Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File:                     jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier:          j0amXyZLAbbuVoLVZLxLgwJy+zR/lZ0f1HnkrG+483g=
Subject key identifier:   8E:7C:01:1E:D8:AD:FB:75:90:4E:A3:F1:25:76:AC:B0:50:CE:E4:AC
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer:       /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial:       0199240CCDBDA6A9AEEC998484BB626E3474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number:          1118
Signing time:             Sun 07 Sep 2025 12:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 12:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 12:00:42 +0000
Files and hashes:         1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: TBOWyQsgQ8lAKMgg2xd9iu7wLTbRYxMabesFAuqvZD4=)
                          2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0c:cd:bd:a6:a9:ae:ec:99:84:84:bb:62:6e:34:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
        Validity
            Not Before: Sep  7 12:00:42 2025 GMT
            Not After : Sep  8 12:00:42 2025 GMT
        Subject: CN=8e7c011ed8adfb75904ea3f12576acb050cee4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:3e:d2:4d:28:1d:04:aa:bc:ce:e0:ab:61:
                    22:96:a9:fc:89:39:63:40:ec:05:28:44:2b:39:d0:
                    3e:82:ff:58:7b:52:f3:37:ac:4e:6f:12:26:0b:62:
                    db:4e:be:b7:01:52:e1:7e:15:87:16:0d:cf:83:94:
                    17:9f:9b:e6:31:f5:5b:85:db:c2:09:5c:9b:db:b1:
                    66:85:ad:5e:12:7e:f3:fb:1f:db:00:12:0e:2a:7d:
                    7a:5f:3c:af:33:28:e1:df:ae:fc:a3:7f:dd:c8:70:
                    71:3b:f6:6b:c0:56:95:37:aa:ff:42:26:4b:58:e4:
                    a3:53:1a:a2:b1:ce:8c:87:ee:98:2e:53:43:ed:9c:
                    8e:12:5a:90:17:25:95:ce:43:c7:cd:72:7c:b2:c6:
                    66:a2:93:66:91:f3:e1:cc:b0:90:d3:44:7b:e7:70:
                    a6:66:78:80:f2:ac:80:c1:64:85:19:1b:b9:b1:3a:
                    b1:96:b5:76:6a:c0:64:64:e4:37:da:5e:a7:f2:34:
                    47:49:0e:39:93:1b:28:c1:a1:41:e3:f1:00:c2:70:
                    8d:62:a6:41:22:fa:96:7d:db:c2:ca:4f:a9:65:53:
                    da:c3:0c:ff:d6:60:33:74:51:d9:74:68:10:c7:f4:
                    fe:d5:76:68:8e:41:47:ad:73:87:c6:d2:5c:dd:11:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7C:01:1E:D8:AD:FB:75:90:4E:A3:F1:25:76:AC:B0:50:CE:E4:AC
            X509v3 Authority Key Identifier:
                keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:ea:ea:24:69:63:e7:07:d1:47:34:98:3c:7c:f6:8d:a8:
         6d:c2:03:e5:2b:4c:e6:f7:76:23:fd:f6:0a:2e:e4:e6:02:a1:
         11:e3:db:e7:fe:62:0e:da:3d:d0:9f:ce:84:3b:8c:a8:db:f2:
         4d:f9:1b:70:c2:f1:cf:64:8a:cf:fb:70:68:c7:75:4a:7a:e4:
         38:e5:79:29:af:df:cd:e6:38:32:a6:1a:06:5f:9f:8b:d3:b4:
         3f:f4:3b:99:6e:c9:fb:db:21:36:a6:fe:64:73:62:79:4c:8a:
         80:dd:ce:e3:e8:af:13:a6:49:ca:9a:41:30:d6:57:db:d0:a6:
         9c:45:68:50:16:2d:e7:58:b4:52:e1:65:85:62:89:74:cf:37:
         85:5c:2a:af:25:4d:75:83:28:28:96:77:1a:79:b4:38:a6:9a:
         3b:43:d8:23:32:5d:2e:94:a5:d3:6e:0e:05:0e:9a:bc:43:f6:
         e7:a0:7c:45:fe:a7:89:76:fd:1a:41:ac:c4:43:33:4a:68:8d:
         52:03:e6:27:72:27:49:a9:20:f4:88:ef:d5:d5:ea:c1:a6:69:
         b5:1c:f3:e6:b8:f6:76:cb:9f:8e:6a:07:e0:52:34:60:0a:43:
         38:75:fc:ad:eb:64:f9:87:83:8b:c4:0e:84:cb:dc:33:75:18:
         62:2c:77:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDM29pqmu7JmEhLtibjR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZDAwM2FmMDQ3NzRkZDNlMzk3MzA0OTc5ODlhM2ExNzE1
MTYyNTIwHhcNMjUwOTA3MTIwMDQyWhcNMjUwOTA4MTIwMDQyWjAzMTEwLwYDVQQD
Eyg4ZTdjMDExZWQ4YWRmYjc1OTA0ZWEzZjEyNTc2YWNiMDUwY2VlNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuII+0k0oHQSqvM7gq2Eilqn8iTlj
QOwFKEQrOdA+gv9Ye1LzN6xObxImC2LbTr63AVLhfhWHFg3Pg5QXn5vmMfVbhdvC
CVyb27Fmha1eEn7z+x/bABIOKn16XzyvMyjh3678o3/dyHBxO/ZrwFaVN6r/QiZL
WOSjUxqisc6Mh+6YLlND7ZyOElqQFyWVzkPHzXJ8ssZmopNmkfPhzLCQ00R753Cm
ZniA8qyAwWSFGRu5sTqxlrV2asBkZOQ32l6n8jRHSQ45kxsowaFB4/EAwnCNYqZB
IvqWfdvCyk+pZVPawwz/1mAzdFHZdGgQx/T+1XZojkFHrXOHxtJc3RHgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI58AR7Yrft1kE6j8SV2rLBQzuSsMB8GA1UdIwQY
MBaAFI3QA68Ed03T45cwSXmJo6FxUWJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2Mt
NjdjZDJiNDU5YWFlLzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2MtNjdjZDJiNDU5YWFl
LzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOPq6iRp
Y+cH0Uc0mDx89o2obcID5StM5vd2I/32Ci7k5gKhEePb5/5iDto90J/OhDuMqNvy
TfkbcMLxz2SKz/twaMd1SnrkOOV5Ka/fzeY4MqYaBl+fi9O0P/Q7mW7J+9shNqb+
ZHNieUyKgN3O4+ivE6ZJyppBMNZX29CmnEVoUBYt51i0UuFlhWKJdM83hVwqryVN
dYMoKJZ3Gnm0OKaaO0PYIzJdLpSl024OBQ6avEP256B8Rf6niXb9GkGsxEMzSmiN
UgPmJ3InSakg9Ijv1dXqwaZptRzz5rj2dsufjmoH4FI0YApDOHX8retk+YeDi8QO
hMvcM3UYYix3/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:50 2025 by rpki-client