Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File:                     eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier:          hfxvS/HAyzbaIm8/f6n37WJVjhQzZCkGcocJx3vCAoM=
Subject key identifier:   27:7F:12:40:C0:C1:46:A2:BF:E2:13:86:6D:F5:B5:AD:B0:1D:BB:EC
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       019922FA2C1B3875CBA17F342AA96200F7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number:          1679
Signing time:             Sun 07 Sep 2025 07:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:44 +0000
Files and hashes:         1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
                          2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
                          3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
                          4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
                          5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: pImO+qY27Eap47I1CJL9BvVrweIpCtw9NX70EM9hpJ4=)
                          6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
                          7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
                          8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:2c:1b:38:75:cb:a1:7f:34:2a:a9:62:00:f7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: Sep  7 07:00:44 2025 GMT
            Not After : Sep  8 07:00:44 2025 GMT
        Subject: CN=277f1240c0c146a2bfe213866df5b5adb01dbbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:2c:f5:e8:db:9b:2d:c9:81:c6:ad:04:67:
                    50:36:62:50:a7:8e:f6:49:a2:12:e0:eb:ca:b0:19:
                    9b:5a:ef:38:98:2e:ab:ea:fa:54:18:c7:02:42:03:
                    17:1d:65:f5:2b:46:c2:06:07:29:f4:d1:36:03:73:
                    db:93:91:0a:9b:6d:c6:47:4c:8a:ab:ff:2e:39:bd:
                    27:07:b1:f8:85:1a:15:64:be:aa:de:ea:34:f0:b8:
                    07:a6:20:01:f7:2b:eb:f6:17:65:ae:cf:a3:62:64:
                    90:96:60:a7:44:69:5b:19:b4:62:b6:d0:55:3e:7f:
                    c1:d6:12:3c:57:79:c6:f2:4f:55:46:88:3b:a4:e4:
                    24:c0:8d:c8:c4:a8:7a:83:62:20:2c:16:03:e6:03:
                    b5:3e:d3:70:d4:86:c6:85:f4:15:c3:12:64:2a:56:
                    b4:0d:16:1c:17:9e:6a:1f:fa:18:eb:8d:2e:e4:9d:
                    21:6d:b4:44:e0:bd:14:ee:81:01:aa:9c:8f:42:2d:
                    a2:f4:53:2c:95:b2:b0:58:0f:9c:c8:58:ef:58:49:
                    a1:0a:68:ab:3a:79:da:36:ce:25:a1:ac:f3:dd:8d:
                    15:af:1b:ae:61:ed:2d:25:26:cf:70:80:5c:8c:2b:
                    77:42:48:6b:cc:92:df:ec:b2:93:f6:c2:13:8e:06:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:12:40:C0:C1:46:A2:BF:E2:13:86:6D:F5:B5:AD:B0:1D:BB:EC
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:65:5c:68:8d:56:ed:fc:cd:68:28:6f:32:07:34:ef:f0:
         dc:10:54:63:2e:a0:d7:cb:7c:e0:66:63:a5:90:58:89:ec:09:
         ea:c1:4b:84:a0:18:1b:e0:fd:e5:7c:de:4c:a1:09:ce:58:80:
         c0:93:c3:e2:f1:19:af:84:aa:6c:09:c5:b3:5f:c7:af:e6:b1:
         03:08:ef:1c:38:3c:a8:7c:5f:ad:03:a1:14:c2:d2:e1:88:ba:
         d6:7f:42:69:5c:20:fa:ee:8b:5e:15:78:cd:fe:b5:b6:ca:95:
         8d:d2:9c:9d:15:f1:67:0b:7e:94:89:2f:e6:a6:39:3a:a5:f6:
         bf:b2:8e:73:58:35:c7:9a:8f:00:af:9a:17:d8:d8:78:20:eb:
         3f:6e:81:79:eb:2e:e3:e4:20:55:4a:fd:8b:02:da:1d:34:2a:
         a5:9d:3d:5b:8c:e2:34:0a:48:b2:a3:97:4c:65:0c:b2:c8:41:
         1e:f8:2d:e7:c4:ac:b5:7e:c8:1a:60:83:8a:d8:3a:9f:b6:68:
         29:ea:81:92:bb:69:be:2f:11:b7:ea:9f:7c:61:df:ba:e0:a2:
         4f:6a:ce:9f:b3:06:b6:c7:9f:aa:a0:f1:7f:19:51:30:48:c0:
         1f:dc:eb:81:f7:55:91:61:02:43:c1:3f:8d:62:e3:42:9f:34:
         3c:62:a8:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+iwbOHXLoX80KqliAPfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjUwOTA3MDcwMDQ0WhcNMjUwOTA4MDcwMDQ0WjAzMTEwLwYDVQQD
EygyNzdmMTI0MGMwYzE0NmEyYmZlMjEzODY2ZGY1YjVhZGIwMWRiYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40cs9ejbmy3JgcatBGdQNmJQp472
SaIS4OvKsBmbWu84mC6r6vpUGMcCQgMXHWX1K0bCBgcp9NE2A3Pbk5EKm23GR0yK
q/8uOb0nB7H4hRoVZL6q3uo08LgHpiAB9yvr9hdlrs+jYmSQlmCnRGlbGbRittBV
Pn/B1hI8V3nG8k9VRog7pOQkwI3IxKh6g2IgLBYD5gO1PtNw1IbGhfQVwxJkKla0
DRYcF55qH/oY640u5J0hbbRE4L0U7oEBqpyPQi2i9FMslbKwWA+cyFjvWEmhCmir
OnnaNs4loazz3Y0VrxuuYe0tJSbPcIBcjCt3QkhrzJLf7LKT9sITjgaC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd/EkDAwUaiv+IThm31ta2wHbvsMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVallXGiN
Vu38zWgobzIHNO/w3BBUYy6g18t84GZjpZBYiewJ6sFLhKAYG+D95XzeTKEJzliA
wJPD4vEZr4SqbAnFs1/Hr+axAwjvHDg8qHxfrQOhFMLS4Yi61n9CaVwg+u6LXhV4
zf61tsqVjdKcnRXxZwt+lIkv5qY5OqX2v7KOc1g1x5qPAK+aF9jYeCDrP26Beesu
4+QgVUr9iwLaHTQqpZ09W4ziNApIsqOXTGUMsshBHvgt58SstX7IGmCDitg6n7Zo
KeqBkrtpvi8Rt+qffGHfuuCiT2rOn7MGtsefqqDxfxlRMEjAH9zrgfdVkWECQ8E/
jWLjQp80PGKoHA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:13 2025 by rpki-client