Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          KDjfgUG7hAh+Etc3DQfAOCb1c58wtWdzU8nap+v7QtY=
Subject key identifier:   89:0E:D6:7D:2B:8C:AB:25:EA:FD:8C:74:CC:68:F7:C7:9F:CF:C1:B3
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       01992DB4BCF8AEA07EF931DD6C2B270950CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          167E
Signing time:             Tue 09 Sep 2025 09:00:43 +0000
Manifest this update:     Tue 09 Sep 2025 09:00:43 +0000
Manifest next update:     Wed 10 Sep 2025 09:00:43 +0000
Files and hashes:         1: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: fXX9F0NnLfXdHd9RqQGb79qyMwvqEBMtUHNmBSbfKyU=)
                          2: dovIL-gTzJ_aoQv0YqdSPue-W8c.roa (hash: xvPlQMVt6KADuNdSrMZISm2hi7tJLKf4OAcoc3dyLHM=)
                          3: eG_gGxLivr2ewefCZXKvl9LEIQ4.roa (hash: 4AFKJ4zK1Zt8UICDrX7yj7rG6ous3rW3n9Muuzhoyfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:b4:bc:f8:ae:a0:7e:f9:31:dd:6c:2b:27:09:50:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Sep  9 09:00:43 2025 GMT
            Not After : Sep 10 09:00:43 2025 GMT
        Subject: CN=890ed67d2b8cab25eafd8c74cc68f7c79fcfc1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:47:03:f6:84:bf:49:1a:74:f0:24:b0:58:
                    03:c7:44:12:87:93:80:1e:43:4a:c6:5b:5e:7d:3f:
                    e3:49:70:fc:4d:b5:09:8e:a9:f7:3a:96:0a:47:bd:
                    18:1b:cf:12:0c:5a:42:76:06:c0:b6:f6:11:a2:54:
                    22:c5:79:c4:15:83:15:86:cd:3c:78:72:a9:0b:42:
                    cf:54:c5:54:56:f8:f9:84:25:3c:ad:3d:cb:e5:15:
                    82:97:43:4d:31:39:76:fc:dc:b7:97:0a:73:dd:7e:
                    8e:82:a3:f2:e8:9e:31:f7:54:5d:fe:ae:4f:d2:c8:
                    33:c4:3d:04:9c:8c:21:56:1f:76:ad:46:4e:b5:ff:
                    07:11:d4:17:d9:a0:77:64:6b:30:16:8d:a7:43:2d:
                    61:1f:98:f1:dd:0f:e5:b4:63:36:25:14:31:7d:f9:
                    af:d9:05:5d:6b:d3:ff:2a:77:74:81:5a:01:5f:8f:
                    34:54:db:7b:dd:6a:5d:3e:6b:04:b5:13:2b:c3:e1:
                    ff:e8:59:87:17:69:5d:d6:12:83:73:6f:99:2f:56:
                    98:84:b0:1e:f5:22:3e:86:f6:66:4d:42:b8:f2:69:
                    f4:33:a1:ac:db:39:3f:07:9a:9b:9d:2f:85:49:38:
                    2d:77:46:02:57:48:b6:f5:ae:91:48:ad:75:10:7b:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0E:D6:7D:2B:8C:AB:25:EA:FD:8C:74:CC:68:F7:C7:9F:CF:C1:B3
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:8c:8e:61:1c:2e:99:6f:eb:bc:8c:e2:47:d0:d7:0a:2b:
         3c:95:e9:46:45:a9:f2:2d:60:e8:12:2d:e9:00:89:eb:33:e1:
         ed:0a:ac:c2:1f:23:80:b9:22:ff:f1:e8:c5:d6:c8:a5:d9:be:
         0f:f3:6a:13:d5:77:c4:94:72:4c:9b:d1:8f:ce:1d:99:44:62:
         c3:cb:ab:24:69:2f:08:c3:34:60:f1:95:4d:d7:00:d1:3a:e5:
         e5:e8:c3:a5:00:4e:be:e8:c2:da:71:97:17:ab:01:96:91:39:
         e4:c8:b2:07:95:87:63:4f:6d:3e:17:65:b8:93:7b:8b:f4:5b:
         32:cf:eb:d7:32:fd:f4:2f:9c:74:03:79:a1:6d:ab:7c:08:5c:
         50:3c:38:1f:33:68:8d:9c:24:98:88:0d:28:e5:1e:f7:cf:d3:
         f2:43:fe:e4:3e:a9:32:9a:2c:ef:2f:19:bc:1a:01:9f:a3:e5:
         e4:f5:d9:96:d0:9d:5b:eb:f3:f4:7c:0f:4c:4f:d3:ed:7a:43:
         f2:8a:0e:e0:3c:cf:4a:5e:09:98:e5:ca:ee:26:26:90:3c:0f:
         b6:c0:aa:c0:3e:0e:31:93:9f:23:00:b4:25:4d:d3:b3:fe:10:
         4a:f3:6e:90:07:c2:17:b7:8a:02:d3:e3:65:26:34:f1:4b:9a:
         1a:53:8c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttLz4rqB++THdbCsnCVDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDU5ZmQ2ODNlMzU3MGQ2Mzg5NTUzMGNlYjlmMmM4NGZl
ZmUwYTMwHhcNMjUwOTA5MDkwMDQzWhcNMjUwOTEwMDkwMDQzWjAzMTEwLwYDVQQD
Eyg4OTBlZDY3ZDJiOGNhYjI1ZWFmZDhjNzRjYzY4ZjdjNzlmY2ZjMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsetHA/aEv0kadPAksFgDx0QSh5OA
HkNKxltefT/jSXD8TbUJjqn3OpYKR70YG88SDFpCdgbAtvYRolQixXnEFYMVhs08
eHKpC0LPVMVUVvj5hCU8rT3L5RWCl0NNMTl2/Ny3lwpz3X6OgqPy6J4x91Rd/q5P
0sgzxD0EnIwhVh92rUZOtf8HEdQX2aB3ZGswFo2nQy1hH5jx3Q/ltGM2JRQxffmv
2QVda9P/Knd0gVoBX480VNt73WpdPmsEtRMrw+H/6FmHF2ld1hKDc2+ZL1aYhLAe
9SI+hvZmTUK48mn0M6Gs2zk/B5qbnS+FSTgtd0YCV0i29a6RSK11EHveeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkO1n0rjKsl6v2MdMxo98efz8GzMB8GA1UdIwQY
MBaAFBPVn9aD41cNY4lVMM658shP7+CjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYt
MGIxYjMwODk1NjAyLzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYtMGIxYjMwODk1NjAy
LzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4GMjmEc
Lplv67yM4kfQ1worPJXpRkWp8i1g6BIt6QCJ6zPh7Qqswh8jgLki//HoxdbIpdm+
D/NqE9V3xJRyTJvRj84dmURiw8urJGkvCMM0YPGVTdcA0Trl5ejDpQBOvujC2nGX
F6sBlpE55MiyB5WHY09tPhdluJN7i/RbMs/r1zL99C+cdAN5oW2rfAhcUDw4HzNo
jZwkmIgNKOUe98/T8kP+5D6pMpos7y8ZvBoBn6Pl5PXZltCdW+vz9HwPTE/T7XpD
8ooO4DzPSl4JmOXK7iYmkDwPtsCqwD4OMZOfIwC0JU3Ts/4QSvNukAfCF7eKAtPj
ZSY08UuaGlOMLA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:15:20 2025 by rpki-client