:3b:
         b1:19:aa:11:fa:d5:62:2e:fa:5c:e1:12:44:3b:e6:54:8c:48:
         9f:cc:0a:95:59:cc:3b:7f:1f:be:7b:62:ce:bc:6a:d8:94:dc:
         7d:21:52:39:ed:e5:ee:56:32:d4:cb:75:ba:76:5a:5a:a0:f8:
         a0:44:cd:44:91:3b:b1:33:b8:5e:53:b9:54:6b:db:1b:9c:e3:
         b7:eb:71:17:40:36:68:2f:99:77:81:63:39:28:75:f6:8b:6e:
         6e:85:2d:5c:59:14:86:87:ad:9e:db:a7:cb:3b:b7:ca:9c:4a:
         58:86:e3:c9:fe:f1:e1:ed:e1:c1:67:c0:0d:69:15:2f:cd:58:
         b6:79:b8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYveVE8hNmiQ+P60E3IYTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZDMwZDY5MzI5ZDMzZjQ0MjEyYmY4NmI2OWZmMjA4ODEw
NTEwNjMwHhcNMjUwODIzMjEwMzAwWhcNMjUwODI0MjEwMzAwWjAzMTEwLwYDVQQD
Eyg5ZjlkNjJkMmMwNTBhMmE1NjdkOTcwZGZiMjg0NzQwODUzOWZkYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2seFtGkCbeLkIb85+EDLIEHHmA2E
Q4tiJ51knA+q5TOVYMFxxuyHB9cy7TG6m9ojTMs4OFOT31xKkjeeS01d3L9NVJj/
xGIFoJwhfJtXPVS1tZXquVwiqSWQRvvheg4BPpWVzPVe0eQnYMVjokPA8Y/Vxl2G
mn9ytZcFeVKpsYEhFy402LlA8m0wqhAmYDqGy8DAB3ZoxHDnzFYUz/KGEt2ucPgu
l0VHSqPBwnhwl5a48+KjDmYY5p4diKAMiuQ4npiSXRVtSiERxEGnS2MYfLXq+Sq7
PEf7rMoVVtJn8fpcCxtnOcduhYF5Rb7NER3Bfzai6AHw6GWfjmLmtu8MFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+dYtLAUKKlZ9lw37KEdAhTn9oXMB8GA1UdIwQY
MBaAFO/TDWkynTP0QhK/hraf8giBBRBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEt
ZjM3MzkyMTc3OGUxLzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEtZjM3MzkyMTc3OGUx
LzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtLfpylP
k3vaq3brOKIRDjDdAaVuDZyKO5+ZKlDfHyBPr+vVO83/gRcM5Tn91acZgmxURcy+
SJIf3d7jmScxPzUJnyPzK/YTWXdecPuxk+wpEKhV2MmyEmOEGuXcoZl0rdxe5jq8
FdS7GHFc9iLQe28lu2nlq6LfdYo8QxY7sRmqEfrVYi76XOESRDvmVIxIn8wKlVnM
O38fvntizrxq2JTcfSFSOe3l7lYy1Mt1unZaWqD4oETNRJE7sTO4XlO5VGvbG5zj
t+txF0A2aC+Zd4FjOSh19otuboUtXFkUhoetntunyzu3ypxKWIbjyf7x4e3hwWfA
DWkVL81Ytnm4uw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:53 2025 by rpki-client