Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          b3HkXDB8qUP4IDp+Awvm+5/Wd93iNfK908KzkIIzLBE=
Subject key identifier:   4E:D2:C8:97:14:5B:91:D4:99:00:1B:82:09:64:56:B7:9D:72:4A:62
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       019933B6C6D2D1D7259D383D016CABCC1EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0B37
Signing time:             Wed 10 Sep 2025 13:00:40 +0000
Manifest this update:     Wed 10 Sep 2025 13:00:40 +0000
Manifest next update:     Thu 11 Sep 2025 13:00:40 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: MJHHyj1+a/ImexEu2iwVn6Dsm8f6U5M+/JtMhqah5DE=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:b6:c6:d2:d1:d7:25:9d:38:3d:01:6c:ab:cc:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Sep 10 13:00:40 2025 GMT
            Not After : Sep 11 13:00:40 2025 GMT
        Subject: CN=4ed2c897145b91d499001b82096456b79d724a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8b:71:e4:00:2a:9b:f8:e7:47:22:04:d3:78:
                    9a:eb:39:35:27:bb:4e:55:39:55:64:9a:20:84:94:
                    21:bd:ce:f7:fd:12:58:69:bd:b8:ed:d5:d0:ae:c8:
                    d3:10:6c:d0:d2:c6:36:62:d2:54:4c:5c:d9:41:b9:
                    26:1e:43:c8:d3:d7:3f:f0:f0:a9:b8:69:fa:10:ac:
                    1d:db:73:f4:6e:21:3d:5b:bb:1c:17:10:55:b8:72:
                    11:d8:da:a1:19:09:6f:f3:dc:c1:c7:2b:fd:88:3c:
                    43:30:21:c0:3c:e0:e8:11:b3:3c:1b:04:43:a3:3d:
                    6e:0b:8f:b9:f1:8b:66:8b:8c:9e:87:23:b5:3b:14:
                    75:d5:37:10:f7:f9:af:f8:88:bd:fe:84:92:98:96:
                    71:2c:88:72:a9:a4:85:e3:c0:bd:bb:f2:ed:64:81:
                    74:b4:b1:0f:c5:52:29:e1:37:e6:a0:d4:e0:e7:20:
                    9e:39:5b:b0:9f:13:67:15:5a:81:d6:c5:ff:fe:5d:
                    32:e0:37:60:38:12:b0:42:7f:a7:0f:71:d8:c5:a8:
                    03:20:2f:f4:6d:3c:54:ad:d5:2b:56:aa:7c:7c:ea:
                    ad:aa:d7:4b:ea:19:92:8f:5a:d5:4a:02:be:fe:2e:
                    a4:73:3f:ea:9c:ec:be:e9:5e:32:02:b7:ac:0c:71:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:C8:97:14:5B:91:D4:99:00:1B:82:09:64:56:B7:9D:72:4A:62
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ee:8a:4a:95:d9:86:2e:fe:74:46:58:ed:c4:d8:c0:29:4a:
         4b:29:78:e7:29:b0:3e:51:c2:32:b0:a8:66:e7:c3:74:d1:73:
         8d:93:ea:c7:53:60:f5:19:23:42:1f:dd:45:11:94:99:a1:2b:
         af:31:cc:b6:f0:26:9c:fa:22:a1:8c:f0:1c:5f:f1:ca:7a:ac:
         08:f0:a0:4c:fc:a6:44:74:c0:ca:e6:65:59:43:30:f8:42:5b:
         66:13:15:db:9f:16:93:10:98:41:89:b3:55:c4:c2:21:14:1f:
         35:c6:f5:7b:ab:3d:2b:04:00:07:2a:c8:a0:0b:13:e6:c6:6f:
         ae:90:6c:a2:bd:38:79:15:80:91:09:b1:e3:18:4b:59:49:63:
         f0:d6:c3:89:3a:a4:cd:78:75:62:6d:da:cb:03:f3:69:9a:c9:
         34:9a:ee:a7:06:a5:22:b9:37:15:c4:c7:bf:24:06:c7:9c:f8:
         b9:c5:c5:64:08:21:c9:b5:d4:80:02:62:0c:c0:ff:16:56:69:
         c5:c8:65:3f:e8:ae:78:b0:be:5b:f4:0c:60:d0:8d:ee:d6:55:
         15:03:51:73:fc:9e:ef:47:66:97:4d:b9:50:ca:14:bb:e1:ae:
         b5:4e:b7:e5:4d:2a:dc:7c:50:0b:c8:2c:08:bd:ee:15:46:48:
         bb:e7:0c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztsbS0dclnTg9AWyrzB7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux
ZTllZGMwHhcNMjUwOTEwMTMwMDQwWhcNMjUwOTExMTMwMDQwWjAzMTEwLwYDVQQD
Eyg0ZWQyYzg5NzE0NWI5MWQ0OTkwMDFiODIwOTY0NTZiNzlkNzI0YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ytx5AAqm/jnRyIE03ia6zk1J7tO
VTlVZJoghJQhvc73/RJYab247dXQrsjTEGzQ0sY2YtJUTFzZQbkmHkPI09c/8PCp
uGn6EKwd23P0biE9W7scFxBVuHIR2NqhGQlv89zBxyv9iDxDMCHAPODoEbM8GwRD
oz1uC4+58Ytmi4yehyO1OxR11TcQ9/mv+Ii9/oSSmJZxLIhyqaSF48C9u/LtZIF0
tLEPxVIp4TfmoNTg5yCeOVuwnxNnFVqB1sX//l0y4DdgOBKwQn+nD3HYxagDIC/0
bTxUrdUrVqp8fOqtqtdL6hmSj1rVSgK+/i6kcz/qnOy+6V4yAresDHGdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7SyJcUW5HUmQAbgglkVredckpiMB8GA1UdIwQY
MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt
MTAwZWVkODEyYzQwLzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw
LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAve6KSpXZ
hi7+dEZY7cTYwClKSyl45ymwPlHCMrCoZufDdNFzjZPqx1Ng9RkjQh/dRRGUmaEr
rzHMtvAmnPoioYzwHF/xynqsCPCgTPymRHTAyuZlWUMw+EJbZhMV258WkxCYQYmz
VcTCIRQfNcb1e6s9KwQAByrIoAsT5sZvrpBsor04eRWAkQmx4xhLWUlj8NbDiTqk
zXh1Ym3aywPzaZrJNJrupwalIrk3FcTHvyQGx5z4ucXFZAghybXUgAJiDMD/FlZp
xchlP+iueLC+W/QMYNCN7tZVFQNRc/ye70dml025UMoUu+GutU635U0q3HxQC8gs
CL3uFUZIu+cMrQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:27:47 2025 by rpki-client