Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File:                     _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier:          7727voN05283gStZNEj/7agP2nrJpPaBxNryMTjxL3A=
Subject key identifier:   83:70:0F:8C:0B:D1:BA:23:28:D3:68:0D:44:E5:BD:44:69:07:73:FD
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer:       /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial:       019923317389AF0B1DA0988EF7F7103D6F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number:          EE
Signing time:             Sun 07 Sep 2025 08:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 08:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 08:01:07 +0000
Files and hashes:         1: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: 3w4TxkijKrv3GY0xxp1+lGAAUN7Pk+L0N9UV1n+p3xQ=)
                          2: l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa (hash: fwZNajA2NrVuCxC49gzHtXDb0A0DV7JtszLe3wSG/eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:73:89:af:0b:1d:a0:98:8e:f7:f7:10:3d:6f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
        Validity
            Not Before: Sep  7 08:01:07 2025 GMT
            Not After : Sep  8 08:01:07 2025 GMT
        Subject: CN=83700f8c0bd1ba2328d3680d44e5bd44690773fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:7b:ba:84:0d:2d:31:4f:5e:97:3d:d5:41:
                    d7:59:89:0d:76:f8:87:5f:ff:62:76:62:2c:c9:5c:
                    98:fc:c1:a9:5e:df:89:7b:68:53:68:5f:06:f3:1c:
                    e2:ff:87:8b:e8:28:ea:7f:ca:36:57:80:c9:db:b8:
                    42:68:ad:c0:de:b5:c5:80:d6:88:26:81:d3:39:60:
                    9b:e7:73:cb:00:08:24:e9:57:87:68:24:b0:9f:f8:
                    04:a9:ad:dc:ee:0b:a3:46:bf:40:f7:3a:36:a9:5c:
                    97:55:aa:40:f2:f1:e6:f0:b1:29:95:d7:24:63:38:
                    89:14:31:97:94:d6:ab:2b:96:4c:1d:ea:ec:2d:ba:
                    9e:8a:2c:ea:09:f5:eb:be:bf:8a:27:5c:3a:1b:ae:
                    71:6c:e6:d0:6c:5b:d8:4d:0f:9d:7e:86:84:21:bf:
                    9c:a9:3c:b7:7f:46:b5:c7:2f:04:18:cd:1f:c5:d3:
                    24:66:ae:21:f0:5d:07:3b:f2:99:b0:f0:73:30:79:
                    b3:55:43:eb:58:c8:cb:b0:00:ee:b8:1f:75:66:7b:
                    15:aa:20:40:56:36:56:80:05:58:28:a1:74:85:e4:
                    4e:7f:c1:4d:3f:cb:3e:9b:00:25:22:3b:c3:e0:5c:
                    e5:08:df:24:8a:70:cc:1e:61:4a:a9:57:18:0d:a2:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:0F:8C:0B:D1:BA:23:28:D3:68:0D:44:E5:BD:44:69:07:73:FD
            X509v3 Authority Key Identifier:
                keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:41:dc:6d:54:5e:f0:0a:20:b0:c1:01:ed:b2:15:1c:38:39:
         5e:fa:98:22:8a:75:8d:e6:56:08:9d:93:94:38:e6:28:95:8d:
         cc:98:8e:75:83:b6:1c:f5:70:d6:7f:5e:6b:d8:10:57:e9:38:
         39:10:f1:5d:57:58:6c:68:d4:e3:39:86:ac:a7:a2:99:3f:09:
         0c:c6:49:73:d8:2c:8b:42:6b:a0:6d:b3:60:6c:60:3c:b6:ab:
         e2:30:28:d6:3c:75:44:9e:9d:99:9d:87:e8:87:ef:9f:a8:71:
         5a:d4:ec:2b:e0:cb:f2:39:7f:69:6e:e6:d4:b4:45:b4:1d:44:
         2d:fb:6a:ae:22:ce:5c:8a:56:db:f5:dc:d2:f8:92:76:67:ec:
         24:82:4a:f9:e2:3d:70:66:2e:96:e4:da:c6:b3:3e:af:95:e4:
         29:a2:27:2c:f0:e3:31:3e:2a:8d:5d:90:f2:d3:02:65:7e:28:
         5b:10:16:fe:8e:cf:80:15:a1:74:d8:fc:fa:59:86:92:00:8a:
         bc:80:f5:84:6e:c9:73:0a:90:32:27:cf:1b:6f:b4:21:e1:46:
         0a:4a:2a:92:7f:bd:2e:10:a1:71:67:c6:60:c0:f7:c4:7a:a7:
         5e:29:d9:8f:97:02:84:53:db:f8:be:f5:a7:e9:f5:46:31:93:
         7e:6d:7d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMXOJrwsdoJiO9/cQPW9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWI0ZDUwOGJkYzIxNDE1YjQ3NTJlZWJjNDQ4ZDRhYWFj
NjM1ZDkwHhcNMjUwOTA3MDgwMTA3WhcNMjUwOTA4MDgwMTA3WjAzMTEwLwYDVQQD
Eyg4MzcwMGY4YzBiZDFiYTIzMjhkMzY4MGQ0NGU1YmQ0NDY5MDc3M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66J7uoQNLTFPXpc91UHXWYkNdviH
X/9idmIsyVyY/MGpXt+Je2hTaF8G8xzi/4eL6Cjqf8o2V4DJ27hCaK3A3rXFgNaI
JoHTOWCb53PLAAgk6VeHaCSwn/gEqa3c7gujRr9A9zo2qVyXVapA8vHm8LEpldck
YziJFDGXlNarK5ZMHersLbqeiizqCfXrvr+KJ1w6G65xbObQbFvYTQ+dfoaEIb+c
qTy3f0a1xy8EGM0fxdMkZq4h8F0HO/KZsPBzMHmzVUPrWMjLsADuuB91ZnsVqiBA
VjZWgAVYKKF0heROf8FNP8s+mwAlIjvD4FzlCN8kinDMHmFKqVcYDaLJKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINwD4wL0bojKNNoDUTlvURpB3P9MB8GA1UdIwQY
MBaAFP5bTVCL3CFBW0dS7rxEjUqqxjXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOWY3YWItM2ZhMC00NzFmLWJiOTUt
MDBiNGZiYjM4NDlkLzEvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jOWY3YWItM2ZhMC00NzFmLWJiOTUtMDBiNGZiYjM4NDlk
LzEvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckHcbVRe
8AogsMEB7bIVHDg5XvqYIop1jeZWCJ2TlDjmKJWNzJiOdYO2HPVw1n9ea9gQV+k4
ORDxXVdYbGjU4zmGrKeimT8JDMZJc9gsi0JroG2zYGxgPLar4jAo1jx1RJ6dmZ2H
6Ifvn6hxWtTsK+DL8jl/aW7m1LRFtB1ELftqriLOXIpW2/Xc0viSdmfsJIJK+eI9
cGYuluTaxrM+r5XkKaInLPDjMT4qjV2Q8tMCZX4oWxAW/o7PgBWhdNj8+lmGkgCK
vID1hG7JcwqQMifPG2+0IeFGCkoqkn+9LhChcWfGYMD3xHqnXinZj5cChFPb+L71
p+n1RjGTfm19eg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:39 2025 by rpki-client