Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          htLkrLqFbyFLNzv4DEYsWldkDWV6w4/wFc9bkJB8pjU=
Subject key identifier:   B9:E1:D1:AC:BA:D4:2D:39:75:68:2B:18:6D:83:CF:71:BC:B2:49:C6
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       019846643AD519488D0BF22D34B064F5A732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0C25
Signing time:             Sat 26 Jul 2025 11:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:30 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: vbpPqvH/8jjlXSxfWBcv64ReWZfIw6LCU1QassYPe9c=)
                          2: CCavKhP7AEj7Vk_SGWe1jvcCRyg.roa (hash: ErCh+iOQog12EmBkEQOKm5CnYVqmDx85/Bq5syDjRtk=)
                          3: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (hash: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=)
                          4: hNzhsJdSXiT8XXk4l8WcnUMry00.roa (hash: y9TrG3MRhc+YaHxz1FlPh4FWDR2QP4R98mul7cPcOWM=)
                          5: sJD4QxX177UEmI36HO3Czbd6lZo.roa (hash: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:3a:d5:19:48:8d:0b:f2:2d:34:b0:64:f5:a7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Jul 26 11:00:30 2025 GMT
            Not After : Jul 27 11:00:30 2025 GMT
        Subject: CN=b9e1d1acbad42d3975682b186d83cf71bcb249c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:27:9f:dc:8b:f2:4b:6b:4a:e7:d6:44:69:
                    fe:72:fe:f3:e6:99:af:32:c6:d1:87:d8:f9:0f:a0:
                    3b:7c:bd:e6:25:34:7c:b5:ae:c8:2d:dc:55:92:be:
                    7d:c9:7f:eb:a1:18:e0:67:26:b0:d8:34:52:bf:f8:
                    d9:f5:ee:9c:35:45:69:ee:a3:84:4c:70:ed:31:bb:
                    e6:18:fa:c4:d4:ae:ec:08:5a:b4:f3:e1:d6:bc:64:
                    b7:e3:fc:33:af:31:e3:64:1e:69:77:1d:d9:fb:e2:
                    42:97:3a:0f:7c:96:06:b6:c7:48:26:f5:14:5f:3f:
                    a3:e0:09:73:f2:3e:ee:53:c0:fa:3c:47:be:55:46:
                    c1:3e:3b:fa:73:0a:26:41:b0:3e:08:3a:3d:b0:f9:
                    4b:23:c4:c5:66:9d:fb:76:6d:30:88:94:a0:e9:f4:
                    fd:42:e7:8a:a8:55:44:df:61:9b:25:38:b8:c0:ce:
                    fc:7b:29:84:81:1b:8c:51:74:a9:35:b3:2a:2d:80:
                    49:0c:d5:6e:cf:e3:c0:5c:77:c8:3c:94:22:56:dc:
                    d3:c4:a9:aa:4a:33:23:c3:ba:ec:b3:b5:54:30:84:
                    62:e4:4f:fb:e9:f8:3a:1b:38:85:6f:37:e7:d9:a6:
                    34:1d:83:f4:88:21:96:c3:61:12:b4:82:6a:6f:92:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:D1:AC:BA:D4:2D:39:75:68:2B:18:6D:83:CF:71:BC:B2:49:C6
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:77:1f:90:16:18:c6:f1:78:a9:3b:be:d4:31:cf:e8:06:
         ec:86:b6:74:45:29:db:f9:9e:48:74:0d:02:a7:36:2a:36:ff:
         d1:23:c6:cb:16:ba:37:85:71:3b:13:f9:8d:60:cf:a5:aa:09:
         1d:2b:99:b3:f0:d7:e0:5a:89:af:22:78:c4:cd:85:3b:85:70:
         24:91:8d:bc:2b:fb:c0:6d:a4:f8:74:34:98:cb:01:e2:21:52:
         10:82:da:0a:b7:bf:40:d2:c2:29:b7:8d:bf:ad:b8:b3:2b:92:
         04:e9:93:d7:14:27:f2:0e:a6:76:4e:7b:14:c0:6d:cd:36:02:
         a2:8c:41:36:6a:bd:5f:3f:58:3c:a7:99:9f:a5:3e:45:6b:4f:
         a4:a7:63:ab:74:d0:1f:d7:89:12:ce:60:57:fe:a3:93:11:52:
         a6:38:e2:3c:93:b5:d6:cb:63:1f:0a:d7:e5:f0:09:4c:2e:59:
         57:54:5c:66:63:31:fa:80:05:01:13:8a:ce:2d:4f:50:3f:00:
         63:96:6a:dc:6c:53:23:fb:93:7d:c2:76:87:a9:22:78:ae:81:
         db:90:b0:e0:eb:83:bc:64:b6:4c:ac:a3:4c:1e:c4:50:41:0a:
         b1:8a:55:14:3d:bd:be:d7:06:f2:59:7a:bb:c9:a8:54:2a:0d:
         bc:75:b6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZDrVGUiNC/ItNLBk9acyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWFhOTI4NTBlYmZlNjQ4YWQzZDg5YWRkOGU3MzZlYzM2
NzVhMTEwHhcNMjUwNzI2MTEwMDMwWhcNMjUwNzI3MTEwMDMwWjAzMTEwLwYDVQQD
EyhiOWUxZDFhY2JhZDQyZDM5NzU2ODJiMTg2ZDgzY2Y3MWJjYjI0OWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ4nn9yL8ktrSufWRGn+cv7z5pmv
MsbRh9j5D6A7fL3mJTR8ta7ILdxVkr59yX/roRjgZyaw2DRSv/jZ9e6cNUVp7qOE
THDtMbvmGPrE1K7sCFq08+HWvGS34/wzrzHjZB5pdx3Z++JClzoPfJYGtsdIJvUU
Xz+j4Alz8j7uU8D6PEe+VUbBPjv6cwomQbA+CDo9sPlLI8TFZp37dm0wiJSg6fT9
QueKqFVE32GbJTi4wM78eymEgRuMUXSpNbMqLYBJDNVuz+PAXHfIPJQiVtzTxKmq
SjMjw7rss7VUMIRi5E/76fg6GziFbzfn2aY0HYP0iCGWw2EStIJqb5InPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnh0ay61C05dWgrGG2Dz3G8sknGMB8GA1UdIwQY
MBaAFOEaqShQ6/5kitPYmt2Oc27DZ1oRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEt
MGY4OGQxNmUxYWZlLzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEtMGY4OGQxNmUxYWZl
LzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqB3H5AW
GMbxeKk7vtQxz+gG7Ia2dEUp2/meSHQNAqc2Kjb/0SPGyxa6N4VxOxP5jWDPpaoJ
HSuZs/DX4FqJryJ4xM2FO4VwJJGNvCv7wG2k+HQ0mMsB4iFSEILaCre/QNLCKbeN
v624syuSBOmT1xQn8g6mdk57FMBtzTYCooxBNmq9Xz9YPKeZn6U+RWtPpKdjq3TQ
H9eJEs5gV/6jkxFSpjjiPJO11stjHwrX5fAJTC5ZV1RcZmMx+oAFAROKzi1PUD8A
Y5Zq3GxTI/uTfcJ2h6kieK6B25Cw4OuDvGS2TKyjTB7EUEEKsYpVFD29vtcG8ll6
u8moVCoNvHW2GQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:43 2025 by rpki-client