Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          0DEQwL09hmPWyTqxXZU1H4UVDJKhbgM6K691I+67nQM=
Subject key identifier:   8C:44:52:C4:C3:F9:78:FA:5D:49:F8:49:EB:DA:AD:53:C9:DF:7C:BB
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       0198D7061CC7AEF3CDD64C42F95DD2F566A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          1093
Signing time:             Sat 23 Aug 2025 13:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:38 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: 8GWUujEB4ziaXN2nTCqzfC5kZdMVnMudzCKnlpWZeBk=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:1c:c7:ae:f3:cd:d6:4c:42:f9:5d:d2:f5:66:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Aug 23 13:02:38 2025 GMT
            Not After : Aug 24 13:02:38 2025 GMT
        Subject: CN=8c4452c4c3f978fa5d49f849ebdaad53c9df7cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:14:38:11:f7:1a:d3:41:40:74:6d:48:07:
                    ac:e8:26:14:3e:92:69:a3:0a:92:34:17:58:7d:36:
                    85:6d:fe:15:dc:d1:5b:24:87:4a:1e:1e:25:f2:aa:
                    86:23:35:d3:32:53:1a:24:51:ea:e5:31:c6:b6:f8:
                    d4:7a:7c:5c:5b:62:35:f0:9c:f8:79:5d:9d:5b:54:
                    0d:7c:c2:40:8c:df:76:e3:96:d7:ba:c4:bb:68:b5:
                    b9:8b:84:5d:7e:6c:1f:94:f4:63:c0:09:4a:99:3a:
                    01:99:a3:ad:84:e5:44:b7:a8:c3:92:e4:ee:e0:00:
                    a2:ae:4c:8b:af:24:ee:52:1e:4a:57:5e:46:ca:61:
                    77:c4:e4:fd:6b:d1:61:ab:5b:fd:72:b6:62:d4:b6:
                    e2:3a:e6:b9:50:19:f3:c3:a6:e9:64:4a:4c:bb:d5:
                    16:f9:d5:f9:b0:ce:7f:68:11:f6:e3:09:50:74:08:
                    4b:8a:11:89:f4:23:d0:17:f9:20:e6:03:b3:8f:8a:
                    b0:fd:f4:f0:38:aa:d2:6d:2b:67:0d:35:97:2e:77:
                    ac:4b:df:d4:26:04:84:a4:8d:42:11:30:ee:d7:90:
                    60:00:bd:ce:5d:07:62:58:78:09:86:05:0c:f5:fe:
                    03:dd:07:b8:c8:a9:97:2d:fa:52:bb:ca:70:09:17:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:52:C4:C3:F9:78:FA:5D:49:F8:49:EB:DA:AD:53:C9:DF:7C:BB
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:47:68:17:e0:51:76:6c:49:92:56:b4:35:36:92:04:e8:
         a6:03:52:52:84:e5:e8:eb:1d:70:03:68:40:f6:bf:71:f7:5c:
         9e:c4:4a:85:b5:93:8d:8d:65:c8:5b:0a:18:c5:fd:20:6f:ca:
         6a:db:be:51:40:25:68:38:bb:6f:c0:fe:14:81:47:db:c9:35:
         a8:7f:bd:62:65:c0:fa:25:df:0a:c3:6f:d5:fb:bf:4d:86:92:
         b5:30:33:da:9d:9e:dd:40:96:70:48:5f:3a:41:0e:e8:5e:b8:
         74:66:8d:fe:f9:58:09:74:b0:18:19:37:9c:1e:14:b2:66:2c:
         e8:bf:a6:e5:be:40:d0:f3:9a:46:f5:94:a5:4a:2b:5c:ea:a9:
         91:9e:45:e0:e2:ea:43:40:81:d6:71:e6:45:28:2e:7a:b4:6d:
         96:53:33:58:fa:84:52:8f:92:f1:a7:30:aa:14:ab:e2:d4:c4:
         78:6f:bf:76:8b:fc:33:49:cc:96:e6:9c:86:3f:a3:c9:22:b3:
         66:dc:e2:c5:7e:00:47:d5:b5:b6:63:39:c5:d8:6e:ca:81:3c:
         35:2e:ca:c2:13:04:4c:56:ff:78:02:43:e1:60:56:99:ba:8c:
         66:fc:37:fc:0a:7e:e2:67:37:58:91:07:5c:c0:3e:b6:2f:9f:
         c0:e9:26:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBhzHrvPN1kxC+V3S9WajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjUwODIzMTMwMjM4WhcNMjUwODI0MTMwMjM4WjAzMTEwLwYDVQQD
Eyg4YzQ0NTJjNGMzZjk3OGZhNWQ0OWY4NDllYmRhYWQ1M2M5ZGY3Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8QUOBH3GtNBQHRtSAes6CYUPpJp
owqSNBdYfTaFbf4V3NFbJIdKHh4l8qqGIzXTMlMaJFHq5THGtvjUenxcW2I18Jz4
eV2dW1QNfMJAjN9245bXusS7aLW5i4RdfmwflPRjwAlKmToBmaOthOVEt6jDkuTu
4ACirkyLryTuUh5KV15GymF3xOT9a9Fhq1v9crZi1LbiOua5UBnzw6bpZEpMu9UW
+dX5sM5/aBH24wlQdAhLihGJ9CPQF/kg5gOzj4qw/fTwOKrSbStnDTWXLnesS9/U
JgSEpI1CETDu15BgAL3OXQdiWHgJhgUM9f4D3Qe4yKmXLfpSu8pwCRcMNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxEUsTD+Xj6XUn4SevarVPJ33y7MB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMNHaBfg
UXZsSZJWtDU2kgTopgNSUoTl6OsdcANoQPa/cfdcnsRKhbWTjY1lyFsKGMX9IG/K
atu+UUAlaDi7b8D+FIFH28k1qH+9YmXA+iXfCsNv1fu/TYaStTAz2p2e3UCWcEhf
OkEO6F64dGaN/vlYCXSwGBk3nB4UsmYs6L+m5b5A0POaRvWUpUorXOqpkZ5F4OLq
Q0CB1nHmRSguerRtllMzWPqEUo+S8acwqhSr4tTEeG+/dov8M0nMluachj+jySKz
ZtzixX4AR9W1tmM5xdhuyoE8NS7KwhMETFb/eAJD4WBWmbqMZvw3/Ap+4mc3WJEH
XMA+ti+fwOkm9g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:19 2025 by rpki-client