Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File:                     1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier:          LIG3SUBaYM+7rNr55ocR5AzSPoYCso/Do4MP1sguLtU=
Subject key identifier:   14:E5:E4:E0:C1:A8:F9:93:31:9F:1D:90:15:94:1B:62:10:A9:F4:B4
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer:       /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial:       01992255A384434B44AD288743C961B076E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number:          05F8
Signing time:             Sun 07 Sep 2025 04:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:01 +0000
Files and hashes:         1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: mxwMGXReiacYnMTHB8KVC1o65mdHiszl/KYFPBOMLG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:a3:84:43:4b:44:ad:28:87:43:c9:61:b0:76:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
        Validity
            Not Before: Sep  7 04:01:01 2025 GMT
            Not After : Sep  8 04:01:01 2025 GMT
        Subject: CN=14e5e4e0c1a8f993319f1d9015941b6210a9f4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:f7:13:63:f6:57:39:17:24:e8:e5:30:09:
                    b5:86:06:04:c8:a2:05:d1:9e:4a:5e:67:ec:e3:aa:
                    1c:c2:9d:9d:26:64:09:71:f9:0a:35:53:be:00:2c:
                    71:97:64:f1:81:07:44:b3:ee:27:d3:72:60:81:5b:
                    2c:ef:05:c0:87:e6:d1:80:ec:d6:08:d3:8e:cf:97:
                    b7:a7:16:0a:a9:c4:c5:54:79:51:d4:76:e7:c3:66:
                    8c:da:9c:db:0d:b9:15:45:78:1b:6f:ec:8c:48:d0:
                    65:d5:23:98:d2:d1:a2:e5:e9:78:8a:a1:55:77:0a:
                    64:eb:0b:c2:3b:e4:79:3e:69:43:bd:ed:f0:04:85:
                    47:ee:70:72:14:87:32:36:aa:9b:79:7e:c3:e3:31:
                    5f:b4:7f:57:8b:83:35:a0:7f:59:2c:5a:72:16:e5:
                    20:c1:8f:72:3a:7b:fd:d9:8e:e7:a8:24:a9:f5:d7:
                    e8:be:c3:05:1c:f7:74:cc:b7:f1:b1:64:38:33:35:
                    7c:ff:72:96:31:e2:01:80:8d:06:c8:2b:91:95:32:
                    4e:9b:8e:a6:3c:ba:29:14:ba:71:41:87:57:06:ce:
                    22:82:83:cf:c4:32:84:e8:9b:24:d6:b9:31:60:2e:
                    f5:13:02:dc:aa:04:9d:69:0c:97:91:5a:bd:58:11:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:E4:E0:C1:A8:F9:93:31:9F:1D:90:15:94:1B:62:10:A9:F4:B4
            X509v3 Authority Key Identifier:
                keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2e:41:15:e9:23:94:74:44:77:1f:8c:61:05:ba:c1:ca:be:
         93:a9:7e:2b:7a:b7:5d:49:d8:0f:db:47:be:2d:2d:89:84:67:
         0a:b1:f5:d2:91:8c:02:3b:ce:5a:b8:8f:0f:e6:a1:f1:26:f9:
         64:30:6a:fd:71:f7:6d:5b:90:03:88:67:7f:f6:da:63:c8:b0:
         48:05:c4:37:34:b5:c4:82:ee:e2:1a:14:6c:0a:f3:ab:e1:ed:
         0a:07:8b:af:83:ae:63:f4:a3:af:bd:36:85:4f:04:e8:9a:03:
         4e:ed:6f:88:5f:51:ae:ef:db:5c:e8:82:28:1a:1d:7b:1c:9d:
         12:a9:33:08:5f:7e:5d:b5:27:11:d0:9a:91:cb:2e:33:a4:4c:
         25:cf:95:83:91:08:19:69:2d:03:52:f7:8f:ce:a0:da:54:88:
         a7:b0:30:74:9c:23:6a:24:c7:ec:72:8e:4d:4b:1c:83:a6:f9:
         6d:08:62:6a:39:75:35:6f:03:de:8c:c7:db:be:55:03:ae:68:
         f1:0f:93:cd:cd:dd:58:f7:77:48:bd:36:a0:bd:17:98:ad:ca:
         96:56:2b:75:18:65:08:49:a1:a8:5c:ba:7e:42:91:18:b4:8b:
         a3:6c:d8:88:02:99:a1:db:a0:7c:cb:da:4c:18:34:3b:4a:07:
         0b:06:68:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVaOEQ0tErSiHQ8lhsHbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm
ODNjNTcwHhcNMjUwOTA3MDQwMTAxWhcNMjUwOTA4MDQwMTAxWjAzMTEwLwYDVQQD
EygxNGU1ZTRlMGMxYThmOTkzMzE5ZjFkOTAxNTk0MWI2MjEwYTlmNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pX3E2P2VzkXJOjlMAm1hgYEyKIF
0Z5KXmfs46ocwp2dJmQJcfkKNVO+ACxxl2TxgQdEs+4n03JggVss7wXAh+bRgOzW
CNOOz5e3pxYKqcTFVHlR1Hbnw2aM2pzbDbkVRXgbb+yMSNBl1SOY0tGi5el4iqFV
dwpk6wvCO+R5PmlDve3wBIVH7nByFIcyNqqbeX7D4zFftH9Xi4M1oH9ZLFpyFuUg
wY9yOnv92Y7nqCSp9dfovsMFHPd0zLfxsWQ4MzV8/3KWMeIBgI0GyCuRlTJOm46m
PLopFLpxQYdXBs4igoPPxDKE6Jsk1rkxYC71EwLcqgSdaQyXkVq9WBG6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTl5ODBqPmTMZ8dkBWUG2IQqfS0MB8GA1UdIwQY
MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt
MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi
LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci5BFekj
lHREdx+MYQW6wcq+k6l+K3q3XUnYD9tHvi0tiYRnCrH10pGMAjvOWriPD+ah8Sb5
ZDBq/XH3bVuQA4hnf/baY8iwSAXENzS1xILu4hoUbArzq+HtCgeLr4OuY/Sjr702
hU8E6JoDTu1viF9Rru/bXOiCKBodexydEqkzCF9+XbUnEdCakcsuM6RMJc+Vg5EI
GWktA1L3j86g2lSIp7AwdJwjaiTH7HKOTUscg6b5bQhiajl1NW8D3ozH275VA65o
8Q+Tzc3dWPd3SL02oL0XmK3KllYrdRhlCEmhqFy6fkKRGLSLo2zYiAKZodugfMva
TBg0O0oHCwZoug==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:50 2025 by rpki-client