Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          ALg8KI+4GPjrmmHCjv6gGPiy+F3GKfFteFz7BS9/yhU=
Subject key identifier:   8D:DB:83:D2:22:52:28:4E:C5:12:0B:95:C0:1E:1F:6A:70:9B:33:29
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       019923A0D25366BD47BD21571243B24FA519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          0E3D
Signing time:             Sun 07 Sep 2025 10:02:46 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:46 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:46 +0000
Files and hashes:         1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: lTukz1DVIdYbVKCOtGb3EDbrLYGWk7I/UDJi8QmHiE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:d2:53:66:bd:47:bd:21:57:12:43:b2:4f:a5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Sep  7 10:02:46 2025 GMT
            Not After : Sep  8 10:02:46 2025 GMT
        Subject: CN=8ddb83d22252284ec5120b95c01e1f6a709b3329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:f1:35:9e:cd:8e:01:96:50:5f:f3:ae:49:
                    14:76:67:40:48:b0:1a:c6:39:a3:8f:34:df:a1:27:
                    bd:8a:84:4d:46:e0:bc:95:39:43:45:84:6d:d3:69:
                    3b:99:76:ec:47:61:67:3e:ec:66:46:91:78:2c:2d:
                    e7:01:ec:d8:f1:4d:d2:25:b0:35:d1:e6:b6:9c:c8:
                    ae:9f:5d:cd:56:2a:8f:37:b0:94:1d:1a:de:86:0f:
                    cd:c3:7a:59:8d:ea:6b:ac:bf:cf:b3:f6:b0:de:a5:
                    73:55:9f:01:aa:d7:75:87:3a:b2:bc:4a:a6:33:ae:
                    40:9e:b2:b4:66:8e:71:50:a2:1b:38:d7:52:b8:1f:
                    7b:3e:57:02:6a:07:74:50:7f:89:0f:29:fe:c3:3d:
                    ac:52:3e:35:b2:01:d6:a2:d9:57:64:05:d1:96:17:
                    4c:17:11:e4:00:f7:2e:e8:49:65:be:0a:a4:f3:33:
                    65:42:85:7a:cb:6c:35:9b:5d:9d:ea:05:4a:f8:ad:
                    c9:75:96:5b:11:49:58:0a:3a:c7:6a:c3:2f:d9:88:
                    3a:51:d4:aa:b8:38:6f:be:09:35:fa:fe:e6:c6:a4:
                    41:1d:ea:a9:a4:79:32:1d:9b:55:77:18:02:62:c5:
                    86:50:12:43:93:da:be:8e:87:48:f7:1a:f0:53:08:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:83:D2:22:52:28:4E:C5:12:0B:95:C0:1E:1F:6A:70:9B:33:29
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:7e:1b:4d:2a:df:39:09:d7:59:6c:9a:ef:e1:6a:97:2b:
         72:91:50:be:ff:54:6b:62:83:70:b0:1f:e2:38:c4:6d:dc:97:
         ff:c8:6b:70:0c:ee:db:16:c6:44:3a:5a:a4:5b:c2:b1:d2:f5:
         03:8f:21:88:61:43:d3:8a:c3:2d:a2:aa:18:d3:55:86:50:b7:
         30:a4:67:ce:14:16:83:9c:ba:b3:76:e4:61:8a:ba:c7:53:90:
         57:ad:43:4e:d4:3b:3d:12:51:25:30:6f:51:1d:31:3e:3b:8b:
         b8:a0:6e:9e:cc:ab:59:22:90:5c:2a:44:e3:33:6e:80:4a:a0:
         93:e1:b5:ba:71:0d:11:a8:68:22:14:c4:22:07:32:43:c5:61:
         8a:c1:79:ef:b6:fa:59:e5:01:69:85:f9:1e:5d:2a:ad:1b:c6:
         5d:f6:07:a1:c5:fa:34:07:cb:31:d9:0f:cc:b6:36:e6:8e:4e:
         b0:88:fe:80:46:61:6f:50:2f:34:04:bd:65:55:f0:41:60:62:
         9d:66:9d:48:c3:e8:64:5b:2e:4c:89:2b:8e:33:d6:ca:19:e5:
         b5:07:fb:5d:f1:4d:4d:0c:8d:68:3d:bd:1c:fb:e1:1a:03:a6:
         4b:1b:cd:18:1c:4f:a1:5d:74:86:f1:ba:d6:24:36:ab:57:fa:
         ac:91:97:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoNJTZr1HvSFXEkOyT6UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODI3MzVhYTk4ZDQ2NDVkMDQxMDkzYTc2NjJhMTIzNzk1
MDNhMzEwHhcNMjUwOTA3MTAwMjQ2WhcNMjUwOTA4MTAwMjQ2WjAzMTEwLwYDVQQD
Eyg4ZGRiODNkMjIyNTIyODRlYzUxMjBiOTVjMDFlMWY2YTcwOWIzMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluLxNZ7NjgGWUF/zrkkUdmdASLAa
xjmjjzTfoSe9ioRNRuC8lTlDRYRt02k7mXbsR2FnPuxmRpF4LC3nAezY8U3SJbA1
0ea2nMiun13NViqPN7CUHRrehg/Nw3pZjeprrL/Ps/aw3qVzVZ8Bqtd1hzqyvEqm
M65AnrK0Zo5xUKIbONdSuB97PlcCagd0UH+JDyn+wz2sUj41sgHWotlXZAXRlhdM
FxHkAPcu6Ellvgqk8zNlQoV6y2w1m12d6gVK+K3JdZZbEUlYCjrHasMv2Yg6UdSq
uDhvvgk1+v7mxqRBHeqppHkyHZtVdxgCYsWGUBJDk9q+jodI9xrwUwgBjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3bg9IiUihOxRILlcAeH2pwmzMpMB8GA1UdIwQY
MBaAFMeCc1qpjUZF0EEJOnZioSN5UDoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYt
YjQ5M2E5ZGY0ZjhmLzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYtYjQ5M2E5ZGY0Zjhm
LzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcF+G00q
3zkJ11lsmu/hapcrcpFQvv9Ua2KDcLAf4jjEbdyX/8hrcAzu2xbGRDpapFvCsdL1
A48hiGFD04rDLaKqGNNVhlC3MKRnzhQWg5y6s3bkYYq6x1OQV61DTtQ7PRJRJTBv
UR0xPjuLuKBunsyrWSKQXCpE4zNugEqgk+G1unENEahoIhTEIgcyQ8VhisF577b6
WeUBaYX5Hl0qrRvGXfYHocX6NAfLMdkPzLY25o5OsIj+gEZhb1AvNAS9ZVXwQWBi
nWadSMPoZFsuTIkrjjPWyhnltQf7XfFNTQyNaD29HPvhGgOmSxvNGBxPoV10hvG6
1iQ2q1f6rJGXWQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:35 2025 by rpki-client