Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File:                     67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier:          mAuiQMFevyLneo6ipM/SZVxDVCujV3bNTXDMAuLvIzI=
Subject key identifier:   EE:9F:D0:EF:DA:1B:08:7A:F2:E8:83:F1:B5:09:06:E5:57:95:BB:18
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer:       /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial:       0198D4045E0952C578958E7C4094338DC0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number:          0DAB
Signing time:             Fri 22 Aug 2025 23:01:52 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:52 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:52 +0000
Files and hashes:         1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: u3lA/d6yon2XwvHmx6o06bPEukAs8weXybv42DgYmGs=)
                          2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:5e:09:52:c5:78:95:8e:7c:40:94:33:8d:c0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
        Validity
            Not Before: Aug 22 23:01:52 2025 GMT
            Not After : Aug 23 23:01:52 2025 GMT
        Subject: CN=ee9fd0efda1b087af2e883f1b50906e55795bb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:aa:6f:5b:b4:a2:de:55:44:5c:77:4f:a2:ae:
                    3c:31:7f:15:da:0e:b5:8f:cd:ac:c8:6b:5b:b9:62:
                    bc:e0:b7:b1:36:4e:4b:c5:9f:33:9c:fc:3c:7e:e3:
                    4e:2f:53:b4:64:fa:03:8e:11:50:57:d7:d3:83:da:
                    10:0c:c4:47:52:e5:fd:4e:b6:c1:6c:ca:cc:2f:88:
                    49:77:5e:dc:51:52:bd:e7:f1:97:25:4c:22:9e:06:
                    24:f0:63:29:af:d8:41:8f:c0:18:e3:36:c3:c5:26:
                    e5:a7:f4:15:9d:aa:c2:12:eb:86:2c:b6:06:e4:d0:
                    40:03:27:38:10:3e:59:30:8d:31:25:ba:3e:17:19:
                    06:06:f7:d2:5e:b6:a5:e8:14:c6:0c:a1:e1:ea:6d:
                    43:0e:fd:23:93:d5:98:9c:5c:11:90:cb:5b:5b:29:
                    62:e7:2f:85:a3:17:1c:a6:b0:8a:8c:fb:6f:2e:c9:
                    4d:df:a4:f6:1f:12:bc:5e:5e:0d:cf:f7:0a:b8:4b:
                    3e:e7:0a:e9:c6:00:a8:82:ca:0a:6e:05:9e:32:b6:
                    36:64:dc:7f:a5:f2:02:f0:44:d9:f7:db:b8:6d:35:
                    ea:66:66:c7:86:1b:25:6c:52:7a:16:c5:ab:62:c9:
                    a0:8b:22:70:27:8d:24:1e:fb:8b:d8:7b:50:50:1d:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:D0:EF:DA:1B:08:7A:F2:E8:83:F1:B5:09:06:E5:57:95:BB:18
            X509v3 Authority Key Identifier:
                keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:a9:76:72:1e:14:6b:cd:7a:c1:db:da:68:9e:fd:64:67:
         80:76:0a:5e:af:04:48:36:e8:ce:9a:83:da:2c:2b:a6:5b:2c:
         c2:c8:02:c8:74:a2:62:3f:4c:5e:af:02:c1:00:2d:df:0b:a2:
         5c:67:b5:a6:42:e6:a1:ce:b4:56:3a:a0:00:46:b7:92:2e:58:
         60:15:80:ed:02:51:16:dd:6c:cb:cb:e0:0d:df:94:d6:90:17:
         ef:f2:88:79:21:cb:5a:83:ce:6c:ac:6f:7b:84:3f:2c:55:1d:
         ea:6a:06:cb:6e:6e:65:72:82:fc:ea:67:9b:ac:e2:c8:73:bc:
         03:c7:cc:e8:4f:93:5b:bb:0f:5d:77:b9:cc:94:1b:b9:71:20:
         21:de:40:37:ec:b6:60:50:21:63:ef:38:8b:7a:96:a6:f8:a0:
         b4:0f:b5:58:30:6e:1e:05:a9:b0:db:de:d3:9d:7b:e9:7b:4b:
         80:3c:b6:b9:72:32:f4:24:d5:a4:c2:01:4d:08:98:4b:5e:f1:
         f0:d0:f8:28:73:48:75:50:90:fd:aa:09:3b:ff:3b:28:a2:e4:
         19:78:20:be:59:13:ed:cd:d7:31:b6:4d:e2:6f:0c:0c:d8:4c:
         9e:9c:3b:ec:7a:a8:1a:5a:d3:15:bf:ae:6e:d3:cf:d2:75:a9:
         16:87:c7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBF4JUsV4lY58QJQzjcDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0
MWExNmEwHhcNMjUwODIyMjMwMTUyWhcNMjUwODIzMjMwMTUyWjAzMTEwLwYDVQQD
EyhlZTlmZDBlZmRhMWIwODdhZjJlODgzZjFiNTA5MDZlNTU3OTViYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KpvW7Si3lVEXHdPoq48MX8V2g61
j82syGtbuWK84LexNk5LxZ8znPw8fuNOL1O0ZPoDjhFQV9fTg9oQDMRHUuX9TrbB
bMrML4hJd17cUVK95/GXJUwingYk8GMpr9hBj8AY4zbDxSblp/QVnarCEuuGLLYG
5NBAAyc4ED5ZMI0xJbo+FxkGBvfSXral6BTGDKHh6m1DDv0jk9WYnFwRkMtbWyli
5y+FoxccprCKjPtvLslN36T2HxK8Xl4Nz/cKuEs+5wrpxgCogsoKbgWeMrY2ZNx/
pfIC8ETZ99u4bTXqZmbHhhslbFJ6FsWrYsmgiyJwJ40kHvuL2HtQUB3SkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6f0O/aGwh68uiD8bUJBuVXlbsYMB8GA1UdIwQY
MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt
MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk
LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1SpdnIe
FGvNesHb2mie/WRngHYKXq8ESDbozpqD2iwrplsswsgCyHSiYj9MXq8CwQAt3wui
XGe1pkLmoc60VjqgAEa3ki5YYBWA7QJRFt1sy8vgDd+U1pAX7/KIeSHLWoPObKxv
e4Q/LFUd6moGy25uZXKC/Opnm6ziyHO8A8fM6E+TW7sPXXe5zJQbuXEgId5AN+y2
YFAhY+84i3qWpvigtA+1WDBuHgWpsNve05176XtLgDy2uXIy9CTVpMIBTQiYS17x
8ND4KHNIdVCQ/aoJO/87KKLkGXggvlkT7c3XMbZN4m8MDNhMnpw77HqoGlrTFb+u
btPP0nWpFofHfA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:49 2025 by rpki-client