Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File:                     fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier:          5Xdh9yXo8HEyxOIoN6nO3UD8ZUoyHv90UON4eBiak7I=
Subject key identifier:   C1:F5:95:10:CF:9E:CC:8B:23:C6:F5:7D:AD:AD:28:01:6A:59:13:EA
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer:       /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial:       01984A09BD45A09C4E7AFFAF514E2B8A8B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number:          056F
Signing time:             Sun 27 Jul 2025 04:00:08 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:08 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:08 +0000
Files and hashes:         1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: z16G/N9o0QN5JmL10/xkzOpSHY63liri8a47lpC7o+E=)
                          2: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (hash: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:bd:45:a0:9c:4e:7a:ff:af:51:4e:2b:8a:8b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
        Validity
            Not Before: Jul 27 04:00:08 2025 GMT
            Not After : Jul 28 04:00:08 2025 GMT
        Subject: CN=c1f59510cf9ecc8b23c6f57dadad28016a5913ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:0a:ec:2f:f7:97:e1:98:cf:9a:bb:f3:97:
                    8f:c9:60:ab:ae:36:03:2b:48:b0:c3:1f:88:67:70:
                    25:4f:e7:f7:ac:ac:e6:d8:a6:c8:04:ec:81:2b:62:
                    60:6a:20:a1:fb:40:80:8a:60:e0:a9:04:89:f3:d9:
                    69:6a:6c:a4:6a:23:4e:42:e2:2b:a2:49:ac:e8:97:
                    e4:09:e6:88:aa:c8:fe:00:9a:dc:d6:dc:5d:f0:e5:
                    3f:c4:ba:20:a1:64:d6:2b:79:ff:6b:eb:6f:d6:56:
                    57:ba:3f:1a:36:3d:26:e9:51:06:68:50:94:2e:36:
                    84:71:4c:38:cf:10:38:ff:5a:8e:49:93:18:40:4e:
                    d4:3f:c3:e9:db:28:d9:96:0f:ef:d3:56:c5:89:17:
                    00:a8:07:ef:69:95:64:4f:c2:3a:4d:b5:0b:3c:c4:
                    0a:69:29:ca:37:16:21:56:03:60:c3:37:e7:a2:ba:
                    cd:f4:58:ad:fd:4b:78:14:6d:19:66:86:00:45:c9:
                    c1:10:26:1e:ba:fa:de:e4:4f:db:3a:30:1b:ee:cf:
                    e9:11:96:5d:88:39:72:93:ba:68:b3:57:e5:aa:dc:
                    83:8b:58:c9:2c:76:0f:50:a5:9f:7e:7d:0b:61:c4:
                    68:05:c1:21:79:d0:56:a2:fc:bf:c0:e6:d3:41:22:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:95:10:CF:9E:CC:8B:23:C6:F5:7D:AD:AD:28:01:6A:59:13:EA
            X509v3 Authority Key Identifier:
                keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:bc:41:5a:9f:20:36:15:d0:7b:24:d3:c4:79:5e:51:b8:
         06:b8:d4:39:ea:7d:c2:ce:d8:12:94:e7:d9:ac:68:d1:47:4f:
         b7:1a:94:a6:15:ac:b7:68:90:54:36:64:57:ca:49:50:a3:8f:
         82:71:d7:4c:0b:61:cd:f8:4f:b5:56:ff:58:d9:41:c5:11:94:
         3e:3a:a8:3a:83:ed:ce:ba:61:37:d4:13:49:ad:57:d0:97:b4:
         da:4c:6e:f4:f0:44:c2:0b:b8:55:7e:e2:0b:62:a0:aa:67:5a:
         6a:76:28:c3:d1:dc:08:ae:12:40:14:c5:1c:64:43:f5:3b:b7:
         ef:99:ec:5a:a5:c1:5f:1b:63:df:54:1b:e8:74:ae:59:c5:d6:
         7f:18:d3:3b:9a:81:b6:68:fe:02:76:07:83:6d:1e:8c:ba:78:
         1c:4a:aa:6b:3e:df:8a:db:f6:cd:85:51:95:2b:ae:d6:a9:54:
         6f:76:fd:e5:18:4d:38:fa:14:b5:bc:c6:b5:4f:dd:4e:11:b1:
         af:39:29:fc:23:f2:fb:20:67:52:26:e0:d2:59:d0:96:40:34:
         81:73:2a:d0:6c:3a:50:49:a8:5f:7e:b6:1f:c5:20:c2:21:3a:
         c5:bd:fa:f5:62:a9:fa:60:aa:67:65:c2:17:65:7c:fe:bf:94:
         5d:28:a7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCb1FoJxOev+vUU4riotSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0
YjlhY2UwHhcNMjUwNzI3MDQwMDA4WhcNMjUwNzI4MDQwMDA4WjAzMTEwLwYDVQQD
EyhjMWY1OTUxMGNmOWVjYzhiMjNjNmY1N2RhZGFkMjgwMTZhNTkxM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYIK7C/3l+GYz5q785ePyWCrrjYD
K0iwwx+IZ3AlT+f3rKzm2KbIBOyBK2JgaiCh+0CAimDgqQSJ89lpamykaiNOQuIr
okms6JfkCeaIqsj+AJrc1txd8OU/xLogoWTWK3n/a+tv1lZXuj8aNj0m6VEGaFCU
LjaEcUw4zxA4/1qOSZMYQE7UP8Pp2yjZlg/v01bFiRcAqAfvaZVkT8I6TbULPMQK
aSnKNxYhVgNgwzfnorrN9Fit/Ut4FG0ZZoYARcnBECYeuvre5E/bOjAb7s/pEZZd
iDlyk7pos1flqtyDi1jJLHYPUKWffn0LYcRoBcEhedBWovy/wObTQSLaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH1lRDPnsyLI8b1fa2tKAFqWRPqMB8GA1UdIwQY
MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt
MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz
LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAy8QVqf
IDYV0Hsk08R5XlG4BrjUOep9ws7YEpTn2axo0UdPtxqUphWst2iQVDZkV8pJUKOP
gnHXTAthzfhPtVb/WNlBxRGUPjqoOoPtzrphN9QTSa1X0Je02kxu9PBEwgu4VX7i
C2KgqmdaanYow9HcCK4SQBTFHGRD9Tu375nsWqXBXxtj31Qb6HSuWcXWfxjTO5qB
tmj+AnYHg20ejLp4HEqqaz7fitv2zYVRlSuu1qlUb3b95RhNOPoUtbzGtU/dThGx
rzkp/CPy+yBnUibg0lnQlkA0gXMq0Gw6UEmoX362H8UgwiE6xb369WKp+mCqZ2XC
F2V8/r+UXSinGw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:59 2025 by rpki-client