Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File:                     _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier:          3KUZFaEzqNVqffhP8pz8uJE7PA9lZHnpMb21GKIp7Og=
Subject key identifier:   87:9E:F4:B5:E8:97:0B:24:8B:42:0B:E4:EE:84:F2:9D:F0:72:99:F5
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       0198D4748B2A38D05B5D62BB0521654EE85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number:          13F9
Signing time:             Sat 23 Aug 2025 01:04:24 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:24 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:24 +0000
Files and hashes:         1: Jaf-Nc0O1GOCePBZlGQ18UYp4xo.roa (hash: 4lquctxZybthnn7HIcusM8tbPg35K5u3vKHWESNtRoo=)
                          2: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: G/vcDfjqVVEXijvYs+IPOj7NOkgDKZ2nVjROwbM4qrM=)
                          3: f7S9xAXMtoHXIWXeQsykpctQxNM.roa (hash: Q4hA/wIKEkwP/Vj65aZ2uO4MqJnj/mjQP7x/ZVfd3Uc=)
                          4: xThsddYizU9zce14GHgo8DJEm0M.roa (hash: xTnNSblE9F5a4BVdVV24fpOa0j64fQcjoHWF3jqeK84=)
                          5: xuTFaPBZlRCNPxPmstQBZKmKPnU.roa (hash: sRHH2//YW4/9Ra0qA3kCbbxZqx+E6+W61I8MRO4kS6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:8b:2a:38:d0:5b:5d:62:bb:05:21:65:4e:e8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Aug 23 01:04:24 2025 GMT
            Not After : Aug 24 01:04:24 2025 GMT
        Subject: CN=879ef4b5e8970b248b420be4ee84f29df07299f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:55:8f:66:bc:9a:47:ef:d8:52:6c:88:66:
                    b2:6a:8b:67:4b:30:47:83:7d:1b:c4:6e:56:77:42:
                    19:75:2b:48:76:7d:a2:df:e7:04:da:2b:51:15:46:
                    55:c7:41:3e:0e:52:61:14:82:43:d7:04:b2:e0:8b:
                    74:21:ae:a4:cc:f1:cc:ff:34:b5:ca:bb:4a:8e:87:
                    14:ae:a1:af:75:3c:1f:ef:72:d2:c3:dd:44:c7:7d:
                    cd:ac:a1:b2:d6:c7:bf:cc:94:9e:c8:1a:f6:58:57:
                    43:1c:50:1f:b8:c6:f9:65:a9:45:6c:82:9c:a9:d6:
                    8d:01:21:20:48:c4:da:36:84:0c:0b:be:e7:8d:fa:
                    a3:b0:41:07:9e:de:e9:10:00:9c:7d:79:0e:b3:8e:
                    8a:14:d2:5d:d4:4d:9d:65:ee:a3:61:41:ad:cc:20:
                    08:b5:24:16:04:4c:e3:e1:ae:32:a7:0a:08:4e:69:
                    04:73:02:a8:de:b5:d5:bd:f7:cc:a3:37:4a:ed:e7:
                    f9:56:6a:6a:1c:7e:1c:63:0c:28:4b:1e:76:27:dc:
                    a3:91:8b:16:d2:bc:a3:0a:23:c7:d7:4a:be:b7:81:
                    7a:76:aa:21:a3:ef:42:dd:ac:4d:42:de:8b:ca:e4:
                    b2:cc:35:d5:43:3f:2e:6a:42:9b:44:23:b9:01:97:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:F4:B5:E8:97:0B:24:8B:42:0B:E4:EE:84:F2:9D:F0:72:99:F5
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:52:16:06:0e:95:42:7d:bf:c2:fa:d5:cc:a7:14:6a:32:
         d4:66:0b:35:a2:ae:6f:0f:f5:4e:5d:ac:50:e6:44:c7:68:4e:
         e0:41:5a:9a:c1:d7:d4:06:a5:d7:bd:8e:9d:dc:8b:81:36:ed:
         a8:2a:92:be:14:5e:b9:70:0c:11:2b:5b:04:68:1f:6c:39:71:
         ec:47:2e:4a:31:b4:8b:49:44:cd:90:ce:a8:ac:e9:6a:30:e6:
         a2:01:42:39:f0:da:92:3f:39:de:14:03:f5:0d:5e:88:45:d9:
         9c:24:82:aa:2b:14:d2:ee:a5:a2:ef:01:73:d8:42:f1:59:0c:
         71:6d:df:96:fe:f5:a6:72:bf:2e:27:0f:c5:25:f1:57:df:7d:
         5e:63:7c:00:cc:39:4a:9f:23:44:cb:b8:73:4f:20:97:87:fa:
         30:70:4d:2d:e1:bc:11:04:9b:c1:ff:cc:78:28:92:d3:c6:f7:
         68:55:4c:88:bc:68:be:8f:6d:d2:ea:5a:81:3e:46:a0:f5:e0:
         a1:41:60:d7:1e:da:64:16:e5:f4:d3:3a:14:c4:22:4c:f7:5d:
         55:d7:05:fd:65:26:54:3e:98:22:65:c7:ca:bc:08:35:6f:3d:
         fd:0d:46:e8:2f:f4:44:6b:da:9c:bb:f7:5a:b4:35:09:e6:5a:
         13:37:aa:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdIsqONBbXWK7BSFlTuhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTRhYjJkNDgxY2YxNjIyYTJjNTIxODNhYjRmNWE5MzBh
NGFlNDEwHhcNMjUwODIzMDEwNDI0WhcNMjUwODI0MDEwNDI0WjAzMTEwLwYDVQQD
Eyg4NzllZjRiNWU4OTcwYjI0OGI0MjBiZTRlZTg0ZjI5ZGYwNzI5OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwRVj2a8mkfv2FJsiGayaotnSzBH
g30bxG5Wd0IZdStIdn2i3+cE2itRFUZVx0E+DlJhFIJD1wSy4It0Ia6kzPHM/zS1
yrtKjocUrqGvdTwf73LSw91Ex33NrKGy1se/zJSeyBr2WFdDHFAfuMb5ZalFbIKc
qdaNASEgSMTaNoQMC77njfqjsEEHnt7pEACcfXkOs46KFNJd1E2dZe6jYUGtzCAI
tSQWBEzj4a4ypwoITmkEcwKo3rXVvffMozdK7ef5VmpqHH4cYwwoSx52J9yjkYsW
0ryjCiPH10q+t4F6dqoho+9C3axNQt6LyuSyzDXVQz8uakKbRCO5AZdNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIee9LXolwski0IL5O6E8p3wcpn1MB8GA1UdIwQY
MBaAFP5Uqy1IHPFiKixSGDq09akwpK5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYt
MWIxMzYyYjliNmEyLzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80ZDVlNGEtOGExNi00NTM3LWJlMWYtMWIxMzYyYjliNmEy
LzEvX2xTckxVZ2M4V0lxTEZJWU9yVDFxVENrcmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE5SFgYO
lUJ9v8L61cynFGoy1GYLNaKubw/1Tl2sUOZEx2hO4EFamsHX1Aal172OndyLgTbt
qCqSvhReuXAMEStbBGgfbDlx7EcuSjG0i0lEzZDOqKzpajDmogFCOfDakj853hQD
9Q1eiEXZnCSCqisU0u6lou8Bc9hC8VkMcW3flv71pnK/LicPxSXxV999XmN8AMw5
Sp8jRMu4c08gl4f6MHBNLeG8EQSbwf/MeCiS08b3aFVMiLxovo9t0upagT5GoPXg
oUFg1x7aZBbl9NM6FMQiTPddVdcF/WUmVD6YImXHyrwINW89/Q1G6C/0RGvanLv3
WrQ1CeZaEzeqcQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:46 2025 by rpki-client