Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File:                     Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier:          jAIAQxw4Na0h3+78XjlIH42WPjM0JVtZNsE3WBlogXU=
Subject key identifier:   21:88:BA:4E:32:60:EF:C1:6E:6E:C5:84:30:0A:DE:21:DD:EB:0B:EA
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer:       /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial:       019921B14D93D0B1C0CBB8F1545884611823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number:          106B
Signing time:             Sun 07 Sep 2025 01:01:31 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:31 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:31 +0000
Files and hashes:         1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: pm6pl0UDugn4jnUvqx6ctFS7r6/xO3BxjAhv2jtsJWo=)
                          2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:4d:93:d0:b1:c0:cb:b8:f1:54:58:84:61:18:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
        Validity
            Not Before: Sep  7 01:01:31 2025 GMT
            Not After : Sep  8 01:01:31 2025 GMT
        Subject: CN=2188ba4e3260efc16e6ec584300ade21ddeb0bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:5a:9a:ce:db:b1:d6:40:98:40:35:c4:27:
                    8b:ae:c1:6a:3d:4e:7f:9c:67:16:92:fb:0c:ec:fe:
                    08:1a:c6:42:79:11:54:43:6f:ca:e9:70:b3:e6:11:
                    1e:4f:39:f5:94:0e:28:12:d4:73:3c:92:86:80:b8:
                    50:e5:e0:db:01:77:a8:b2:21:7e:af:41:1d:8c:0e:
                    6f:8f:4d:bd:f1:a9:94:0b:1e:83:e5:2c:72:29:b8:
                    98:a7:62:40:dc:29:08:e0:8b:97:56:2b:c1:c6:31:
                    c2:e1:8d:39:00:36:ba:dc:31:be:f5:f2:05:68:27:
                    39:cb:d8:a6:37:8e:6a:36:38:63:bd:42:de:ca:33:
                    bd:6b:9f:04:5a:66:42:63:7a:5d:92:a5:04:b2:8c:
                    e1:69:ed:8e:f5:b1:93:58:40:09:17:b4:61:f9:e8:
                    1c:1e:4f:6c:bf:2a:fb:a7:6f:82:f2:71:34:d5:db:
                    7c:56:33:2b:b1:48:94:13:b1:a9:fd:68:59:64:3b:
                    3f:52:88:0b:b6:ad:82:1c:09:ac:5c:9c:80:47:29:
                    a9:57:79:8a:5f:67:4e:da:bf:b4:88:70:e2:4c:e0:
                    6d:b0:c3:4a:ef:4a:75:93:d6:ed:81:d6:53:b8:b2:
                    c1:f5:d8:4e:33:f4:00:97:4e:ae:1f:96:fe:1b:a7:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:88:BA:4E:32:60:EF:C1:6E:6E:C5:84:30:0A:DE:21:DD:EB:0B:EA
            X509v3 Authority Key Identifier:
                keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:bb:7e:f4:c2:25:4c:4c:be:ee:ae:04:8b:9a:04:77:97:
         43:0c:21:f7:d3:04:f4:a2:9b:2c:5f:45:7c:44:db:70:bc:e7:
         ef:29:41:bf:07:a0:49:d9:20:44:75:31:9d:9e:4d:b0:e5:25:
         fa:b6:b3:10:52:2e:46:e7:f3:49:19:99:2e:b5:95:ce:b2:17:
         41:d8:3e:a1:9f:16:a5:62:93:b8:b8:09:ac:18:8b:e7:82:38:
         ac:cd:e9:65:e3:69:ec:f1:49:d6:aa:58:bb:6a:bf:f8:f3:e0:
         f9:67:66:c1:4c:72:a9:68:ed:70:bb:b8:83:77:89:a7:51:fb:
         ea:4d:37:1d:5a:4a:05:93:67:6e:e5:8e:61:3b:8d:5f:2a:8c:
         b1:f1:a8:b9:49:74:fe:33:f4:4c:49:c3:0e:28:66:04:58:3b:
         57:16:25:5e:67:52:0f:c7:ce:b7:46:6f:58:32:22:e6:75:6f:
         2b:96:36:41:db:90:ee:f1:40:ba:a8:f2:03:b4:6e:cd:bf:21:
         fb:c6:6c:64:12:7f:11:fe:12:59:97:bb:17:46:0e:9e:40:9a:
         02:ff:3a:7d:fb:ef:68:d4:30:35:d4:68:27:ac:67:a8:2e:ff:
         18:36:ca:19:fe:08:30:52:f1:3d:e8:39:eb:d0:6d:ce:c1:3b:
         8e:7b:f1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsU2T0LHAy7jxVFiEYRgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MjdiODA2ODFmNWI0OGUxMjY4OTgyOTU5ODNlMGRmMjk5
NzFiOTgwHhcNMjUwOTA3MDEwMTMxWhcNMjUwOTA4MDEwMTMxWjAzMTEwLwYDVQQD
EygyMTg4YmE0ZTMyNjBlZmMxNmU2ZWM1ODQzMDBhZGUyMWRkZWIwYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoltams7bsdZAmEA1xCeLrsFqPU5/
nGcWkvsM7P4IGsZCeRFUQ2/K6XCz5hEeTzn1lA4oEtRzPJKGgLhQ5eDbAXeosiF+
r0EdjA5vj0298amUCx6D5SxyKbiYp2JA3CkI4IuXVivBxjHC4Y05ADa63DG+9fIF
aCc5y9imN45qNjhjvULeyjO9a58EWmZCY3pdkqUEsozhae2O9bGTWEAJF7Rh+egc
Hk9svyr7p2+C8nE01dt8VjMrsUiUE7Gp/WhZZDs/UogLtq2CHAmsXJyARympV3mK
X2dO2r+0iHDiTOBtsMNK70p1k9btgdZTuLLB9dhOM/QAl06uH5b+G6dGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGIuk4yYO/Bbm7FhDAK3iHd6wvqMB8GA1UdIwQY
MBaAFBYnuAaB9bSOEmiYKVmD4N8plxuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTct
NjgyY2QzYmQ0MTAyLzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTctNjgyY2QzYmQ0MTAy
LzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/a7fvTC
JUxMvu6uBIuaBHeXQwwh99ME9KKbLF9FfETbcLzn7ylBvwegSdkgRHUxnZ5NsOUl
+razEFIuRufzSRmZLrWVzrIXQdg+oZ8WpWKTuLgJrBiL54I4rM3pZeNp7PFJ1qpY
u2q/+PPg+WdmwUxyqWjtcLu4g3eJp1H76k03HVpKBZNnbuWOYTuNXyqMsfGouUl0
/jP0TEnDDihmBFg7VxYlXmdSD8fOt0ZvWDIi5nVvK5Y2QduQ7vFAuqjyA7Ruzb8h
+8ZsZBJ/Ef4SWZe7F0YOnkCaAv86ffvvaNQwNdRoJ6xnqC7/GDbKGf4IMFLxPeg5
69BtzsE7jnvx3A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client