Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File:                     7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier:          H79UU+DgTJomCpakLr39jvJxFpj44pLOv/t0DAK2JhU=
Subject key identifier:   41:55:86:BB:86:70:99:A0:78:4B:72:E6:DF:66:A7:C3:F2:EA:C2:4B
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer:       /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial:       019935DC1581792C023AB7304CE4492D6DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number:          01FA
Signing time:             Wed 10 Sep 2025 23:00:39 +0000
Manifest this update:     Wed 10 Sep 2025 23:00:39 +0000
Manifest next update:     Thu 11 Sep 2025 23:00:39 +0000
Files and hashes:         1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: QoBGgbUT1Y4RcPOFyweB12vcfsTd/2BFUOlekMt3PxE=)
                          2: Br2XYkCHvC72aVRHi890y0oAZCY.roa (hash: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:dc:15:81:79:2c:02:3a:b7:30:4c:e4:49:2d:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
        Validity
            Not Before: Sep 10 23:00:39 2025 GMT
            Not After : Sep 11 23:00:39 2025 GMT
        Subject: CN=415586bb867099a0784b72e6df66a7c3f2eac24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:a1:31:5b:13:1b:31:b2:3b:c7:bd:19:a5:
                    44:ea:5f:40:4a:e5:08:6a:fa:de:95:f1:58:1d:ad:
                    86:0b:c2:d9:db:38:f5:4c:c5:fc:df:4e:e8:c2:37:
                    83:d5:43:aa:6c:96:65:39:7f:7f:b7:a5:48:1b:1a:
                    6d:e5:44:b3:f5:ef:2e:ce:79:17:86:93:8b:6b:ff:
                    5f:2a:e2:80:e3:52:45:c9:8b:e3:05:80:97:3f:da:
                    ab:7f:26:23:02:c4:ff:eb:5f:6c:57:e3:ab:ef:c0:
                    11:b5:30:f0:c8:98:56:98:a8:d9:33:df:8c:d8:f7:
                    97:0e:2d:4c:c6:c9:1e:f6:1c:7c:9f:bb:24:0a:b4:
                    e6:07:ee:92:50:27:32:e2:e2:d7:36:fb:1d:94:c1:
                    67:15:9f:3e:ef:4b:b0:22:2a:9f:bb:a2:44:a8:e0:
                    47:65:30:34:40:72:5f:a4:4f:78:65:35:3d:0f:bd:
                    5e:36:20:07:38:d3:e7:67:f3:10:4b:60:df:01:69:
                    17:3c:c3:27:98:c5:61:7a:82:b7:f3:31:4d:d0:36:
                    82:00:8b:8e:e1:bd:d9:b0:d2:c1:85:73:7f:81:a8:
                    15:a6:2f:3c:6f:d4:1a:27:ec:50:a4:b6:43:db:95:
                    b8:95:cb:c9:30:ed:55:a5:95:da:b4:97:84:91:44:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:86:BB:86:70:99:A0:78:4B:72:E6:DF:66:A7:C3:F2:EA:C2:4B
            X509v3 Authority Key Identifier:
                keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:40:9e:6a:18:64:c9:ca:11:6d:0a:96:e7:59:88:f8:51:a7:
         6e:03:2b:49:aa:55:4d:00:0a:8f:85:30:60:fb:d1:6e:25:ab:
         bf:34:03:20:58:e5:19:aa:9d:5b:04:88:6e:61:e5:83:d3:41:
         61:08:c1:71:ab:0f:9a:10:af:e7:82:7a:ad:27:45:ca:10:ab:
         5a:e4:19:11:db:a7:92:7f:29:71:bc:59:ed:e5:b6:4a:aa:e1:
         4b:f1:9e:d1:c8:eb:9f:0b:80:12:39:d7:06:36:da:0b:25:5b:
         eb:6e:21:1a:21:a3:11:e6:fa:7f:47:21:f1:83:c0:bd:37:fa:
         47:71:77:3f:78:69:96:bb:d4:aa:1c:b8:eb:95:ac:ce:94:e6:
         7d:63:ea:fd:ed:b6:17:b0:4a:89:fd:9e:fa:ca:6b:3c:6b:f0:
         e4:7f:8f:50:62:43:ec:f4:8f:33:31:aa:8f:2d:88:09:96:10:
         1d:58:06:51:b2:ab:28:31:6b:37:23:35:10:16:d8:84:5d:9f:
         18:38:3c:8c:86:1d:fe:a3:59:9c:1c:3c:b2:22:7d:42:52:b7:
         e5:78:a7:4b:0b:02:40:42:ec:30:25:b5:52:16:6a:8b:5a:86:
         8a:b3:48:54:c2:5f:46:05:da:c5:42:e0:fd:26:19:61:f7:2c:
         34:ec:16:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk13BWBeSwCOrcwTORJLW3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx
NjdkYWUwHhcNMjUwOTEwMjMwMDM5WhcNMjUwOTExMjMwMDM5WjAzMTEwLwYDVQQD
Eyg0MTU1ODZiYjg2NzA5OWEwNzg0YjcyZTZkZjY2YTdjM2YyZWFjMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHuhMVsTGzGyO8e9GaVE6l9ASuUI
avrelfFYHa2GC8LZ2zj1TMX8307owjeD1UOqbJZlOX9/t6VIGxpt5USz9e8uznkX
hpOLa/9fKuKA41JFyYvjBYCXP9qrfyYjAsT/619sV+Or78ARtTDwyJhWmKjZM9+M
2PeXDi1Mxske9hx8n7skCrTmB+6SUCcy4uLXNvsdlMFnFZ8+70uwIiqfu6JEqOBH
ZTA0QHJfpE94ZTU9D71eNiAHONPnZ/MQS2DfAWkXPMMnmMVheoK38zFN0DaCAIuO
4b3ZsNLBhXN/gagVpi88b9QaJ+xQpLZD25W4lcvJMO1VpZXatJeEkURehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFVhruGcJmgeEty5t9mp8Py6sJLMB8GA1UdIwQY
MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt
MGM3NTZmZDI0OGM4LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4
LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0Ceahhk
ycoRbQqW51mI+FGnbgMrSapVTQAKj4UwYPvRbiWrvzQDIFjlGaqdWwSIbmHlg9NB
YQjBcasPmhCv54J6rSdFyhCrWuQZEdunkn8pcbxZ7eW2SqrhS/Ge0cjrnwuAEjnX
BjbaCyVb624hGiGjEeb6f0ch8YPAvTf6R3F3P3hplrvUqhy465WszpTmfWPq/e22
F7BKif2e+sprPGvw5H+PUGJD7PSPMzGqjy2ICZYQHVgGUbKrKDFrNyM1EBbYhF2f
GDg8jIYd/qNZnBw8siJ9QlK35XinSwsCQELsMCW1UhZqi1qGirNIVMJfRgXaxULg
/SYZYfcsNOwWxA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:04:25 2025 by rpki-client