Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File:                     dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier:          XQFqjDRKznst6MJndX7HhcskkmcGYTwBooJ2OQYelVQ=
Subject key identifier:   41:92:ED:AD:C2:48:BC:ED:05:B2:09:65:AB:10:0D:72:46:82:99:E0
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer:       /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial:       0198D69835B136F3C21BD9452283A4ED5A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number:          01D6
Signing time:             Sat 23 Aug 2025 11:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:36 +0000
Files and hashes:         1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: UVRYH2qb+mXfjqDNM0DJnHvnX5Soq6ykLwrxC7DLbJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:35:b1:36:f3:c2:1b:d9:45:22:83:a4:ed:5a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
        Validity
            Not Before: Aug 23 11:02:36 2025 GMT
            Not After : Aug 24 11:02:36 2025 GMT
        Subject: CN=4192edadc248bced05b20965ab100d72468299e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:df:19:08:30:5e:f9:b7:7f:c2:03:f2:f2:
                    9e:18:0c:56:fa:e2:77:52:52:8b:22:de:e3:b9:19:
                    ff:be:59:1c:a7:21:72:d3:92:2d:85:80:cc:7c:75:
                    f0:c8:69:8c:a4:af:45:56:cc:4f:8d:b2:eb:70:b4:
                    3b:29:0c:24:18:73:51:b4:73:53:9b:55:bd:cb:7a:
                    8b:dd:83:a8:cd:a1:50:6d:bc:c0:b8:29:27:89:b0:
                    c9:1c:45:e8:32:e1:ce:a2:9e:48:c3:31:71:89:18:
                    46:b5:3c:36:9b:51:aa:45:9a:b6:3b:2d:69:a1:a6:
                    d8:b0:b6:19:e8:5d:6b:42:25:c0:22:aa:24:e0:40:
                    4d:99:3f:6c:2d:3b:90:16:5d:8f:c2:a1:08:f9:51:
                    b2:2d:34:de:4f:58:3a:4d:16:bf:f3:c9:1e:0a:1e:
                    9a:9e:3c:62:2c:92:00:b8:d8:3e:be:b7:8b:ea:20:
                    0e:74:78:1b:02:ae:f7:15:e7:bd:37:05:a8:ab:ed:
                    2c:fa:16:46:eb:e3:ae:fa:ce:22:08:e3:3c:0f:2e:
                    cd:19:aa:e5:25:1e:2d:34:05:4b:7d:e2:f5:c5:e7:
                    08:a4:83:2b:6b:bf:60:94:d1:d1:57:eb:ae:90:ed:
                    66:28:71:09:fd:28:44:d8:46:7f:e7:25:6c:69:34:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:ED:AD:C2:48:BC:ED:05:B2:09:65:AB:10:0D:72:46:82:99:E0
            X509v3 Authority Key Identifier:
                keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:41:dd:b6:30:dd:7c:8c:49:b7:62:a3:d1:5f:28:6c:c5:
         6e:52:27:32:08:79:a6:3a:f0:6e:b9:47:af:af:a3:ec:41:62:
         9a:91:4d:76:06:29:70:45:b4:32:d8:cb:89:94:58:34:69:84:
         1f:b3:2d:0f:0c:59:ca:1e:e7:83:ee:4c:c9:57:8b:03:54:72:
         70:99:e6:7a:35:c9:95:74:6b:06:66:75:9c:04:b9:9e:df:2b:
         b4:f1:15:7b:c2:92:46:5e:b8:18:96:25:fc:7d:e9:21:88:a1:
         3a:3a:39:a1:b6:39:05:94:b8:9c:84:37:a2:98:28:1e:b7:16:
         cd:87:83:db:2d:3f:a8:30:b8:d1:d6:43:63:ca:a0:22:b2:a1:
         73:5e:ab:e2:9f:48:ff:a2:6b:4f:ea:ec:24:99:9e:67:32:94:
         73:26:57:e9:16:c1:33:c8:aa:7b:1a:b6:da:da:be:aa:32:e5:
         bb:13:03:6e:bb:68:6d:b3:c3:87:1f:75:82:e5:09:9b:99:96:
         47:af:54:33:3a:89:50:d7:81:a6:b2:82:7b:38:1a:78:14:87:
         23:96:97:00:c9:da:ce:12:1c:e2:e2:08:3c:16:05:41:ab:f2:
         57:78:c5:42:97:36:d7:a7:a7:29:28:14:52:e0:5f:92:70:f2:
         84:29:33:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDWxNvPCG9lFIoOk7VqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTIwZWZmMWVlMWUyOGUzZGRjZmI4OWU3Y2I2ZjdkODlh
NzdjOWMwHhcNMjUwODIzMTEwMjM2WhcNMjUwODI0MTEwMjM2WjAzMTEwLwYDVQQD
Eyg0MTkyZWRhZGMyNDhiY2VkMDViMjA5NjVhYjEwMGQ3MjQ2ODI5OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurffGQgwXvm3f8ID8vKeGAxW+uJ3
UlKLIt7juRn/vlkcpyFy05IthYDMfHXwyGmMpK9FVsxPjbLrcLQ7KQwkGHNRtHNT
m1W9y3qL3YOozaFQbbzAuCknibDJHEXoMuHOop5IwzFxiRhGtTw2m1GqRZq2Oy1p
oabYsLYZ6F1rQiXAIqok4EBNmT9sLTuQFl2PwqEI+VGyLTTeT1g6TRa/88keCh6a
njxiLJIAuNg+vreL6iAOdHgbAq73Fee9NwWoq+0s+hZG6+Ou+s4iCOM8Dy7NGarl
JR4tNAVLfeL1xecIpIMra79glNHRV+uukO1mKHEJ/ShE2EZ/5yVsaTTHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGS7a3CSLztBbIJZasQDXJGgpngMB8GA1UdIwQY
MBaAFHZSDv8e4eKOPdz7iefLb32Jp3ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODIt
Yzg3NTFmOTU0NTI0LzEvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODItYzg3NTFmOTU0NTI0
LzEvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhRB3bYw
3XyMSbdio9FfKGzFblInMgh5pjrwbrlHr6+j7EFimpFNdgYpcEW0MtjLiZRYNGmE
H7MtDwxZyh7ng+5MyVeLA1RycJnmejXJlXRrBmZ1nAS5nt8rtPEVe8KSRl64GJYl
/H3pIYihOjo5obY5BZS4nIQ3opgoHrcWzYeD2y0/qDC40dZDY8qgIrKhc16r4p9I
/6JrT+rsJJmeZzKUcyZX6RbBM8iqexq22tq+qjLluxMDbrtobbPDhx91guUJm5mW
R69UMzqJUNeBprKCezgaeBSHI5aXAMnazhIc4uIIPBYFQavyV3jFQpc216enKSgU
UuBfknDyhCkznw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:03 2025 by rpki-client