Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File:                     4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier:          kgtF0xOj81mME9LiLxssBv8WfuAq1dhVJmKNQr5uw2w=
Subject key identifier:   E2:38:9F:4B:87:B1:74:76:A1:A0:C7:84:DE:5D:6E:6E:90:88:FB:83
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer:       /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial:       019923D5CD0FD99068115D9F41FBC6FB305E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number:          0A73
Signing time:             Sun 07 Sep 2025 11:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 11:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 11:00:38 +0000
Files and hashes:         1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: 7ikEejBRyTwGD2MPq2uGy/clu8/m+HbBhXPCLgFQHfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d5:cd:0f:d9:90:68:11:5d:9f:41:fb:c6:fb:30:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
        Validity
            Not Before: Sep  7 11:00:38 2025 GMT
            Not After : Sep  8 11:00:38 2025 GMT
        Subject: CN=e2389f4b87b17476a1a0c784de5d6e6e9088fb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:7c:67:74:e2:ea:d7:b4:a8:24:86:52:43:
                    b7:2c:04:02:86:0a:b3:72:d0:04:aa:fa:c7:c1:80:
                    ae:17:80:b9:a2:99:b7:e1:cd:5b:53:cf:2d:04:81:
                    89:10:e4:5a:5a:1e:f0:33:92:0c:8c:f8:a8:26:48:
                    94:86:ce:91:81:4c:59:77:0f:77:db:45:b9:29:e7:
                    bf:80:7c:f4:b6:af:79:f0:5b:d8:89:5f:60:4c:e3:
                    cc:f1:29:d6:83:4a:6c:e4:64:9c:55:38:8e:0c:0a:
                    e2:47:80:00:ba:24:72:0d:08:0e:5c:94:4a:29:f9:
                    10:bc:06:7b:8e:a9:f1:87:ad:81:e9:ac:07:02:ac:
                    55:1d:92:7d:99:ba:6e:bf:fb:b6:eb:cd:a8:b0:12:
                    ef:7d:c4:4d:48:19:be:f2:b9:1d:22:59:87:68:1c:
                    44:ff:0c:9a:df:f9:7f:90:fe:00:4a:e1:5a:0c:32:
                    76:8c:83:9c:46:8b:4b:5e:3b:bd:59:ca:5a:11:c1:
                    a9:60:d2:37:f9:a2:00:fb:09:a9:3c:b3:49:f0:aa:
                    04:2d:7f:d5:6b:6b:0f:d5:f7:0a:7d:96:5d:55:ad:
                    d4:2f:70:da:b3:14:31:a8:98:1e:7c:45:27:e9:c8:
                    96:b8:46:35:e1:ea:98:c1:08:e2:9f:e2:3b:cc:3f:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:9F:4B:87:B1:74:76:A1:A0:C7:84:DE:5D:6E:6E:90:88:FB:83
            X509v3 Authority Key Identifier:
                keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:52:8d:85:6b:e9:16:30:30:6f:6a:84:42:45:14:c5:d1:6e:
         b3:0c:41:d6:46:78:a1:ae:79:dc:38:18:e1:95:f5:2c:a2:5c:
         d0:80:c7:f8:31:94:50:70:3e:14:49:fe:95:28:0f:42:c5:4a:
         9c:4f:ff:ce:b2:8e:33:41:78:2a:ac:e7:b4:93:ff:51:64:fe:
         60:a0:39:9b:c2:87:6c:bb:fb:3a:71:65:f6:92:c7:21:c2:a1:
         c0:d2:56:12:b6:52:07:1d:38:79:7f:3a:20:a1:fb:6f:12:8f:
         8a:7d:f2:59:0b:ca:93:fa:1b:92:cd:11:66:5e:03:e0:41:17:
         84:1d:35:f8:b7:cb:2e:ca:2e:d4:eb:f6:94:6f:95:79:4b:6d:
         48:d7:de:98:e7:1e:3e:97:d2:95:92:00:6e:e1:6b:ba:18:98:
         cf:5e:2c:4d:06:97:22:5a:cd:f4:52:0b:87:40:8e:85:55:4b:
         19:3c:ea:f9:48:38:18:96:71:4a:a2:87:cd:3f:ac:28:12:7c:
         a4:76:b6:14:ef:aa:5d:29:ad:4f:87:05:e8:0c:3b:4b:11:51:
         1a:6e:bc:e9:c0:9b:7a:57:78:df:17:b6:d7:ed:4d:85:2b:63:
         1d:27:d2:ba:4d:21:56:b5:c6:74:a1:1f:3e:33:61:e3:1c:db:
         82:08:0f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1c0P2ZBoEV2fQfvG+zBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGE2ZjJlNjMzZmNmM2FkZWY4NzI1Y2M1YmUwZWE3OTE1
ZGQ0MGMwHhcNMjUwOTA3MTEwMDM4WhcNMjUwOTA4MTEwMDM4WjAzMTEwLwYDVQQD
EyhlMjM4OWY0Yjg3YjE3NDc2YTFhMGM3ODRkZTVkNmU2ZTkwODhmYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsot8Z3Ti6te0qCSGUkO3LAQChgqz
ctAEqvrHwYCuF4C5opm34c1bU88tBIGJEORaWh7wM5IMjPioJkiUhs6RgUxZdw93
20W5Kee/gHz0tq958FvYiV9gTOPM8SnWg0ps5GScVTiODAriR4AAuiRyDQgOXJRK
KfkQvAZ7jqnxh62B6awHAqxVHZJ9mbpuv/u2682osBLvfcRNSBm+8rkdIlmHaBxE
/wya3/l/kP4ASuFaDDJ2jIOcRotLXju9WcpaEcGpYNI3+aIA+wmpPLNJ8KoELX/V
a2sP1fcKfZZdVa3UL3DasxQxqJgefEUn6ciWuEY14eqYwQjin+I7zD8eSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI4n0uHsXR2oaDHhN5dbm6QiPuDMB8GA1UdIwQY
MBaAFOAKby5jP8863vhyXMW+DqeRXdQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jMDQ0M2UtOTYwOC00MTk2LTk2MjUt
ZDA5NmYxZTI1ZTk3LzEvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jMDQ0M2UtOTYwOC00MTk2LTk2MjUtZDA5NmYxZTI1ZTk3
LzEvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVKNhWvp
FjAwb2qEQkUUxdFuswxB1kZ4oa553DgY4ZX1LKJc0IDH+DGUUHA+FEn+lSgPQsVK
nE//zrKOM0F4KqzntJP/UWT+YKA5m8KHbLv7OnFl9pLHIcKhwNJWErZSBx04eX86
IKH7bxKPin3yWQvKk/obks0RZl4D4EEXhB01+LfLLsou1Ov2lG+VeUttSNfemOce
PpfSlZIAbuFruhiYz14sTQaXIlrN9FILh0COhVVLGTzq+Ug4GJZxSqKHzT+sKBJ8
pHa2FO+qXSmtT4cF6Aw7SxFRGm686cCbeld43xe21+1NhStjHSfSuk0hVrXGdKEf
PjNh4xzbgggPwA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:39 2025 by rpki-client