Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File:                     xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier:          FPTz3mFM+R8dlykJMPmja9MS5Hv/tMhw8mLVxqq+zYU=
Subject key identifier:   CE:1C:18:C0:18:47:54:C1:5C:BC:9A:08:BF:4E:EE:FD:1B:EF:67:FC
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer:       /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial:       0198D54DC5D2DD39B248B608A256E397154D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number:          072E
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: yAdJa7q69lb8fujdPCho4aItDDIV1y1sTCs4BakIJxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c5:d2:dd:39:b2:48:b6:08:a2:56:e3:97:15:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=ce1c18c0184754c15cbc9a08bf4eeefd1bef67fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:00:f5:a9:82:e8:f0:3d:47:2f:95:a4:6f:
                    ec:83:11:7c:28:eb:ca:e7:78:fe:b6:55:70:72:54:
                    a3:a3:07:03:fc:8a:25:cb:39:03:d7:b2:c7:19:6e:
                    94:3f:e0:ec:ba:8e:21:50:89:41:15:2a:58:ff:3e:
                    53:2e:ab:b9:a4:25:1f:2e:9a:e3:82:f3:fa:d6:27:
                    ec:5e:50:2a:9b:dc:8e:a5:0c:c9:df:44:a3:a1:5d:
                    7d:54:7e:2a:ae:5b:a3:96:6b:7d:65:5b:38:5d:b1:
                    ef:0a:f0:a2:72:89:60:53:37:a4:8d:66:79:03:b3:
                    5c:d4:4a:ad:59:26:34:98:95:42:40:10:ac:e8:15:
                    35:b8:38:d2:ae:4a:42:dc:be:fa:9b:84:62:a3:e5:
                    54:89:e5:11:12:b6:75:df:26:a1:f6:79:85:9c:8f:
                    b6:c5:9a:95:22:28:de:f9:4b:7b:6d:8e:90:c0:d3:
                    79:2d:fa:00:28:b1:82:77:37:71:50:07:15:89:74:
                    6b:43:c6:87:e3:1b:9b:5b:03:fc:58:d5:e1:6b:4a:
                    3f:51:c0:ca:08:0c:1a:ca:3e:8e:e2:89:53:e5:27:
                    56:d5:d6:18:a3:b7:4a:21:f3:25:af:0d:7a:d6:d2:
                    8e:f6:a3:61:b1:40:40:38:cd:56:7c:e2:12:9f:31:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1C:18:C0:18:47:54:C1:5C:BC:9A:08:BF:4E:EE:FD:1B:EF:67:FC
            X509v3 Authority Key Identifier:
                keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:53:7f:50:0a:6c:cf:9e:14:40:54:b7:9a:83:c5:de:61:
         a7:c8:e3:66:7f:43:bf:5a:68:f2:92:3a:49:8b:3a:54:81:e2:
         3d:db:ce:ab:27:6c:29:75:a5:2f:4a:1f:e9:48:9d:f2:77:13:
         aa:88:95:f7:91:47:2e:16:6e:80:1d:ef:bb:89:ab:72:1f:b9:
         bf:e6:8e:75:db:bb:09:87:ba:74:69:ce:d6:7e:c8:f7:49:56:
         76:ad:36:a0:f7:4a:15:76:7d:31:46:8b:fb:f1:df:c9:74:71:
         ad:60:12:56:86:0b:c0:aa:d0:95:bf:78:a6:81:a3:1f:13:3f:
         cd:d2:0e:21:b3:78:c6:a1:10:c7:f6:d6:36:91:94:70:27:58:
         ab:4f:e0:27:4b:cb:4b:92:74:79:63:00:cb:c8:41:f7:60:4a:
         ab:e9:58:48:c7:db:a0:bb:bb:13:30:14:35:bc:28:c7:f7:5b:
         99:36:9b:c9:23:b3:76:7f:ba:89:58:54:44:1b:77:a2:af:87:
         2e:8a:da:93:0c:4d:c8:33:a6:56:a1:56:03:23:80:69:7f:a3:
         76:c9:b1:24:36:67:99:4c:90:7f:b7:d5:84:33:04:0f:d1:d6:
         77:17:b9:18:bd:d1:ec:ab:44:da:1c:bd:4d:99:cb:22:3c:fe:
         74:9e:cd:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcXS3TmySLYIolbjlxVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MThmMDNmOTg3NDM3MDY1M2FhM2EwMjZmNjcwN2MyZTBl
NzQ3NjQwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
EyhjZTFjMThjMDE4NDc1NGMxNWNiYzlhMDhiZjRlZWVmZDFiZWY2N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzUA9amC6PA9Ry+VpG/sgxF8KOvK
53j+tlVwclSjowcD/IolyzkD17LHGW6UP+Dsuo4hUIlBFSpY/z5TLqu5pCUfLprj
gvP61ifsXlAqm9yOpQzJ30SjoV19VH4qrlujlmt9ZVs4XbHvCvCicolgUzekjWZ5
A7Nc1EqtWSY0mJVCQBCs6BU1uDjSrkpC3L76m4Rio+VUieURErZ13yah9nmFnI+2
xZqVIije+Ut7bY6QwNN5LfoAKLGCdzdxUAcViXRrQ8aH4xubWwP8WNXha0o/UcDK
CAwayj6O4olT5SdW1dYYo7dKIfMlrw161tKO9qNhsUBAOM1WfOISnzHyQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4cGMAYR1TBXLyaCL9O7v0b72f8MB8GA1UdIwQY
MBaAFMYY8D+YdDcGU6o6Am9nB8Lg50dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYt
NTFkZTQ5NjRhOTEzLzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYtNTFkZTQ5NjRhOTEz
LzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/ZTf1AK
bM+eFEBUt5qDxd5hp8jjZn9Dv1po8pI6SYs6VIHiPdvOqydsKXWlL0of6Uid8ncT
qoiV95FHLhZugB3vu4mrch+5v+aOddu7CYe6dGnO1n7I90lWdq02oPdKFXZ9MUaL
+/HfyXRxrWASVoYLwKrQlb94poGjHxM/zdIOIbN4xqEQx/bWNpGUcCdYq0/gJ0vL
S5J0eWMAy8hB92BKq+lYSMfboLu7EzAUNbwox/dbmTabySOzdn+6iVhURBt3oq+H
LorakwxNyDOmVqFWAyOAaX+jdsmxJDZnmUyQf7fVhDMED9HWdxe5GL3R7KtE2hy9
TZnLIjz+dJ7N+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:48 2025 by rpki-client