Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File:                     RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier:          fzAYj61qgz3ybMfgj7x8qRbbtwKAim+RxKDKdeOWLTg=
Subject key identifier:   99:DC:30:F3:DE:D6:83:FE:A9:59:04:A9:FD:94:C9:C7:CD:45:C5:A4
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer:       /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial:       0198D84FFB7EE3B29510C766B2CBEC0716F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number:          08AD
Signing time:             Sat 23 Aug 2025 19:02:57 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:57 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:57 +0000
Files and hashes:         1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: 3iZ39H85ym7oNm38yFOE8GlN5EUrpdCRVhupLt9IFv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:fb:7e:e3:b2:95:10:c7:66:b2:cb:ec:07:16:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
        Validity
            Not Before: Aug 23 19:02:57 2025 GMT
            Not After : Aug 24 19:02:57 2025 GMT
        Subject: CN=99dc30f3ded683fea95904a9fd94c9c7cd45c5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:5d:90:4d:76:b8:39:66:f8:18:c2:d3:4b:
                    05:25:98:5a:2e:39:de:54:61:98:57:be:91:de:72:
                    f0:39:87:ff:9c:ea:e3:54:f1:76:df:a6:a4:f4:52:
                    dc:77:30:b5:04:ae:b1:c9:ba:22:24:13:1e:f4:a2:
                    a2:ba:3e:db:90:93:61:32:81:a2:55:fa:02:1a:e0:
                    5a:39:ea:ae:b3:e2:dc:d3:f2:85:91:3f:9e:8b:b1:
                    9e:ca:7b:12:e1:2d:b7:c0:cf:16:42:9f:90:19:20:
                    3b:26:96:13:fc:b1:6d:51:8c:f4:89:1e:5a:79:cc:
                    76:c3:fc:c8:b6:f2:73:b3:b7:f5:1e:9d:3a:26:fb:
                    68:3f:71:e7:fe:6e:c7:3f:da:27:68:5e:4e:a3:c4:
                    01:2d:03:e5:37:45:21:3b:a5:7a:77:2e:72:b0:39:
                    42:1c:ec:de:8d:8e:fd:ad:22:23:86:05:9a:54:96:
                    17:eb:74:11:32:bc:d2:7a:51:ad:14:68:59:db:86:
                    0a:83:d6:9f:f8:b6:9f:19:c6:e5:75:c5:30:e1:4b:
                    9c:7c:c0:04:8d:0c:bd:48:23:e6:e0:e0:2e:4c:ce:
                    06:ee:b5:da:f1:11:19:63:b2:36:5b:8a:36:1c:60:
                    8d:15:d5:39:1b:b3:6a:f7:0f:94:a7:75:5b:2a:2a:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DC:30:F3:DE:D6:83:FE:A9:59:04:A9:FD:94:C9:C7:CD:45:C5:A4
            X509v3 Authority Key Identifier:
                keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:3f:3e:2c:e1:03:2b:41:cd:f5:d7:86:df:90:9e:d9:54:
         46:bd:48:d2:b9:aa:91:54:ea:84:f0:bc:f6:57:46:6f:83:0d:
         04:a3:92:28:8e:76:4b:0d:f6:e8:a0:49:ff:99:b8:ac:a0:e7:
         f7:fa:8f:78:71:6f:41:11:1a:f8:99:98:45:38:fd:03:6b:bf:
         6c:0f:96:24:eb:be:0c:0e:5a:4b:36:98:42:8a:62:ff:c4:53:
         71:f5:42:7c:86:cd:70:e9:49:a9:5c:51:2a:0b:42:7c:bd:12:
         ff:7a:af:3c:92:fa:33:40:b7:e1:81:36:5a:0b:f5:fc:e6:30:
         08:e2:b9:f2:01:54:d0:42:0b:1e:0b:f4:bc:b1:89:a0:70:c2:
         6d:87:dd:b2:11:9e:a5:64:8d:f8:d5:54:64:52:a0:3a:4b:3a:
         e4:d4:f0:90:0c:4b:3d:bf:8c:7e:60:25:47:fb:c0:80:42:60:
         e5:81:ba:fa:67:ae:f4:d9:fd:1f:40:96:10:6d:95:cc:97:d1:
         5b:ea:cc:b2:bf:e7:c2:30:71:9f:6e:b6:0d:aa:4b:15:fc:6a:
         57:24:09:42:6d:5c:be:07:e2:00:8c:13:60:3d:c7:96:7b:32:
         df:30:01:c3:25:16:39:8c:3c:08:5c:3c:36:5d:8b:fc:f1:be:
         e3:f9:b0:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT/t+47KVEMdmssvsBxb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz
OTJlMjkwHhcNMjUwODIzMTkwMjU3WhcNMjUwODI0MTkwMjU3WjAzMTEwLwYDVQQD
Eyg5OWRjMzBmM2RlZDY4M2ZlYTk1OTA0YTlmZDk0YzljN2NkNDVjNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCRdkE12uDlm+BjC00sFJZhaLjne
VGGYV76R3nLwOYf/nOrjVPF236ak9FLcdzC1BK6xyboiJBMe9KKiuj7bkJNhMoGi
VfoCGuBaOequs+Lc0/KFkT+ei7GeynsS4S23wM8WQp+QGSA7JpYT/LFtUYz0iR5a
ecx2w/zItvJzs7f1Hp06JvtoP3Hn/m7HP9onaF5Oo8QBLQPlN0UhO6V6dy5ysDlC
HOzejY79rSIjhgWaVJYX63QRMrzSelGtFGhZ24YKg9af+LafGcbldcUw4UucfMAE
jQy9SCPm4OAuTM4G7rXa8REZY7I2W4o2HGCNFdU5G7Nq9w+Up3VbKioCGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJncMPPe1oP+qVkEqf2UycfNRcWkMB8GA1UdIwQY
MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt
OGY5MzRlNzE3NjdjLzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj
LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBU/Pizh
AytBzfXXht+QntlURr1I0rmqkVTqhPC89ldGb4MNBKOSKI52Sw326KBJ/5m4rKDn
9/qPeHFvQREa+JmYRTj9A2u/bA+WJOu+DA5aSzaYQopi/8RTcfVCfIbNcOlJqVxR
KgtCfL0S/3qvPJL6M0C34YE2Wgv1/OYwCOK58gFU0EILHgv0vLGJoHDCbYfdshGe
pWSN+NVUZFKgOks65NTwkAxLPb+MfmAlR/vAgEJg5YG6+meu9Nn9H0CWEG2VzJfR
W+rMsr/nwjBxn262DapLFfxqVyQJQm1cvgfiAIwTYD3Hlnsy3zABwyUWOYw8CFw8
Nl2L/PG+4/mwtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:55 2025 by rpki-client