Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File:                     Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier:          ZFewUlloleip7Txrartb7qP4ZObIk8rWQ+sC818y9hA=
Subject key identifier:   2F:41:4B:57:CF:9A:F3:99:C7:D8:4F:E7:0E:47:95:58:B9:38:70:D9
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer:       /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial:       0198D73AEB949B7E35156F7905CEED404CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number:          15AE
Signing time:             Sat 23 Aug 2025 14:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:19 +0000
Files and hashes:         1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: z9quqih5upvnW10JvW3C78YXf4KSS34YyMZdjathSvU=)
                          2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:eb:94:9b:7e:35:15:6f:79:05:ce:ed:40:4c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
        Validity
            Not Before: Aug 23 14:00:19 2025 GMT
            Not After : Aug 24 14:00:19 2025 GMT
        Subject: CN=2f414b57cf9af399c7d84fe70e479558b93870d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:fc:5c:f3:cd:91:6a:5b:38:77:81:64:64:
                    24:89:0c:02:32:a7:fd:3c:eb:c7:b0:21:80:81:2f:
                    ac:09:fc:5c:2f:65:56:78:54:69:98:7e:8f:cf:e5:
                    7f:4f:ca:7f:fd:3c:18:a7:4a:ba:7c:0c:5d:cb:00:
                    8e:3c:6f:d8:79:4f:0a:4d:ad:ed:da:ab:8c:1b:98:
                    59:81:1a:8f:71:7f:a6:94:2d:93:bd:ce:52:f8:17:
                    7b:48:9f:ba:c9:51:c2:2b:33:7d:24:5e:1a:36:d8:
                    47:f7:8b:16:bf:2e:30:c0:10:9e:f0:40:dc:5d:77:
                    2f:b8:46:88:73:6b:f1:ee:73:71:7d:02:30:25:6e:
                    27:41:d7:2f:eb:2d:25:eb:01:14:71:1f:21:f9:3c:
                    ed:91:c7:3f:ae:82:76:b2:ac:90:4d:4c:fa:6d:0c:
                    03:ba:29:a8:1d:ff:52:5b:9d:3f:c5:7c:5d:91:a0:
                    01:9f:f3:98:c7:6f:7c:4f:36:6b:7e:b6:7a:68:65:
                    2f:8a:20:90:51:e5:c9:ee:c8:e5:64:b4:18:f5:d1:
                    72:c0:b0:cd:d9:a8:c1:72:97:19:52:aa:b7:34:59:
                    05:93:9a:e3:b3:35:31:b6:76:12:44:24:ab:04:77:
                    01:bb:07:6c:79:cf:78:03:2b:a2:be:7c:9d:84:7f:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:4B:57:CF:9A:F3:99:C7:D8:4F:E7:0E:47:95:58:B9:38:70:D9
            X509v3 Authority Key Identifier:
                keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:71:ad:fc:7e:d8:ab:d8:9c:6d:a3:e3:f8:5a:4b:6d:5b:5f:
         07:23:db:7c:1c:8c:da:e6:43:c9:bc:44:2b:cb:52:97:7f:b0:
         c8:56:f2:34:19:e8:33:7c:e7:9d:99:1e:0b:8d:49:d4:19:ac:
         d2:0a:28:d8:79:28:2c:60:7a:8d:0c:d6:a1:c5:9b:6e:cc:bf:
         63:7c:6f:97:bf:16:0f:4d:09:c4:e2:0f:8a:b9:9a:e6:2f:4b:
         67:71:d5:cb:81:ec:52:cb:79:c9:85:66:8e:45:5e:b0:95:59:
         68:1d:ea:10:5d:19:4c:3a:ba:6f:fb:c6:81:9a:f1:8f:55:ea:
         90:07:88:eb:3f:b7:30:d6:17:1e:88:11:43:c7:f2:9e:a8:83:
         c5:12:83:67:f5:3f:ad:f8:36:f1:e3:d4:1a:10:21:2b:b3:99:
         17:28:45:bd:7f:79:19:49:d9:60:8f:10:e2:a7:3a:5d:67:f3:
         ac:0e:20:49:21:00:75:ac:f7:a4:04:1d:05:ef:21:48:56:67:
         4b:ea:94:24:c5:9a:0d:99:59:ba:c0:3c:d4:2c:b5:3c:c8:c7:
         2a:b3:a8:08:70:03:63:62:ef:d4:de:84:6e:d4:bf:4e:a7:a6:
         b4:2a:0a:bd:73:0b:a7:c4:e7:16:c5:f0:0e:02:6c:30:f8:3c:
         8c:16:4f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOuuUm341FW95Bc7tQEypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMWRjMjA1ZTI0YTIzYTVhMDQ1NGExM2YxZDRhMGM5NjM3
YTQzOWQwHhcNMjUwODIzMTQwMDE5WhcNMjUwODI0MTQwMDE5WjAzMTEwLwYDVQQD
EygyZjQxNGI1N2NmOWFmMzk5YzdkODRmZTcwZTQ3OTU1OGI5Mzg3MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r38XPPNkWpbOHeBZGQkiQwCMqf9
POvHsCGAgS+sCfxcL2VWeFRpmH6Pz+V/T8p//TwYp0q6fAxdywCOPG/YeU8KTa3t
2quMG5hZgRqPcX+mlC2Tvc5S+Bd7SJ+6yVHCKzN9JF4aNthH94sWvy4wwBCe8EDc
XXcvuEaIc2vx7nNxfQIwJW4nQdcv6y0l6wEUcR8h+Tztkcc/roJ2sqyQTUz6bQwD
uimoHf9SW50/xXxdkaABn/OYx298TzZrfrZ6aGUviiCQUeXJ7sjlZLQY9dFywLDN
2ajBcpcZUqq3NFkFk5rjszUxtnYSRCSrBHcBuwdsec94AyuivnydhH9rzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9BS1fPmvOZx9hP5w5HlVi5OHDZMB8GA1UdIwQY
MBaAFCsdwgXiSiOloEVKE/HUoMljekOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQt
ZGJjOWE1MjJjZDEyLzEvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS80NzQyMmYtMmZkMC00YjMyLTkzNTQtZGJjOWE1MjJjZDEy
LzEvS3gzQ0JlSktJNldnUlVvVDhkU2d5V042UTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4nGt/H7Y
q9icbaPj+FpLbVtfByPbfByM2uZDybxEK8tSl3+wyFbyNBnoM3znnZkeC41J1Bms
0goo2HkoLGB6jQzWocWbbsy/Y3xvl78WD00JxOIPirma5i9LZ3HVy4HsUst5yYVm
jkVesJVZaB3qEF0ZTDq6b/vGgZrxj1XqkAeI6z+3MNYXHogRQ8fynqiDxRKDZ/U/
rfg28ePUGhAhK7OZFyhFvX95GUnZYI8Q4qc6XWfzrA4gSSEAdaz3pAQdBe8hSFZn
S+qUJMWaDZlZusA81Cy1PMjHKrOoCHADY2Lv1N6EbtS/TqemtCoKvXMLp8TnFsXw
DgJsMPg8jBZPhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:50 2025 by rpki-client