Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          MZhowq8TF2w/ar2JAMPj/0U4XfFS3tTLlJ4GtRYjpoM=
Subject key identifier:   37:75:32:91:80:CA:16:95:1F:76:03:2A:66:7E:1A:48:4A:74:2B:41
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       0198D4E0D026FB29A268C983F0E9B5718754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          1644
Signing time:             Sat 23 Aug 2025 03:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:39 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: aLW/p6ncs8uDxp4uKcpYwOzI2PgKc7if9C1JKs7EHB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:d0:26:fb:29:a2:68:c9:83:f0:e9:b5:71:87:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: Aug 23 03:02:39 2025 GMT
            Not After : Aug 24 03:02:39 2025 GMT
        Subject: CN=3775329180ca16951f76032a667e1a484a742b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:bd:d1:38:27:3c:1e:d9:6c:e0:fc:99:ac:
                    4a:eb:6a:79:98:3d:d5:c7:2e:4a:c8:75:75:2b:f6:
                    44:85:e4:8d:7c:9f:e8:27:5e:32:dc:dd:18:97:7b:
                    cf:3a:c1:7b:63:7d:0c:82:74:47:5d:bb:0f:52:ce:
                    81:90:27:c2:5b:c8:43:d9:5a:be:35:93:c1:46:3a:
                    50:e4:c5:15:ed:35:92:18:2b:c8:f3:12:48:f9:8c:
                    9a:68:18:ca:73:f7:a6:b4:f2:1a:53:7f:67:f7:b8:
                    cd:42:1d:49:2e:ae:64:66:49:c6:77:f2:b6:4f:7b:
                    9c:e6:3c:7a:24:ab:ea:f3:b5:38:c0:d3:43:a6:10:
                    22:d6:47:e5:28:fc:5c:8e:6e:67:3b:2e:29:d7:3a:
                    e7:d2:a9:40:e3:48:d3:b7:d0:03:33:14:9d:66:5a:
                    38:ab:30:f3:e1:29:dd:65:f5:ab:4e:11:f7:c5:30:
                    b9:99:4d:70:d0:91:ea:bd:5b:43:8e:f4:01:07:db:
                    2d:1e:c0:af:82:b1:04:8f:a4:82:2e:ef:cf:c9:31:
                    fd:45:77:98:25:7c:94:1d:2f:ed:1e:2b:8e:31:59:
                    d4:a5:db:dc:19:d2:34:e0:ae:f7:45:26:71:ef:20:
                    d3:89:a4:61:57:40:4e:70:8d:cc:50:11:b8:de:64:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:75:32:91:80:CA:16:95:1F:76:03:2A:66:7E:1A:48:4A:74:2B:41
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:b5:fb:1f:b6:c7:a8:da:07:9f:35:98:58:f2:68:5d:5f:
         18:08:24:e8:4b:53:ea:a6:d0:89:ed:78:9c:2f:f2:34:65:ce:
         5c:31:2c:69:a5:e1:d7:bf:65:b8:ae:9c:d8:2f:c8:7b:09:83:
         61:fa:4b:b3:8d:d5:61:3c:c6:41:fb:ff:1d:1b:27:86:0a:dc:
         15:c0:74:f7:3c:e1:6a:81:6f:07:49:2a:11:57:80:98:92:87:
         cd:c5:89:73:62:d6:e7:eb:82:bd:91:43:6c:b9:42:98:46:cf:
         63:83:f7:8d:d6:ad:47:5a:ce:9d:b9:67:b6:84:36:5d:d5:2f:
         1d:1b:47:1a:9d:1a:eb:db:bb:3c:d1:57:44:e0:88:9a:2d:30:
         f9:9d:f4:88:56:67:74:0a:8d:6c:97:07:96:d2:27:c1:08:1b:
         49:4c:72:2b:a8:ea:fe:1a:cf:45:02:95:c6:c5:c3:ae:1f:ec:
         b6:1e:ff:be:4c:86:84:92:ed:5a:8e:30:8e:e0:1a:de:d0:4d:
         24:65:7b:46:be:9d:68:5a:93:57:ea:ac:db:2f:69:20:33:da:
         5c:d9:24:e3:2b:ad:77:f2:e1:c8:33:dd:0c:dd:0e:e0:52:46:
         be:06:ef:6f:4d:7b:a6:02:38:33:11:0c:92:3e:54:c7:b8:3f:
         2d:93:55:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4NAm+ymiaMmD8Om1cYdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDc5NGY5OTZhYzVhM2YwMmI1NmE3NWMxNDk0OTQwM2Qw
MmFjNjQwHhcNMjUwODIzMDMwMjM5WhcNMjUwODI0MDMwMjM5WjAzMTEwLwYDVQQD
EygzNzc1MzI5MTgwY2ExNjk1MWY3NjAzMmE2NjdlMWE0ODRhNzQyYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbG90TgnPB7ZbOD8maxK62p5mD3V
xy5KyHV1K/ZEheSNfJ/oJ14y3N0Yl3vPOsF7Y30MgnRHXbsPUs6BkCfCW8hD2Vq+
NZPBRjpQ5MUV7TWSGCvI8xJI+YyaaBjKc/emtPIaU39n97jNQh1JLq5kZknGd/K2
T3uc5jx6JKvq87U4wNNDphAi1kflKPxcjm5nOy4p1zrn0qlA40jTt9ADMxSdZlo4
qzDz4SndZfWrThH3xTC5mU1w0JHqvVtDjvQBB9stHsCvgrEEj6SCLu/PyTH9RXeY
JXyUHS/tHiuOMVnUpdvcGdI04K73RSZx7yDTiaRhV0BOcI3MUBG43mRzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDd1MpGAyhaVH3YDKmZ+GkhKdCtBMB8GA1UdIwQY
MBaAFNdHlPmWrFo/ArVqdcFJSUA9AqxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDAyOTYtNDNiZS00ODlmLWE4MmYt
OGQ2YjZhYjYxYjc1LzEvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZDAyOTYtNDNiZS00ODlmLWE4MmYtOGQ2YjZhYjYxYjc1
LzEvMTBlVS1aYXNXajhDdFdwMXdVbEpRRDBDckdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtK1+x+2
x6jaB581mFjyaF1fGAgk6EtT6qbQie14nC/yNGXOXDEsaaXh179luK6c2C/IewmD
YfpLs43VYTzGQfv/HRsnhgrcFcB09zzhaoFvB0kqEVeAmJKHzcWJc2LW5+uCvZFD
bLlCmEbPY4P3jdatR1rOnblntoQ2XdUvHRtHGp0a69u7PNFXROCImi0w+Z30iFZn
dAqNbJcHltInwQgbSUxyK6jq/hrPRQKVxsXDrh/sth7/vkyGhJLtWo4wjuAa3tBN
JGV7Rr6daFqTV+qs2y9pIDPaXNkk4yutd/LhyDPdDN0O4FJGvgbvb017pgI4MxEM
kj5Ux7g/LZNVpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:34 2025 by rpki-client