Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          oG6JarbpvSTI0EhMIqXSWBGarK3k+P5Y4buDH4FHxsk=
Subject key identifier:   B3:D2:DA:62:30:02:06:60:14:33:72:72:64:E0:81:F2:B4:AD:8E:39
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       0198D4744DC601B7073C6B08466BFB694E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          0A56
Signing time:             Sat 23 Aug 2025 01:04:08 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:08 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:08 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: 72yNy0PxodyT8EsNpLZ/8/nyCDvptOSB/lxFYcqWI+M=)
                          2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:4d:c6:01:b7:07:3c:6b:08:46:6b:fb:69:4e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Aug 23 01:04:08 2025 GMT
            Not After : Aug 24 01:04:08 2025 GMT
        Subject: CN=b3d2da62300206601433727264e081f2b4ad8e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:a1:61:e9:1b:fc:4c:3b:4c:75:14:cd:81:
                    a7:1c:a7:56:cb:90:0c:96:4c:ec:29:ed:9a:8d:85:
                    0b:0f:17:00:b8:bd:89:23:72:3e:e9:91:dc:09:56:
                    4c:86:56:68:eb:ed:92:20:c2:0d:c6:20:5f:3f:26:
                    b6:35:8b:db:d1:e0:49:03:6b:79:28:40:76:85:5a:
                    6e:c4:ef:c9:0c:3b:0e:ee:bf:a7:9b:5b:97:72:2e:
                    51:55:90:5f:e5:b5:c7:bb:5f:4f:ef:8c:76:5d:86:
                    e0:4e:c9:2a:e7:82:b4:d6:e8:a7:42:62:cd:12:43:
                    5e:bd:7c:2d:c9:ef:12:40:7b:8d:08:2d:3d:fc:3b:
                    a0:87:95:a8:e6:92:0d:fd:52:84:68:ca:41:7b:8d:
                    aa:84:84:e7:a1:0a:89:d0:fa:23:87:48:35:c4:a1:
                    5f:7c:eb:5a:eb:2d:88:6a:f6:9a:b2:03:dd:45:b3:
                    4a:1c:86:fe:ac:34:df:c2:ac:cd:34:47:3a:65:3f:
                    ca:9b:14:1c:29:1b:f6:25:47:ad:1f:ca:8c:de:0d:
                    5e:a6:ab:26:91:48:f0:8a:1e:a0:a0:e0:f7:c0:bf:
                    a4:e4:9e:17:aa:69:c8:97:1c:1e:d8:cf:24:b1:2f:
                    ac:a8:ee:27:39:fd:3e:e5:4f:11:65:e1:a6:7f:89:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:DA:62:30:02:06:60:14:33:72:72:64:E0:81:F2:B4:AD:8E:39
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:1c:4b:2f:ac:6e:de:0e:ca:d0:b6:25:90:bf:6e:85:23:
         42:5a:97:77:d0:82:a1:d5:41:37:91:7f:53:c0:93:4c:27:53:
         f3:d7:4e:f7:88:ed:14:4a:fa:d9:5c:67:56:7f:55:40:a7:e6:
         c8:47:a4:06:52:fb:f1:69:ee:88:6f:68:8a:f6:17:7b:18:5f:
         3e:f6:00:af:0d:51:b7:a7:e3:99:46:1d:d6:3c:7d:74:ff:2b:
         f1:25:e3:e2:77:9e:f9:61:b7:a6:04:2f:15:5e:6c:fe:17:67:
         35:8c:4d:1a:8d:59:d5:4e:85:3c:c0:9e:06:81:25:6f:51:5a:
         a9:1a:7e:7e:94:dc:bf:c4:dc:85:84:0e:53:30:a2:6a:a0:58:
         ec:70:ca:1e:e6:25:3f:e4:2f:3c:9a:75:0c:92:2a:03:69:2f:
         e7:9d:ae:af:97:c1:91:ec:e0:33:c4:1b:50:10:60:4c:eb:43:
         ba:22:4a:73:5d:19:f1:45:0d:61:92:c4:f4:7c:12:e9:9c:d2:
         8d:34:cb:3e:0b:50:3a:26:f9:04:0a:96:30:91:6a:b9:bd:2a:
         a9:b8:08:08:02:b0:f2:b7:21:b8:43:3a:88:a1:c9:c5:38:db:
         b5:4c:6f:3e:f1:18:f5:9c:03:3e:f3:85:a7:56:a1:92:d1:9b:
         78:f1:6d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdE3GAbcHPGsIRmv7aU5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZWUxMWQ4YzQyOTdiZWM1NGJkMzA1NDMwY2E0NzcyZGZh
Yzg0N2EwHhcNMjUwODIzMDEwNDA4WhcNMjUwODI0MDEwNDA4WjAzMTEwLwYDVQQD
EyhiM2QyZGE2MjMwMDIwNjYwMTQzMzcyNzI2NGUwODFmMmI0YWQ4ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt22hYekb/Ew7THUUzYGnHKdWy5AM
lkzsKe2ajYULDxcAuL2JI3I+6ZHcCVZMhlZo6+2SIMINxiBfPya2NYvb0eBJA2t5
KEB2hVpuxO/JDDsO7r+nm1uXci5RVZBf5bXHu19P74x2XYbgTskq54K01uinQmLN
EkNevXwtye8SQHuNCC09/Dugh5Wo5pIN/VKEaMpBe42qhITnoQqJ0Pojh0g1xKFf
fOta6y2IavaasgPdRbNKHIb+rDTfwqzNNEc6ZT/KmxQcKRv2JUetH8qM3g1epqsm
kUjwih6goOD3wL+k5J4XqmnIlxwe2M8ksS+sqO4nOf0+5U8RZeGmf4kevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPS2mIwAgZgFDNycmTggfK0rY45MB8GA1UdIwQY
MBaAFHnuEdjEKXvsVL0wVDDKR3LfrIR6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMt
MTBhMjA2ZGE3YjZiLzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMtMTBhMjA2ZGE3YjZi
LzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFUcSy+s
bt4OytC2JZC/boUjQlqXd9CCodVBN5F/U8CTTCdT89dO94jtFEr62VxnVn9VQKfm
yEekBlL78WnuiG9oivYXexhfPvYArw1Rt6fjmUYd1jx9dP8r8SXj4nee+WG3pgQv
FV5s/hdnNYxNGo1Z1U6FPMCeBoElb1FaqRp+fpTcv8TchYQOUzCiaqBY7HDKHuYl
P+QvPJp1DJIqA2kv552ur5fBkezgM8QbUBBgTOtDuiJKc10Z8UUNYZLE9HwS6ZzS
jTTLPgtQOib5BAqWMJFqub0qqbgICAKw8rchuEM6iKHJxTjbtUxvPvEY9ZwDPvOF
p1ahktGbePFtRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:28 2025 by rpki-client