Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File:                     eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier:          jdltSOWAj6Dyti2YahjAkVKSk9/0sf6zn8HIx+Ga+Mo=
Subject key identifier:   43:DB:69:12:D8:1D:28:3B:22:B0:74:EC:B3:25:9C:5A:34:80:BF:31
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer:       /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial:       0198D472DA66D88EFC9DD9035F4DBA1573AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number:          064D
Signing time:             Sat 23 Aug 2025 01:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:33 +0000
Files and hashes:         1: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (hash: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=)
                          2: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (hash: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=)
                          3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: +DfDReLrP8VqnWpQxFcXxtA5qRWp6JdJ8awRSEr6sVE=)
                          4: nYyTzI4wXbdYu948I9jdt28hAiU.roa (hash: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=)
                          5: roSBaoRvAnTIt76C3C33nUHwU3g.roa (hash: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:da:66:d8:8e:fc:9d:d9:03:5f:4d:ba:15:73:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
        Validity
            Not Before: Aug 23 01:02:33 2025 GMT
            Not After : Aug 24 01:02:33 2025 GMT
        Subject: CN=43db6912d81d283b22b074ecb3259c5a3480bf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:99:24:a7:58:af:a5:ec:03:7a:32:ec:34:
                    f3:2e:15:12:2b:1a:58:99:04:8b:55:0b:bb:15:a9:
                    5d:94:74:10:40:f2:c8:b6:f0:f3:3e:e4:9c:44:dd:
                    04:09:3b:ea:a3:6a:0d:9c:45:44:89:b9:b2:2c:eb:
                    ae:3f:e0:63:fa:2a:d3:52:c5:00:1f:18:53:80:20:
                    6a:df:91:c3:49:44:35:2b:0a:3a:40:d0:4c:84:43:
                    eb:34:27:dc:f4:9a:b8:49:85:30:cf:87:70:85:27:
                    7c:2c:1e:f2:ae:9e:c5:93:50:d3:d3:0f:a0:85:27:
                    56:22:69:32:9a:0b:3a:66:75:c0:2a:c0:23:d6:bc:
                    6e:01:d5:a4:ca:fe:63:c5:cf:82:3b:a7:fb:d1:f1:
                    60:8d:6e:f1:45:b0:ba:ea:cc:54:41:fc:9f:05:95:
                    c5:fd:53:84:a3:51:2e:22:c1:c1:bb:b5:3c:f1:0d:
                    84:16:d9:7a:eb:85:79:bb:c7:c7:67:01:48:88:93:
                    d8:53:3e:09:e6:3b:3e:91:94:4c:60:67:3c:c3:cd:
                    f2:34:23:30:70:82:1c:c4:e5:0c:04:af:70:0c:4c:
                    e6:e7:7c:43:1e:6c:b5:3c:81:35:3e:9d:a3:9d:bd:
                    0a:5e:5b:2f:7b:45:ab:74:77:82:59:e5:26:63:87:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:69:12:D8:1D:28:3B:22:B0:74:EC:B3:25:9C:5A:34:80:BF:31
            X509v3 Authority Key Identifier:
                keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:40:f4:82:9e:34:a9:96:0b:47:79:2c:69:93:f2:36:33:f5:
         23:98:ee:2d:c9:a9:e7:d2:08:e3:60:d6:c3:16:78:68:7a:b1:
         5c:9a:f4:e0:45:86:29:4a:44:77:7e:a3:6e:ef:91:5b:1e:db:
         9d:16:9d:37:e8:c3:c6:12:d2:34:ea:b3:0e:7c:dc:b3:93:07:
         d9:96:92:2c:b7:49:75:f1:25:50:01:2a:b8:4a:f7:e2:35:78:
         72:83:38:a9:26:00:30:21:a2:a7:6c:8f:13:96:81:a7:23:88:
         50:35:8e:80:c4:e4:d2:c4:5e:20:77:64:97:1c:9a:51:e6:bd:
         27:41:a3:bf:1b:0c:33:2d:6b:aa:ea:27:ad:f7:ab:7d:69:7f:
         67:59:29:b7:d1:7c:9d:ff:7e:c8:98:97:68:6e:5d:0b:b1:09:
         4c:68:8c:01:dd:53:2d:76:77:fe:67:44:a3:d9:e5:1f:b0:50:
         e4:77:dc:b4:8b:f4:52:4b:f5:74:e6:8a:b1:92:aa:22:04:c5:
         b9:1b:4e:d1:13:57:f2:fd:3d:9c:56:e9:de:be:05:25:62:68:
         f2:52:fe:08:c1:41:c0:af:19:d5:cc:84:14:22:ba:92:c4:55:
         d4:ca:b0:46:3e:3d:d0:f1:17:a2:bc:bd:07:3b:c3:83:23:d3:
         2f:21:ab:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctpm2I78ndkDX026FXOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjUwODIzMDEwMjMzWhcNMjUwODI0MDEwMjMzWjAzMTEwLwYDVQQD
Eyg0M2RiNjkxMmQ4MWQyODNiMjJiMDc0ZWNiMzI1OWM1YTM0ODBiZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ6ZJKdYr6XsA3oy7DTzLhUSKxpY
mQSLVQu7FaldlHQQQPLItvDzPuScRN0ECTvqo2oNnEVEibmyLOuuP+Bj+irTUsUA
HxhTgCBq35HDSUQ1Kwo6QNBMhEPrNCfc9Jq4SYUwz4dwhSd8LB7yrp7Fk1DT0w+g
hSdWImkymgs6ZnXAKsAj1rxuAdWkyv5jxc+CO6f70fFgjW7xRbC66sxUQfyfBZXF
/VOEo1EuIsHBu7U88Q2EFtl664V5u8fHZwFIiJPYUz4J5js+kZRMYGc8w83yNCMw
cIIcxOUMBK9wDEzm53xDHmy1PIE1Pp2jnb0KXlsve0WrdHeCWeUmY4eHTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPbaRLYHSg7IrB07LMlnFo0gL8xMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0D0gp40
qZYLR3ksaZPyNjP1I5juLcmp59II42DWwxZ4aHqxXJr04EWGKUpEd36jbu+RWx7b
nRadN+jDxhLSNOqzDnzcs5MH2ZaSLLdJdfElUAEquEr34jV4coM4qSYAMCGip2yP
E5aBpyOIUDWOgMTk0sReIHdklxyaUea9J0GjvxsMMy1rquonrferfWl/Z1kpt9F8
nf9+yJiXaG5dC7EJTGiMAd1TLXZ3/mdEo9nlH7BQ5HfctIv0Ukv1dOaKsZKqIgTF
uRtO0RNX8v09nFbp3r4FJWJo8lL+CMFBwK8Z1cyEFCK6ksRV1MqwRj490PEXory9
BzvDgyPTLyGrVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:37 2025 by rpki-client