Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft
File:                     Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft (raw, json)
Hash identifier:          yY1bN3NWtEstNzmLsdnN1HPpfjBNQJnnVip5SyuTGdE=
Subject key identifier:   A1:85:33:F5:6B:80:F9:5E:A3:20:91:99:8B:1B:14:C9:64:2E:01:D0
Authority key identifier: 31:EB:BB:9F:C0:9F:37:D3:DD:01:41:BC:B0:A6:7E:C8:3B:78:08:1F
Certificate issuer:       /CN=31ebbb9fc09f37d3dd0141bcb0a67ec83b78081f
Certificate serial:       0199172D651CF9F446F7A41BD140CD0BBE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft
Manifest number:          05DF
Signing time:             Fri 05 Sep 2025 00:01:14 +0000
Manifest this update:     Fri 05 Sep 2025 00:01:14 +0000
Manifest next update:     Sat 06 Sep 2025 00:01:14 +0000
Files and hashes:         1: Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl (hash: 48+ClhKitV3WblKgGSYoiG1d6S7qEqcDGgt4myXE00I=)
                          2: xhSFftcSHe4vMiLLxv0i7laBOgA.roa (hash: zpNOzm+oNtSw/P+tV0FVybfaNaCxifuqh3XesCNdYM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2d:65:1c:f9:f4:46:f7:a4:1b:d1:40:cd:0b:be:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ebbb9fc09f37d3dd0141bcb0a67ec83b78081f
        Validity
            Not Before: Sep  5 00:01:14 2025 GMT
            Not After : Sep  6 00:01:14 2025 GMT
        Subject: CN=a18533f56b80f95ea32091998b1b14c9642e01d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:e8:92:47:ab:33:58:58:c4:32:51:4e:dc:
                    73:c6:fb:2b:a7:26:92:0e:2f:38:89:a9:8d:de:36:
                    37:bc:7f:f1:d2:b5:87:cf:bc:02:66:c2:41:20:5f:
                    3e:11:4c:54:31:65:7d:3f:8c:7b:02:62:54:f2:29:
                    47:48:d4:ce:f7:7b:fa:51:41:b0:2c:5e:a1:5e:ed:
                    0b:c7:b5:20:23:27:e5:36:68:74:69:3b:fd:df:32:
                    e2:e9:b9:5d:7e:07:f3:5b:a2:4a:21:9f:0d:f9:f1:
                    40:67:b2:81:1c:78:22:98:b4:5d:40:ea:b7:b7:86:
                    f6:2a:37:88:0d:77:e8:e9:1a:79:65:45:08:ed:6d:
                    53:99:59:57:58:74:3b:17:12:d1:08:d8:a1:1d:3d:
                    21:56:24:9e:3e:3b:d9:9e:6c:cc:c2:d6:0e:ab:4f:
                    e3:4d:a5:c2:d6:f0:c4:fb:6f:d6:f7:60:51:4f:0c:
                    0c:bb:9c:f2:db:a6:e2:66:2d:18:66:b8:ab:23:f1:
                    f2:d6:00:9b:b1:2d:a7:00:03:6b:64:7a:4e:5d:36:
                    2a:33:a8:e2:f4:fa:0d:4b:a0:73:01:f3:e9:f0:64:
                    5c:0f:73:42:c5:82:37:3e:e7:85:4a:a9:d0:0c:7d:
                    71:de:4e:90:14:dc:30:03:06:cf:77:a8:c7:ca:74:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:85:33:F5:6B:80:F9:5E:A3:20:91:99:8B:1B:14:C9:64:2E:01:D0
            X509v3 Authority Key Identifier:
                keyid:31:EB:BB:9F:C0:9F:37:D3:DD:01:41:BC:B0:A6:7E:C8:3B:78:08:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/43f26f-1b4e-4426-bf50-c4ba61e5a210/1/Meu7n8CfN9PdAUG8sKZ-yDt4CB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:83:3f:4a:f1:9b:62:5e:20:60:e7:de:64:34:04:6e:65:
         3f:01:e6:42:6b:71:a8:d2:39:56:d6:f6:5c:dc:07:c6:80:3f:
         ef:bd:63:f3:c7:5f:ff:1b:bb:01:d3:82:1c:d4:99:85:2e:76:
         cf:7c:b4:08:7f:55:29:65:c6:50:9b:ca:8f:cc:99:f4:d9:f2:
         22:28:c9:d8:af:3d:cc:83:cd:8a:a2:84:85:58:93:57:c3:d2:
         40:51:a8:75:58:5b:e2:29:25:82:c8:9a:3e:65:2c:e1:3c:f4:
         61:5e:bc:0c:4a:c7:79:f1:6c:b9:92:00:02:a1:b4:04:25:b2:
         44:88:1a:e5:33:56:db:ab:54:a0:69:c1:69:62:23:af:55:7d:
         c2:02:f0:5d:38:72:ad:6b:f6:b6:75:f1:78:74:1d:6b:34:7e:
         3b:5e:d9:df:15:54:b5:37:57:bc:69:2e:c7:a9:2f:71:4c:9b:
         75:08:0e:93:c5:e0:d3:25:9c:a9:fb:97:fc:50:eb:56:6f:bf:
         b6:fb:95:b8:4c:b4:ee:da:40:9e:b8:98:da:7c:17:32:31:99:
         3b:72:a5:2a:ce:7b:37:5a:32:9e:31:f8:a7:61:9a:cb:6b:69:
         58:e5:ec:4e:e5:53:93:23:d0:09:09:65:05:c7:41:cb:a6:a0:
         3a:63:16:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXLWUc+fRG96Qb0UDNC74XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZWJiYjlmYzA5ZjM3ZDNkZDAxNDFiY2IwYTY3ZWM4M2I3
ODA4MWYwHhcNMjUwOTA1MDAwMTE0WhcNMjUwOTA2MDAwMTE0WjAzMTEwLwYDVQQD
EyhhMTg1MzNmNTZiODBmOTVlYTMyMDkxOTk4YjFiMTRjOTY0MmUwMWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tTokkerM1hYxDJRTtxzxvsrpyaS
Di84iamN3jY3vH/x0rWHz7wCZsJBIF8+EUxUMWV9P4x7AmJU8ilHSNTO93v6UUGw
LF6hXu0Lx7UgIyflNmh0aTv93zLi6bldfgfzW6JKIZ8N+fFAZ7KBHHgimLRdQOq3
t4b2KjeIDXfo6Rp5ZUUI7W1TmVlXWHQ7FxLRCNihHT0hViSePjvZnmzMwtYOq0/j
TaXC1vDE+2/W92BRTwwMu5zy26biZi0YZrirI/Hy1gCbsS2nAANrZHpOXTYqM6ji
9PoNS6BzAfPp8GRcD3NCxYI3PueFSqnQDH1x3k6QFNwwAwbPd6jHynSEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGFM/VrgPleoyCRmYsbFMlkLgHQMB8GA1UdIwQY
MBaAFDHru5/AnzfT3QFBvLCmfsg7eAgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWV1N244Q2ZOOVBkQVVHOHNLWi15RHQ0Q0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80M2YyNmYtMWI0ZS00NDI2LWJmNTAt
YzRiYTYxZTVhMjEwLzEvTWV1N244Q2ZOOVBkQVVHOHNLWi15RHQ0Q0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80M2YyNmYtMWI0ZS00NDI2LWJmNTAtYzRiYTYxZTVhMjEw
LzEvTWV1N244Q2ZOOVBkQVVHOHNLWi15RHQ0Q0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitODP0rx
m2JeIGDn3mQ0BG5lPwHmQmtxqNI5Vtb2XNwHxoA/771j88df/xu7AdOCHNSZhS52
z3y0CH9VKWXGUJvKj8yZ9NnyIijJ2K89zIPNiqKEhViTV8PSQFGodVhb4iklgsia
PmUs4Tz0YV68DErHefFsuZIAAqG0BCWyRIga5TNW26tUoGnBaWIjr1V9wgLwXThy
rWv2tnXxeHQdazR+O17Z3xVUtTdXvGkux6kvcUybdQgOk8Xg0yWcqfuX/FDrVm+/
tvuVuEy07tpAnriY2nwXMjGZO3KlKs57N1oynjH4p2Gay2tpWOXsTuVTkyPQCQll
BcdBy6agOmMWiw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:29:12 2025 by rpki-client