Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          WNAzYAPydd6x4x82zX7gkFQUZmiQ6dTRwqgMeG2nTWA=
Subject key identifier:   8F:B2:B6:F7:DF:E0:7B:CB:AA:07:06:94:91:E6:CA:5C:91:CC:28:39
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       0199FE476E19BEC4123B247BAB4D9B56B491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          0A82
Signing time:             Sun 19 Oct 2025 21:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:58 +0000
Files and hashes:         1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=)
                          2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: xh2anuht6QPrT5k8YyTnQnG3m6K/vjKB56bZhwvp1DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:6e:19:be:c4:12:3b:24:7b:ab:4d:9b:56:b4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: Oct 19 21:01:58 2025 GMT
            Not After : Oct 20 21:01:58 2025 GMT
        Subject: CN=8fb2b6f7dfe07bcbaa07069491e6ca5c91cc2839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:ea:7a:a7:f9:9f:a1:22:0f:f1:bf:34:5a:
                    77:91:ff:db:3e:a1:b2:13:59:fd:73:3d:e2:01:db:
                    91:de:fe:dc:a1:c2:a4:f4:c9:c8:9d:25:4e:de:a6:
                    a0:8a:54:6a:8c:46:b2:e6:85:94:b0:8a:f4:cd:3e:
                    99:8d:92:59:05:cd:41:9c:56:e0:69:93:42:b8:ec:
                    6d:e3:b7:5f:7f:3e:6b:60:d1:a0:2d:bc:8e:53:08:
                    1f:94:99:e8:7a:36:fd:80:39:27:c8:95:cb:40:cb:
                    ff:22:10:d9:9b:e7:b5:26:20:27:ae:92:b4:d3:18:
                    c3:c3:9a:ff:e3:9f:e6:1b:2c:83:30:89:9a:31:9b:
                    f9:ce:ca:66:25:b4:1b:62:7b:9c:15:e4:5c:8f:86:
                    6c:04:a7:c5:25:ca:94:3f:79:07:83:44:fc:23:61:
                    72:c7:4d:1b:f3:ff:86:89:3f:48:2a:6a:68:8c:d8:
                    d6:eb:50:65:ab:16:f7:f4:66:d7:84:f1:01:ae:4c:
                    37:af:54:68:87:4f:fd:78:9b:52:4e:52:65:8f:a4:
                    97:07:f0:e5:4a:4c:9b:0f:f1:22:29:62:63:4d:f6:
                    e3:9b:2b:67:cd:9b:03:c2:49:75:76:cd:5c:b4:69:
                    64:31:29:bf:c4:e3:46:3e:eb:54:2d:8e:5e:13:01:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B2:B6:F7:DF:E0:7B:CB:AA:07:06:94:91:E6:CA:5C:91:CC:28:39
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:7a:cb:11:5f:4f:06:00:de:12:4b:64:55:70:16:17:fb:
         3f:7a:73:82:96:d3:43:4e:92:95:bf:64:a1:ea:bf:3d:9d:80:
         2c:0c:cd:1d:9f:12:fb:68:74:5a:6c:85:e8:20:33:69:bc:a7:
         dd:12:f2:08:6a:a2:76:bf:95:83:d8:cb:b6:68:aa:ed:10:64:
         9a:80:e0:d4:5a:08:72:39:11:b1:30:ac:96:33:46:f1:bc:5c:
         1a:fe:7b:e5:97:ec:be:43:ae:24:ee:24:f5:b0:e0:c2:52:26:
         45:0b:f9:ec:03:89:70:08:34:f5:09:0c:72:f9:b7:f9:2c:db:
         f7:da:08:a6:26:96:c1:ca:3d:f8:95:0f:8b:7e:56:e1:d3:45:
         a9:8f:b9:7d:60:dc:02:f1:a3:f7:35:f9:d0:fd:11:af:ac:aa:
         b1:8b:76:ab:eb:c7:9a:80:bf:75:64:be:1c:ac:76:c4:cd:bb:
         9d:5d:ff:17:ab:95:e0:51:91:3c:2d:96:8c:52:02:31:da:bc:
         10:e6:82:f0:20:70:74:f5:2c:43:b7:8e:4d:07:d4:9b:52:5c:
         12:f8:ac:7d:b4:e1:b6:7a:ca:a5:9b:c8:cc:f8:85:8e:3b:a4:
         6d:ce:46:c2:97:5b:10:aa:96:6c:eb:b5:9a:35:f3:6b:79:15:
         c6:65:d5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R24ZvsQSOyR7q02bVrSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjFhZDczMWM0Yzc1MjVmODg1YzVkMzc2NGQ0Y2UwZjBl
OGM5OGYwHhcNMjUxMDE5MjEwMTU4WhcNMjUxMDIwMjEwMTU4WjAzMTEwLwYDVQQD
Eyg4ZmIyYjZmN2RmZTA3YmNiYWEwNzA2OTQ5MWU2Y2E1YzkxY2MyODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Tqeqf5n6EiD/G/NFp3kf/bPqGy
E1n9cz3iAduR3v7cocKk9MnInSVO3qagilRqjEay5oWUsIr0zT6ZjZJZBc1BnFbg
aZNCuOxt47dffz5rYNGgLbyOUwgflJnoejb9gDknyJXLQMv/IhDZm+e1JiAnrpK0
0xjDw5r/45/mGyyDMImaMZv5zspmJbQbYnucFeRcj4ZsBKfFJcqUP3kHg0T8I2Fy
x00b8/+GiT9IKmpojNjW61Blqxb39GbXhPEBrkw3r1Roh0/9eJtSTlJlj6SXB/Dl
SkybD/EiKWJjTfbjmytnzZsDwkl1ds1ctGlkMSm/xONGPutULY5eEwEMdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+ytvff4HvLqgcGlJHmylyRzCg5MB8GA1UdIwQY
MBaAFHlhrXMcTHUl+IXF03ZNTODw6MmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYt
OGFhY2MxZjQ4MTA4LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYtOGFhY2MxZjQ4MTA4
LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdF6yxFf
TwYA3hJLZFVwFhf7P3pzgpbTQ06Slb9koeq/PZ2ALAzNHZ8S+2h0WmyF6CAzabyn
3RLyCGqidr+Vg9jLtmiq7RBkmoDg1FoIcjkRsTCsljNG8bxcGv575ZfsvkOuJO4k
9bDgwlImRQv57AOJcAg09QkMcvm3+Szb99oIpiaWwco9+JUPi35W4dNFqY+5fWDc
AvGj9zX50P0Rr6yqsYt2q+vHmoC/dWS+HKx2xM27nV3/F6uV4FGRPC2WjFICMdq8
EOaC8CBwdPUsQ7eOTQfUm1JcEvisfbThtnrKpZvIzPiFjjukbc5GwpdbEKqWbOu1
mjXza3kVxmXVYg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:35 2025 by rpki-client