Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          YKwZEhaWw/nlnYrSASsxJv0XOJheKJzeT6UfhRseTys=
Subject key identifier:   C7:DF:9F:70:BD:58:C8:5B:10:2B:E7:85:8C:8F:4F:75:AC:44:79:94
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       01994C9C6FB23A774F9FBB6861D488520377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          0431
Signing time:             Mon 15 Sep 2025 09:02:24 +0000
Manifest this update:     Mon 15 Sep 2025 09:02:24 +0000
Manifest next update:     Tue 16 Sep 2025 09:02:24 +0000
Files and hashes:         1: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          2: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          3: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          4: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          5: iJ9K2n3jI4hPZNAG79rZ38I5lgY.roa (hash: dFNKtlXDcHYhxg/GdP28JriV5FBHRaoGdINxWIMb3Tc=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: pfPQqb2im/LOolFO0p5IG4U47CstQCIBbHGPKCJYlas=)
                          7: veMveYJNxemeQYyUW7xjOrh1luw.roa (hash: +7WlX927FWJGIBo5RUAra2S4HvC0PxzyLU75LUSwlkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4c:9c:6f:b2:3a:77:4f:9f:bb:68:61:d4:88:52:03:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Sep 15 09:02:24 2025 GMT
            Not After : Sep 16 09:02:24 2025 GMT
        Subject: CN=c7df9f70bd58c85b102be7858c8f4f75ac447994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:fc:b0:f8:29:cc:ed:cb:8a:e4:2c:93:0d:
                    8d:bd:84:1e:9b:8c:93:31:d2:5c:d6:40:91:73:69:
                    88:60:ca:2c:86:85:c8:2c:a5:bb:c7:d7:24:bf:37:
                    a0:17:7a:a6:f9:0b:a2:f6:42:70:e2:fb:11:2a:67:
                    56:23:cf:d8:52:5c:ad:08:95:17:6c:bd:7e:95:c2:
                    eb:e5:e0:54:58:e5:37:b3:61:74:0a:47:64:9a:12:
                    0c:ee:a6:90:fa:f9:6b:bc:71:40:07:d1:5f:68:21:
                    da:76:cc:50:44:b7:9d:ce:5e:5b:41:c0:a5:ae:d8:
                    47:86:3d:92:24:98:59:8e:67:7e:c1:f5:44:53:82:
                    e1:05:20:09:33:9f:37:95:e4:9d:2a:4f:d7:aa:e0:
                    0b:4c:e3:56:53:5e:fb:57:84:69:01:c4:d8:a1:22:
                    d8:c7:e7:be:2a:88:95:51:4d:cc:4f:67:c4:0c:15:
                    2b:49:41:0d:ad:7f:b2:c8:bf:cf:0a:25:63:5a:3d:
                    0f:47:76:f2:ea:63:0f:3f:57:25:cb:6e:e9:66:a2:
                    90:08:0f:da:77:16:0e:56:21:b3:57:ef:df:7e:a1:
                    6d:42:2b:c8:d0:ab:21:f2:e9:ee:a4:d5:a9:a0:03:
                    16:a1:44:ea:95:93:01:4d:85:3d:dc:38:ad:87:73:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DF:9F:70:BD:58:C8:5B:10:2B:E7:85:8C:8F:4F:75:AC:44:79:94
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:36:a6:e8:84:6a:65:cf:14:7c:f2:12:c5:f9:32:21:55:a2:
         24:49:e5:bb:89:eb:f5:ff:c1:a5:47:23:40:3e:16:89:60:3c:
         24:4a:c2:be:a2:34:c0:9d:53:85:f7:50:3f:f9:d3:0e:df:ce:
         82:4a:ea:0b:28:78:b7:2e:bf:3d:44:c9:b7:60:10:ef:28:6d:
         84:f7:10:b1:e2:1b:ed:9c:02:79:d5:76:91:de:6a:36:64:e8:
         9d:77:4e:dd:c7:84:f7:49:88:7b:0b:6c:fa:7c:86:23:dc:3d:
         28:20:c9:50:3b:dc:60:6b:7e:dc:a2:9a:ae:56:13:77:6e:33:
         d1:01:50:cd:a0:b9:0f:50:ec:ce:43:4e:2a:7f:05:2c:08:7e:
         6c:02:f8:8c:6f:44:bb:47:9a:ca:6e:ec:9a:1f:68:61:09:47:
         ed:fd:41:04:c4:0a:ff:89:8f:b3:43:2b:dc:3d:e9:d6:b3:fb:
         0c:79:3a:38:e7:94:4d:34:96:c2:20:1d:8f:2e:b0:cb:1d:e5:
         f7:fa:cb:39:f9:b9:c5:e7:f0:13:a9:6d:30:63:78:e9:f1:7c:
         a0:34:78:ca:39:27:7d:f3:68:41:46:27:40:4b:7a:a6:03:53:
         d1:7c:5f:67:a8:94:d9:54:a2:64:5b:13:b1:a6:2d:9a:ea:8d:
         1f:9e:8a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlMnG+yOndPn7toYdSIUgN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjUwOTE1MDkwMjI0WhcNMjUwOTE2MDkwMjI0WjAzMTEwLwYDVQQD
EyhjN2RmOWY3MGJkNThjODViMTAyYmU3ODU4YzhmNGY3NWFjNDQ3OTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+X8sPgpzO3LiuQskw2NvYQem4yT
MdJc1kCRc2mIYMoshoXILKW7x9ckvzegF3qm+Qui9kJw4vsRKmdWI8/YUlytCJUX
bL1+lcLr5eBUWOU3s2F0CkdkmhIM7qaQ+vlrvHFAB9FfaCHadsxQRLedzl5bQcCl
rthHhj2SJJhZjmd+wfVEU4LhBSAJM583leSdKk/XquALTONWU177V4RpAcTYoSLY
x+e+KoiVUU3MT2fEDBUrSUENrX+yyL/PCiVjWj0PR3by6mMPP1cly27pZqKQCA/a
dxYOViGzV+/ffqFtQivI0Ksh8unupNWpoAMWoUTqlZMBTYU93Dith3PBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMffn3C9WMhbECvnhYyPT3WsRHmUMB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzam6IRq
Zc8UfPISxfkyIVWiJEnlu4nr9f/BpUcjQD4WiWA8JErCvqI0wJ1ThfdQP/nTDt/O
gkrqCyh4ty6/PUTJt2AQ7yhthPcQseIb7ZwCedV2kd5qNmTonXdO3ceE90mIewts
+nyGI9w9KCDJUDvcYGt+3KKarlYTd24z0QFQzaC5D1DszkNOKn8FLAh+bAL4jG9E
u0eaym7smh9oYQlH7f1BBMQK/4mPs0Mr3D3p1rP7DHk6OOeUTTSWwiAdjy6wyx3l
9/rLOfm5xefwE6ltMGN46fF8oDR4yjknffNoQUYnQEt6pgNT0XxfZ6iU2VSiZFsT
saYtmuqNH56KJA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 13:47:40 2025 by rpki-client