Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File:                     rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier:          DWFz8CSXx2F7gh8B9rBd5yZ4vRXYh/6eKeMUyXJ4KvE=
Subject key identifier:   5D:40:81:4C:4C:5B:F0:6C:61:31:0D:D6:FE:D3:3F:1F:6C:2F:3B:42
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer:       /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial:       0199500A4186FEFE5B44FF12AADAD882FF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number:          08CE
Signing time:             Tue 16 Sep 2025 01:01:13 +0000
Manifest this update:     Tue 16 Sep 2025 01:01:13 +0000
Manifest next update:     Wed 17 Sep 2025 01:01:13 +0000
Files and hashes:         1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: lOYGL3KZcPL9TrRP4n2s3qYGRlNAJLJmhT0+hIgK5VU=)
                          2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:0a:41:86:fe:fe:5b:44:ff:12:aa:da:d8:82:ff:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
        Validity
            Not Before: Sep 16 01:01:13 2025 GMT
            Not After : Sep 17 01:01:13 2025 GMT
        Subject: CN=5d40814c4c5bf06c61310dd6fed33f1f6c2f3b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:2d:84:80:86:d6:ea:92:e4:f5:96:de:07:
                    bf:25:da:97:18:a3:11:a9:e8:fc:ab:6d:bc:08:af:
                    cd:03:ff:c9:1e:40:63:62:b8:bf:4d:ef:f3:50:02:
                    a0:67:0f:0a:ad:bb:15:5d:54:4b:5e:45:28:2f:d1:
                    a7:87:f1:bd:3d:a7:7e:f1:67:c1:88:96:ae:d5:74:
                    a2:6b:a8:dc:ce:a7:35:95:55:56:15:4c:c2:80:61:
                    3d:dc:6d:d3:e4:06:cf:d5:d3:0b:52:20:8d:15:d5:
                    d6:99:63:5f:43:a1:a9:8d:ca:e8:36:5a:5b:1a:26:
                    15:57:1a:1d:2d:d6:c0:1f:6f:e7:b6:21:a3:57:e6:
                    75:db:37:b9:b2:dc:41:3b:0f:64:29:15:7e:55:8b:
                    f6:74:30:40:62:34:75:85:7d:89:e2:53:6c:58:c3:
                    92:51:15:04:40:e5:a6:23:73:f6:32:b8:28:70:c9:
                    74:51:f9:eb:90:4f:85:f3:39:12:80:fe:aa:5c:3e:
                    fb:72:4d:6a:6a:b3:a9:82:a3:63:dd:e1:ce:e5:84:
                    a7:05:48:f8:87:c8:5f:e6:83:19:0e:49:a8:1b:c3:
                    1d:56:e3:21:14:a3:d7:a9:63:06:1f:0b:1c:a8:a4:
                    ec:b3:cd:61:44:87:b5:f9:be:d4:54:95:4c:5c:5f:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:40:81:4C:4C:5B:F0:6C:61:31:0D:D6:FE:D3:3F:1F:6C:2F:3B:42
            X509v3 Authority Key Identifier:
                keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:36:fa:04:fa:87:3d:a0:a2:5f:1d:d8:85:82:fe:ac:37:96:
         73:ea:c7:4d:32:62:4c:bc:63:11:31:f7:59:7b:3a:93:c6:ee:
         48:d7:23:55:bb:b1:44:59:d9:14:dc:a7:ac:9c:4e:a6:f9:be:
         23:3e:22:b4:11:96:0c:5d:8c:e1:8c:9a:4d:47:16:3e:51:4b:
         cb:7d:98:4c:c6:12:86:63:92:36:61:5e:94:4f:1c:46:a4:82:
         d0:ed:20:e6:79:46:36:91:3e:eb:d6:ad:9f:23:e0:3c:f4:ac:
         d8:5e:57:03:0d:22:6a:66:cb:15:4c:31:a9:26:66:cb:b9:3f:
         7b:06:9f:44:bb:e2:2d:d5:df:5b:6b:22:96:44:53:2b:64:2c:
         4e:2b:4e:29:b5:bd:d2:ed:54:a5:48:7e:65:c4:dd:82:63:3b:
         08:04:d5:d4:d0:ee:f1:2b:ce:c8:e7:b3:6e:f2:be:2c:48:aa:
         d6:1a:9b:40:ea:38:d1:b4:41:c1:d1:11:a2:3b:d2:7d:b4:e6:
         4a:d4:09:8b:bb:30:60:fd:ce:6e:31:d4:bd:74:0d:f9:13:f1:
         90:d6:f0:f6:08:14:a4:d3:38:98:7f:bd:0c:ca:11:45:16:68:
         57:f7:e0:6d:22:9d:4b:a6:5a:11:d9:f6:bd:6b:9f:19:92:cb:
         11:24:bf:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlQCkGG/v5bRP8SqtrYgv+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2NjMWE3ODcwYjYxMGMzNTVjNmVjMjk5YjE2NmVkYWJh
M2RmMDQwHhcNMjUwOTE2MDEwMTEzWhcNMjUwOTE3MDEwMTEzWjAzMTEwLwYDVQQD
Eyg1ZDQwODE0YzRjNWJmMDZjNjEzMTBkZDZmZWQzM2YxZjZjMmYzYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMYthICG1uqS5PWW3ge/JdqXGKMR
qej8q228CK/NA//JHkBjYri/Te/zUAKgZw8KrbsVXVRLXkUoL9Gnh/G9Pad+8WfB
iJau1XSia6jczqc1lVVWFUzCgGE93G3T5AbP1dMLUiCNFdXWmWNfQ6GpjcroNlpb
GiYVVxodLdbAH2/ntiGjV+Z12ze5stxBOw9kKRV+VYv2dDBAYjR1hX2J4lNsWMOS
URUEQOWmI3P2MrgocMl0UfnrkE+F8zkSgP6qXD77ck1qarOpgqNj3eHO5YSnBUj4
h8hf5oMZDkmoG8MdVuMhFKPXqWMGHwscqKTss81hRIe1+b7UVJVMXF8AKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1AgUxMW/BsYTEN1v7TPx9sLztCMB8GA1UdIwQY
MBaAFK08waeHC2EMNVxuwpmxZu2ro98EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAt
NzRkNTZjNDQxZGMxLzEvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAtNzRkNTZjNDQxZGMx
LzEvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjb6BPqH
PaCiXx3YhYL+rDeWc+rHTTJiTLxjETH3WXs6k8buSNcjVbuxRFnZFNynrJxOpvm+
Iz4itBGWDF2M4YyaTUcWPlFLy32YTMYShmOSNmFelE8cRqSC0O0g5nlGNpE+69at
nyPgPPSs2F5XAw0iambLFUwxqSZmy7k/ewafRLviLdXfW2silkRTK2QsTitOKbW9
0u1UpUh+ZcTdgmM7CATV1NDu8SvOyOezbvK+LEiq1hqbQOo40bRBwdERojvSfbTm
StQJi7swYP3ObjHUvXQN+RPxkNbw9ggUpNM4mH+9DMoRRRZoV/fgbSKdS6ZaEdn2
vWufGZLLESS/GA==
-----END CERTIFICATE-----
Generated at Tue Sep 16 05:24:46 2025 by rpki-client