Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          cwyqAPCTyYIO4GqiMDsnbr4NhH6XJ/DOMKFMb3OUiME=
Subject key identifier:   98:A3:F4:73:08:7A:64:0C:BF:F2:02:DF:15:13:87:9B:9B:82:52:81
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       0198D66054E1876076312214F38D596F311E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0C2E
Signing time:             Sat 23 Aug 2025 10:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:33 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: yKqzrJN9bGXXI5Fo2QeJvW8cx1Sbs//I8zltp+9T5Vc=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:54:e1:87:60:76:31:22:14:f3:8d:59:6f:31:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Aug 23 10:01:33 2025 GMT
            Not After : Aug 24 10:01:33 2025 GMT
        Subject: CN=98a3f473087a640cbff202df1513879b9b825281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:4a:e5:9f:e8:95:48:85:2d:b2:50:f9:47:
                    02:46:52:97:10:db:b4:16:0a:8c:63:06:0e:e8:09:
                    8f:5f:5c:81:14:ff:32:97:02:9f:4f:52:63:f4:d0:
                    e0:98:a2:f3:79:f0:4c:4f:29:02:f2:0d:6f:84:ae:
                    c8:f5:d5:da:9d:d8:20:86:d5:16:15:49:27:53:32:
                    7a:7f:82:04:98:95:8a:a4:04:c0:b2:41:45:ea:9c:
                    2b:cc:0d:77:62:0e:dd:91:94:25:3d:66:41:03:9b:
                    52:76:4d:8e:22:f6:2b:ac:02:88:74:05:fd:15:5b:
                    0c:90:a9:37:36:b9:27:b1:9f:60:a6:c1:92:31:50:
                    de:be:c9:17:0e:99:a9:8e:13:95:ec:24:8a:78:6f:
                    3a:8a:20:72:98:56:1c:74:32:86:d8:64:c3:9b:26:
                    1f:4f:39:0e:aa:1a:76:88:00:dc:47:6b:ca:81:87:
                    63:18:e1:54:c2:19:68:a2:1c:51:86:c2:2d:ed:5a:
                    8f:6c:a7:2e:a1:14:f6:02:e5:56:77:9b:64:be:39:
                    46:66:5f:09:19:31:35:28:3a:4e:4a:24:f5:8f:b6:
                    f1:80:06:6d:b1:c7:9b:84:72:52:7a:2e:70:74:00:
                    53:40:de:82:c6:d1:aa:10:55:76:34:7d:20:ae:9f:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:F4:73:08:7A:64:0C:BF:F2:02:DF:15:13:87:9B:9B:82:52:81
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:dc:52:03:58:ca:db:a9:ea:39:46:42:b9:27:e1:3f:74:ed:
         03:3e:02:9b:01:1b:85:f9:97:e9:ad:18:81:ef:70:3b:eb:0b:
         77:16:81:00:6f:e5:0b:06:cf:63:94:6e:fe:fb:c5:e2:df:9f:
         11:64:9d:96:d9:9a:93:2d:d6:6c:20:7d:5c:59:6e:5f:52:c5:
         f9:57:33:03:54:1b:73:af:f8:9e:90:96:09:56:11:75:3d:b9:
         98:0c:35:51:61:71:1b:99:0e:8f:9b:85:6e:ff:55:d4:14:7c:
         4a:89:e1:d9:0e:ac:65:4b:b3:62:c4:64:7f:03:c5:5a:87:70:
         3a:78:7e:fc:ed:40:74:4a:ff:dd:c5:23:82:6e:c8:90:f7:2f:
         23:29:2c:b8:14:f8:40:53:d1:13:bb:99:cc:92:2f:92:49:14:
         e7:f8:11:cb:ab:a7:06:36:1f:c8:2d:08:ec:42:22:6c:a6:1c:
         1f:4a:04:e1:4c:73:01:3a:4f:0a:33:e8:07:4a:c1:8d:94:f0:
         22:6c:bb:01:8d:70:77:71:68:59:65:b7:76:e9:12:86:c6:08:
         c4:52:ba:05:87:77:32:df:d0:1d:44:ad:6d:7b:65:f4:c0:86:
         12:68:72:ee:37:78:cd:d2:ac:4b:14:df:b7:21:97:cd:00:15:
         31:25:5a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFThh2B2MSIU841ZbzEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz
YmMwNzgwHhcNMjUwODIzMTAwMTMzWhcNMjUwODI0MTAwMTMzWjAzMTEwLwYDVQQD
Eyg5OGEzZjQ3MzA4N2E2NDBjYmZmMjAyZGYxNTEzODc5YjliODI1MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhFK5Z/olUiFLbJQ+UcCRlKXENu0
FgqMYwYO6AmPX1yBFP8ylwKfT1Jj9NDgmKLzefBMTykC8g1vhK7I9dXandgghtUW
FUknUzJ6f4IEmJWKpATAskFF6pwrzA13Yg7dkZQlPWZBA5tSdk2OIvYrrAKIdAX9
FVsMkKk3NrknsZ9gpsGSMVDevskXDpmpjhOV7CSKeG86iiBymFYcdDKG2GTDmyYf
TzkOqhp2iADcR2vKgYdjGOFUwhloohxRhsIt7VqPbKcuoRT2AuVWd5tkvjlGZl8J
GTE1KDpOSiT1j7bxgAZtscebhHJSei5wdABTQN6CxtGqEFV2NH0grp/YlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJij9HMIemQMv/IC3xUTh5ubglKBMB8GA1UdIwQY
MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt
ZTc0ZDhkMWQ0ZTAyLzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy
LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4NxSA1jK
26nqOUZCuSfhP3TtAz4CmwEbhfmX6a0Yge9wO+sLdxaBAG/lCwbPY5Ru/vvF4t+f
EWSdltmaky3WbCB9XFluX1LF+VczA1Qbc6/4npCWCVYRdT25mAw1UWFxG5kOj5uF
bv9V1BR8Sonh2Q6sZUuzYsRkfwPFWodwOnh+/O1AdEr/3cUjgm7IkPcvIyksuBT4
QFPRE7uZzJIvkkkU5/gRy6unBjYfyC0I7EIibKYcH0oE4UxzATpPCjPoB0rBjZTw
Imy7AY1wd3FoWWW3dukShsYIxFK6BYd3Mt/QHUStbXtl9MCGEmhy7jd4zdKsSxTf
tyGXzQAVMSVaeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:13 2025 by rpki-client