Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          7eRLyVci/QQpTOscu7gBzeVmLL+9uKVkjP3HAdhRDQ8=
Subject key identifier:   EC:97:92:09:B4:C8:92:77:17:28:75:A9:8F:B9:99:20:DB:B4:86:82
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       0198D54E0CF8C9B0714043AE40F1B0911C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          0FDC
Signing time:             Sat 23 Aug 2025 05:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:58 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: WraSg64gyx8Tm58Mj9oPd681tLR+lnLK5X8XjN/lges=)
                          2: RNGBIcy26YwkLmRvqwWnod98dHw.roa (hash: 1chB1LaT432Rfh7J104MJnAPyL20nkhH0rEwOvkmqjI=)
                          3: TtD4AkenCRnOpJfk7w8qE-URg28.roa (hash: 36FKTNsRo/ehA/COedta52Y3SWXvZs+SCu3kcs14xzc=)
                          4: Y5nWo_XCYyPFJlEoZ0MloZlSN58.roa (hash: tU6FYEdPCS58XB/ZNC5fRJzxN8u8sA5aAddXZC4l7jc=)
                          5: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:0c:f8:c9:b0:71:40:43:ae:40:f1:b0:91:1c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Aug 23 05:01:58 2025 GMT
            Not After : Aug 24 05:01:58 2025 GMT
        Subject: CN=ec979209b4c89277172875a98fb99920dbb48682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:f5:ea:ba:ce:9c:37:46:6c:21:ab:0c:cf:
                    5f:a3:9f:9a:67:37:38:7f:07:f9:23:e5:ae:e8:3b:
                    3b:10:e7:d5:0e:21:f5:d2:e8:9a:61:81:94:56:02:
                    ae:b7:73:67:52:e3:ed:f9:79:d0:ac:d5:ab:ab:89:
                    80:70:a8:73:9d:72:e1:e0:a1:33:cb:42:cf:3f:3b:
                    ac:1c:bd:17:a1:12:87:fb:98:88:0f:74:80:cc:5b:
                    ad:df:fe:08:98:97:14:b0:03:08:2f:4f:d1:b6:a7:
                    d4:34:1c:cf:d7:db:5f:78:a4:b6:f1:e4:b7:e1:ec:
                    4c:9d:e4:e2:07:4b:1c:7c:35:e2:48:06:82:e0:f3:
                    ff:39:c4:bb:9c:ee:4a:c8:fb:3b:d6:33:e5:ea:74:
                    b5:d2:77:a7:ac:12:5f:5a:ae:76:18:72:e8:74:bc:
                    42:a5:2a:26:c1:d9:e2:f5:18:e7:6d:64:67:0e:61:
                    7b:f4:fc:51:3b:28:d3:a6:5e:79:3f:88:90:c8:57:
                    af:97:69:8f:23:14:1f:d2:92:f5:e5:f1:71:61:7f:
                    45:c9:d9:9c:90:d4:b8:29:d7:e9:d6:3d:20:b9:8a:
                    c8:1f:b1:ee:4d:e2:19:a5:7d:75:66:7c:50:31:e1:
                    bd:5f:73:98:f9:e3:a9:15:7b:88:2b:5d:83:41:3c:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:92:09:B4:C8:92:77:17:28:75:A9:8F:B9:99:20:DB:B4:86:82
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:64:32:00:e9:e2:7a:b5:ce:61:83:6a:1a:b2:2a:08:00:84:
         9f:41:b7:7a:9d:f4:07:cf:32:95:ed:56:5d:e9:1e:80:67:ce:
         54:9e:ef:9a:97:c7:eb:0d:c4:00:14:1b:66:a3:9d:51:ba:5b:
         cc:a1:15:b8:cb:3f:e8:35:55:53:f8:3d:56:38:8b:7d:28:7a:
         5b:37:2c:ad:b9:79:9d:d2:a3:94:57:c9:7d:30:73:bd:11:27:
         f7:5e:2b:65:22:fc:a9:7d:7d:0f:a0:34:7d:84:78:f4:dd:85:
         a6:7f:bb:59:96:7c:ef:71:01:be:2b:ad:f5:75:48:4c:c7:89:
         d1:88:78:9c:8e:80:f2:36:73:c6:df:22:cb:4a:1d:2a:51:be:
         b1:80:a0:c3:3b:e2:aa:b5:b0:74:11:fc:f0:ac:68:b0:9f:83:
         c4:4f:6e:81:bf:73:a4:d8:65:44:4c:a3:91:d2:32:f0:31:8f:
         bd:28:9d:bd:ff:3b:23:71:fc:7a:90:be:21:66:1d:7a:e4:a1:
         21:73:b3:db:0d:12:9f:25:fb:70:f5:9a:42:2a:de:ef:e9:90:
         11:9b:0e:66:72:9a:9f:8d:65:e7:89:e2:29:89:16:b0:b1:db:
         76:24:11:e6:1b:f4:a2:2b:11:8b:50:84:59:96:5d:06:63:93:
         8b:51:0e:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgz4ybBxQEOuQPGwkRw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjUwODIzMDUwMTU4WhcNMjUwODI0MDUwMTU4WjAzMTEwLwYDVQQD
EyhlYzk3OTIwOWI0Yzg5Mjc3MTcyODc1YTk4ZmI5OTkyMGRiYjQ4NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LX16rrOnDdGbCGrDM9fo5+aZzc4
fwf5I+Wu6Ds7EOfVDiH10uiaYYGUVgKut3NnUuPt+XnQrNWrq4mAcKhznXLh4KEz
y0LPPzusHL0XoRKH+5iID3SAzFut3/4ImJcUsAMIL0/RtqfUNBzP19tfeKS28eS3
4exMneTiB0scfDXiSAaC4PP/OcS7nO5KyPs71jPl6nS10nenrBJfWq52GHLodLxC
pSomwdni9RjnbWRnDmF79PxROyjTpl55P4iQyFevl2mPIxQf0pL15fFxYX9Fydmc
kNS4Kdfp1j0guYrIH7HuTeIZpX11ZnxQMeG9X3OY+eOpFXuIK12DQTzaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyXkgm0yJJ3Fyh1qY+5mSDbtIaCMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2QyAOni
erXOYYNqGrIqCACEn0G3ep30B88yle1WXekegGfOVJ7vmpfH6w3EABQbZqOdUbpb
zKEVuMs/6DVVU/g9VjiLfSh6Wzcsrbl5ndKjlFfJfTBzvREn914rZSL8qX19D6A0
fYR49N2Fpn+7WZZ873EBviut9XVITMeJ0Yh4nI6A8jZzxt8iy0odKlG+sYCgwzvi
qrWwdBH88KxosJ+DxE9ugb9zpNhlREyjkdIy8DGPvSidvf87I3H8epC+IWYdeuSh
IXOz2w0SnyX7cPWaQire7+mQEZsOZnKan41l54niKYkWsLHbdiQR5hv0oisRi1CE
WZZdBmOTi1EO3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:00 2025 by rpki-client