Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          krgS0WbbugyT2z5Y9SBsP0WgmWMHPWtR2LffSRmnR4k=
Subject key identifier:   2A:2A:C0:98:BB:AE:B2:6B:77:A1:C4:33:E9:D3:76:CB:24:19:77:75
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       0198D4E059AB46186196DA13483C1A1443CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          08FF
Signing time:             Sat 23 Aug 2025 03:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:09 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: ScvcUFqpCnsb2ap3vOW4ynzXIHggwnxWDY261wofYI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:59:ab:46:18:61:96:da:13:48:3c:1a:14:43:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: Aug 23 03:02:09 2025 GMT
            Not After : Aug 24 03:02:09 2025 GMT
        Subject: CN=2a2ac098bbaeb26b77a1c433e9d376cb24197775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:95:d5:da:83:e1:dc:76:60:64:b2:1d:c4:
                    b9:c5:7e:fe:22:b2:4d:f9:70:d7:47:67:3e:a8:e1:
                    56:74:90:0c:a4:21:f2:cc:b6:6c:37:4e:d5:35:bb:
                    ff:15:f6:ff:73:35:4d:ad:43:b2:43:09:48:bc:0a:
                    e1:dc:ab:21:40:32:dd:8e:7b:76:a0:fc:9b:7d:30:
                    c1:fa:09:a1:76:a9:78:b3:90:31:32:4a:da:3c:46:
                    88:87:c0:68:1c:f1:f8:56:7e:3f:60:48:cf:fb:df:
                    22:24:c8:c6:14:8d:73:5d:f9:9c:8c:32:59:ff:42:
                    8d:d6:7a:85:40:bb:b1:4a:07:80:a0:30:55:db:1c:
                    fc:a3:b1:e0:f8:59:17:77:c8:8e:51:51:1d:f5:49:
                    35:3e:af:c3:f8:87:08:af:f7:02:94:63:99:cd:ca:
                    76:0e:f6:6e:26:74:35:f1:34:3d:ac:e7:42:76:5f:
                    dc:6f:38:cf:64:cd:37:8c:fa:5c:e4:ec:a8:7d:2e:
                    9c:c4:08:ab:00:2f:b2:cc:63:9c:4b:03:29:63:4c:
                    32:b6:c2:14:9d:5c:bd:47:2c:22:9d:09:cb:cd:52:
                    2e:3d:61:93:4d:d4:33:1a:2b:44:1e:9d:96:49:2e:
                    74:9f:05:d1:9f:9c:f7:98:d7:4b:e2:84:1f:84:01:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2A:C0:98:BB:AE:B2:6B:77:A1:C4:33:E9:D3:76:CB:24:19:77:75
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:1e:1e:d2:c2:df:a1:2d:56:1a:e4:bc:4b:4b:20:ce:c8:
         0d:1a:3e:28:22:cb:a7:d1:06:59:46:43:6f:ef:20:1c:d2:df:
         ec:d0:84:0a:70:53:6b:35:23:03:d6:38:9d:e7:15:32:83:0d:
         62:3b:01:4b:42:9f:20:05:1d:5a:0f:6e:0f:55:d4:18:a0:fa:
         c5:8d:68:f9:ca:9e:8c:8a:23:2c:f1:d5:46:12:e9:ef:e3:17:
         f3:9d:42:0a:6d:26:8a:a5:06:11:65:13:c1:d4:77:59:b7:7d:
         ea:aa:98:5c:1b:17:22:b0:02:3a:6b:21:36:9f:b9:60:8c:1e:
         0e:b0:e2:e3:55:bb:64:85:44:f1:ba:91:3e:ac:af:37:e9:0a:
         e7:d6:87:e5:8f:22:b2:ef:b1:3d:c1:ce:cb:18:e2:bc:9d:dc:
         9d:27:3d:e0:40:2d:c7:84:78:7d:4e:0b:43:62:87:58:f2:84:
         09:10:48:9c:e8:21:a8:f6:20:f0:9a:07:66:1f:ec:83:6a:1e:
         13:c2:8d:58:92:b9:6d:4f:dd:6f:63:27:c8:2f:c6:c8:86:04:
         a5:ce:60:e7:c3:92:55:7c:b8:ea:40:6a:aa:13:2e:4e:fe:fb:
         9f:91:4e:96:04:89:f3:b2:dc:1b:76:34:32:dd:85:84:c0:9f:
         43:ea:29:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FmrRhhhltoTSDwaFEPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZWQ3MmI0NmJlODZjNjU0ZDU4YzkzMDUxNGE1ZjQzYjRh
NDRlZTIwHhcNMjUwODIzMDMwMjA5WhcNMjUwODI0MDMwMjA5WjAzMTEwLwYDVQQD
EygyYTJhYzA5OGJiYWViMjZiNzdhMWM0MzNlOWQzNzZjYjI0MTk3Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviGV1dqD4dx2YGSyHcS5xX7+IrJN
+XDXR2c+qOFWdJAMpCHyzLZsN07VNbv/Ffb/czVNrUOyQwlIvArh3KshQDLdjnt2
oPybfTDB+gmhdql4s5AxMkraPEaIh8BoHPH4Vn4/YEjP+98iJMjGFI1zXfmcjDJZ
/0KN1nqFQLuxSgeAoDBV2xz8o7Hg+FkXd8iOUVEd9Uk1Pq/D+IcIr/cClGOZzcp2
DvZuJnQ18TQ9rOdCdl/cbzjPZM03jPpc5OyofS6cxAirAC+yzGOcSwMpY0wytsIU
nVy9RywinQnLzVIuPWGTTdQzGitEHp2WSS50nwXRn5z3mNdL4oQfhAG/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoqwJi7rrJrd6HEM+nTdsskGXd1MB8GA1UdIwQY
MBaAFObtcrRr6GxlTVjJMFFKX0O0pE7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMt
ZDg0MzJhMjc1M2ViLzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMtZDg0MzJhMjc1M2Vi
LzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWseHtLC
36EtVhrkvEtLIM7IDRo+KCLLp9EGWUZDb+8gHNLf7NCECnBTazUjA9Y4necVMoMN
YjsBS0KfIAUdWg9uD1XUGKD6xY1o+cqejIojLPHVRhLp7+MX851CCm0miqUGEWUT
wdR3Wbd96qqYXBsXIrACOmshNp+5YIweDrDi41W7ZIVE8bqRPqyvN+kK59aH5Y8i
su+xPcHOyxjivJ3cnSc94EAtx4R4fU4LQ2KHWPKECRBInOghqPYg8JoHZh/sg2oe
E8KNWJK5bU/db2MnyC/GyIYEpc5g58OSVXy46kBqqhMuTv77n5FOlgSJ87LcG3Y0
Mt2FhMCfQ+opMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:04 2025 by rpki-client