Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          ML0yBUNn/KlleEjAdsbhURVh74uXBWhmiluAWXgccm0=
Subject key identifier:   E9:CE:64:82:2B:75:DE:35:FD:85:76:5D:BE:98:93:91:B6:AF:85:2A
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       0198D5F1D5511B62153A499651A4A06F1709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 08:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:52 +0000
Files and hashes:         1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: LL5T2nlBLv4EufH1KuXPkXKd2XX3C63obbIKBx2Kzjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:d5:51:1b:62:15:3a:49:96:51:a4:a0:6f:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Aug 23 08:00:52 2025 GMT
            Not After : Aug 24 08:00:52 2025 GMT
        Subject: CN=e9ce64822b75de35fd85765dbe989391b6af852a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:64:15:98:0a:ba:09:2c:29:f3:95:8d:2f:
                    3b:8c:ca:f2:8d:fa:7d:9e:da:f0:12:07:d0:42:a6:
                    87:1a:05:4c:99:c1:82:fd:51:ec:98:86:f7:36:ca:
                    af:fd:28:1f:71:a3:f2:ef:ce:5f:0e:28:38:0a:cb:
                    c4:94:56:29:cf:7b:00:c2:70:3c:26:f6:b5:1a:22:
                    b6:cb:fa:89:7a:76:a0:bf:b4:1c:5b:b8:44:39:3a:
                    86:73:20:c1:bb:88:d5:dc:c0:27:1e:e4:8f:a6:19:
                    09:0a:58:21:d3:ec:e2:6d:a6:54:e2:8f:1d:b1:25:
                    8b:04:a3:c2:91:a7:43:85:da:87:99:db:6f:f7:6b:
                    3a:62:f8:61:17:13:5c:11:33:cd:48:9a:55:65:22:
                    98:63:65:4b:e3:81:21:64:12:ce:0b:52:9e:b2:a7:
                    4d:a8:ea:1c:01:cf:16:80:2a:2e:b6:c2:c1:d8:fd:
                    79:24:80:18:e9:ea:bb:1c:b6:70:c0:a5:8e:81:c4:
                    e2:27:53:2d:15:0c:18:18:7b:e3:91:a2:97:58:bf:
                    4f:53:25:96:50:48:91:9e:fb:d6:5c:eb:ec:e2:16:
                    1c:0a:cf:73:40:ab:b5:79:1e:9b:cf:33:61:49:24:
                    e9:33:de:85:d2:29:a9:55:68:4d:04:14:45:98:48:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:64:82:2B:75:DE:35:FD:85:76:5D:BE:98:93:91:B6:AF:85:2A
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:d6:b4:af:ce:51:d4:60:1d:e3:92:d0:b2:8b:b8:14:7e:
         cb:de:57:5e:c0:a2:0d:05:32:40:1b:d3:42:0c:54:da:d8:76:
         bf:e5:a4:1c:d1:a1:9c:c7:36:a4:04:53:43:38:f9:9c:4a:21:
         c3:2b:0a:73:4c:ab:42:97:61:06:a2:7f:15:2b:53:e4:02:1c:
         e2:df:84:39:46:41:93:49:ef:1f:f8:65:45:84:fd:9e:b2:a9:
         9f:7e:2f:9e:13:e9:e3:36:eb:27:f2:d8:79:62:59:3b:94:0b:
         60:3e:75:e9:e0:a0:7d:0f:a2:54:be:5d:d2:1c:b8:c2:b4:09:
         1d:24:05:54:e3:1a:e4:be:9b:e7:8d:f9:84:8d:36:ba:7f:f3:
         e6:af:80:05:0d:ea:8c:51:1b:fc:fe:e7:42:5f:f9:7c:4c:ff:
         46:a0:12:9b:a7:c0:68:73:9c:68:4e:1a:b4:09:61:c1:20:e6:
         9a:d0:75:df:5b:c1:de:36:67:ca:c6:b0:eb:2f:63:5a:77:e8:
         84:d1:fc:b0:8c:f4:cb:b5:75:36:ff:3c:c3:3f:1b:e5:de:e2:
         db:06:84:1b:f4:74:20:7e:be:df:a5:14:41:b7:4d:68:4a:3f:
         6b:31:3e:e9:3c:f5:ba:d0:24:bd:99:fb:f8:ba:ad:32:80:b0:
         94:fa:94:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dVRG2IVOkmWUaSgbxcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmZiMGZjMjk4OTY1NDc2YmMxMGY1ODc5MmJmMjg2YzE0
ZDlmZjEwHhcNMjUwODIzMDgwMDUyWhcNMjUwODI0MDgwMDUyWjAzMTEwLwYDVQQD
EyhlOWNlNjQ4MjJiNzVkZTM1ZmQ4NTc2NWRiZTk4OTM5MWI2YWY4NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11FkFZgKugksKfOVjS87jMryjfp9
ntrwEgfQQqaHGgVMmcGC/VHsmIb3Nsqv/SgfcaPy785fDig4CsvElFYpz3sAwnA8
Jva1GiK2y/qJenagv7QcW7hEOTqGcyDBu4jV3MAnHuSPphkJClgh0+zibaZU4o8d
sSWLBKPCkadDhdqHmdtv92s6YvhhFxNcETPNSJpVZSKYY2VL44EhZBLOC1KesqdN
qOocAc8WgCoutsLB2P15JIAY6eq7HLZwwKWOgcTiJ1MtFQwYGHvjkaKXWL9PUyWW
UEiRnvvWXOvs4hYcCs9zQKu1eR6bzzNhSSTpM96F0impVWhNBBRFmEiLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnOZIIrdd41/YV2Xb6Yk5G2r4UqMB8GA1UdIwQY
MBaAFLC/sPwpiWVHa8EPWHkr8obBTZ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZTY3ZDAtZWNiNy00YzY2LTk5Yjgt
ODViMGU3NDc4ODU2LzEvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83ZTY3ZDAtZWNiNy00YzY2LTk5YjgtODViMGU3NDc4ODU2
LzEvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlE/WtK/O
UdRgHeOS0LKLuBR+y95XXsCiDQUyQBvTQgxU2th2v+WkHNGhnMc2pARTQzj5nEoh
wysKc0yrQpdhBqJ/FStT5AIc4t+EOUZBk0nvH/hlRYT9nrKpn34vnhPp4zbrJ/LY
eWJZO5QLYD516eCgfQ+iVL5d0hy4wrQJHSQFVOMa5L6b5435hI02un/z5q+ABQ3q
jFEb/P7nQl/5fEz/RqASm6fAaHOcaE4atAlhwSDmmtB131vB3jZnysaw6y9jWnfo
hNH8sIz0y7V1Nv88wz8b5d7i2waEG/R0IH6+36UUQbdNaEo/azE+6Tz1utAkvZn7
+LqtMoCwlPqUlg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:16 2025 by rpki-client