Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
File:                     R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft (raw, json)
Hash identifier:          NGPAdsfKdDyKCXZSidLdWu7ptVJPvWH3S0/HCBOSfKc=
Subject key identifier:   37:27:BA:F7:65:02:D6:FB:76:4A:68:4C:3D:BE:50:66:E6:3B:FD:25
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Certificate issuer:       /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial:       0198D516226E3DE56278D007FBB86A783854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
Manifest number:          0CD9
Signing time:             Sat 23 Aug 2025 04:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:54 +0000
Files and hashes:         1: R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl (hash: b3SFFXHC6kYBJwPeyR3kqaOwsluOyWzLbfLYdvzotWE=)
                          2: lW8QARrIK7UIW4M3JIEGPijJ8cI.roa (hash: zRjbJkcUZy131TXsOeG5uokZGrH6fU95s3m8Z3kzb+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:22:6e:3d:e5:62:78:d0:07:fb:b8:6a:78:38:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
        Validity
            Not Before: Aug 23 04:00:54 2025 GMT
            Not After : Aug 24 04:00:54 2025 GMT
        Subject: CN=3727baf76502d6fb764a684c3dbe5066e63bfd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:fa:2e:b8:e9:4b:3e:c8:4a:85:97:a1:7c:
                    97:44:3b:64:29:52:ec:31:ea:e9:ab:ac:e2:07:e6:
                    1a:a3:bb:66:f6:64:ee:68:f5:cc:98:47:3e:c6:b3:
                    25:3f:b8:39:a5:0c:dd:8c:44:3f:2f:01:fb:76:24:
                    4d:78:e8:62:ea:b9:1f:57:33:8b:35:b1:b9:27:86:
                    52:36:05:de:01:9e:a2:ab:c9:a2:91:23:55:e8:41:
                    1d:f6:fa:f8:51:44:aa:9d:2e:07:3f:ad:31:3b:d4:
                    06:7f:0f:4a:2c:8f:ad:df:43:c7:70:63:f2:b2:cf:
                    aa:1a:00:9b:7d:29:35:a9:5b:11:89:19:74:8d:57:
                    1d:05:dc:80:b5:12:81:de:60:97:cc:31:ef:ca:df:
                    de:0a:db:59:fc:68:94:e4:c9:92:91:8d:9c:94:9e:
                    89:9d:6c:c3:bc:a0:1d:8c:eb:f5:ec:e0:e5:f0:50:
                    76:8d:6a:38:ab:cb:7b:5f:5d:78:72:f8:73:6f:4c:
                    20:b4:d2:80:c4:63:b5:ec:15:83:1c:f9:14:55:b0:
                    40:cb:02:b7:13:22:b0:33:a5:e8:af:c4:34:47:3d:
                    88:2b:54:04:af:ee:cf:97:65:9d:a2:c7:c1:bd:a6:
                    e1:43:ad:b7:18:8c:91:6e:61:13:09:96:b5:63:fa:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:27:BA:F7:65:02:D6:FB:76:4A:68:4C:3D:BE:50:66:E6:3B:FD:25
            X509v3 Authority Key Identifier:
                keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cb:94:db:eb:a8:8e:2b:bf:df:ab:15:fb:a8:85:44:5e:b6:
         1c:8b:c1:1f:bf:0c:0a:64:56:82:fd:23:86:3e:25:5a:a7:a7:
         ec:76:72:37:8e:28:34:32:13:82:59:a2:24:a9:1d:f2:9c:06:
         d3:11:f2:72:9b:ab:8f:aa:b1:62:61:27:05:f2:d2:40:7f:e0:
         09:b9:3d:f5:3a:6d:be:33:07:f7:1e:0d:03:3a:34:fe:50:89:
         2f:d7:78:7c:30:4a:31:97:43:9c:2a:42:8c:cd:3c:f1:e7:d5:
         e2:7b:6f:11:b7:c3:66:64:1b:ba:ed:82:1f:04:51:c8:63:c7:
         ff:84:91:a5:12:d2:05:b2:62:db:48:ea:36:58:c7:6a:d9:58:
         cf:1d:af:4d:18:0a:4e:06:41:ef:51:65:56:99:38:1c:58:d4:
         02:45:f3:f9:02:e9:ae:12:31:e8:80:45:28:29:96:38:ea:6c:
         cf:a4:e9:88:c6:94:e2:f7:48:81:1b:11:a2:b8:dd:12:e9:0d:
         2d:d8:1f:8f:90:6a:2c:47:73:70:11:ef:c3:20:77:6f:be:a4:
         9b:db:d5:b0:71:16:ed:7e:5c:f8:d4:bf:22:60:0f:b7:e4:3c:
         5f:2a:91:4b:81:06:36:4d:cd:59:99:0c:e7:99:8c:50:4e:5d:
         86:bb:d5:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiJuPeVieNAH+7hqeDhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjcwNTRkNjU2MTUzZDJkNTVhZGQ4YjlkZmUzZjZkMTM3
YWQyN2UwHhcNMjUwODIzMDQwMDU0WhcNMjUwODI0MDQwMDU0WjAzMTEwLwYDVQQD
EygzNzI3YmFmNzY1MDJkNmZiNzY0YTY4NGMzZGJlNTA2NmU2M2JmZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVT6LrjpSz7ISoWXoXyXRDtkKVLs
Merpq6ziB+Yao7tm9mTuaPXMmEc+xrMlP7g5pQzdjEQ/LwH7diRNeOhi6rkfVzOL
NbG5J4ZSNgXeAZ6iq8mikSNV6EEd9vr4UUSqnS4HP60xO9QGfw9KLI+t30PHcGPy
ss+qGgCbfSk1qVsRiRl0jVcdBdyAtRKB3mCXzDHvyt/eCttZ/GiU5MmSkY2clJ6J
nWzDvKAdjOv17ODl8FB2jWo4q8t7X114cvhzb0wgtNKAxGO17BWDHPkUVbBAywK3
EyKwM6Xor8Q0Rz2IK1QEr+7Pl2WdosfBvabhQ623GIyRbmETCZa1Y/plqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcnuvdlAtb7dkpoTD2+UGbmO/0lMB8GA1UdIwQY
MBaAFEe3BU1lYVPS1Vrdi53+P20TetJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdjRlRXVmhVOUxWV3QyTG5mNF9iUk42MG40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85Mjg2YmItYzVlNS00MjlmLThhNzYt
MGZkODYyZGEzYWUxLzEvUjdjRlRXVmhVOUxWV3QyTG5mNF9iUk42MG40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85Mjg2YmItYzVlNS00MjlmLThhNzYtMGZkODYyZGEzYWUx
LzEvUjdjRlRXVmhVOUxWV3QyTG5mNF9iUk42MG40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcuU2+uo
jiu/36sV+6iFRF62HIvBH78MCmRWgv0jhj4lWqen7HZyN44oNDITglmiJKkd8pwG
0xHycpurj6qxYmEnBfLSQH/gCbk99TptvjMH9x4NAzo0/lCJL9d4fDBKMZdDnCpC
jM088efV4ntvEbfDZmQbuu2CHwRRyGPH/4SRpRLSBbJi20jqNljHatlYzx2vTRgK
TgZB71FlVpk4HFjUAkXz+QLprhIx6IBFKCmWOOpsz6TpiMaU4vdIgRsRorjdEukN
Ldgfj5BqLEdzcBHvwyB3b76km9vVsHEW7X5c+NS/ImAPt+Q8XyqRS4EGNk3NWZkM
55mMUE5dhrvV+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:36 2025 by rpki-client