Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          TaOcj0VAAxZdxtBvD70VcLaZkHsRtZ6jqookn0todRs=
Subject key identifier:   0D:B3:55:59:E6:74:F0:23:35:44:93:16:B3:A5:BD:C1:0C:4B:4B:0B
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       0199301163CA043A51B16EA6958791C5EA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          09A4
Signing time:             Tue 09 Sep 2025 20:01:10 +0000
Manifest this update:     Tue 09 Sep 2025 20:01:10 +0000
Manifest next update:     Wed 10 Sep 2025 20:01:10 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: tBmY+neg9zxhKkINqmuxc/KGU6CxQA6RcwAwgRAD/58=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:11:63:ca:04:3a:51:b1:6e:a6:95:87:91:c5:ea:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Sep  9 20:01:10 2025 GMT
            Not After : Sep 10 20:01:10 2025 GMT
        Subject: CN=0db35559e674f02335449316b3a5bdc10c4b4b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:0e:da:f1:4f:07:c2:fc:18:cd:03:9f:04:
                    f1:4b:46:dd:4e:1a:8b:e7:4a:f5:65:d9:a9:20:42:
                    55:af:9c:91:5a:da:c3:75:fe:23:31:12:d0:de:79:
                    7f:bf:65:70:b5:d0:f1:14:78:fd:ea:5b:52:c8:81:
                    a0:59:72:d6:17:57:97:4b:76:7e:b1:88:c4:5b:c7:
                    8f:2f:30:69:c4:da:ed:52:46:ac:4c:49:ea:4f:9c:
                    25:81:37:6b:39:f5:6d:b3:53:5a:04:ab:c8:1e:c5:
                    16:2e:fe:16:af:15:e7:72:59:e1:55:bb:7c:b4:9b:
                    88:63:bf:44:38:f4:f8:20:60:6b:44:12:9b:f4:98:
                    15:2b:91:9e:8a:f2:de:cf:06:94:57:2a:f5:3b:48:
                    54:5b:b6:be:93:63:11:5f:f0:d4:7b:07:a5:1a:7a:
                    40:fa:ff:1e:c6:ac:21:a0:b6:02:bc:e9:9b:8c:0f:
                    b9:3d:f8:0b:9f:ae:14:2f:03:dd:60:13:8d:a0:7b:
                    51:c2:f7:2c:f3:90:76:3b:e8:a6:77:b7:d3:81:ba:
                    d1:af:fd:1c:20:fa:16:38:f0:fd:56:6d:eb:ff:f1:
                    5a:19:e3:2c:1c:51:c9:a2:e5:c7:0e:75:a1:42:e5:
                    68:41:c8:49:69:dc:d4:e7:3f:84:0f:ad:51:bf:d2:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:55:59:E6:74:F0:23:35:44:93:16:B3:A5:BD:C1:0C:4B:4B:0B
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:37:85:db:7a:a6:0a:7a:6b:3f:16:32:a1:f8:2e:2a:b7:
         27:de:49:80:47:fc:eb:12:b9:64:b5:07:df:d7:06:61:29:9a:
         52:52:39:bd:4a:58:d4:c0:84:2a:a5:18:c8:e6:39:8b:0b:b9:
         2e:85:20:81:04:4a:29:68:ba:84:c9:f0:19:88:ee:a4:2e:70:
         87:14:43:bc:79:f7:b2:e6:12:db:50:30:7a:56:d4:22:b6:e5:
         58:65:85:31:91:87:25:31:f2:ba:79:72:7d:2d:56:59:e7:9e:
         a6:be:b6:e8:d3:94:d0:2d:5f:8a:81:89:70:e9:cc:43:de:8e:
         c9:1a:95:6d:66:38:f0:50:e0:5a:87:f7:52:91:63:7a:62:62:
         92:03:95:fa:7f:cd:d1:23:3c:32:b2:5c:2f:84:f0:16:a9:29:
         2d:a3:53:f8:fb:f1:1e:b9:cd:a4:2b:2c:6a:b5:f3:3e:61:eb:
         dd:73:9d:bd:35:91:7a:49:0b:5c:52:70:27:88:2a:c1:97:db:
         80:22:ee:ed:2d:69:58:c0:e0:f3:f2:a7:fe:a4:30:95:4e:a4:
         15:77:58:ad:ff:29:cd:13:97:05:2a:08:8a:8e:f6:d1:2c:12:
         93:4b:33:73:1c:f9:6f:a2:0f:d2:79:80:23:49:e7:f1:8f:df:
         c0:17:f7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwEWPKBDpRsW6mlYeRxeotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5
OGY2MjcwHhcNMjUwOTA5MjAwMTEwWhcNMjUwOTEwMjAwMTEwWjAzMTEwLwYDVQQD
EygwZGIzNTU1OWU2NzRmMDIzMzU0NDkzMTZiM2E1YmRjMTBjNGI0YjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzEO2vFPB8L8GM0DnwTxS0bdThqL
50r1ZdmpIEJVr5yRWtrDdf4jMRLQ3nl/v2VwtdDxFHj96ltSyIGgWXLWF1eXS3Z+
sYjEW8ePLzBpxNrtUkasTEnqT5wlgTdrOfVts1NaBKvIHsUWLv4WrxXnclnhVbt8
tJuIY79EOPT4IGBrRBKb9JgVK5GeivLezwaUVyr1O0hUW7a+k2MRX/DUewelGnpA
+v8exqwhoLYCvOmbjA+5PfgLn64ULwPdYBONoHtRwvcs85B2O+imd7fTgbrRr/0c
IPoWOPD9Vm3r//FaGeMsHFHJouXHDnWhQuVoQchJadzU5z+ED61Rv9LkhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2zVVnmdPAjNUSTFrOlvcEMS0sLMB8GA1UdIwQY
MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt
YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4
LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/03hdt6
pgp6az8WMqH4Liq3J95JgEf86xK5ZLUH39cGYSmaUlI5vUpY1MCEKqUYyOY5iwu5
LoUggQRKKWi6hMnwGYjupC5whxRDvHn3suYS21AwelbUIrblWGWFMZGHJTHyunly
fS1WWeeepr626NOU0C1fioGJcOnMQ96OyRqVbWY48FDgWof3UpFjemJikgOV+n/N
0SM8MrJcL4TwFqkpLaNT+PvxHrnNpCssarXzPmHr3XOdvTWRekkLXFJwJ4gqwZfb
gCLu7S1pWMDg8/Kn/qQwlU6kFXdYrf8pzROXBSoIio720SwSk0szcxz5b6IP0nmA
I0nn8Y/fwBf3zA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:24:24 2025 by rpki-client