Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File:                     eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier:          nCsD/KEl5tEJVV9gcjm3G6WkpUlnEYkZgjexVhx4r4s=
Subject key identifier:   91:E9:1C:48:17:55:AA:87:58:57:8F:8B:7E:A4:2D:AB:F7:08:91:97
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer:       /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial:       0199228CB99776DA97608E1799565264F4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number:          14F6
Signing time:             Sun 07 Sep 2025 05:01:11 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:11 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:11 +0000
Files and hashes:         1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: qTvd6yyl1bQUVQCXoYL4MMRM9VdDq8lWfOMT+HDPP3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:b9:97:76:da:97:60:8e:17:99:56:52:64:f4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
        Validity
            Not Before: Sep  7 05:01:11 2025 GMT
            Not After : Sep  8 05:01:11 2025 GMT
        Subject: CN=91e91c481755aa8758578f8b7ea42dabf7089197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:19:ac:be:aa:9e:07:e3:de:18:a5:8c:67:
                    a4:d5:d2:37:0e:76:73:dc:74:0c:ac:9c:40:6f:62:
                    7a:e8:4f:67:92:22:7d:80:b1:93:63:55:03:41:b6:
                    36:10:b6:21:7f:41:2e:ab:17:46:5e:dd:3d:3c:1e:
                    c1:a9:f8:2a:b1:32:a9:74:02:fc:5e:e2:02:5b:20:
                    7d:74:37:da:ff:d0:55:ea:b7:6a:ef:28:3f:e3:0a:
                    4c:16:61:7d:20:04:7b:a6:4d:bd:c8:51:0e:49:95:
                    13:f9:2f:af:cc:d6:11:2b:33:d4:3c:06:7a:76:28:
                    03:86:33:56:c2:83:91:9b:d4:ef:12:9d:a7:ab:16:
                    07:ce:62:64:3f:58:f4:75:03:01:8a:da:ef:55:dd:
                    7b:df:8f:07:4f:f5:26:47:69:00:e7:f2:52:22:48:
                    bd:69:9d:63:85:e6:88:71:0c:71:5c:e5:d4:4d:4f:
                    e6:e8:29:ae:55:c7:1b:a5:01:2a:e4:61:c9:fc:0e:
                    28:e2:cc:f4:5b:cc:a5:65:5f:1c:38:f6:c8:2a:55:
                    5e:08:67:d1:d1:2b:e1:a6:09:3c:3b:0f:59:6f:f5:
                    df:51:51:ec:76:1c:14:2c:da:91:2b:8d:09:9b:24:
                    74:ba:e5:61:74:b8:28:5c:05:c6:be:a9:01:a3:f1:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E9:1C:48:17:55:AA:87:58:57:8F:8B:7E:A4:2D:AB:F7:08:91:97
            X509v3 Authority Key Identifier:
                keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:38:ef:9b:72:f1:66:f8:fb:d3:f0:3b:73:1c:71:2d:00:f5:
         ce:58:ad:3b:bb:ff:a4:e4:fb:4b:cd:97:66:46:d8:fc:ad:ee:
         f3:bb:78:bb:ce:89:b4:65:d8:47:66:81:3d:70:a0:7f:a6:9f:
         7c:ce:ec:36:9b:5e:7d:6d:81:c3:80:17:b4:6c:73:43:d6:dd:
         f3:f9:f2:bd:29:df:35:6a:d4:1a:2f:07:84:a6:19:c4:5b:42:
         76:ca:92:25:23:c8:c7:8d:d0:05:bf:47:a8:eb:44:d9:97:6e:
         dc:91:bf:1c:4d:4a:70:ac:76:46:26:0c:c4:6b:5d:50:ba:d7:
         8e:57:a0:f3:b3:cb:16:52:15:d6:de:c2:c4:96:ff:13:10:96:
         05:08:b0:26:91:05:b7:d9:b4:cc:bd:b8:01:90:f9:69:0a:a1:
         df:eb:14:ed:e1:76:ed:3e:fc:5f:d1:d5:59:56:6c:75:4a:70:
         1c:a9:ff:af:0c:6d:16:0c:71:58:5b:06:2e:c5:97:d0:59:b6:
         1e:53:fb:67:7a:6b:bc:cc:69:00:c4:0b:81:2a:26:49:7f:49:
         86:0a:86:0e:82:04:a1:22:ea:47:f8:e6:e3:fc:2f:85:be:23:
         cf:96:ce:31:01:79:b6:78:a3:2c:ec:a8:66:8b:c9:84:56:bc:
         68:33:de:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLmXdtqXYI4XmVZSZPTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZThkMDQ5MGQzMGJmOTQ0ZWQ0ZDYzNjg0N2M1OGQ0MzFh
MzhjYmMwHhcNMjUwOTA3MDUwMTExWhcNMjUwOTA4MDUwMTExWjAzMTEwLwYDVQQD
Eyg5MWU5MWM0ODE3NTVhYTg3NTg1NzhmOGI3ZWE0MmRhYmY3MDg5MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VMZrL6qngfj3hiljGek1dI3DnZz
3HQMrJxAb2J66E9nkiJ9gLGTY1UDQbY2ELYhf0EuqxdGXt09PB7BqfgqsTKpdAL8
XuICWyB9dDfa/9BV6rdq7yg/4wpMFmF9IAR7pk29yFEOSZUT+S+vzNYRKzPUPAZ6
digDhjNWwoORm9TvEp2nqxYHzmJkP1j0dQMBitrvVd17348HT/UmR2kA5/JSIki9
aZ1jheaIcQxxXOXUTU/m6CmuVccbpQEq5GHJ/A4o4sz0W8ylZV8cOPbIKlVeCGfR
0Svhpgk8Ow9Zb/XfUVHsdhwULNqRK40JmyR0uuVhdLgoXAXGvqkBo/HWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHpHEgXVaqHWFePi36kLav3CJGXMB8GA1UdIwQY
MBaAFHno0EkNML+UTtTWNoR8WNQxo4y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVqUVNRMHd2NVJPMU5ZMmhIeFkxREdqakx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yOTQxZTctNmIwZS00ZTg4LWI3ZDgt
NGJkMGMyN2QzYWVhLzEvZWVqUVNRMHd2NVJPMU5ZMmhIeFkxREdqakx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yOTQxZTctNmIwZS00ZTg4LWI3ZDgtNGJkMGMyN2QzYWVh
LzEvZWVqUVNRMHd2NVJPMU5ZMmhIeFkxREdqakx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTjvm3Lx
Zvj70/A7cxxxLQD1zlitO7v/pOT7S82XZkbY/K3u87t4u86JtGXYR2aBPXCgf6af
fM7sNptefW2Bw4AXtGxzQ9bd8/nyvSnfNWrUGi8HhKYZxFtCdsqSJSPIx43QBb9H
qOtE2Zdu3JG/HE1KcKx2RiYMxGtdULrXjleg87PLFlIV1t7CxJb/ExCWBQiwJpEF
t9m0zL24AZD5aQqh3+sU7eF27T78X9HVWVZsdUpwHKn/rwxtFgxxWFsGLsWX0Fm2
HlP7Z3prvMxpAMQLgSomSX9JhgqGDoIEoSLqR/jm4/wvhb4jz5bOMQF5tnijLOyo
ZovJhFa8aDPezw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:34 2025 by rpki-client