Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File:                     1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier:          VNDjMm/OA7QUbF3EFam+4KoRlll/M8HOyCBjB2Umdys=
Subject key identifier:   C8:4A:E4:5E:08:5A:A7:04:BE:A8:16:B7:1A:02:7F:4A:CB:BD:DD:4C
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer:       /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial:       0198D5158887A62E3D1D689BD7731E999440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number:          10E1
Signing time:             Sat 23 Aug 2025 04:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:14 +0000
Files and hashes:         1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: vaXdj3JBdpSDJE01mJgC+dn/oQ50YxnnpfytyjSsjbY=)
                          2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:88:87:a6:2e:3d:1d:68:9b:d7:73:1e:99:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
        Validity
            Not Before: Aug 23 04:00:14 2025 GMT
            Not After : Aug 24 04:00:14 2025 GMT
        Subject: CN=c84ae45e085aa704bea816b71a027f4acbbddd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:b3:46:9d:8d:d0:45:d8:2b:be:01:bc:f7:
                    0b:3b:b0:cf:9e:f3:c5:2d:f4:d7:61:77:71:6f:aa:
                    cb:2f:eb:a0:2d:f0:d4:81:64:80:84:bc:e4:99:33:
                    4a:24:72:12:e9:b8:a4:52:0e:c1:f2:d6:4a:c3:ba:
                    2a:0d:b5:a8:ad:dd:d2:87:24:5b:b5:cd:60:76:b2:
                    52:6e:f7:b0:e5:33:16:ac:c8:9d:ac:0e:83:03:37:
                    9b:1e:f3:49:25:99:59:cb:b5:c1:f3:04:3c:c2:cb:
                    0e:76:71:4d:26:ac:95:e8:ae:6d:be:fe:ec:9c:d4:
                    19:1d:65:ea:d9:9b:f2:60:95:14:43:9c:61:63:e0:
                    f6:e9:ae:aa:9a:c6:28:db:0b:f5:05:ce:d6:25:c7:
                    a7:e4:59:cd:49:e1:b7:34:87:a9:fc:e6:b1:50:b2:
                    6d:cf:c9:72:42:33:06:31:87:85:34:a2:bd:d6:9c:
                    d9:f5:87:e7:26:69:1a:ec:80:d8:6a:77:08:ae:7c:
                    44:a4:5b:eb:b1:88:05:aa:b1:e7:9e:58:8d:08:cf:
                    41:8b:1b:54:96:b6:bd:f1:0d:54:ff:3c:2b:2b:bb:
                    1a:09:53:f7:ff:23:ee:71:e7:7d:eb:ff:43:b5:a0:
                    ac:3b:7f:31:7f:d1:91:9f:8e:9d:95:11:52:c6:74:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4A:E4:5E:08:5A:A7:04:BE:A8:16:B7:1A:02:7F:4A:CB:BD:DD:4C
            X509v3 Authority Key Identifier:
                keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:91:ec:ec:60:9e:dd:4f:b9:4b:4c:66:db:f2:47:da:7b:fc:
         96:0a:78:dd:95:99:0f:da:d6:31:15:df:7f:69:23:85:b1:9c:
         b7:76:34:af:29:22:4d:ed:4a:79:b4:cd:8d:70:00:e3:9e:18:
         96:e2:63:f5:eb:3f:71:95:9f:5a:38:81:a1:49:65:91:3a:85:
         c1:ae:fc:ba:d0:fc:0a:72:3a:3e:97:11:bd:56:db:a7:46:20:
         e6:87:ff:50:6f:f5:ae:8b:15:cb:1b:99:e9:b6:2e:4a:41:dc:
         6f:8f:4d:a2:d4:1a:08:fc:75:8f:9a:46:af:65:96:bd:10:fe:
         f4:7c:27:ff:ed:08:83:53:53:fc:59:ee:1d:1b:4d:6d:0d:db:
         bd:6f:b4:d7:a4:71:f1:c5:9a:60:13:5d:95:45:d1:2c:de:a1:
         81:62:0e:dd:40:39:c4:d2:90:08:79:38:1d:1f:9d:a2:79:d2:
         4b:7c:fd:c6:8a:73:5b:ed:3f:48:d3:de:77:a1:45:e4:07:2b:
         54:e5:a0:d7:44:7b:c5:8a:8c:cd:a6:a4:17:e1:58:7b:bb:b9:
         c0:ed:fb:ea:b9:0d:c5:c6:f1:df:2c:36:e3:6a:b9:8b:72:0b:
         b3:fc:af:7f:a2:5b:31:f5:b8:e4:fd:0e:64:af:b1:db:1a:5f:
         54:e8:31:cc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjVFYiHpi49HWib13MemZRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj
OGQ0MDQwHhcNMjUwODIzMDQwMDE0WhcNMjUwODI0MDQwMDE0WjAzMTEwLwYDVQQD
EyhjODRhZTQ1ZTA4NWFhNzA0YmVhODE2YjcxYTAyN2Y0YWNiYmRkZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PazRp2N0EXYK74BvPcLO7DPnvPF
LfTXYXdxb6rLL+ugLfDUgWSAhLzkmTNKJHIS6bikUg7B8tZKw7oqDbWord3ShyRb
tc1gdrJSbvew5TMWrMidrA6DAzebHvNJJZlZy7XB8wQ8wssOdnFNJqyV6K5tvv7s
nNQZHWXq2ZvyYJUUQ5xhY+D26a6qmsYo2wv1Bc7WJcen5FnNSeG3NIep/OaxULJt
z8lyQjMGMYeFNKK91pzZ9YfnJmka7IDYancIrnxEpFvrsYgFqrHnnliNCM9BixtU
lra98Q1U/zwrK7saCVP3/yPuced96/9DtaCsO38xf9GRn46dlRFSxnQFuQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMhK5F4IWqcEvqgWtxoCf0rLvd1MMB8GA1UdIwQY
MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx
LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk
MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJHs
7GCe3U+5S0xm2/JH2nv8lgp43ZWZD9rWMRXff2kjhbGct3Y0rykiTe1KebTNjXAA
454YluJj9es/cZWfWjiBoUllkTqFwa78utD8CnI6PpcRvVbbp0Yg5of/UG/1rosV
yxuZ6bYuSkHcb49NotQaCPx1j5pGr2WWvRD+9Hwn/+0Ig1NT/FnuHRtNbQ3bvW+0
16Rx8cWaYBNdlUXRLN6hgWIO3UA5xNKQCHk4HR+donnSS3z9xopzW+0/SNPed6FF
5AcrVOWg10R7xYqMzaakF+FYe7u5wO376rkNxcbx3yw242q5i3ILs/yvf6JbMfW4
5P0OZK+x2xpfVOgxzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:52 2025 by rpki-client