Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File:                     Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier:          59Roz8c0DSejjzsgNFVFjyIt1aMXzK+zPfmxgLQ4bD4=
Subject key identifier:   DF:1A:EB:17:14:FD:05:E1:03:93:FE:1F:3D:B3:0B:3B:11:48:CA:39
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer:       /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial:       0198D5BC06BEE2C9DE4BD105F58C2D53C4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number:          080E
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: FdrTuv6aUcObxjYdf7gzf7R2FXED9FVBmR5RPry9DiU=)
                          2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:06:be:e2:c9:de:4b:d1:05:f5:8c:2d:53:c4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=df1aeb1714fd05e10393fe1f3db30b3b1148ca39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:65:27:db:58:cc:d3:e5:79:db:02:08:3c:
                    fd:24:11:4f:9b:43:dc:07:5d:74:06:71:bc:ad:04:
                    1e:c3:d6:f8:db:60:f7:16:1a:21:a0:6f:2d:cf:a8:
                    e9:e5:ca:8b:f9:d4:92:e4:87:a2:b9:b3:bc:c8:a8:
                    02:99:cf:b0:13:8a:44:6e:44:39:ec:3c:0d:c8:28:
                    f2:30:92:5d:9c:48:4b:e2:b5:a0:ae:22:07:b6:50:
                    a8:55:eb:16:b0:d5:21:12:5c:2f:41:ec:5d:a2:18:
                    17:fb:7b:d1:cf:bd:41:3c:f3:65:69:1f:19:c5:62:
                    75:2f:7e:de:74:b8:9a:d5:f8:86:66:94:f2:df:9a:
                    4f:e5:2d:49:a8:17:3c:e6:49:2f:4e:d6:49:93:e8:
                    91:45:bc:7e:07:b6:21:29:56:64:ac:fe:2f:13:19:
                    f3:ec:fd:66:b4:1c:b0:40:a1:58:1b:f3:8b:92:7b:
                    1d:c9:2d:24:e0:0b:cb:7f:23:22:b4:d8:10:d6:aa:
                    02:c9:6a:70:f3:be:a9:e6:52:c7:eb:fa:64:f1:5e:
                    4d:74:06:39:f2:c7:4d:43:ea:56:17:e0:00:b6:40:
                    af:d0:3a:21:32:d7:5d:1e:ad:a4:ae:e6:d0:5d:85:
                    25:b8:48:8e:3e:1d:c4:55:9d:9b:c2:79:69:db:fb:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1A:EB:17:14:FD:05:E1:03:93:FE:1F:3D:B3:0B:3B:11:48:CA:39
            X509v3 Authority Key Identifier:
                keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fa:75:3d:41:f1:21:d5:1f:d7:5a:90:50:88:69:e7:17:47:
         1a:3c:af:3e:66:c9:c7:32:0f:5a:7c:5a:c6:a8:a7:a6:4b:76:
         80:d2:3e:12:6b:34:a4:53:a8:27:1a:74:6b:6f:09:bc:3e:55:
         d6:09:a4:aa:81:af:f5:5e:5f:24:dc:87:d2:52:66:e9:63:3f:
         0d:9a:ee:f3:69:a5:8a:13:cb:61:e9:89:b0:d8:01:c7:21:ec:
         f1:65:37:15:3d:60:11:b8:ac:aa:01:1d:f6:58:0e:59:22:96:
         a2:41:60:73:9e:fc:4a:e2:53:b1:4a:1b:5c:5f:f8:8c:62:6c:
         28:43:ed:9d:c1:fc:2c:de:3d:60:fe:8e:57:37:ce:02:45:be:
         36:f6:5b:fc:5c:b0:86:0c:2b:4c:e3:6e:70:43:17:7b:38:6b:
         16:28:9f:ab:d5:5c:d6:b6:47:f2:e5:0f:86:0e:cb:18:3b:ce:
         ab:f4:5f:05:d8:0d:7d:ca:9a:ea:bf:fc:3f:9e:9a:4f:a6:95:
         00:85:19:46:d4:8d:5a:10:96:69:91:9d:5f:7b:e9:92:07:8e:
         21:08:7c:18:7c:69:68:83:2b:fe:1c:ba:9e:b4:c2:ea:87:05:
         35:95:e1:ed:ec:5e:9f:a7:1c:4b:52:ac:b8:cf:75:4b:a5:94:
         d1:0e:2c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAa+4sneS9EF9YwtU8S1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGRmMGM4ZTVkMWIyMzUzOGJlYjVlY2NjM2FiMTI4NjVk
ZjdlYWEwHhcNMjUwODIzMDcwMjA2WhcNMjUwODI0MDcwMjA2WjAzMTEwLwYDVQQD
EyhkZjFhZWIxNzE0ZmQwNWUxMDM5M2ZlMWYzZGIzMGIzYjExNDhjYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GhlJ9tYzNPledsCCDz9JBFPm0Pc
B110BnG8rQQew9b422D3FhohoG8tz6jp5cqL+dSS5IeiubO8yKgCmc+wE4pEbkQ5
7DwNyCjyMJJdnEhL4rWgriIHtlCoVesWsNUhElwvQexdohgX+3vRz71BPPNlaR8Z
xWJ1L37edLia1fiGZpTy35pP5S1JqBc85kkvTtZJk+iRRbx+B7YhKVZkrP4vExnz
7P1mtBywQKFYG/OLknsdyS0k4AvLfyMitNgQ1qoCyWpw876p5lLH6/pk8V5NdAY5
8sdNQ+pWF+AAtkCv0DohMtddHq2krubQXYUluEiOPh3EVZ2bwnlp2/tG6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8a6xcU/QXhA5P+Hz2zCzsRSMo5MB8GA1UdIwQY
MBaAFF8N8Mjl0bI1OL617Mw6sShl336qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUt
YmM1MTNhOThiOWJlLzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUtYmM1MTNhOThiOWJl
LzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfp1PUHx
IdUf11qQUIhp5xdHGjyvPmbJxzIPWnxaxqinpkt2gNI+Ems0pFOoJxp0a28JvD5V
1gmkqoGv9V5fJNyH0lJm6WM/DZru82mlihPLYemJsNgBxyHs8WU3FT1gEbisqgEd
9lgOWSKWokFgc578SuJTsUobXF/4jGJsKEPtncH8LN49YP6OVzfOAkW+NvZb/Fyw
hgwrTONucEMXezhrFiifq9Vc1rZH8uUPhg7LGDvOq/RfBdgNfcqa6r/8P56aT6aV
AIUZRtSNWhCWaZGdX3vpkgeOIQh8GHxpaIMr/hy6nrTC6ocFNZXh7exen6ccS1Ks
uM91S6WU0Q4s2w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:32 2025 by rpki-client