Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File:                     faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier:          bTTAfvVoWYimESC1FNsy6TLiE8WJTvWjUBXmvini3Xk=
Subject key identifier:   1E:1C:B1:B0:6E:32:4E:28:98:E4:57:A3:DC:71:CB:09:16:C9:31:C1
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer:       /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial:       0198D6605656E1DF83214F945D054810B5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number:          0E38
Signing time:             Sat 23 Aug 2025 10:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:34 +0000
Files and hashes:         1: UmPdXcB87LTnfP1Vg3oW_URaukk.roa (hash: 83EUHwQ3blWBwS3edM/z7UuelSE4PX5MSdHszZ1a7QU=)
                          2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: oo7tPsut5f6kfkUxLHnw81aXtqNYkuzXqFayvS4xUFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:56:56:e1:df:83:21:4f:94:5d:05:48:10:b5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
        Validity
            Not Before: Aug 23 10:01:34 2025 GMT
            Not After : Aug 24 10:01:34 2025 GMT
        Subject: CN=1e1cb1b06e324e2898e457a3dc71cb0916c931c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:2e:ef:46:cb:a8:66:a1:be:36:af:59:bc:
                    a9:e3:19:8a:86:b3:b1:a3:8b:b2:20:07:17:8c:eb:
                    4f:12:ba:ba:37:78:28:a0:a2:2c:17:8a:8a:73:c6:
                    d0:65:0f:1f:f3:2f:2b:ae:15:c9:21:2a:5e:5a:19:
                    db:b9:bd:b6:bf:3e:cc:7f:e8:02:ad:e8:e4:57:a3:
                    61:30:09:14:b7:65:1d:5c:21:b1:ae:08:2f:34:8c:
                    dc:87:16:f0:1e:0d:f1:ce:9d:85:7c:dd:0f:18:54:
                    d5:e6:6d:d8:ea:47:d3:3c:7e:fb:7a:34:a1:2a:e1:
                    ac:0e:a2:b5:26:84:29:91:93:58:b2:a4:0f:be:19:
                    75:a1:a2:6d:80:1b:47:61:4b:60:95:46:c2:ea:74:
                    69:32:39:05:b3:84:27:48:24:49:38:67:cd:ab:fe:
                    20:d0:b8:b8:8f:86:83:f2:c5:65:42:b7:6f:0b:82:
                    bf:13:4c:b0:c6:28:ef:2d:1f:35:58:fa:ab:87:56:
                    47:c5:c3:d0:6e:a1:4f:86:8e:dc:9e:30:b7:f2:f7:
                    65:b5:4f:60:8e:2e:7a:df:fe:1d:f8:15:7d:12:d7:
                    b4:bd:ac:23:87:94:b4:bc:c9:58:37:b9:05:65:86:
                    03:f4:f6:21:7f:53:b8:9a:ff:35:c1:31:12:df:ee:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:B1:B0:6E:32:4E:28:98:E4:57:A3:DC:71:CB:09:16:C9:31:C1
            X509v3 Authority Key Identifier:
                keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:26:c7:04:5b:e6:88:19:99:68:44:0d:f2:f5:10:2a:68:eb:
         b1:60:93:60:25:14:7d:38:1b:80:6d:86:a6:86:d9:ff:46:13:
         ff:13:ba:45:1d:72:76:72:20:0b:19:26:fe:f1:ad:d3:33:34:
         b9:57:9f:6f:29:d3:e1:d0:cb:28:2a:51:a1:8b:b3:22:e4:47:
         97:5c:39:a9:dd:c7:cb:ac:0a:a5:d2:45:c5:03:f0:af:55:fe:
         8c:78:15:e6:a1:23:14:04:19:ab:92:6b:69:93:ab:5a:9b:65:
         bc:41:1d:3a:7b:dc:ba:a5:45:33:ff:eb:82:b3:d1:85:22:d7:
         5f:62:b0:15:c4:a5:b7:b7:55:a2:14:be:1e:1e:71:fb:69:4e:
         bd:22:b5:55:2d:39:21:b2:69:d3:44:48:85:02:cc:36:9e:5f:
         b6:eb:ce:14:22:62:9c:ac:95:06:d6:f5:d0:77:b7:f0:f6:e8:
         f1:1a:3c:c0:e6:0f:e0:05:e8:26:b8:3d:a5:f3:29:df:00:83:
         ac:2c:c2:d4:0d:98:58:e4:26:0f:c0:d2:2d:89:dc:f6:9f:8f:
         3c:23:a8:27:6b:4c:0e:a8:66:43:e8:ab:d7:8e:3f:2d:cc:44:
         7e:15:90:47:9e:eb:e9:dc:8e:ba:8f:ee:e0:ba:5b:bd:eb:38:
         0e:64:05:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFZW4d+DIU+UXQVIELX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTQ5YTlhZWYyMTg0ZWMwYmI2ZWYwZmRlOTAxYzViMjg0
MWJhNjQwHhcNMjUwODIzMTAwMTM0WhcNMjUwODI0MTAwMTM0WjAzMTEwLwYDVQQD
EygxZTFjYjFiMDZlMzI0ZTI4OThlNDU3YTNkYzcxY2IwOTE2YzkzMWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ4u70bLqGahvjavWbyp4xmKhrOx
o4uyIAcXjOtPErq6N3gooKIsF4qKc8bQZQ8f8y8rrhXJISpeWhnbub22vz7Mf+gC
rejkV6NhMAkUt2UdXCGxrggvNIzchxbwHg3xzp2FfN0PGFTV5m3Y6kfTPH77ejSh
KuGsDqK1JoQpkZNYsqQPvhl1oaJtgBtHYUtglUbC6nRpMjkFs4QnSCRJOGfNq/4g
0Li4j4aD8sVlQrdvC4K/E0ywxijvLR81WPqrh1ZHxcPQbqFPho7cnjC38vdltU9g
ji563/4d+BV9Ete0vawjh5S0vMlYN7kFZYYD9PYhf1O4mv81wTES3+40vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4csbBuMk4omORXo9xxywkWyTHBMB8GA1UdIwQY
MBaAFH2kmprvIYTsC7bvD96QHFsoQbpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mZjA3NDItNzMxMy00ZTk0LTk2MTgt
NjNhMWNlMzMzMDdmLzEvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mZjA3NDItNzMxMy00ZTk0LTk2MTgtNjNhMWNlMzMzMDdm
LzEvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApybHBFvm
iBmZaEQN8vUQKmjrsWCTYCUUfTgbgG2GpobZ/0YT/xO6RR1ydnIgCxkm/vGt0zM0
uVefbynT4dDLKCpRoYuzIuRHl1w5qd3Hy6wKpdJFxQPwr1X+jHgV5qEjFAQZq5Jr
aZOrWptlvEEdOnvcuqVFM//rgrPRhSLXX2KwFcSlt7dVohS+Hh5x+2lOvSK1VS05
IbJp00RIhQLMNp5ftuvOFCJinKyVBtb10He38Pbo8Ro8wOYP4AXoJrg9pfMp3wCD
rCzC1A2YWOQmD8DSLYnc9p+PPCOoJ2tMDqhmQ+ir144/LcxEfhWQR57r6dyOuo/u
4Lpbves4DmQFJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:06 2025 by rpki-client