Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          bN+DmZt0rSU4W6EXm1eNK09y7+X6Pj+7akse4I5jFd8=
Subject key identifier:   82:92:BB:CA:7E:21:F9:1D:4C:BE:0D:E6:0C:D7:68:B3:E0:F6:4F:82
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       01991EAF9FE206A8777551941650CB4FAFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0E38
Signing time:             Sat 06 Sep 2025 11:00:50 +0000
Manifest this update:     Sat 06 Sep 2025 11:00:50 +0000
Manifest next update:     Sun 07 Sep 2025 11:00:50 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: HTVYqui5KBsvEpd1u4+ksPmudenk9K7TIhDmwWvOTvA=)
                          2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:af:9f:e2:06:a8:77:75:51:94:16:50:cb:4f:af:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Sep  6 11:00:50 2025 GMT
            Not After : Sep  7 11:00:50 2025 GMT
        Subject: CN=8292bbca7e21f91d4cbe0de60cd768b3e0f64f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:7e:a9:0d:b9:c6:5d:6f:94:e7:dc:43:78:
                    13:38:cc:ec:2f:fc:0e:68:b4:a5:d1:a7:04:db:0e:
                    59:d9:56:31:a9:72:62:18:d6:1d:da:a6:3c:78:e8:
                    6c:36:6f:ed:17:d9:5d:ff:c1:31:36:0c:dc:fc:9a:
                    0e:3e:e0:b6:10:7e:57:db:c4:bd:0b:ba:02:47:e8:
                    1f:12:72:e1:5a:14:c7:1d:67:c5:95:67:43:d0:4c:
                    ce:7c:9a:40:4c:b6:da:95:22:84:fb:b4:32:ab:58:
                    8c:4a:7d:fc:67:7f:93:50:2f:ab:90:15:0f:3b:85:
                    79:aa:b9:07:cc:aa:15:58:e3:f8:06:b7:27:a0:e6:
                    72:91:80:55:22:0e:c8:24:da:81:2b:5f:0a:65:50:
                    b1:6c:20:db:d0:8a:0c:aa:33:ad:0a:7e:be:42:f1:
                    46:ec:64:92:f3:e3:b1:c2:32:55:ff:9b:3c:0f:7c:
                    56:39:50:dc:34:b7:d0:77:60:fd:8f:83:f2:48:7f:
                    91:df:74:3d:84:b4:93:ca:5c:55:3b:d1:4d:fa:f6:
                    01:3b:ce:3e:8a:1a:98:b8:09:e9:92:17:d5:81:f0:
                    e1:9f:2e:b5:8e:d4:04:c0:0a:35:65:28:3a:3f:3e:
                    e6:50:50:ef:d3:65:e6:57:6d:9b:b2:ca:b3:09:8d:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:BB:CA:7E:21:F9:1D:4C:BE:0D:E6:0C:D7:68:B3:E0:F6:4F:82
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:32:a3:87:f1:5f:0c:cf:3e:c5:90:05:b0:3e:04:87:e3:06:
         82:f0:69:bc:52:a7:04:62:45:86:21:fa:61:6e:4d:58:a7:62:
         ef:e8:34:7b:b9:f2:2f:08:f2:ac:6a:30:e0:c1:7d:80:a3:19:
         9e:4d:d1:a2:7a:01:e9:99:f3:0e:15:d9:14:28:15:eb:86:6b:
         33:b5:cc:03:f5:9f:d0:fa:5e:aa:44:1a:91:3d:15:69:7a:af:
         cc:84:d1:17:2e:a9:9a:00:a7:97:ec:22:61:25:be:dc:89:dd:
         81:93:a9:9b:65:0c:2b:63:6e:34:31:3a:c0:8b:b7:de:48:60:
         76:6b:68:1b:45:fd:9e:47:bf:79:2d:bf:81:04:ac:2c:af:15:
         c2:84:f7:ec:fd:96:6b:fe:f7:0c:e3:ab:f3:95:20:98:98:cd:
         f0:bb:07:b9:41:ea:c8:94:9b:9d:cd:7b:19:e0:04:11:e1:5a:
         1f:c4:d0:ea:d2:f5:94:50:16:cc:e3:f9:c9:19:8c:43:cb:35:
         d8:e8:f6:cd:a1:2b:7a:6f:1f:a9:db:c8:8a:1f:f2:bd:7d:c1:
         05:92:b1:78:05:db:a0:0f:72:ee:b5:0d:95:9b:0c:65:b5:18:
         de:2e:2c:c4:7f:8a:42:c0:5f:44:cc:12:17:71:b1:9c:ba:9c:
         ce:1b:62:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZker5/iBqh3dVGUFlDLT6/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh
MDI3YzIwHhcNMjUwOTA2MTEwMDUwWhcNMjUwOTA3MTEwMDUwWjAzMTEwLwYDVQQD
Eyg4MjkyYmJjYTdlMjFmOTFkNGNiZTBkZTYwY2Q3NjhiM2UwZjY0ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUZ+qQ25xl1vlOfcQ3gTOMzsL/wO
aLSl0acE2w5Z2VYxqXJiGNYd2qY8eOhsNm/tF9ld/8ExNgzc/JoOPuC2EH5X28S9
C7oCR+gfEnLhWhTHHWfFlWdD0EzOfJpATLbalSKE+7Qyq1iMSn38Z3+TUC+rkBUP
O4V5qrkHzKoVWOP4BrcnoOZykYBVIg7IJNqBK18KZVCxbCDb0IoMqjOtCn6+QvFG
7GSS8+OxwjJV/5s8D3xWOVDcNLfQd2D9j4PySH+R33Q9hLSTylxVO9FN+vYBO84+
ihqYuAnpkhfVgfDhny61jtQEwAo1ZSg6Pz7mUFDv02XmV22bssqzCY2+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKSu8p+IfkdTL4N5gzXaLPg9k+CMB8GA1UdIwQY
MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt
N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex
LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczKjh/Ff
DM8+xZAFsD4Eh+MGgvBpvFKnBGJFhiH6YW5NWKdi7+g0e7nyLwjyrGow4MF9gKMZ
nk3RonoB6ZnzDhXZFCgV64ZrM7XMA/Wf0PpeqkQakT0VaXqvzITRFy6pmgCnl+wi
YSW+3IndgZOpm2UMK2NuNDE6wIu33khgdmtoG0X9nke/eS2/gQSsLK8VwoT37P2W
a/73DOOr85UgmJjN8LsHuUHqyJSbnc17GeAEEeFaH8TQ6tL1lFAWzOP5yRmMQ8s1
2Oj2zaErem8fqdvIih/yvX3BBZKxeAXboA9y7rUNlZsMZbUY3i4sxH+KQsBfRMwS
F3GxnLqczhtieQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:46:46 2025 by rpki-client