Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          FdiJLOhO6fL5n6ZtaTPz47Im7Z4rZTABmaQ7hpehXpo=
Subject key identifier:   94:C0:85:BC:52:10:4C:16:2B:39:B9:15:35:F5:BA:6A:0F:57:98:CD
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       019846648EA8ABDA821074A1300399FBC7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 11:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:51 +0000
Files and hashes:         1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: CRtSzHcz3FVlGMAFBk5276lJ5qeQ/AoM2XVcclIHjR0=)
                          2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:8e:a8:ab:da:82:10:74:a1:30:03:99:fb:c7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: Jul 26 11:00:51 2025 GMT
            Not After : Jul 27 11:00:51 2025 GMT
        Subject: CN=94c085bc52104c162b39b91535f5ba6a0f5798cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:f6:aa:ac:ea:d5:24:34:bf:f1:c5:0e:46:
                    d1:88:fc:93:92:e2:65:60:68:58:a5:d0:4a:12:3d:
                    ad:fc:2b:e3:99:7b:e7:a0:01:d6:85:f3:b2:02:d6:
                    66:7a:05:3c:45:75:2d:2c:ec:20:26:07:84:45:f3:
                    f3:44:71:49:af:9c:50:16:61:f7:82:71:e2:ec:d0:
                    e3:51:9c:46:73:cb:33:7d:14:0f:13:ac:a3:dd:fd:
                    92:49:57:ad:3f:c6:0f:b8:b8:40:e3:c2:e5:2d:c3:
                    9f:a7:e8:8f:56:e9:48:0c:c4:01:87:9b:5b:cd:d8:
                    e6:a3:85:cb:69:94:1d:4e:21:d8:1f:2f:94:67:5f:
                    15:7a:bc:61:47:7b:57:01:2e:51:ac:f7:7f:2a:6c:
                    9d:c9:65:a1:4a:04:83:9e:cd:50:b6:bf:68:57:04:
                    da:7b:25:bd:00:7a:5a:4f:36:1c:ab:f0:83:55:d9:
                    29:a7:e7:71:7d:b3:84:71:3c:60:d1:0a:d3:c9:03:
                    1c:8e:f9:4f:e8:89:76:11:44:d4:27:cc:23:65:85:
                    66:b8:08:c1:05:31:35:d1:72:ad:cc:5e:bb:b4:99:
                    69:08:4d:de:a3:8b:26:6f:2e:ef:13:f0:11:af:8b:
                    e9:d4:7e:c5:56:3f:76:97:51:ef:67:c2:f7:b8:d0:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C0:85:BC:52:10:4C:16:2B:39:B9:15:35:F5:BA:6A:0F:57:98:CD
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:f7:a0:47:52:ab:fc:a7:fa:58:8b:c7:14:2a:a5:23:e4:
         9c:e8:47:a7:ed:37:0b:0f:2d:71:66:7e:39:9c:15:ad:e8:2c:
         dd:40:d2:c3:19:91:95:07:9a:bb:7f:0f:24:fd:ed:72:13:ce:
         9f:b7:78:15:da:1b:90:10:3a:97:8a:88:62:63:cc:84:74:be:
         dc:74:0b:68:bb:6b:3f:19:e0:9d:70:15:91:ec:40:68:bb:05:
         f3:c1:27:64:2a:0f:7f:68:4e:e7:ff:8c:df:00:6a:38:32:7f:
         08:56:1c:fb:26:d9:a9:8b:2c:4e:e8:c0:2b:95:ae:73:fc:82:
         36:c9:b4:ca:0a:07:8c:23:6e:8f:23:28:1e:03:85:7b:eb:4b:
         cc:ba:91:39:8a:e2:48:03:a5:7d:34:44:e1:be:f1:ca:89:ec:
         c8:1d:f3:e1:fb:19:f9:4b:e7:b2:b2:6d:b5:2f:ce:5a:7b:c9:
         d6:ae:7d:6d:fd:62:1c:66:46:a5:55:55:35:c6:56:3d:b7:2e:
         01:57:ac:e5:f5:41:f8:41:cc:da:b2:d6:f6:79:6f:a0:c2:36:
         d6:18:bc:6f:cd:8e:6a:e2:a2:35:34:6b:72:5c:69:06:b5:3c:
         c2:c9:e5:eb:b7:34:68:ce:cc:ae:08:90:bc:c7:3e:48:34:e5:
         1e:e6:70:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZI6oq9qCEHShMAOZ+8eyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGUyMWIwNjM2YzYxNGViZjQzNjY0Nzk4MDEyYWZkNTZj
NWVlODYwHhcNMjUwNzI2MTEwMDUxWhcNMjUwNzI3MTEwMDUxWjAzMTEwLwYDVQQD
Eyg5NGMwODViYzUyMTA0YzE2MmIzOWI5MTUzNWY1YmE2YTBmNTc5OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8632qqzq1SQ0v/HFDkbRiPyTkuJl
YGhYpdBKEj2t/CvjmXvnoAHWhfOyAtZmegU8RXUtLOwgJgeERfPzRHFJr5xQFmH3
gnHi7NDjUZxGc8szfRQPE6yj3f2SSVetP8YPuLhA48LlLcOfp+iPVulIDMQBh5tb
zdjmo4XLaZQdTiHYHy+UZ18VerxhR3tXAS5RrPd/KmydyWWhSgSDns1Qtr9oVwTa
eyW9AHpaTzYcq/CDVdkpp+dxfbOEcTxg0QrTyQMcjvlP6Il2EUTUJ8wjZYVmuAjB
BTE10XKtzF67tJlpCE3eo4smby7vE/ARr4vp1H7FVj92l1HvZ8L3uNAiIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTAhbxSEEwWKzm5FTX1umoPV5jNMB8GA1UdIwQY
MBaAFOPeIbBjbGFOv0NmR5gBKv1Wxe6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYt
YjgyNTk2N2E3NTdhLzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYtYjgyNTk2N2E3NTdh
LzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJj3oEdS
q/yn+liLxxQqpSPknOhHp+03Cw8tcWZ+OZwVregs3UDSwxmRlQeau38PJP3tchPO
n7d4FdobkBA6l4qIYmPMhHS+3HQLaLtrPxngnXAVkexAaLsF88EnZCoPf2hO5/+M
3wBqODJ/CFYc+ybZqYssTujAK5Wuc/yCNsm0ygoHjCNujyMoHgOFe+tLzLqROYri
SAOlfTRE4b7xyonsyB3z4fsZ+UvnsrJttS/OWnvJ1q59bf1iHGZGpVVVNcZWPbcu
AVes5fVB+EHM2rLW9nlvoMI21hi8b82OauKiNTRrclxpBrU8wsnl67c0aM7MrgiQ
vMc+SDTlHuZw8w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:36 2025 by rpki-client