Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          hF5lef/QO0bdORwPJTDWFAKa2I4MYLIZrEAXmISmnRo=
Subject key identifier:   30:5C:51:B3:E9:76:EE:22:3D:31:A7:8B:DC:26:F6:D7:B3:EC:B9:5C
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       0199221ED9D43C951831D3885574B0E0A9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:01:11 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:11 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:11 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: 1fkjhYW9NX0TbnHcZkOAuuZJRJ1bNt2TTWmXXavaX/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:d9:d4:3c:95:18:31:d3:88:55:74:b0:e0:a9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Sep  7 03:01:11 2025 GMT
            Not After : Sep  8 03:01:11 2025 GMT
        Subject: CN=305c51b3e976ee223d31a78bdc26f6d7b3ecb95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:7a:19:d0:58:b5:94:03:15:ec:09:bf:87:
                    31:bc:3a:e4:57:39:91:82:f3:24:f3:2c:a8:0a:14:
                    49:ae:fe:33:d5:20:28:19:b6:78:8e:e2:5d:e9:a6:
                    4b:94:96:ed:5f:8d:6b:29:66:bc:36:bb:df:ea:d5:
                    a9:69:73:b5:22:f3:2c:1f:d2:01:58:9d:7e:54:33:
                    75:5c:61:da:06:86:2d:43:1e:94:db:ec:4a:66:08:
                    1b:59:81:fc:12:a2:b9:7b:7d:b2:63:10:9a:80:62:
                    c7:54:f3:8f:e3:a6:27:e9:57:e8:bf:75:1f:95:8a:
                    73:6b:73:be:8c:00:32:13:79:f4:55:d9:5a:c3:b7:
                    ec:42:ce:15:eb:c4:85:16:10:ec:b4:6e:c7:67:b2:
                    fa:84:eb:52:ad:7d:95:cb:31:a2:d9:e5:7b:a2:68:
                    cb:b9:54:1b:fc:d0:a0:98:27:98:b4:86:01:7f:f8:
                    2e:ba:35:ca:47:00:ae:72:33:e2:6b:c1:17:50:3d:
                    7b:86:db:05:18:a3:b8:61:67:94:02:a6:03:43:c8:
                    95:98:89:b8:04:7c:82:98:2c:0e:88:1a:06:f2:e7:
                    f9:9b:83:7b:34:c6:58:e7:74:42:e4:49:c8:db:07:
                    d3:b3:58:a7:f9:8a:6b:d8:8f:5d:89:c0:38:8b:ea:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:51:B3:E9:76:EE:22:3D:31:A7:8B:DC:26:F6:D7:B3:EC:B9:5C
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:bb:01:15:fc:01:4f:88:77:4b:0a:2c:54:58:ea:7b:80:
         e5:0b:9e:72:82:66:d0:56:54:7d:bd:f7:19:58:f2:36:fc:4d:
         91:87:e4:08:78:73:c4:f3:4c:00:bb:b8:c6:e6:88:2f:2b:10:
         84:f3:63:9b:f0:56:82:78:46:0e:e6:9b:9a:5d:22:8e:10:cb:
         b4:be:b6:97:64:75:f0:41:38:c0:66:c0:85:36:2b:e3:33:09:
         88:0d:03:6a:05:10:2c:0f:4f:a0:54:44:23:30:d8:9f:7f:5b:
         42:b5:4f:9c:c2:7c:7c:5d:35:ad:9b:f2:c0:bd:20:da:1d:96:
         c3:f6:09:f5:d2:1c:55:00:d8:cd:ca:cc:69:33:f0:68:86:50:
         4d:cc:c5:06:5a:00:20:4c:b9:a3:0c:bf:eb:a5:48:41:27:81:
         e2:7b:ed:3b:d6:d9:27:45:b8:55:cf:74:a9:7b:ad:2f:31:ec:
         af:67:4e:91:03:0e:14:a3:3c:2e:f9:04:73:f6:1e:01:20:6d:
         d7:9e:ae:53:ff:b9:e5:84:56:15:d4:8b:09:fc:d4:da:c9:98:
         a7:32:bf:11:ca:15:c2:86:1a:96:77:37:3e:54:9e:e4:48:48:
         b9:f3:e1:ac:57:ec:4c:ab:32:51:fc:5a:a1:7b:3b:87:99:49:
         73:f1:7c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHtnUPJUYMdOIVXSw4Km8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNzUwZWI2ZDEyYzU3ZWE2NDMwYjlmMDIzOTVjYWYyYTgx
YmVjZjgwHhcNMjUwOTA3MDMwMTExWhcNMjUwOTA4MDMwMTExWjAzMTEwLwYDVQQD
EygzMDVjNTFiM2U5NzZlZTIyM2QzMWE3OGJkYzI2ZjZkN2IzZWNiOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OF6GdBYtZQDFewJv4cxvDrkVzmR
gvMk8yyoChRJrv4z1SAoGbZ4juJd6aZLlJbtX41rKWa8Nrvf6tWpaXO1IvMsH9IB
WJ1+VDN1XGHaBoYtQx6U2+xKZggbWYH8EqK5e32yYxCagGLHVPOP46Yn6Vfov3Uf
lYpza3O+jAAyE3n0Vdlaw7fsQs4V68SFFhDstG7HZ7L6hOtSrX2VyzGi2eV7omjL
uVQb/NCgmCeYtIYBf/guujXKRwCucjPia8EXUD17htsFGKO4YWeUAqYDQ8iVmIm4
BHyCmCwOiBoG8uf5m4N7NMZY53RC5EnI2wfTs1in+Ypr2I9dicA4i+qc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBcUbPpdu4iPTGni9wm9tez7LlcMB8GA1UdIwQY
MBaAFHp1DrbRLFfqZDC58COVyvKoG+z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUt
NTcyMjc5ODJhMDAwLzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUtNTcyMjc5ODJhMDAw
LzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOS7ARX8
AU+Id0sKLFRY6nuA5QuecoJm0FZUfb33GVjyNvxNkYfkCHhzxPNMALu4xuaILysQ
hPNjm/BWgnhGDuabml0ijhDLtL62l2R18EE4wGbAhTYr4zMJiA0DagUQLA9PoFRE
IzDYn39bQrVPnMJ8fF01rZvywL0g2h2Ww/YJ9dIcVQDYzcrMaTPwaIZQTczFBloA
IEy5owy/66VIQSeB4nvtO9bZJ0W4Vc90qXutLzHsr2dOkQMOFKM8LvkEc/YeASBt
156uU/+55YRWFdSLCfzU2smYpzK/EcoVwoYalnc3PlSe5EhIufPhrFfsTKsyUfxa
oXs7h5lJc/F89g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:16 2025 by rpki-client