Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
File:                     Mke--VN94WS_urpRZr4CrPftgto.mft (raw, json)
Hash identifier:          LnNEYBQVbyUDtosvkjCQ/7h7fX7TO+cE71btJoeAszw=
Subject key identifier:   4E:29:64:A6:15:D2:53:DC:1C:A9:E9:5C:2A:9B:AC:E5:03:01:E3:F4
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Certificate issuer:       /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial:       0198D84FA68839D45AF500E39A69A3EE3C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 19:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:35 +0000
Files and hashes:         1: Mke--VN94WS_urpRZr4CrPftgto.crl (hash: DltIYiX1OF634T4adFo5flmP+PD1MnyqlQKFEDhmrJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:a6:88:39:d4:5a:f5:00:e3:9a:69:a3:ee:3c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
        Validity
            Not Before: Aug 23 19:02:35 2025 GMT
            Not After : Aug 24 19:02:35 2025 GMT
        Subject: CN=4e2964a615d253dc1ca9e95c2a9bace50301e3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:25:ed:3e:14:49:c8:f4:f5:b5:a9:c7:57:
                    0c:2b:a9:4b:56:74:35:cd:7f:13:5f:c3:78:b2:17:
                    f5:0e:f2:af:36:bb:90:df:4b:c0:b6:d8:a2:f0:5b:
                    de:b9:f6:e2:84:5e:c1:33:a7:56:8a:1b:59:75:8d:
                    28:66:6f:e9:02:97:c6:1b:74:72:04:96:ed:b7:0a:
                    2e:e8:38:e6:df:c4:bd:70:68:3b:78:78:a4:65:da:
                    6a:69:7c:11:34:3a:e4:61:23:98:af:9b:8b:e2:9b:
                    33:94:c1:86:6a:d3:9f:49:58:1f:31:ff:6b:79:b0:
                    89:74:fa:81:67:b5:b1:0b:6d:68:04:ff:20:31:c0:
                    f1:85:ae:b7:56:3f:eb:84:27:53:46:d1:0c:89:f3:
                    48:5d:c8:a8:2d:83:3f:df:71:21:ea:65:f4:d5:26:
                    01:65:9d:32:66:c6:ef:d1:4d:68:09:19:93:c7:d1:
                    7d:0f:8f:3f:9e:52:5a:85:9a:1d:ba:53:61:c0:b3:
                    95:c0:01:69:57:1f:e2:7c:d6:b1:e6:4f:15:4e:24:
                    b2:3d:33:d3:4d:1f:d6:b4:50:a9:42:df:b2:9c:90:
                    86:f9:e7:6a:56:8b:ed:b0:61:36:7e:9c:fb:0b:0c:
                    5c:8e:2b:00:f3:db:e3:51:fe:2d:e1:13:4e:c9:d2:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:29:64:A6:15:D2:53:DC:1C:A9:E9:5C:2A:9B:AC:E5:03:01:E3:F4
            X509v3 Authority Key Identifier:
                keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:03:ab:de:79:94:0c:47:48:7f:84:15:93:f9:53:95:7f:92:
         db:bd:fe:06:b7:e9:24:b0:21:70:26:00:56:02:85:fa:a5:11:
         29:62:df:bb:0f:6f:1d:54:21:37:c2:42:bb:6a:6b:16:d6:d2:
         6b:e6:20:3d:28:45:1f:8c:2f:3e:34:28:b2:29:63:5d:bd:24:
         47:47:36:f2:ed:3f:43:76:51:70:45:f0:9f:21:e0:4a:76:1e:
         68:13:b5:08:c4:05:11:e3:57:1c:db:66:66:2b:0b:b5:92:ef:
         3d:8d:b7:d4:62:85:54:a5:22:cd:9c:bd:5c:54:d1:49:64:07:
         d3:ee:87:44:a8:aa:85:d2:cd:d6:46:28:be:4c:23:d3:18:93:
         de:c8:5b:d9:0e:87:c0:8c:1d:77:08:65:49:e0:f0:db:1c:22:
         16:b3:18:7d:1a:82:ee:d9:4a:84:a7:a6:f7:a3:98:90:68:a1:
         96:bd:2f:23:a3:7c:8c:cf:d5:55:94:97:d9:ad:87:8f:4b:f6:
         b2:1f:60:c5:c7:9c:13:07:7a:90:d7:04:a1:0d:6c:e3:41:33:
         8e:61:da:b8:f3:09:7d:c7:30:e5:fe:ca:fb:40:28:79:e9:6e:
         1d:21:15:4e:5c:4e:3e:21:b3:6e:ec:50:48:51:54:f5:5b:96:
         d0:3a:23:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT6aIOdRa9QDjmmmj7jyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDdiZWY5NTM3ZGUxNjRiZmJhYmE1MTY2YmUwMmFjZjdl
ZDgyZGEwHhcNMjUwODIzMTkwMjM1WhcNMjUwODI0MTkwMjM1WjAzMTEwLwYDVQQD
Eyg0ZTI5NjRhNjE1ZDI1M2RjMWNhOWU5NWMyYTliYWNlNTAzMDFlM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohYl7T4UScj09bWpx1cMK6lLVnQ1
zX8TX8N4shf1DvKvNruQ30vAttii8FveufbihF7BM6dWihtZdY0oZm/pApfGG3Ry
BJbttwou6Djm38S9cGg7eHikZdpqaXwRNDrkYSOYr5uL4pszlMGGatOfSVgfMf9r
ebCJdPqBZ7WxC21oBP8gMcDxha63Vj/rhCdTRtEMifNIXcioLYM/33Eh6mX01SYB
ZZ0yZsbv0U1oCRmTx9F9D48/nlJahZodulNhwLOVwAFpVx/ifNax5k8VTiSyPTPT
TR/WtFCpQt+ynJCG+edqVovtsGE2fpz7CwxcjisA89vjUf4t4RNOydLd0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4pZKYV0lPcHKnpXCqbrOUDAeP0MB8GA1UdIwQY
MBaAFDJHvvlTfeFkv7q6UWa+Aqz37YLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTgzY2ItMmFjZC00NjRiLTk2Njct
MGFiOTYxNjNjNDcxLzEvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTgzY2ItMmFjZC00NjRiLTk2NjctMGFiOTYxNjNjNDcx
LzEvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwOr3nmU
DEdIf4QVk/lTlX+S273+BrfpJLAhcCYAVgKF+qURKWLfuw9vHVQhN8JCu2prFtbS
a+YgPShFH4wvPjQosiljXb0kR0c28u0/Q3ZRcEXwnyHgSnYeaBO1CMQFEeNXHNtm
ZisLtZLvPY231GKFVKUizZy9XFTRSWQH0+6HRKiqhdLN1kYovkwj0xiT3shb2Q6H
wIwddwhlSeDw2xwiFrMYfRqC7tlKhKem96OYkGihlr0vI6N8jM/VVZSX2a2Hj0v2
sh9gxcecEwd6kNcEoQ1s40EzjmHauPMJfccw5f7K+0AoeeluHSEVTlxOPiGzbuxQ
SFFU9VuW0Dojkg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:29:56 2025 by rpki-client