Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          wnKQW/vp/bimPWwjfnoUMrJE8DQ8hvwrOy7G63Dtf6U=
Subject key identifier:   10:15:AC:5D:E5:BC:C1:13:A5:D5:C3:08:D7:41:2E:08:13:1D:70:4E
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       0199500998ED3B18FBEE71CCC0F3A48FDE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          055E
Signing time:             Tue 16 Sep 2025 01:00:30 +0000
Manifest this update:     Tue 16 Sep 2025 01:00:30 +0000
Manifest next update:     Wed 17 Sep 2025 01:00:30 +0000
Files and hashes:         1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
                          2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: +U+2Y4NlGoBSFlxQzrXdjjOnGys1oD1KWWCyNmatYgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:09:98:ed:3b:18:fb:ee:71:cc:c0:f3:a4:8f:de:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: Sep 16 01:00:30 2025 GMT
            Not After : Sep 17 01:00:30 2025 GMT
        Subject: CN=1015ac5de5bcc113a5d5c308d7412e08131d704e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:03:af:51:ab:61:52:9a:df:08:a5:4e:0c:
                    14:4f:a6:a8:c9:b8:ca:89:e4:1a:f3:73:d7:78:90:
                    6e:85:06:57:21:b7:89:3f:45:0a:7b:2f:f0:4b:10:
                    ff:11:91:cc:ea:dc:4c:47:a5:03:e7:3a:04:e6:ac:
                    4b:b7:22:a7:42:84:6f:5f:b3:b2:18:91:9e:a6:8d:
                    49:9c:1e:50:a8:a7:c9:c5:74:7c:8e:b1:3f:79:b9:
                    0d:f7:dd:84:25:78:29:a2:56:57:04:45:33:4d:8f:
                    e6:cf:bf:a0:67:8b:d9:b5:e2:22:f9:41:1a:09:fa:
                    50:34:ad:82:98:ab:92:8c:b5:7c:53:f4:bb:c3:8f:
                    f9:41:d3:89:88:74:1f:3e:27:5a:e0:6f:c3:99:a3:
                    37:fe:1e:73:17:a6:24:90:89:58:84:e4:92:c4:86:
                    44:0e:45:64:72:94:ba:41:85:6c:01:4c:91:18:a6:
                    bc:58:43:37:b6:bf:d2:d1:b8:b9:8f:e4:6f:53:a2:
                    a3:c3:c9:f5:80:d9:21:21:34:79:b9:0e:06:3e:7d:
                    3c:bb:57:8a:9d:65:bc:1b:c4:72:f6:99:97:bc:64:
                    bb:0e:73:bf:66:58:c1:6d:1a:58:cf:5f:01:35:16:
                    cb:ec:44:0b:58:69:b9:ef:c0:73:a7:01:95:90:09:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:AC:5D:E5:BC:C1:13:A5:D5:C3:08:D7:41:2E:08:13:1D:70:4E
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:38:f8:a1:a2:8e:44:4c:76:fc:d4:5d:d2:f8:2d:b1:62:
         b2:10:11:89:63:0e:1c:07:de:7c:28:87:85:6f:a8:d3:b8:3e:
         22:e6:61:0e:7f:9d:58:04:d2:b9:4c:f8:7f:8d:8d:52:79:81:
         32:59:33:2f:2d:58:fe:76:8c:5d:1b:76:2d:86:00:54:64:09:
         5c:ba:60:e6:ca:20:76:a9:ae:ca:72:6d:e6:ef:17:ca:79:2d:
         a5:0f:c8:a6:f3:d6:1d:e8:92:22:c3:81:6a:c9:4b:e2:fb:3a:
         4e:b4:8a:f1:4b:7e:84:ad:07:71:a5:09:24:eb:15:a2:d1:74:
         82:c0:16:9e:2d:d8:15:b5:d1:3a:91:b9:b1:cb:20:5f:6c:f8:
         8d:77:89:4a:78:d0:4c:39:aa:7a:a7:d7:97:3b:8d:48:c2:fa:
         4f:73:ea:e1:a8:28:01:98:8a:3f:f8:5c:b0:6a:b4:2c:93:a8:
         0d:d6:a1:86:61:c3:76:f5:8c:96:bb:fa:cc:7c:10:4a:85:ee:
         3a:c5:e8:0a:bd:5b:86:e5:9c:3a:b9:8d:1b:35:6f:f2:12:95:
         39:fb:50:1b:e1:09:09:8d:81:36:c9:ed:fc:f5:e1:ef:6d:e7:
         5e:05:f1:06:90:5c:52:ce:88:ec:18:28:1d:fb:40:cc:05:dd:
         ca:5f:d2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlQCZjtOxj77nHMwPOkj96QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjUwOTE2MDEwMDMwWhcNMjUwOTE3MDEwMDMwWjAzMTEwLwYDVQQD
EygxMDE1YWM1ZGU1YmNjMTEzYTVkNWMzMDhkNzQxMmUwODEzMWQ3MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBwDr1GrYVKa3wilTgwUT6aoybjK
ieQa83PXeJBuhQZXIbeJP0UKey/wSxD/EZHM6txMR6UD5zoE5qxLtyKnQoRvX7Oy
GJGepo1JnB5QqKfJxXR8jrE/ebkN992EJXgpolZXBEUzTY/mz7+gZ4vZteIi+UEa
CfpQNK2CmKuSjLV8U/S7w4/5QdOJiHQfPida4G/DmaM3/h5zF6YkkIlYhOSSxIZE
DkVkcpS6QYVsAUyRGKa8WEM3tr/S0bi5j+RvU6Kjw8n1gNkhITR5uQ4GPn08u1eK
nWW8G8Ry9pmXvGS7DnO/ZljBbRpYz18BNRbL7EQLWGm578BzpwGVkAl6QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAVrF3lvMETpdXDCNdBLggTHXBOMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXU4+KGi
jkRMdvzUXdL4LbFishARiWMOHAfefCiHhW+o07g+IuZhDn+dWATSuUz4f42NUnmB
MlkzLy1Y/naMXRt2LYYAVGQJXLpg5sogdqmuynJt5u8XynktpQ/IpvPWHeiSIsOB
aslL4vs6TrSK8Ut+hK0HcaUJJOsVotF0gsAWni3YFbXROpG5scsgX2z4jXeJSnjQ
TDmqeqfXlzuNSML6T3Pq4agoAZiKP/hcsGq0LJOoDdahhmHDdvWMlrv6zHwQSoXu
OsXoCr1bhuWcOrmNGzVv8hKVOftQG+EJCY2BNsnt/PXh723nXgXxBpBcUs6I7Bgo
HftAzAXdyl/SGQ==
-----END CERTIFICATE-----
Generated at Tue Sep 16 07:20:33 2025 by rpki-client