Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File:                     e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier:          B73RPgcLaWX20NoQKKa63WG/X1bbj4ceQt26KJLkfJM=
Subject key identifier:   61:CE:AF:C0:C8:49:39:57:3F:49:BC:7F:AB:C7:66:A7:CC:C3:23:39
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer:       /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial:       0198D660FACA3C6B464D8C931D3F914F49DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number:          063A
Signing time:             Sat 23 Aug 2025 10:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:16 +0000
Files and hashes:         1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=)
                          2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: vZeLWEobGB3lj+RDFlh8DfCM+20k7DWTsp3jA3det8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:fa:ca:3c:6b:46:4d:8c:93:1d:3f:91:4f:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
        Validity
            Not Before: Aug 23 10:02:16 2025 GMT
            Not After : Aug 24 10:02:16 2025 GMT
        Subject: CN=61ceafc0c84939573f49bc7fabc766a7ccc32339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:11:04:a0:04:52:af:47:ff:a9:cb:2b:b5:
                    6e:4a:7e:0b:d4:2f:41:01:df:00:0b:10:9c:a5:0f:
                    3c:d6:da:8d:c6:0a:c5:4f:f1:40:f4:56:fe:40:28:
                    b5:a8:b7:1e:13:1e:e2:27:2a:b3:79:87:ef:28:1c:
                    e8:1c:e5:73:93:b6:3b:5f:8f:3b:be:bb:b5:5d:84:
                    ca:c9:00:62:67:df:be:31:46:d2:3f:3f:56:b1:ff:
                    be:da:54:40:55:b4:fd:78:c7:4d:52:3f:5d:be:d1:
                    2a:f8:6b:19:b8:1a:0a:d8:85:c6:dd:a1:9b:da:65:
                    76:2f:19:17:2a:a5:92:8b:08:54:5e:8f:ed:38:94:
                    82:21:38:92:ac:8f:9c:90:cd:36:9e:57:9d:47:78:
                    ec:5b:f1:b4:a6:07:59:7d:d5:6c:2c:0f:51:b0:85:
                    5e:cf:2b:89:04:9e:ce:e1:c9:0b:7c:a0:9c:5f:6a:
                    b5:9a:01:63:2b:08:61:ec:c0:97:0b:bb:f7:d7:fb:
                    8e:9b:bc:6e:be:17:f4:1e:83:54:4e:02:7a:96:eb:
                    f6:ca:53:3f:de:2a:f6:e6:8c:db:64:3c:db:78:8c:
                    a4:99:83:36:0b:98:dd:a9:fc:27:c2:86:7d:74:70:
                    1a:05:87:57:00:25:ec:7c:97:38:4c:5e:18:08:5d:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CE:AF:C0:C8:49:39:57:3F:49:BC:7F:AB:C7:66:A7:CC:C3:23:39
            X509v3 Authority Key Identifier:
                keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:db:5f:1b:08:e8:2e:76:94:3f:8e:b8:c8:ae:1c:d5:d4:18:
         3d:3b:15:78:fd:63:f4:c2:8d:4b:23:f6:86:49:10:f0:11:10:
         40:f5:3d:72:23:7b:39:de:a8:09:5c:bd:1b:74:d4:c9:e8:4a:
         79:e7:bc:b8:c3:a8:e1:52:22:62:e7:50:d3:69:1e:2e:a4:83:
         02:8e:5b:7b:fd:38:fe:a0:e9:56:9b:26:57:ac:2e:e9:91:52:
         f5:e7:42:d6:72:c8:66:0b:ef:ba:c5:79:f6:6a:f4:85:39:c3:
         0c:08:cc:dd:56:0a:43:22:d6:22:22:7a:a5:7a:b2:b9:91:75:
         ad:29:b4:5a:50:7e:30:8a:77:4f:ac:f1:d3:49:bf:25:98:38:
         3e:43:f9:75:eb:27:6d:18:09:0b:6c:6d:49:aa:86:e7:fc:92:
         1a:3d:68:52:39:12:93:82:4a:75:a4:78:99:d9:66:b1:76:88:
         ac:a2:4b:d2:75:86:2f:be:78:c6:58:81:05:b3:52:6a:e3:33:
         8a:1a:45:17:8d:4b:3a:f5:b7:ad:4e:dc:77:bc:85:15:d4:a0:
         d6:d4:1a:d9:ea:bb:71:6f:4b:70:65:e9:de:ec:13:5f:57:ae:
         5f:b3:91:96:1e:1e:c0:a5:8d:52:48:b8:77:10:ce:8c:b7:21:
         ad:39:c2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPrKPGtGTYyTHT+RT0nfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiN2RlOGQxMzUzM2QxZTM2YjExMzVhNWQyZTlhNmZmMzk4
NWNkYTIwHhcNMjUwODIzMTAwMjE2WhcNMjUwODI0MTAwMjE2WjAzMTEwLwYDVQQD
Eyg2MWNlYWZjMGM4NDkzOTU3M2Y0OWJjN2ZhYmM3NjZhN2NjYzMyMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qsRBKAEUq9H/6nLK7VuSn4L1C9B
Ad8ACxCcpQ881tqNxgrFT/FA9Fb+QCi1qLceEx7iJyqzeYfvKBzoHOVzk7Y7X487
vru1XYTKyQBiZ9++MUbSPz9Wsf++2lRAVbT9eMdNUj9dvtEq+GsZuBoK2IXG3aGb
2mV2LxkXKqWSiwhUXo/tOJSCITiSrI+ckM02nledR3jsW/G0pgdZfdVsLA9RsIVe
zyuJBJ7O4ckLfKCcX2q1mgFjKwhh7MCXC7v31/uOm7xuvhf0HoNUTgJ6luv2ylM/
3ir25ozbZDzbeIykmYM2C5jdqfwnwoZ9dHAaBYdXACXsfJc4TF4YCF24GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHOr8DISTlXP0m8f6vHZqfMwyM5MB8GA1UdIwQY
MBaAFHt96NE1M9HjaxE1pdLppv85hc2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2It
MmU5YjJkODhkNTQ3LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81MWQxNzctOWJiNC00ZGFlLTk4M2ItMmU5YjJkODhkNTQ3
LzEvZTMzbzBUVXowZU5yRVRXbDB1bW1fem1GemFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdtfGwjo
LnaUP464yK4c1dQYPTsVeP1j9MKNSyP2hkkQ8BEQQPU9ciN7Od6oCVy9G3TUyehK
eee8uMOo4VIiYudQ02keLqSDAo5be/04/qDpVpsmV6wu6ZFS9edC1nLIZgvvusV5
9mr0hTnDDAjM3VYKQyLWIiJ6pXqyuZF1rSm0WlB+MIp3T6zx00m/JZg4PkP5desn
bRgJC2xtSaqG5/ySGj1oUjkSk4JKdaR4mdlmsXaIrKJL0nWGL754xliBBbNSauMz
ihpFF41LOvW3rU7cd7yFFdSg1tQa2eq7cW9LcGXp3uwTX1euX7ORlh4ewKWNUki4
dxDOjLchrTnCfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:08 2025 by rpki-client