Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          9vfy5rasn9aGoA2TiOQW0F9EA5WrWbE65oVAxs2+e/k=
Subject key identifier:   D0:98:A6:AF:7B:F0:1B:94:02:0F:AF:17:D2:E6:7C:B8:6B:92:F7:A8
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       01983E05C145DE85984E004122164DDAA9C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          15FA
Signing time:             Thu 24 Jul 2025 20:00:21 +0000
Manifest this update:     Thu 24 Jul 2025 20:00:21 +0000
Manifest next update:     Fri 25 Jul 2025 20:00:21 +0000
Files and hashes:         1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
                          2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
                          3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: uAW92rFgZ2OsXWkuzuWAgWRSfFqz7m83LUz/oERl3Q4=)
                          4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:05:c1:45:de:85:98:4e:00:41:22:16:4d:da:a9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: Jul 24 20:00:21 2025 GMT
            Not After : Jul 25 20:00:21 2025 GMT
        Subject: CN=d098a6af7bf01b94020faf17d2e67cb86b92f7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:ab:48:c9:c5:10:11:34:5d:df:7b:5a:a2:
                    08:d1:ee:0f:62:11:5b:19:ad:d2:51:3e:18:74:08:
                    be:64:d7:75:1e:c5:19:67:94:c9:6b:e8:c7:f6:34:
                    91:c7:a8:b8:ed:fe:37:6c:90:0e:18:ca:1e:f8:f9:
                    30:98:37:89:27:fe:d3:16:f3:e0:d9:3f:88:c1:59:
                    ee:57:8a:c2:47:c9:01:8e:fa:68:4a:8b:b8:f4:88:
                    1c:c4:63:ff:e6:77:5a:60:12:26:d2:36:c9:1d:0d:
                    64:0c:25:f4:3f:d6:33:e4:de:e9:c2:14:70:75:ff:
                    f2:a7:2b:56:77:e3:38:04:37:0b:95:c4:b1:23:40:
                    d4:7f:90:ab:6b:bb:78:74:44:e8:d9:f1:9e:ee:a4:
                    90:b2:e4:d1:9b:56:3e:50:43:fd:48:66:61:58:79:
                    62:60:12:65:f4:31:5a:f0:13:90:a0:28:54:14:0b:
                    86:33:f4:85:c5:83:7f:0c:8c:6b:37:28:75:a0:22:
                    e7:66:a1:73:3f:69:04:b9:24:a8:9a:34:88:52:6c:
                    c8:db:6a:63:29:a9:f4:a7:33:3f:c0:eb:a4:4a:86:
                    98:25:d3:78:68:ea:16:da:cb:6c:07:e9:88:ec:b4:
                    b1:77:55:b0:e8:11:98:2b:81:7f:8e:d0:19:2c:09:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:98:A6:AF:7B:F0:1B:94:02:0F:AF:17:D2:E6:7C:B8:6B:92:F7:A8
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:cb:e8:9f:c4:4a:4b:19:9e:c5:01:09:41:85:f8:f9:e3:
         d9:08:1d:6f:65:0b:95:0f:1c:6d:5f:1a:46:a7:86:f2:19:cc:
         e4:74:3b:14:f3:1d:d2:e5:97:a5:2b:18:b2:db:a0:2f:79:a6:
         a8:b9:db:dd:18:8b:62:3c:17:e8:9c:d7:9f:3e:c1:71:37:de:
         22:47:a0:e1:a7:f0:2b:ee:75:cf:a4:e3:15:1c:e2:e9:5b:3a:
         54:64:43:78:3c:61:96:38:7d:33:4e:16:10:9c:92:14:c7:a1:
         f1:b8:7b:1b:cd:66:c9:b1:29:0c:1b:06:02:06:a2:4f:47:d6:
         48:53:ab:24:27:e8:10:b9:a6:8f:38:2a:cb:01:a4:06:7a:c0:
         72:c1:f4:8d:07:76:fd:4e:c7:74:26:96:ff:1a:ed:a7:9e:24:
         dd:3d:1b:cb:ef:7d:e0:85:fa:13:27:8a:f6:b7:b8:d3:67:c5:
         00:45:bb:1b:b6:4e:d7:82:83:d9:64:e2:42:2d:65:e1:a0:09:
         fe:9e:61:17:8b:26:21:79:4e:87:8e:33:8e:2e:13:9b:74:39:
         b0:9b:09:e7:c4:ac:e9:37:88:1f:ba:58:83:9a:0d:8f:35:53:
         b9:c7:97:48:85:ff:c1:43:c2:c6:40:a6:75:0b:47:2c:bc:77:
         ae:c0:74:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+BcFF3oWYTgBBIhZN2qnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWYxMWJiOGE4ZDQ4MGEwMzEzZTFmMjE4YTY2YmRmNGU5
NWY2MjcwHhcNMjUwNzI0MjAwMDIxWhcNMjUwNzI1MjAwMDIxWjAzMTEwLwYDVQQD
EyhkMDk4YTZhZjdiZjAxYjk0MDIwZmFmMTdkMmU2N2NiODZiOTJmN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI+rSMnFEBE0Xd97WqII0e4PYhFb
Ga3SUT4YdAi+ZNd1HsUZZ5TJa+jH9jSRx6i47f43bJAOGMoe+PkwmDeJJ/7TFvPg
2T+IwVnuV4rCR8kBjvpoSou49IgcxGP/5ndaYBIm0jbJHQ1kDCX0P9Yz5N7pwhRw
df/ypytWd+M4BDcLlcSxI0DUf5Cra7t4dETo2fGe7qSQsuTRm1Y+UEP9SGZhWHli
YBJl9DFa8BOQoChUFAuGM/SFxYN/DIxrNyh1oCLnZqFzP2kEuSSomjSIUmzI22pj
Kan0pzM/wOukSoaYJdN4aOoW2stsB+mI7LSxd1Ww6BGYK4F/jtAZLAnNOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCYpq978BuUAg+vF9LmfLhrkveoMB8GA1UdIwQY
MBaAFD3vEbuKjUgKAxPh8hima99OlfYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYt
YjQ5NDY2NDcyNGFkLzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYtYjQ5NDY2NDcyNGFk
LzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvbL6J/E
SksZnsUBCUGF+Pnj2Qgdb2ULlQ8cbV8aRqeG8hnM5HQ7FPMd0uWXpSsYstugL3mm
qLnb3RiLYjwX6JzXnz7BcTfeIkeg4afwK+51z6TjFRzi6Vs6VGRDeDxhljh9M04W
EJySFMeh8bh7G81mybEpDBsGAgaiT0fWSFOrJCfoELmmjzgqywGkBnrAcsH0jQd2
/U7HdCaW/xrtp54k3T0by+994IX6EyeK9re402fFAEW7G7ZO14KD2WTiQi1l4aAJ
/p5hF4smIXlOh44zji4Tm3Q5sJsJ58Ss6TeIH7pYg5oNjzVTuceXSIX/wUPCxkCm
dQtHLLx3rsB0DA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:35 2025 by rpki-client