Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
File:                     7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json)
Hash identifier:          34phUNYoPKpC/0KyDPLh7HIwCC3IrskxO28EL6kWvUA=
Subject key identifier:   26:90:19:5E:82:37:10:FD:83:95:50:77:87:B6:DD:A8:3C:2C:3A:3B
Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Certificate issuer:       /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Certificate serial:       0198D884F30D03E5C97BCAA90E3E7025A14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
Manifest number:          0112
Signing time:             Sat 23 Aug 2025 20:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:48 +0000
Files and hashes:         1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: zwa0FQMYhyw6/d0pngSXiInwTAIIGHr2lWWMEgR15j4=)
                          2: tFhiLjE_x6ntaURfWA3IYuyQkY8.roa (hash: ro3HfbcTzO9HdiyA8mU/a+hvQqF1uykWHi+tS+T8Jt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:f3:0d:03:e5:c9:7b:ca:a9:0e:3e:70:25:a1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
        Validity
            Not Before: Aug 23 20:00:48 2025 GMT
            Not After : Aug 24 20:00:48 2025 GMT
        Subject: CN=2690195e823710fd8395507787b6dda83c2c3a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:b4:09:40:e2:f4:11:a4:39:30:de:9e:9f:
                    28:11:06:eb:65:39:66:52:88:c8:ee:32:5a:1d:5c:
                    3f:73:ef:90:7b:7e:06:f7:80:9b:54:36:ff:c0:ad:
                    33:e9:18:2b:1f:28:18:85:2a:16:a8:31:94:48:42:
                    75:4a:a8:a4:9c:64:76:6a:14:af:75:6e:2d:99:11:
                    1c:53:08:91:09:80:e6:04:05:03:ca:4f:42:c3:f4:
                    60:cc:3a:31:f7:90:34:22:db:52:eb:a5:af:71:60:
                    83:8a:e9:29:f4:74:36:89:57:ab:f0:23:51:1a:80:
                    73:86:84:7c:22:06:4e:83:f5:b2:6c:a8:54:2e:c9:
                    a6:3e:00:bc:ce:a2:c6:ae:6c:74:df:36:56:d0:c7:
                    da:ff:70:29:e6:94:0f:b0:aa:d6:b6:9e:45:a8:0c:
                    86:e4:e3:d7:dd:0f:58:aa:a4:f1:f9:3d:cb:3f:fd:
                    d3:ea:f1:b7:84:7c:29:c9:2f:65:80:8f:44:b6:87:
                    83:af:1a:da:68:67:37:ce:78:b1:d2:5f:72:cc:69:
                    92:ad:11:b6:d6:fd:74:f3:45:21:8b:81:d8:53:48:
                    b7:ca:52:da:01:e0:c6:f9:34:90:dc:09:ec:28:25:
                    82:71:8c:88:c7:2b:c3:9f:ea:c0:41:3e:87:b4:50:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:19:5E:82:37:10:FD:83:95:50:77:87:B6:DD:A8:3C:2C:3A:3B
            X509v3 Authority Key Identifier:
                keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:24:c4:40:d0:53:f4:c0:eb:4c:cd:3a:fd:59:8f:86:6d:e5:
         af:c5:79:14:95:da:c7:27:e1:6b:26:39:d9:42:b6:a6:fd:b5:
         95:a9:5a:5e:76:85:a0:32:7b:cb:1f:fa:b2:6a:f6:86:88:2d:
         d3:4c:6e:9a:9a:c7:1e:e2:d7:28:0c:67:37:46:5c:50:08:e4:
         24:4b:27:c3:de:89:14:79:7e:21:bf:01:0c:8f:65:9c:e4:01:
         43:d6:00:34:4a:70:96:b3:62:e6:14:71:b0:02:5f:c2:bc:ec:
         6f:0d:30:5a:d3:14:da:a4:39:ee:3e:e6:b3:2f:d5:fc:0f:68:
         e0:50:99:7f:bc:d8:5b:3e:52:eb:6f:e1:0c:76:62:e5:fe:6c:
         96:64:5a:3e:79:ef:e0:9e:0f:8f:c8:35:43:cc:36:56:6a:dc:
         1f:1d:93:d2:5a:d7:ef:c7:f0:5e:e6:82:2a:cc:e1:02:0a:77:
         56:99:93:99:ba:e3:0b:78:b9:a9:79:de:e3:76:34:65:de:c1:
         91:b8:4d:cf:ea:27:c1:5a:80:fe:51:9a:cf:fe:ac:f1:7d:65:
         cd:8d:a4:a2:7a:b4:e0:df:a2:2e:46:e7:6a:72:59:d4:42:d6:
         69:8c:e9:bf:69:92:0a:37:ad:81:d2:b9:91:b1:dd:68:4a:da:
         7b:4e:78:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhPMNA+XJe8qpDj5wJaFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDk5ZDc0MWNmN2E2ODhmZmMyYzk3NjgxM2RiN2M1MWVi
YzQ3NDkwHhcNMjUwODIzMjAwMDQ4WhcNMjUwODI0MjAwMDQ4WjAzMTEwLwYDVQQD
EygyNjkwMTk1ZTgyMzcxMGZkODM5NTUwNzc4N2I2ZGRhODNjMmMzYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxya0CUDi9BGkOTDenp8oEQbrZTlm
UojI7jJaHVw/c++Qe34G94CbVDb/wK0z6RgrHygYhSoWqDGUSEJ1SqiknGR2ahSv
dW4tmREcUwiRCYDmBAUDyk9Cw/RgzDox95A0IttS66WvcWCDiukp9HQ2iVer8CNR
GoBzhoR8IgZOg/WybKhULsmmPgC8zqLGrmx03zZW0Mfa/3Ap5pQPsKrWtp5FqAyG
5OPX3Q9YqqTx+T3LP/3T6vG3hHwpyS9lgI9EtoeDrxraaGc3znix0l9yzGmSrRG2
1v1080Uhi4HYU0i3ylLaAeDG+TSQ3AnsKCWCcYyIxyvDn+rAQT6HtFABAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaQGV6CNxD9g5VQd4e23ag8LDo7MB8GA1UdIwQY
MBaAFO5JnXQc96aI/8LJdoE9t8UevEdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjct
YTY3MzJkY2QxMzk4LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjctYTY3MzJkY2QxMzk4
LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSTEQNBT
9MDrTM06/VmPhm3lr8V5FJXaxyfhayY52UK2pv21lalaXnaFoDJ7yx/6smr2hogt
00xumprHHuLXKAxnN0ZcUAjkJEsnw96JFHl+Ib8BDI9lnOQBQ9YANEpwlrNi5hRx
sAJfwrzsbw0wWtMU2qQ57j7msy/V/A9o4FCZf7zYWz5S62/hDHZi5f5slmRaPnnv
4J4Pj8g1Q8w2VmrcHx2T0lrX78fwXuaCKszhAgp3VpmTmbrjC3i5qXne43Y0Zd7B
kbhNz+onwVqA/lGaz/6s8X1lzY2konq04N+iLkbnanJZ1ELWaYzpv2mSCjetgdK5
kbHdaErae054sg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:01:42 2025 by rpki-client