Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File:                     rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier:          6uCqCqXr1KlFt8wV2gQbOomIiP/rXAq2xlZUEudfl6A=
Subject key identifier:   82:3A:73:8D:82:C4:8A:51:27:EF:48:C7:7A:31:9A:37:CF:D8:32:5A
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer:       /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial:       019923A0EB90D03C517A379AD3A0464C2827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number:          1678
Signing time:             Sun 07 Sep 2025 10:02:52 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:52 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:52 +0000
Files and hashes:         1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=)
                          2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: eaWrWjLhwyBZ9c/r+qLRi1DcPnV2Mp0lfcnYYWCA1a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:eb:90:d0:3c:51:7a:37:9a:d3:a0:46:4c:28:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
        Validity
            Not Before: Sep  7 10:02:52 2025 GMT
            Not After : Sep  8 10:02:52 2025 GMT
        Subject: CN=823a738d82c48a5127ef48c77a319a37cfd8325a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:78:c4:a7:2b:ed:30:81:73:31:73:a0:5d:
                    dd:89:45:00:af:d0:aa:38:f8:dd:04:1f:b4:bd:f7:
                    06:ec:04:ef:b7:32:73:40:2a:6d:15:81:f1:6b:79:
                    6c:1c:a1:9d:a6:14:88:ef:f6:37:d3:3c:bf:76:c6:
                    f7:b2:37:cb:aa:9e:b9:57:68:22:f9:3f:63:e1:b8:
                    c2:f6:3c:53:23:34:c8:ba:d5:b2:70:21:1b:9e:74:
                    e8:43:74:09:42:44:f2:3d:0c:e6:52:56:f3:38:2f:
                    58:89:78:fd:96:13:89:01:d4:9b:d3:3f:a5:2f:f2:
                    48:b7:d7:25:0a:7e:fa:b6:81:90:cb:e9:7a:72:40:
                    f6:a7:6a:a5:0a:45:50:16:bb:7b:26:3e:04:e7:b1:
                    81:23:95:f4:9e:8a:36:4e:c1:17:ee:94:2c:e8:56:
                    fc:48:c4:0b:a0:50:1e:94:46:15:e1:16:bd:91:d7:
                    25:e8:cb:e9:c7:6d:43:94:a5:7a:e5:01:51:3e:d7:
                    5f:21:79:82:c3:14:b4:4d:5e:01:36:a7:27:cc:2a:
                    7d:ca:24:9f:4b:a3:ca:79:1c:4c:6d:88:b1:8d:4c:
                    18:f1:1e:0f:b0:87:58:ce:fb:3f:87:f9:ba:14:90:
                    43:ab:33:a2:cb:74:59:39:f1:bc:b7:5f:d8:62:9e:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3A:73:8D:82:C4:8A:51:27:EF:48:C7:7A:31:9A:37:CF:D8:32:5A
            X509v3 Authority Key Identifier:
                keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:4b:97:f3:4b:35:a2:3a:a7:de:21:cf:77:3a:59:53:53:
         94:38:21:a6:91:59:fa:ec:1f:72:3f:e9:e6:75:93:50:c3:4c:
         06:c6:34:c3:cb:e0:c7:a0:97:0b:4c:bf:43:b9:cb:e0:83:7f:
         3e:00:29:1b:42:89:ca:ee:15:48:1a:9e:2b:6d:fc:8f:3a:93:
         8a:fa:40:2f:78:cf:3f:2c:73:ac:0d:74:5b:20:e0:9e:71:f3:
         b2:7a:c9:2e:af:39:0a:f9:a7:30:c4:37:f0:b9:80:48:36:b6:
         48:76:98:07:3e:79:f9:8a:4b:38:d7:39:c4:96:78:7d:cc:22:
         0d:a1:25:8c:87:38:01:f2:79:6a:72:88:9a:e8:e3:0c:0d:76:
         09:1f:c4:a1:db:2e:fb:28:49:22:b3:8a:00:bb:f4:3d:1a:eb:
         04:eb:a3:ca:be:c3:b7:bf:c5:93:33:d7:70:87:47:73:fc:74:
         c3:16:d3:96:ac:96:b3:e6:1b:4b:af:a6:33:7b:cc:a7:c2:c9:
         86:3b:e8:80:7a:e4:c4:9b:0d:cd:c7:f2:37:56:f0:17:3f:ec:
         41:ee:03:a7:cc:e4:9a:0a:2a:07:5b:6c:00:bb:c9:9c:a8:15:
         11:c3:ea:60:a1:84:e4:06:79:3e:7f:f3:e3:fe:c4:f9:9f:99:
         95:f0:bb:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoOuQ0DxRejea06BGTCgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZjFlZWZhYTc1N2QzOGViMTA0ZmE0Y2JhNGQ5NjJiNzJl
NTJiNTIwHhcNMjUwOTA3MTAwMjUyWhcNMjUwOTA4MTAwMjUyWjAzMTEwLwYDVQQD
Eyg4MjNhNzM4ZDgyYzQ4YTUxMjdlZjQ4Yzc3YTMxOWEzN2NmZDgzMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhB4xKcr7TCBczFzoF3diUUAr9Cq
OPjdBB+0vfcG7ATvtzJzQCptFYHxa3lsHKGdphSI7/Y30zy/dsb3sjfLqp65V2gi
+T9j4bjC9jxTIzTIutWycCEbnnToQ3QJQkTyPQzmUlbzOC9YiXj9lhOJAdSb0z+l
L/JIt9clCn76toGQy+l6ckD2p2qlCkVQFrt7Jj4E57GBI5X0noo2TsEX7pQs6Fb8
SMQLoFAelEYV4Ra9kdcl6Mvpx21DlKV65QFRPtdfIXmCwxS0TV4BNqcnzCp9yiSf
S6PKeRxMbYixjUwY8R4PsIdYzvs/h/m6FJBDqzOiy3RZOfG8t1/YYp6uBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII6c42CxIpRJ+9Ix3oxmjfP2DJaMB8GA1UdIwQY
MBaAFK7x7vqnV9OOsQT6TLpNlity5StSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQt
OWE2YmQwMTFmOGY2LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQtOWE2YmQwMTFmOGY2
LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz1Ll/NL
NaI6p94hz3c6WVNTlDghppFZ+uwfcj/p5nWTUMNMBsY0w8vgx6CXC0y/Q7nL4IN/
PgApG0KJyu4VSBqeK238jzqTivpAL3jPPyxzrA10WyDgnnHzsnrJLq85CvmnMMQ3
8LmASDa2SHaYBz55+YpLONc5xJZ4fcwiDaEljIc4AfJ5anKImujjDA12CR/Eodsu
+yhJIrOKALv0PRrrBOujyr7Dt7/FkzPXcIdHc/x0wxbTlqyWs+YbS6+mM3vMp8LJ
hjvogHrkxJsNzcfyN1bwFz/sQe4Dp8zkmgoqB1tsALvJnKgVEcPqYKGE5AZ5Pn/z
4/7E+Z+ZlfC7Dw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:17 2025 by rpki-client