Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          ppFDJG7YpyBV64zMlxlB7JFajBDk2MBZ1iA0zV2AiFo=
Subject key identifier:   31:5B:A5:46:C9:F9:BA:7D:0A:27:EA:4E:79:B6:88:D5:5B:1C:4A:54
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       0198D73BB7D919BC970822B8A4438CB34CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          10C0
Signing time:             Sat 23 Aug 2025 14:01:11 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:11 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:11 +0000
Files and hashes:         1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
                          2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: GMlaT3a27zIUDD22g2scbj8wlaxGtirMdWXIKsRu7kU=)
                          4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
                          5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
                          6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:b7:d9:19:bc:97:08:22:b8:a4:43:8c:b3:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Aug 23 14:01:11 2025 GMT
            Not After : Aug 24 14:01:11 2025 GMT
        Subject: CN=315ba546c9f9ba7d0a27ea4e79b688d55b1c4a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:c7:f1:c2:63:6f:b5:e9:af:80:92:f9:cf:
                    0d:d2:cb:77:ba:b4:ee:ea:16:ef:bc:1f:4f:62:d9:
                    3f:0c:b7:7f:9a:9a:17:12:6b:8c:c0:d6:46:53:4f:
                    df:32:19:3c:a5:ed:24:17:44:94:69:b8:9f:64:32:
                    3a:d4:9c:c5:3f:fb:a1:c9:57:d0:c1:c7:c1:5a:45:
                    a7:d1:81:84:85:d2:5e:63:b2:e4:62:d2:31:b4:a2:
                    bc:16:fd:35:e7:18:95:67:5f:7a:af:94:ef:f7:88:
                    e7:11:3a:88:6e:e7:e5:cd:f1:99:0e:83:60:21:ea:
                    46:f3:1a:11:ff:c4:40:02:e1:fd:f3:45:7e:15:75:
                    c8:29:5f:b7:49:c2:e2:61:5a:b4:ea:c7:4d:ca:92:
                    8d:58:40:f4:20:b5:70:96:71:0b:5d:cf:9b:bb:be:
                    71:0b:ab:df:3c:78:3f:22:a8:29:9c:58:ed:68:dd:
                    1a:91:1b:45:c9:9a:c1:bf:00:c8:cd:77:25:1d:59:
                    4b:4f:c4:8d:d1:8a:ff:bc:25:33:05:34:6d:da:a3:
                    0b:ab:ec:fa:cb:b7:b9:b7:99:de:d7:06:4b:b9:2c:
                    1c:2c:28:69:3b:c6:fe:bf:19:10:0c:90:65:3d:06:
                    fd:56:53:86:f4:fe:42:16:e3:56:e0:82:89:11:d4:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5B:A5:46:C9:F9:BA:7D:0A:27:EA:4E:79:B6:88:D5:5B:1C:4A:54
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:78:e0:a4:93:b7:29:ac:6d:ae:f9:c9:59:4f:63:0b:7c:f4:
         82:ec:96:71:72:3b:05:dc:ca:dd:4f:74:64:9f:27:8d:17:8c:
         b2:64:2e:d2:0b:4e:ea:17:e8:5a:a3:f9:8f:fa:30:6b:9f:33:
         9f:74:44:a9:7a:d2:e6:9a:a2:a7:38:5b:0a:aa:d5:b0:dc:97:
         46:05:21:c6:1c:12:41:fb:16:f0:43:b6:18:0f:85:00:95:35:
         97:f7:16:12:13:7b:cb:ae:d3:32:43:be:24:28:69:80:89:35:
         53:a0:aa:d2:70:60:c3:f4:1f:48:07:56:91:58:3c:49:93:dc:
         b2:7d:68:85:00:15:11:eb:97:dd:2c:78:55:4d:fc:b5:c5:70:
         be:50:1b:5b:91:be:7a:88:db:a3:35:11:8f:6d:fd:3e:5b:86:
         de:82:ab:73:d8:89:d7:03:67:3e:a2:98:cc:5f:ac:23:ca:57:
         c0:26:16:b5:1d:68:74:27:18:35:2e:4b:ee:f7:48:f1:d6:da:
         a5:8c:f0:94:4e:6b:69:b7:b3:78:6a:7c:44:a2:ed:06:ba:11:
         db:01:28:39:b1:e6:18:16:7c:06:9c:3b:f9:0b:17:2c:38:a4:
         3e:ea:26:d5:2a:2e:3d:38:eb:4f:07:23:cc:6b:15:1a:1f:8d:
         36:9b:5e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO7fZGbyXCCK4pEOMs0z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh
YTg1MjIwHhcNMjUwODIzMTQwMTExWhcNMjUwODI0MTQwMTExWjAzMTEwLwYDVQQD
EygzMTViYTU0NmM5ZjliYTdkMGEyN2VhNGU3OWI2ODhkNTViMWM0YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu7H8cJjb7Xpr4CS+c8N0st3urTu
6hbvvB9PYtk/DLd/mpoXEmuMwNZGU0/fMhk8pe0kF0SUabifZDI61JzFP/uhyVfQ
wcfBWkWn0YGEhdJeY7LkYtIxtKK8Fv015xiVZ196r5Tv94jnETqIbuflzfGZDoNg
IepG8xoR/8RAAuH980V+FXXIKV+3ScLiYVq06sdNypKNWED0ILVwlnELXc+bu75x
C6vfPHg/IqgpnFjtaN0akRtFyZrBvwDIzXclHVlLT8SN0Yr/vCUzBTRt2qMLq+z6
y7e5t5ne1wZLuSwcLChpO8b+vxkQDJBlPQb9VlOG9P5CFuNW4IKJEdRdHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFbpUbJ+bp9CifqTnm2iNVbHEpUMB8GA1UdIwQY
MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt
NzBhMWFmNTFkZmJlLzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl
LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknjgpJO3
KaxtrvnJWU9jC3z0guyWcXI7BdzK3U90ZJ8njReMsmQu0gtO6hfoWqP5j/owa58z
n3REqXrS5pqipzhbCqrVsNyXRgUhxhwSQfsW8EO2GA+FAJU1l/cWEhN7y67TMkO+
JChpgIk1U6Cq0nBgw/QfSAdWkVg8SZPcsn1ohQAVEeuX3Sx4VU38tcVwvlAbW5G+
eojbozURj239PluG3oKrc9iJ1wNnPqKYzF+sI8pXwCYWtR1odCcYNS5L7vdI8dba
pYzwlE5rabezeGp8RKLtBroR2wEoObHmGBZ8Bpw7+QsXLDikPuom1SouPTjrTwcj
zGsVGh+NNptetg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:13 2025 by rpki-client