Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier:          1f2dVNNnHi4lIyDA6tntXDoohmoCCwPmiVfP0c1AS6I=
Subject key identifier:   08:2F:38:94:28:9E:87:4F:2E:5B:94:10:69:77:B1:64:EA:42:0A:AD
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer:       /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial:       019848F766B6C45E61EA1B604787385B408D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 23:00:29 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:29 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:29 +0000
Files and hashes:         1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: /U/D5kabOMXXwzU0bINHfsg16TVKv4kf7oMvICoukQg=)
                          2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:66:b6:c4:5e:61:ea:1b:60:47:87:38:5b:40:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Validity
            Not Before: Jul 26 23:00:29 2025 GMT
            Not After : Jul 27 23:00:29 2025 GMT
        Subject: CN=082f3894289e874f2e5b94106977b164ea420aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:23:c2:1b:2f:1b:3b:ca:53:3c:02:35:f0:
                    41:73:89:0b:9d:06:bf:89:11:76:67:92:cc:87:38:
                    9b:8e:1b:ea:51:29:7b:4c:e9:6a:22:6f:cc:c8:d7:
                    cb:a5:73:a7:9d:89:81:d7:fe:cf:62:2b:8a:61:98:
                    32:02:0d:50:b8:85:f6:3a:af:b4:23:09:7b:f1:9a:
                    bd:e9:98:22:5b:1a:32:36:9a:67:96:c4:7d:58:7b:
                    da:97:25:6e:c9:0c:1f:02:63:60:ba:e3:c6:40:05:
                    b1:cc:09:b4:49:db:fa:cf:44:2a:48:fc:89:aa:a2:
                    34:b4:d7:fb:76:56:d6:04:ef:58:02:c0:c9:e0:bd:
                    f8:4f:ba:8c:3b:8d:5e:b2:83:2c:d4:b7:bf:cc:e6:
                    21:25:4f:70:25:62:ee:5b:05:5e:83:3d:aa:56:e6:
                    21:75:d5:f8:29:c0:2e:62:8a:22:2e:8d:e2:8b:eb:
                    7c:3d:c1:32:d4:15:33:eb:b8:37:65:71:bc:62:8f:
                    ac:fb:0c:ee:44:9d:8d:56:ec:8a:be:e4:13:fb:64:
                    47:1b:98:0e:97:ea:5e:fc:b5:d5:c3:a3:0d:65:31:
                    2a:25:b5:d6:2d:67:d7:96:22:7f:e3:22:34:10:b7:
                    96:89:c6:9c:22:07:8a:aa:81:33:40:5c:1c:be:34:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:38:94:28:9E:87:4F:2E:5B:94:10:69:77:B1:64:EA:42:0A:AD
            X509v3 Authority Key Identifier:
                keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:1a:8d:02:a2:58:15:10:9a:d3:01:4a:59:58:51:12:56:
         34:9f:c7:1b:1d:57:68:db:fe:fb:3e:de:e9:68:2a:dc:d7:7e:
         91:e4:dc:65:94:3a:48:4f:5d:38:09:db:91:eb:17:f1:2a:f2:
         57:f1:8b:8f:77:6e:67:29:72:a6:74:f7:f8:68:a4:fd:6a:9c:
         e8:2f:66:07:2b:af:b4:d3:e3:eb:7e:36:7f:a9:83:46:02:5f:
         45:54:36:af:ef:a2:95:2a:8f:48:d9:55:21:4f:17:f5:c4:ce:
         f6:8a:fe:3a:fb:9c:c9:36:1d:60:81:40:cd:9f:eb:c4:bd:d4:
         f8:a5:60:e6:2b:d7:f2:09:63:30:08:ba:27:ee:d5:6f:e6:2d:
         fb:65:b8:2d:03:30:18:fa:f0:ec:9f:6e:ba:2e:8c:04:e6:a4:
         de:3a:a8:a1:ec:cc:c8:a5:be:ad:e1:62:7c:18:b7:ed:74:79:
         04:00:32:19:ca:28:13:cf:e4:df:3c:59:8d:a6:59:17:5b:88:
         4b:ec:5b:a0:12:11:9f:6a:09:89:66:10:13:75:58:c9:15:41:
         3e:d0:2c:1d:b7:cf:7c:87:f1:90:bf:f4:11:74:f8:66:af:54:
         6a:d7:d2:fe:5e:6f:be:20:b1:7c:53:1e:b0:06:bf:98:af:d4:
         ca:79:cf:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI92a2xF5h6htgR4c4W0CNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx
YmFiZmMwHhcNMjUwNzI2MjMwMDI5WhcNMjUwNzI3MjMwMDI5WjAzMTEwLwYDVQQD
EygwODJmMzg5NDI4OWU4NzRmMmU1Yjk0MTA2OTc3YjE2NGVhNDIwYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MkjwhsvGzvKUzwCNfBBc4kLnQa/
iRF2Z5LMhzibjhvqUSl7TOlqIm/MyNfLpXOnnYmB1/7PYiuKYZgyAg1QuIX2Oq+0
Iwl78Zq96ZgiWxoyNppnlsR9WHvalyVuyQwfAmNguuPGQAWxzAm0Sdv6z0QqSPyJ
qqI0tNf7dlbWBO9YAsDJ4L34T7qMO41esoMs1Le/zOYhJU9wJWLuWwVegz2qVuYh
ddX4KcAuYooiLo3ii+t8PcEy1BUz67g3ZXG8Yo+s+wzuRJ2NVuyKvuQT+2RHG5gO
l+pe/LXVw6MNZTEqJbXWLWfXliJ/4yI0ELeWicacIgeKqoEzQFwcvjTGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgvOJQonodPLluUEGl3sWTqQgqtMB8GA1UdIwQY
MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt
NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4
LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOwajQKi
WBUQmtMBSllYURJWNJ/HGx1XaNv++z7e6Wgq3Nd+keTcZZQ6SE9dOAnbkesX8Sry
V/GLj3duZylypnT3+Gik/Wqc6C9mByuvtNPj6342f6mDRgJfRVQ2r++ilSqPSNlV
IU8X9cTO9or+OvucyTYdYIFAzZ/rxL3U+KVg5ivX8gljMAi6J+7Vb+Yt+2W4LQMw
GPrw7J9uui6MBOak3jqooezMyKW+reFifBi37XR5BAAyGcooE8/k3zxZjaZZF1uI
S+xboBIRn2oJiWYQE3VYyRVBPtAsHbfPfIfxkL/0EXT4Zq9UatfS/l5vviCxfFMe
sAa/mK/UynnP4w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:51 2025 by rpki-client