Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File:                     04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier:          FFBWMbUPyhjBlcADmFLANa+ITQqaw8q60RzD/ducSYY=
Subject key identifier:   AD:1E:BC:D8:A8:71:4F:EA:B0:2E:34:B5:A3:56:E7:14:44:CF:2D:B4
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer:       /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial:       01992255BD1889EFEE10CD2C9A640B518776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number:          0371
Signing time:             Sun 07 Sep 2025 04:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:08 +0000
Files and hashes:         1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: hFujfKUukPDK5sZKPIR6azAXgWPr8vhC3yPcQpO8twc=)
                          2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:bd:18:89:ef:ee:10:cd:2c:9a:64:0b:51:87:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
        Validity
            Not Before: Sep  7 04:01:08 2025 GMT
            Not After : Sep  8 04:01:08 2025 GMT
        Subject: CN=ad1ebcd8a8714feab02e34b5a356e71444cf2db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:05:2d:7c:a6:49:08:50:4f:0b:c7:a3:8e:
                    bf:14:f9:94:bd:8d:12:df:1f:8b:09:3b:db:d3:fb:
                    12:fb:00:f5:47:da:46:78:81:f0:ed:ac:0c:bb:b0:
                    5e:5d:56:1a:22:2c:51:e2:99:e2:eb:17:d2:a0:e4:
                    1f:dc:af:ab:64:9f:1d:1f:1c:7a:a9:3e:78:0d:1b:
                    c1:d8:9e:ca:ea:0d:7e:81:67:fb:81:e9:82:47:86:
                    e8:08:3c:35:80:ff:ab:48:da:b1:61:7f:3a:a4:f4:
                    19:25:7a:38:bd:be:9c:a5:84:d2:5c:81:3f:d2:56:
                    55:4c:8a:6c:d3:c5:9f:03:25:24:24:51:b1:fb:e3:
                    9d:05:cf:ab:2d:d9:2f:04:62:9d:d9:7b:61:5c:99:
                    a6:99:6d:08:83:ff:1f:60:9a:23:a5:3e:f1:78:24:
                    ef:a4:88:b1:17:85:6f:de:b4:4c:34:33:98:ef:34:
                    67:19:f7:65:8a:05:06:04:f3:60:f8:75:f9:30:3b:
                    f0:e9:de:6a:32:cd:c1:ed:c5:bc:af:aa:af:03:c3:
                    76:4a:76:d9:bd:39:f0:18:ee:b1:7c:6d:d2:f0:a9:
                    2c:5e:c2:ba:6c:c9:28:9a:5d:e5:68:36:1e:4d:ea:
                    3d:ba:b3:16:7f:1b:44:95:5a:1e:18:25:91:96:62:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1E:BC:D8:A8:71:4F:EA:B0:2E:34:B5:A3:56:E7:14:44:CF:2D:B4
            X509v3 Authority Key Identifier:
                keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:c4:38:a0:14:2f:d3:83:0f:79:4d:d8:b2:6f:a2:ae:ad:
         a9:c9:28:d5:77:40:a4:78:70:75:10:a5:8b:5f:05:b2:8a:57:
         11:81:32:b1:d0:df:46:3d:8b:44:e8:65:59:74:1d:f3:c8:15:
         59:f1:8e:ef:3a:4a:25:ca:b0:eb:cd:6f:b4:df:33:26:1a:18:
         cd:83:95:74:9e:aa:73:e9:13:35:e8:d6:c9:26:4c:02:3c:0d:
         ad:7b:12:ad:03:2b:8f:2e:9a:42:cb:2f:ef:97:9d:7b:26:c9:
         5a:bc:fd:0e:03:a9:bc:7f:6d:ab:c5:6b:6e:fc:63:bf:19:a1:
         f2:2d:b6:ed:e9:a8:2a:55:1b:32:2c:0b:0c:8a:08:b0:ba:95:
         4d:02:69:f7:a7:16:fb:72:28:07:28:79:72:69:b2:15:4c:77:
         ab:28:45:8d:22:ff:e0:61:69:11:77:1e:9f:fc:cc:53:96:14:
         ef:be:12:6d:ad:23:38:62:07:d1:d4:56:64:95:0a:a8:b0:b3:
         9d:4e:a5:81:80:1b:54:cf:fc:80:4f:80:37:e2:fa:c1:16:dc:
         41:56:2b:b1:cf:d3:ca:a6:b2:98:57:39:3b:ac:62:f0:7d:af:
         b7:e2:16:44:4a:4e:c4:5f:51:8c:4a:59:ce:ac:3b:a1:d0:ce:
         de:8c:76:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVb0Yie/uEM0smmQLUYd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODAyZWE4ZjljZTgwMmI1N2JiYmFiNzhlMzA5NzkzN2Zm
YTExYzQwHhcNMjUwOTA3MDQwMTA4WhcNMjUwOTA4MDQwMTA4WjAzMTEwLwYDVQQD
EyhhZDFlYmNkOGE4NzE0ZmVhYjAyZTM0YjVhMzU2ZTcxNDQ0Y2YyZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pcFLXymSQhQTwvHo46/FPmUvY0S
3x+LCTvb0/sS+wD1R9pGeIHw7awMu7BeXVYaIixR4pni6xfSoOQf3K+rZJ8dHxx6
qT54DRvB2J7K6g1+gWf7gemCR4boCDw1gP+rSNqxYX86pPQZJXo4vb6cpYTSXIE/
0lZVTIps08WfAyUkJFGx++OdBc+rLdkvBGKd2XthXJmmmW0Ig/8fYJojpT7xeCTv
pIixF4Vv3rRMNDOY7zRnGfdligUGBPNg+HX5MDvw6d5qMs3B7cW8r6qvA8N2SnbZ
vTnwGO6xfG3S8KksXsK6bMkoml3laDYeTeo9urMWfxtElVoeGCWRlmJsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0evNiocU/qsC40taNW5xREzy20MB8GA1UdIwQY
MBaAFNOALqj5zoArV7u6t44wl5N/+hHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUt
ZmFkMjFmZjI5ZTJiLzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NzAyZTctNGJmMS00MDdlLWJhZmUtZmFkMjFmZjI5ZTJi
LzEvMDRBdXFQbk9nQ3RYdTdxM2pqQ1hrM182RWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw7EOKAU
L9ODD3lN2LJvoq6tqcko1XdApHhwdRCli18FsopXEYEysdDfRj2LROhlWXQd88gV
WfGO7zpKJcqw681vtN8zJhoYzYOVdJ6qc+kTNejWySZMAjwNrXsSrQMrjy6aQssv
75edeybJWrz9DgOpvH9tq8Vrbvxjvxmh8i227emoKlUbMiwLDIoIsLqVTQJp96cW
+3IoByh5cmmyFUx3qyhFjSL/4GFpEXcen/zMU5YU774Sba0jOGIH0dRWZJUKqLCz
nU6lgYAbVM/8gE+AN+L6wRbcQVYrsc/TyqaymFc5O6xi8H2vt+IWREpOxF9RjEpZ
zqw7odDO3ox2cw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:30 2025 by rpki-client