Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          nysXvMmWxlSRD4greepC/Qp0S4LlRG4mMQGrfWUqoE4=
Subject key identifier:   1E:C0:AE:64:16:B3:12:7B:FF:52:CD:4A:1A:F3:4C:AD:F8:11:BC:CC
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       0198D54DE11CE05063E165555742AC4CB179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          0D31
Signing time:             Sat 23 Aug 2025 05:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:47 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: uipLHRpNrzaK4gv/MA6gpfdzf5RhjzdzcM4I1xVd4dk=)
                          2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e1:1c:e0:50:63:e1:65:55:57:42:ac:4c:b1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Aug 23 05:01:47 2025 GMT
            Not After : Aug 24 05:01:47 2025 GMT
        Subject: CN=1ec0ae6416b3127bff52cd4a1af34cadf811bccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:5c:45:f4:96:21:60:00:a0:bc:ce:5f:46:
                    35:ea:7c:16:a3:c0:0b:64:9d:67:25:78:08:bd:ef:
                    c7:69:bc:a1:59:8c:d1:60:bf:46:ec:0b:fd:68:f2:
                    17:80:4a:88:f4:c5:df:38:3d:9f:0b:d3:cc:2b:72:
                    13:c5:8f:0a:9b:65:7b:1d:3d:60:54:0e:31:35:d5:
                    a8:c1:db:db:11:23:46:76:db:ed:7c:4e:b7:29:80:
                    89:73:9c:ec:ba:31:9b:20:db:7f:5a:83:8d:89:22:
                    6b:8e:1b:38:8d:a1:e5:59:df:8e:cd:6b:30:6e:50:
                    5a:33:cd:d3:51:5e:4e:ca:2b:db:d0:31:8f:87:4e:
                    2f:75:b3:c4:bb:ec:3b:d3:bb:1f:59:25:1c:6a:c2:
                    ab:d9:85:35:b3:4b:d7:22:3e:d6:ea:34:8b:6a:ee:
                    d7:dc:7f:d6:5c:44:54:32:3d:f6:ea:54:9d:bc:2d:
                    19:b6:3d:e2:5d:70:95:13:3c:cd:1b:36:3c:86:6b:
                    ab:4f:79:8e:96:49:3f:48:a7:8f:01:a2:20:d6:3f:
                    2a:89:7e:c3:64:8d:1c:3d:31:47:30:6d:25:c3:4f:
                    64:94:d9:22:06:46:6c:62:96:70:ab:25:c0:15:d3:
                    f3:63:e9:cf:21:ba:96:5c:93:a7:1a:df:d5:cb:6c:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C0:AE:64:16:B3:12:7B:FF:52:CD:4A:1A:F3:4C:AD:F8:11:BC:CC
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:2a:83:48:db:44:44:f8:e7:3c:2f:7c:fd:fa:18:10:4a:
         2a:c0:76:e9:28:f3:5e:c5:34:63:c9:87:a1:16:bb:ac:fc:94:
         5e:f8:0b:7f:6a:3c:f7:40:91:15:77:8e:24:66:b5:3b:21:53:
         fc:93:b0:14:de:c2:3a:93:4b:12:4c:15:70:ef:e1:cb:0f:55:
         6f:48:e3:63:3d:58:48:ef:79:00:e1:eb:75:99:d7:af:82:66:
         c3:e5:8d:62:3c:a0:fb:1c:84:03:27:ce:3e:bb:dc:c7:ff:a0:
         4b:56:d9:38:79:85:15:1a:a8:76:b6:46:b5:e7:d4:6f:2d:0d:
         9d:db:b3:4d:07:2c:ad:1c:44:0a:34:8f:25:ac:dc:c4:78:4a:
         34:69:4f:0a:7d:95:52:20:41:87:7f:f2:29:2f:43:23:1c:6b:
         4f:25:8c:44:22:eb:39:e5:14:a0:08:a6:42:f3:9c:c9:77:33:
         b0:36:85:1f:d4:80:b5:33:a6:04:c7:b7:03:b3:0a:62:75:23:
         dd:43:5e:b9:e3:19:b6:2d:f5:24:02:4f:c0:54:3a:fc:60:3d:
         8b:93:e9:64:b6:63:2b:46:bb:1d:3d:cf:fb:db:c3:25:5f:2d:
         e9:58:15:d7:5f:ee:1f:a5:1f:92:6b:3e:7c:f4:67:18:80:e9:
         ea:8a:4d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTeEc4FBj4WVVV0KsTLF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjUwODIzMDUwMTQ3WhcNMjUwODI0MDUwMTQ3WjAzMTEwLwYDVQQD
EygxZWMwYWU2NDE2YjMxMjdiZmY1MmNkNGExYWYzNGNhZGY4MTFiY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ZcRfSWIWAAoLzOX0Y16nwWo8AL
ZJ1nJXgIve/HabyhWYzRYL9G7Av9aPIXgEqI9MXfOD2fC9PMK3ITxY8Km2V7HT1g
VA4xNdWowdvbESNGdtvtfE63KYCJc5zsujGbINt/WoONiSJrjhs4jaHlWd+OzWsw
blBaM83TUV5Oyivb0DGPh04vdbPEu+w707sfWSUcasKr2YU1s0vXIj7W6jSLau7X
3H/WXERUMj326lSdvC0Ztj3iXXCVEzzNGzY8hmurT3mOlkk/SKePAaIg1j8qiX7D
ZI0cPTFHMG0lw09klNkiBkZsYpZwqyXAFdPzY+nPIbqWXJOnGt/Vy2wn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7ArmQWsxJ7/1LNShrzTK34EbzMMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn0qg0jb
RET45zwvfP36GBBKKsB26SjzXsU0Y8mHoRa7rPyUXvgLf2o890CRFXeOJGa1OyFT
/JOwFN7COpNLEkwVcO/hyw9Vb0jjYz1YSO95AOHrdZnXr4Jmw+WNYjyg+xyEAyfO
Prvcx/+gS1bZOHmFFRqodrZGtefUby0NnduzTQcsrRxECjSPJazcxHhKNGlPCn2V
UiBBh3/yKS9DIxxrTyWMRCLrOeUUoAimQvOcyXczsDaFH9SAtTOmBMe3A7MKYnUj
3UNeueMZti31JAJPwFQ6/GA9i5PpZLZjK0a7HT3P+9vDJV8t6VgV11/uH6Ufkms+
fPRnGIDp6opN7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:47 2025 by rpki-client