Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File:                     MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier:          AiR9Kk412v5SWUbMwtdyH4MYZDFHsTFYJQhrZAqRjEM=
Subject key identifier:   EE:D0:E4:08:79:15:82:8E:DC:C4:E2:DC:B8:CE:05:35:F9:03:DD:5B
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer:       /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial:       0198D47261DFDAF94CCAE864AB1DE663F86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 01:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:02 +0000
Files and hashes:         1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: 3eLX/Zal5M/TmKldvIrPUZWr2vXwk3/PsRQ+5DwS0vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:61:df:da:f9:4c:ca:e8:64:ab:1d:e6:63:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
        Validity
            Not Before: Aug 23 01:02:02 2025 GMT
            Not After : Aug 24 01:02:02 2025 GMT
        Subject: CN=eed0e4087915828edcc4e2dcb8ce0535f903dd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:06:73:1c:63:d6:07:a0:9b:fa:ed:51:e9:b1:
                    5d:c0:36:14:1e:9d:81:7e:bf:df:9e:80:92:56:d1:
                    cb:6d:d8:a8:19:da:52:b2:49:0d:ad:5a:83:e9:04:
                    0d:f2:48:df:5b:ca:c0:1d:08:66:82:73:8f:20:42:
                    68:7b:7e:8e:4e:1d:2b:44:6c:77:43:51:72:b7:b8:
                    0d:fc:79:36:cc:66:7e:fd:6b:03:9c:a4:cb:c2:81:
                    17:58:84:37:e9:9f:3b:35:f2:0d:77:bf:cd:84:46:
                    b5:44:bd:55:78:10:48:d7:46:62:4d:1a:6f:17:4b:
                    3f:7e:96:4c:5b:ab:64:b2:db:10:09:a3:c3:5d:4b:
                    35:84:78:d9:ec:f5:6d:ed:07:6b:a1:49:6c:3a:ea:
                    bf:69:ec:dc:f7:40:2a:40:c5:da:e1:8f:e3:fa:ae:
                    f3:5a:84:56:f3:7f:a4:03:12:ad:00:9b:15:28:5f:
                    9d:9d:71:8d:e9:aa:07:bf:3f:eb:67:be:21:af:2e:
                    0d:7b:26:9c:8f:18:ce:0c:29:5d:f2:3c:1c:35:5d:
                    82:bf:b7:ff:7d:17:1a:9e:d7:74:7a:80:f4:e1:35:
                    e5:82:9e:27:81:8c:f8:13:4c:f6:88:c6:4a:42:06:
                    b7:98:4f:2f:7d:88:dd:47:0c:a9:42:ce:98:5e:13:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D0:E4:08:79:15:82:8E:DC:C4:E2:DC:B8:CE:05:35:F9:03:DD:5B
            X509v3 Authority Key Identifier:
                keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:c2:4c:f5:b7:70:ae:31:70:d2:73:36:36:14:1d:bd:7f:
         16:9f:20:11:20:22:75:42:76:f5:61:26:14:17:35:bf:af:ee:
         c9:c3:69:58:78:b2:73:6c:87:3a:a5:79:2d:39:6d:21:c0:27:
         e3:1c:08:fb:86:9f:9d:2c:f9:4b:bf:2b:1d:5b:64:2c:a7:89:
         32:18:b5:a3:56:01:98:dd:4f:c7:a9:e6:67:a7:82:ff:42:90:
         08:db:b6:a0:b9:1f:38:b2:ff:b3:3b:24:1e:4a:77:4d:26:08:
         a0:12:42:74:a8:3e:0e:01:13:89:5c:44:b2:64:9f:81:a4:6b:
         8b:70:cf:e2:95:95:6b:2d:b4:e0:d3:b4:e3:3e:0b:fe:40:01:
         cc:e5:bc:89:40:68:35:b5:82:94:df:be:0f:ce:95:b2:d6:b6:
         22:9c:ce:1b:69:b9:1d:10:46:78:dc:1b:08:c6:96:34:9a:99:
         48:33:2e:ed:c9:61:40:2d:7b:91:0d:c3:38:a1:74:14:8b:97:
         42:46:d2:46:3d:99:a7:ae:f1:d5:4e:cb:93:90:a7:b8:89:41:
         d0:9f:d2:cf:28:67:d3:b7:ea:4f:a3:37:1a:bc:78:57:fa:01:
         95:37:d0:a5:ea:73:fd:42:78:5f:0c:c2:43:dd:15:58:7d:05:
         c2:24:11:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcmHf2vlMyuhkqx3mY/hrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNGFhMjU4MjI0ZmEzYzY3YmFkMWYyYjlmOWIyOGE2NWQ5
NWZlYWUwHhcNMjUwODIzMDEwMjAyWhcNMjUwODI0MDEwMjAyWjAzMTEwLwYDVQQD
EyhlZWQwZTQwODc5MTU4MjhlZGNjNGUyZGNiOGNlMDUzNWY5MDNkZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QZzHGPWB6Cb+u1R6bFdwDYUHp2B
fr/fnoCSVtHLbdioGdpSskkNrVqD6QQN8kjfW8rAHQhmgnOPIEJoe36OTh0rRGx3
Q1Fyt7gN/Hk2zGZ+/WsDnKTLwoEXWIQ36Z87NfINd7/NhEa1RL1VeBBI10ZiTRpv
F0s/fpZMW6tkstsQCaPDXUs1hHjZ7PVt7QdroUlsOuq/aezc90AqQMXa4Y/j+q7z
WoRW83+kAxKtAJsVKF+dnXGN6aoHvz/rZ74hry4NeyacjxjODCld8jwcNV2Cv7f/
fRcantd0eoD04TXlgp4ngYz4E0z2iMZKQga3mE8vfYjdRwypQs6YXhPXVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7Q5Ah5FYKO3MTi3LjOBTX5A91bMB8GA1UdIwQY
MBaAFDBKolgiT6PGe60fK5+bKKZdlf6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgt
OTNiYmIxYmEzMTZkLzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgtOTNiYmIxYmEzMTZk
LzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMTCTPW3
cK4xcNJzNjYUHb1/Fp8gESAidUJ29WEmFBc1v6/uycNpWHiyc2yHOqV5LTltIcAn
4xwI+4afnSz5S78rHVtkLKeJMhi1o1YBmN1Px6nmZ6eC/0KQCNu2oLkfOLL/szsk
Hkp3TSYIoBJCdKg+DgETiVxEsmSfgaRri3DP4pWVay204NO04z4L/kABzOW8iUBo
NbWClN++D86Vsta2IpzOG2m5HRBGeNwbCMaWNJqZSDMu7clhQC17kQ3DOKF0FIuX
QkbSRj2Zp67x1U7Lk5CnuIlB0J/Szyhn07fqT6M3Grx4V/oBlTfQpepz/UJ4XwzC
Q90VWH0FwiQROw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:39 2025 by rpki-client