Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          6GPu0wc3a7ZDsoYGo6r+JkvuMV6raKc5/LhT4GDO2hY=
Subject key identifier:   42:7E:6F:E2:54:23:9B:95:03:6F:58:C5:4E:44:BF:69:C9:CA:62:A8
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       0198D7A8E6AF0E7AB1E789652F53A9437ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          13B0
Signing time:             Sat 23 Aug 2025 16:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:27 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: 9MjPbNil4YOd1IUiYIuWJRrt8XUc/8KflltkvsukAQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:e6:af:0e:7a:b1:e7:89:65:2f:53:a9:43:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: Aug 23 16:00:27 2025 GMT
            Not After : Aug 24 16:00:27 2025 GMT
        Subject: CN=427e6fe254239b95036f58c54e44bf69c9ca62a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:64:8e:25:aa:7d:ae:d9:bb:fd:92:98:5b:
                    92:e8:17:e9:72:da:4e:65:ce:a0:4a:c2:e4:7e:5d:
                    38:4e:ef:85:e8:4a:ba:ec:b2:97:e2:0f:dd:15:5c:
                    d2:b0:f2:22:d9:3f:46:e3:e1:e3:ad:cc:58:60:df:
                    53:78:74:ea:be:6e:dd:00:a3:b2:8e:23:a6:e9:2d:
                    eb:10:0e:44:ce:5f:1e:e1:33:73:3a:98:54:fc:f4:
                    46:9d:ae:cb:58:dc:c7:22:92:85:b9:a8:20:11:01:
                    c6:f7:53:07:52:a1:4f:9f:a7:26:56:29:dd:13:90:
                    7a:cb:f5:b5:a6:97:8a:42:a7:78:e6:a0:e0:3e:93:
                    51:5a:f1:6e:a0:be:64:1e:2a:40:af:d3:b5:88:ba:
                    14:98:2d:9c:cb:0e:b7:6b:df:18:cb:7b:16:91:c5:
                    97:8d:1f:c1:bf:bc:ee:a5:1a:1d:34:50:a6:9a:90:
                    73:9e:45:c1:0a:9f:04:05:6e:42:2d:5f:3d:f3:f0:
                    f0:f9:af:67:2f:3e:71:65:e5:da:1b:1f:48:69:d0:
                    b6:00:22:a8:4d:4e:a7:61:af:64:f0:14:11:d1:fb:
                    a1:dc:9c:31:5a:1b:7c:a2:e4:8b:e6:3e:90:c1:18:
                    1d:74:63:44:3e:9e:55:50:94:3a:8c:33:54:9e:a4:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7E:6F:E2:54:23:9B:95:03:6F:58:C5:4E:44:BF:69:C9:CA:62:A8
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ac:d4:b9:26:e2:16:23:0a:04:00:11:d4:8c:1e:3b:bb:8e:
         91:0c:50:28:d5:e6:99:1d:d9:70:eb:01:c3:7a:a3:67:df:12:
         b1:40:ed:3f:1a:02:db:a3:ce:2b:4b:7f:1b:6f:11:1f:44:c4:
         80:1d:b1:8f:ca:88:44:3c:22:1b:53:03:85:c3:49:6f:d5:49:
         3d:e2:ff:e8:d9:1f:d9:87:4a:78:6b:28:7d:4d:f2:86:52:71:
         15:2b:b8:59:60:b0:ee:db:32:ac:d6:ec:4d:f2:4c:36:60:5d:
         3a:c2:1e:29:bf:74:be:70:6f:89:4c:7f:49:cb:90:90:b6:72:
         e4:84:6d:11:a3:45:65:09:23:c6:28:03:fd:9f:a3:06:88:37:
         d5:62:ca:28:53:d4:17:4b:fe:5f:43:fa:c5:4e:98:d0:fb:94:
         34:27:ad:7a:d5:80:65:d4:39:a3:2d:76:09:c2:67:95:a7:44:
         c5:23:69:f5:a3:7c:92:e3:14:e5:cc:34:90:bb:11:92:33:19:
         4a:32:2b:65:c1:ef:52:dc:65:59:7d:18:69:9c:33:d9:ef:db:
         6d:1c:ab:1f:e5:67:eb:aa:0d:2e:b9:56:84:3c:cd:03:4c:eb:
         ca:c1:46:38:22:a1:69:76:40:2a:ec:0e:7b:ee:59:b9:0d:77:
         b6:d1:45:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqOavDnqx54llL1OpQ3rLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDc4MDRiMzI5MGM4OWEyZmMyMDU4NWY0MWE0NjgwY2Rk
OGRmMzEwHhcNMjUwODIzMTYwMDI3WhcNMjUwODI0MTYwMDI3WjAzMTEwLwYDVQQD
Eyg0MjdlNmZlMjU0MjM5Yjk1MDM2ZjU4YzU0ZTQ0YmY2OWM5Y2E2MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ChkjiWqfa7Zu/2SmFuS6BfpctpO
Zc6gSsLkfl04Tu+F6Eq67LKX4g/dFVzSsPIi2T9G4+HjrcxYYN9TeHTqvm7dAKOy
jiOm6S3rEA5Ezl8e4TNzOphU/PRGna7LWNzHIpKFuaggEQHG91MHUqFPn6cmVind
E5B6y/W1ppeKQqd45qDgPpNRWvFuoL5kHipAr9O1iLoUmC2cyw63a98Yy3sWkcWX
jR/Bv7zupRodNFCmmpBznkXBCp8EBW5CLV898/Dw+a9nLz5xZeXaGx9IadC2ACKo
TU6nYa9k8BQR0fuh3JwxWht8ouSL5j6QwRgddGNEPp5VUJQ6jDNUnqTcUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ+b+JUI5uVA29YxU5Ev2nJymKoMB8GA1UdIwQY
MBaAFPxHgEsykMiaL8IFhfQaRoDN2N8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQt
MTkxOTQ4Mjg4MzMwLzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wMjdkM2ItZjM2OC00ZjU0LTg0NWQtMTkxOTQ4Mjg4MzMw
LzEvX0VlQVN6S1F5Sm92d2dXRjlCcEdnTTNZM3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6zUuSbi
FiMKBAAR1IweO7uOkQxQKNXmmR3ZcOsBw3qjZ98SsUDtPxoC26POK0t/G28RH0TE
gB2xj8qIRDwiG1MDhcNJb9VJPeL/6Nkf2YdKeGsofU3yhlJxFSu4WWCw7tsyrNbs
TfJMNmBdOsIeKb90vnBviUx/ScuQkLZy5IRtEaNFZQkjxigD/Z+jBog31WLKKFPU
F0v+X0P6xU6Y0PuUNCetetWAZdQ5oy12CcJnladExSNp9aN8kuMU5cw0kLsRkjMZ
SjIrZcHvUtxlWX0YaZwz2e/bbRyrH+Vn66oNLrlWhDzNA0zrysFGOCKhaXZAKuwO
e+5ZuQ13ttFFCA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:59 2025 by rpki-client