Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          KUpeztOS5Awy7SrpTTMI4Xq8XT46aBwDyzpauxQgzS4=
Subject key identifier:   82:D4:92:28:59:BA:15:3F:40:6A:24:23:BF:7A:B5:85:54:33:54:64
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       0198D65FF3AE8F3E77B0472F44B409C61A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          09CD
Signing time:             Sat 23 Aug 2025 10:01:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:09 +0000
Files and hashes:         1: CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa (hash: 1+cCs2zFwxJkW1OoUx7Jz3Uxj06h6MGbFiXw6q5dy7M=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: p7hkP7J19z14W/jg/bFc3SfDWkhhXxbZlV9LcdKCv/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:f3:ae:8f:3e:77:b0:47:2f:44:b4:09:c6:1a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Aug 23 10:01:09 2025 GMT
            Not After : Aug 24 10:01:09 2025 GMT
        Subject: CN=82d4922859ba153f406a2423bf7ab58554335464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:1a:fe:75:8f:98:47:c3:f7:de:dc:9a:79:
                    95:a3:1d:97:70:d7:f7:b6:4f:fc:10:4d:62:fe:99:
                    cf:b4:6e:38:97:b3:57:85:e7:9a:5b:60:2b:40:fe:
                    7d:d4:ca:ec:74:7e:b8:3d:90:c0:ff:e5:e2:6c:ec:
                    31:a3:b2:8f:f4:56:81:23:16:c5:33:3e:b1:e7:46:
                    9c:0f:2f:2b:19:94:48:63:c5:b2:da:55:ca:8c:ba:
                    30:bb:01:d1:dd:aa:9b:c6:95:21:ab:d3:e9:27:9d:
                    26:a7:bb:a8:84:eb:a6:ff:61:dd:47:1d:06:99:e4:
                    3e:a8:bc:85:fb:40:a2:6a:47:c4:7d:bb:24:8f:f3:
                    2e:6c:09:3a:9e:19:37:4d:14:1f:d7:35:f9:9e:1e:
                    d9:b1:07:c4:05:84:45:86:eb:46:c1:31:0f:b6:a3:
                    e8:4b:d7:b3:38:70:73:23:2c:d4:95:55:57:2f:ec:
                    67:d2:39:7a:25:b2:99:46:e0:f6:6b:32:d2:20:d4:
                    eb:d4:99:4b:39:65:15:5a:56:0a:b9:af:93:9f:b8:
                    33:d3:3b:ac:e3:b1:9e:57:a4:b8:90:cc:bf:88:cd:
                    8d:f0:aa:cd:1f:52:10:51:4c:94:8e:8b:5d:60:f6:
                    65:de:07:96:56:fe:69:3d:e4:c7:92:02:bb:c2:69:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D4:92:28:59:BA:15:3F:40:6A:24:23:BF:7A:B5:85:54:33:54:64
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:a4:0b:b5:98:0a:86:48:76:82:ad:77:f8:f5:15:48:77:
         a5:7c:6c:c4:3f:3a:8b:0e:e0:d5:5c:a9:99:7a:22:30:f9:24:
         e5:cd:77:4d:72:5c:d4:13:d8:15:61:77:c5:32:cc:a8:60:e3:
         5d:64:bb:c2:30:1d:cd:78:c2:0f:59:b8:04:30:17:8a:e4:7f:
         3c:1f:36:2e:15:b5:71:69:6b:bd:1d:08:c8:0e:bb:86:97:29:
         a8:89:7c:e0:29:d7:68:09:70:6b:42:cd:15:c1:cd:42:20:dc:
         52:64:26:ff:91:6d:80:eb:73:17:ca:f0:67:e9:b5:7b:6d:c2:
         f5:f7:a4:11:5d:45:da:ac:41:51:98:14:94:fe:1b:8e:33:00:
         89:4d:53:85:a5:ea:37:d6:0f:38:24:2f:ec:3d:52:a6:8b:97:
         27:4d:34:2b:cd:e6:16:9d:8f:eb:12:5e:e0:c1:8d:f4:8e:93:
         09:e8:77:84:2e:22:35:31:31:68:04:5a:14:b9:26:30:61:b0:
         8f:5e:66:6b:a2:a1:15:ef:9c:67:d9:74:f1:7b:b1:8c:c3:d9:
         4f:5a:88:93:1e:ea:da:e5:c2:52:39:58:ba:c0:8b:7a:eb:d0:
         bb:f9:3a:06:01:08:5f:8d:93:9e:f9:04:73:a7:18:9f:b1:fc:
         22:6b:94:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/Oujz53sEcvRLQJxhqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTk3YTRiMGZlNDg2ZTZlNWM4NWI5ZWUwM2U3MjliZGVj
N2U3YmQwHhcNMjUwODIzMTAwMTA5WhcNMjUwODI0MTAwMTA5WjAzMTEwLwYDVQQD
Eyg4MmQ0OTIyODU5YmExNTNmNDA2YTI0MjNiZjdhYjU4NTU0MzM1NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaka/nWPmEfD997cmnmVox2XcNf3
tk/8EE1i/pnPtG44l7NXheeaW2ArQP591MrsdH64PZDA/+XibOwxo7KP9FaBIxbF
Mz6x50acDy8rGZRIY8Wy2lXKjLowuwHR3aqbxpUhq9PpJ50mp7uohOum/2HdRx0G
meQ+qLyF+0CiakfEfbskj/MubAk6nhk3TRQf1zX5nh7ZsQfEBYRFhutGwTEPtqPo
S9ezOHBzIyzUlVVXL+xn0jl6JbKZRuD2azLSINTr1JlLOWUVWlYKua+Tn7gz0zus
47GeV6S4kMy/iM2N8KrNH1IQUUyUjotdYPZl3geWVv5pPeTHkgK7wmlZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILUkihZuhU/QGokI796tYVUM1RkMB8GA1UdIwQY
MBaAFHtZeksP5Ibm5chbnuA+cpvex+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYt
ZTdhMzgyNzUwYmI5LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYtZTdhMzgyNzUwYmI5
LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOG2kC7WY
CoZIdoKtd/j1FUh3pXxsxD86iw7g1VypmXoiMPkk5c13TXJc1BPYFWF3xTLMqGDj
XWS7wjAdzXjCD1m4BDAXiuR/PB82LhW1cWlrvR0IyA67hpcpqIl84CnXaAlwa0LN
FcHNQiDcUmQm/5FtgOtzF8rwZ+m1e23C9fekEV1F2qxBUZgUlP4bjjMAiU1ThaXq
N9YPOCQv7D1SpouXJ000K83mFp2P6xJe4MGN9I6TCeh3hC4iNTExaARaFLkmMGGw
j15ma6KhFe+cZ9l08XuxjMPZT1qIkx7q2uXCUjlYusCLeuvQu/k6BgEIX42TnvkE
c6cYn7H8ImuUGw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:44 2025 by rpki-client