Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File:                     1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier:          rnnOXOB5+OdUpVXm7xkgGPpvu5XMZ8LFX5HE2uYc6lM=
Subject key identifier:   2E:56:53:11:C0:6A:8F:DD:78:E5:5C:74:3F:FE:F8:B9:90:34:61:50
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer:       /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial:       019930480A9B5FFBD115B4277076C4C62839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number:          0419
Signing time:             Tue 09 Sep 2025 21:00:51 +0000
Manifest this update:     Tue 09 Sep 2025 21:00:51 +0000
Manifest next update:     Wed 10 Sep 2025 21:00:51 +0000
Files and hashes:         1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: +ayC1sE59jJsmBTaVI1t7O/e/shJ+Qf3CXsgaaba2oY=)
                          2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:48:0a:9b:5f:fb:d1:15:b4:27:70:76:c4:c6:28:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Validity
            Not Before: Sep  9 21:00:51 2025 GMT
            Not After : Sep 10 21:00:51 2025 GMT
        Subject: CN=2e565311c06a8fdd78e55c743ffef8b990346150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:73:c2:6b:cf:8a:38:ab:18:0f:38:36:f7:
                    ce:90:1e:4c:9f:ed:10:a0:70:3f:77:b6:17:0a:2a:
                    54:e5:97:4a:2a:1d:48:c3:93:bf:1c:8d:73:33:31:
                    e1:63:16:15:a8:53:82:b4:8a:3c:0e:7c:5e:30:eb:
                    03:60:90:c8:fe:fa:3c:23:a6:11:5a:fd:47:1c:8a:
                    86:cb:26:49:dd:2d:9f:27:0c:47:5a:66:73:cd:ab:
                    82:f1:1e:51:0a:2b:5f:c8:ac:db:f4:9a:3f:dd:05:
                    35:f1:ae:f7:0b:04:19:7c:04:b7:b6:32:59:bb:25:
                    8c:b2:70:c0:71:05:e6:62:f1:09:07:bd:77:73:71:
                    6c:0f:02:a9:2b:04:d7:c9:8c:01:b7:5f:74:42:a0:
                    23:96:e2:29:9a:4b:c4:43:5c:57:99:d0:49:a7:56:
                    ec:87:f8:b8:ac:a8:4e:ec:0b:9a:c6:8f:e7:4e:8d:
                    40:69:df:87:7a:94:ee:4d:9d:8b:b7:85:9b:6e:c9:
                    84:77:c1:42:fd:48:f7:06:78:cb:8c:a4:58:22:27:
                    be:65:bf:77:31:52:a8:9d:36:d6:b2:53:ec:79:eb:
                    de:a4:50:02:9f:dd:f6:12:60:4f:7f:78:dc:82:e4:
                    4b:ae:7b:0d:15:7f:e8:f5:39:42:4d:a5:67:f2:f7:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:53:11:C0:6A:8F:DD:78:E5:5C:74:3F:FE:F8:B9:90:34:61:50
            X509v3 Authority Key Identifier:
                keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:48:e4:68:e6:41:9d:36:66:ec:1c:a7:7e:a4:8b:2f:3e:
         f0:f0:b4:fd:d2:76:b9:4e:1e:12:01:cf:8b:62:26:b0:bb:7a:
         eb:fe:5e:43:e9:a8:68:18:8b:94:7a:a8:fc:6f:f1:9a:47:a0:
         fe:b1:ec:56:b6:9d:2e:7d:03:57:68:4b:93:9f:34:8b:43:a4:
         9f:9d:a4:e5:c8:32:e6:95:5d:29:ca:b5:2c:e5:01:81:47:1b:
         f3:02:e1:96:35:0a:3a:7b:6e:d0:2c:52:2a:6c:29:1c:ed:30:
         24:ef:ce:6b:e1:e1:e9:00:82:6b:f5:51:1e:5d:ad:20:eb:ce:
         a8:26:de:77:e8:a0:8b:98:b0:0e:30:ca:81:3d:15:de:08:cf:
         28:5b:e1:ee:b1:4c:e2:c2:37:7d:d9:fc:ea:a9:88:59:51:c2:
         19:19:90:c4:ca:f0:0b:78:56:86:88:74:d7:b4:5e:32:2b:20:
         11:77:33:83:30:a6:8b:39:a5:0b:0c:de:4a:89:c9:aa:2f:77:
         5a:02:94:98:b4:c5:83:4e:12:af:34:36:62:59:2c:cc:d8:a3:
         c7:7c:5d:57:70:c3:4c:f2:70:03:d7:ee:90:57:7c:59:9e:44:
         45:12:e0:54:f1:35:0c:c3:c4:97:9e:35:2b:46:2a:7a:5c:b4:
         e4:7a:88:42
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkwSAqbX/vRFbQncHbExig5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZmNGRmMmVmYzY5ZWNjMTkyZWE1YWVmZDdiM2I5N2Y1
ODA5MDEwHhcNMjUwOTA5MjEwMDUxWhcNMjUwOTEwMjEwMDUxWjAzMTEwLwYDVQQD
EygyZTU2NTMxMWMwNmE4ZmRkNzhlNTVjNzQzZmZlZjhiOTkwMzQ2MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU9zwmvPijirGA84NvfOkB5Mn+0Q
oHA/d7YXCipU5ZdKKh1Iw5O/HI1zMzHhYxYVqFOCtIo8DnxeMOsDYJDI/vo8I6YR
Wv1HHIqGyyZJ3S2fJwxHWmZzzauC8R5RCitfyKzb9Jo/3QU18a73CwQZfAS3tjJZ
uyWMsnDAcQXmYvEJB713c3FsDwKpKwTXyYwBt190QqAjluIpmkvEQ1xXmdBJp1bs
h/i4rKhO7Auaxo/nTo1Aad+HepTuTZ2Lt4WbbsmEd8FC/Uj3BnjLjKRYIie+Zb93
MVKonTbWslPseevepFACn932EmBPf3jcguRLrnsNFX/o9TlCTaVn8vfvlwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC5WUxHAao/deOVcdD/++LmQNGFQMB8GA1UdIwQY
MBaAFPsf9N8u/GnswZLqWu/Xs7l/WAkBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14XzAzeTc4YWV6Qmt1cGE3OWV6dVg5WUNRRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1LWUxYTMtNDJiNS05Yjdi
LTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBhNzllenVYOVlDUUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RiLzY3OWUxNS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRh
MDUvMS8xLXhfMDN5NzhhZXpCa3VwYTc5ZXp1WDlZQ1FFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACS9I
5GjmQZ02Zuwcp36kiy8+8PC0/dJ2uU4eEgHPi2ImsLt66/5eQ+moaBiLlHqo/G/x
mkeg/rHsVradLn0DV2hLk580i0Okn52k5cgy5pVdKcq1LOUBgUcb8wLhljUKOntu
0CxSKmwpHO0wJO/Oa+Hh6QCCa/VRHl2tIOvOqCbed+igi5iwDjDKgT0V3gjPKFvh
7rFM4sI3fdn86qmIWVHCGRmQxMrwC3hWhoh017ReMisgEXczgzCmizmlCwzeSonJ
qi93WgKUmLTFg04SrzQ2YlkszNijx3xdV3DDTPJwA9fukFd8WZ5ERRLgVPE1DMPE
l541K0Yqely05HqIQg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:56:13 2025 by rpki-client