Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File:                     F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier:          ykVp0IjrJHBMQex4EKxHnFhL1N1/NWl43mSkC5fXqis=
Subject key identifier:   AE:9D:42:A4:FD:8A:2F:DE:5C:31:F3:E0:82:39:63:77:76:AC:DC:E6
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer:       /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial:       0198D472D55F5371032985EA797CA2198FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number:          0D59
Signing time:             Sat 23 Aug 2025 01:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:32 +0000
Files and hashes:         1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: lvQY/wCmru4Agww7jsGgwqA8zWECL4+WwgMwmMRMBIA=)
                          2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d5:5f:53:71:03:29:85:ea:79:7c:a2:19:8f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
        Validity
            Not Before: Aug 23 01:02:32 2025 GMT
            Not After : Aug 24 01:02:32 2025 GMT
        Subject: CN=ae9d42a4fd8a2fde5c31f3e08239637776acdce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:29:1f:d2:0e:af:01:3b:33:03:83:60:91:
                    11:ea:24:a4:84:0e:88:97:35:19:10:c9:b3:18:94:
                    0b:8b:aa:bd:20:2c:09:6f:32:d1:1b:d0:ae:0b:d5:
                    ab:0b:01:aa:c4:8f:79:17:5b:c2:32:6c:fa:04:b3:
                    0c:f9:1f:2e:61:bf:4d:58:b8:6c:0a:2e:98:16:49:
                    62:e4:77:41:49:be:08:d3:6f:d5:20:2a:cb:df:05:
                    91:e6:6f:64:3c:ec:0f:08:8e:02:90:1b:10:0e:c3:
                    90:6e:35:b6:75:81:22:1b:1f:fa:b7:43:47:26:86:
                    58:85:0b:10:de:3c:0e:b4:fb:a4:19:51:59:59:a8:
                    34:cc:aa:a8:c1:c7:76:28:2c:d1:32:ea:f5:1e:db:
                    59:e1:e9:00:a8:d0:87:30:08:0d:11:9c:8c:40:8a:
                    60:b9:75:c0:69:52:ff:a0:ee:ee:7a:c9:ed:5d:43:
                    fb:f9:91:4f:60:54:b6:79:43:a4:8b:99:a3:77:19:
                    7c:cf:bd:21:93:a0:61:e3:89:7d:56:74:84:eb:8b:
                    62:d0:e1:1c:b4:71:c0:5a:e1:ce:95:2c:31:27:a1:
                    1d:bc:77:41:26:30:55:21:34:10:82:af:67:4c:e5:
                    3a:41:47:f1:f0:01:90:12:52:ce:84:80:55:37:98:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:42:A4:FD:8A:2F:DE:5C:31:F3:E0:82:39:63:77:76:AC:DC:E6
            X509v3 Authority Key Identifier:
                keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b9:8f:48:ad:5c:fb:64:43:ad:a1:5a:63:66:fe:2c:fa:58:
         b1:d1:86:70:85:47:92:53:32:49:c0:a3:24:30:21:dd:e0:97:
         f1:7b:a2:40:8a:c6:71:2f:52:fc:92:3b:25:70:60:3e:7b:e5:
         2c:8b:95:48:dc:0d:b4:08:a0:29:c7:6e:e0:ae:21:51:60:fd:
         56:75:85:86:9e:85:5a:e7:35:a8:23:b7:c4:8e:83:37:0f:b0:
         59:82:5b:61:42:56:2c:7f:72:3c:dc:ae:4e:af:d2:00:52:a9:
         af:ea:97:54:4f:ae:19:3d:86:d4:24:fa:2f:89:67:6d:c9:49:
         fc:0c:af:d7:46:57:e8:f2:20:6b:bc:43:23:36:74:85:ca:70:
         de:b8:3f:79:cc:e5:17:c0:18:8f:5c:0b:4e:60:f9:b1:80:68:
         bd:94:86:c2:27:70:25:d1:98:45:ec:5c:d9:74:02:7b:21:dc:
         2a:81:b7:0e:e9:f6:a3:95:a7:22:e0:cf:18:64:d0:4a:dc:fb:
         e6:90:ea:7b:c3:ff:30:4f:2d:f6:da:a1:72:fc:66:12:78:6a:
         60:e5:2f:c7:25:12:b1:fc:1e:57:0f:18:50:57:bf:f5:ff:e6:
         92:2b:91:58:a5:58:67:0c:17:e2:ec:db:bc:e9:0b:66:2d:9c:
         2f:d8:10:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctVfU3EDKYXqeXyiGY+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmViNzFiZDU1NTc2ZjQ1NzYzYmFkZWI2NzZlZDU5OTkw
ZDM5NmEwHhcNMjUwODIzMDEwMjMyWhcNMjUwODI0MDEwMjMyWjAzMTEwLwYDVQQD
EyhhZTlkNDJhNGZkOGEyZmRlNWMzMWYzZTA4MjM5NjM3Nzc2YWNkY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn00pH9IOrwE7MwODYJER6iSkhA6I
lzUZEMmzGJQLi6q9ICwJbzLRG9CuC9WrCwGqxI95F1vCMmz6BLMM+R8uYb9NWLhs
Ci6YFkli5HdBSb4I02/VICrL3wWR5m9kPOwPCI4CkBsQDsOQbjW2dYEiGx/6t0NH
JoZYhQsQ3jwOtPukGVFZWag0zKqowcd2KCzRMur1HttZ4ekAqNCHMAgNEZyMQIpg
uXXAaVL/oO7uesntXUP7+ZFPYFS2eUOki5mjdxl8z70hk6Bh44l9VnSE64ti0OEc
tHHAWuHOlSwxJ6EdvHdBJjBVITQQgq9nTOU6QUfx8AGQElLOhIBVN5jZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6dQqT9ii/eXDHz4II5Y3d2rNzmMB8GA1UdIwQY
MBaAFBdutxvVVXb0V2O63rZ27VmZDTlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTIt
OWRkM2QyMTkwN2EzLzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTItOWRkM2QyMTkwN2Ez
LzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7mPSK1c
+2RDraFaY2b+LPpYsdGGcIVHklMyScCjJDAh3eCX8XuiQIrGcS9S/JI7JXBgPnvl
LIuVSNwNtAigKcdu4K4hUWD9VnWFhp6FWuc1qCO3xI6DNw+wWYJbYUJWLH9yPNyu
Tq/SAFKpr+qXVE+uGT2G1CT6L4lnbclJ/Ayv10ZX6PIga7xDIzZ0hcpw3rg/eczl
F8AYj1wLTmD5sYBovZSGwidwJdGYRexc2XQCeyHcKoG3Dun2o5WnIuDPGGTQStz7
5pDqe8P/ME8t9tqhcvxmEnhqYOUvxyUSsfweVw8YUFe/9f/mkiuRWKVYZwwX4uzb
vOkLZi2cL9gQ3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:31 2025 by rpki-client