Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File:                     A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier:          ch210Y8OgBd7nT0tWSGuX/lh1MeqCkODS8HVF60BNY0=
Subject key identifier:   C2:54:8D:96:87:D3:FE:71:7C:2B:61:97:BE:50:41:9B:D8:18:13:89
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer:       /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial:       019922FA333C76F5CEF651CCDC3B3A00609A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number:          0357
Signing time:             Sun 07 Sep 2025 07:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:46 +0000
Files and hashes:         1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: 8GInMXPnpYI2ywmDjn6vWIGFkmgeLu+ssk3auu/xEyU=)
                          2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:33:3c:76:f5:ce:f6:51:cc:dc:3b:3a:00:60:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
        Validity
            Not Before: Sep  7 07:00:46 2025 GMT
            Not After : Sep  8 07:00:46 2025 GMT
        Subject: CN=c2548d9687d3fe717c2b6197be50419bd8181389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:e2:23:99:cb:4a:c8:5b:d0:a8:c7:75:e4:
                    02:75:3e:e3:b2:d2:aa:e4:40:3c:67:8b:ab:05:77:
                    fa:e6:85:cd:73:fd:60:e1:6d:61:5d:35:a9:da:9e:
                    9f:16:08:e5:24:f9:57:03:dd:9d:5a:6d:21:46:64:
                    3e:df:e8:8b:77:39:85:a5:2b:18:af:81:9a:f0:81:
                    80:0b:63:23:e2:4f:ba:2b:77:86:bc:d5:93:20:5c:
                    c0:38:c5:be:71:f5:ed:e1:c6:07:78:92:c2:1d:62:
                    b3:3c:c3:03:0c:68:02:ae:33:2f:cb:5c:ae:b3:ac:
                    39:67:60:c6:e9:41:11:a2:8b:5e:85:60:5e:4d:e8:
                    d3:2f:b9:d9:bf:6e:70:a1:56:63:38:36:cf:85:4f:
                    02:6b:1d:ed:49:cc:8c:2d:1f:7a:fd:3e:d3:bb:6c:
                    2c:34:be:97:f7:42:47:e8:45:a1:f4:17:d3:be:83:
                    6a:54:79:4e:1c:7b:cc:7d:75:d4:c9:ba:48:71:a4:
                    d7:61:ab:e3:1d:1a:75:8b:92:39:41:ca:ed:4a:fd:
                    57:81:e9:95:f3:87:53:60:7f:04:bc:81:84:1d:9c:
                    fc:c9:4f:9d:b9:4c:a6:47:43:ce:6f:b0:2c:e2:e2:
                    32:5c:dd:30:ef:05:61:b9:b5:21:2c:8e:f7:1e:b4:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:8D:96:87:D3:FE:71:7C:2B:61:97:BE:50:41:9B:D8:18:13:89
            X509v3 Authority Key Identifier:
                keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:dd:1c:ed:c1:f4:ec:06:03:b5:0c:e1:8f:50:06:0b:68:
         b4:19:4f:17:2a:b6:1a:e9:6b:90:61:77:19:d7:fa:80:8e:3c:
         c7:be:e0:b3:15:0d:44:6a:44:a9:da:8f:a0:f8:c5:27:aa:4d:
         ed:2f:74:e4:d3:10:1e:3a:f8:cd:22:ac:83:92:b1:a6:ca:02:
         4e:4d:ad:de:e0:b3:dc:d2:bf:ea:45:61:b7:ef:b3:93:1d:97:
         dc:60:83:a0:9e:9e:04:87:92:72:12:1a:28:0a:86:44:de:4c:
         d9:a9:ed:31:f7:31:b8:71:15:a9:9d:12:a3:79:85:7d:db:23:
         ad:d6:1c:79:f3:7c:98:b3:a6:62:2b:80:d1:c7:c6:3d:e3:54:
         95:1d:d8:10:ac:17:8b:9d:ac:02:da:90:2a:b8:0d:f1:8d:b2:
         3b:68:f1:77:e4:41:67:12:74:93:8a:4f:c3:0a:2a:12:67:03:
         3a:06:c7:e6:b2:db:ba:d5:92:db:ee:0b:24:60:29:14:e1:c2:
         8f:22:bc:bf:3c:6d:2a:5f:95:2d:8c:c8:08:6f:2f:cd:06:cc:
         ab:ed:50:78:d7:42:45:2e:9c:d3:f1:17:b6:7a:07:39:af:ca:
         32:08:fb:1c:3a:08:2e:9c:15:a1:ee:24:c4:08:98:95:9b:a2:
         bb:68:19:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jM8dvXO9lHM3Ds6AGCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWMwOGFlNmE5MzI1Mjg1YmRkNGE0YWRlOWMyMDdkN2Zh
MTA0NTkwHhcNMjUwOTA3MDcwMDQ2WhcNMjUwOTA4MDcwMDQ2WjAzMTEwLwYDVQQD
EyhjMjU0OGQ5Njg3ZDNmZTcxN2MyYjYxOTdiZTUwNDE5YmQ4MTgxMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BPiI5nLSshb0KjHdeQCdT7jstKq
5EA8Z4urBXf65oXNc/1g4W1hXTWp2p6fFgjlJPlXA92dWm0hRmQ+3+iLdzmFpSsY
r4Ga8IGAC2Mj4k+6K3eGvNWTIFzAOMW+cfXt4cYHeJLCHWKzPMMDDGgCrjMvy1yu
s6w5Z2DG6UERootehWBeTejTL7nZv25woVZjODbPhU8Cax3tScyMLR96/T7Tu2ws
NL6X90JH6EWh9BfTvoNqVHlOHHvMfXXUybpIcaTXYavjHRp1i5I5QcrtSv1XgemV
84dTYH8EvIGEHZz8yU+duUymR0POb7As4uIyXN0w7wVhubUhLI73HrTj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJUjZaH0/5xfCthl75QQZvYGBOJMB8GA1UdIwQY
MBaAFAPsCK5qkyUoW91KSt6cIH1/oQRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDIt
M2Q3NWM0ZjQ4OWU3LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mMzE5ODItY2Q4Yy00NWY2LWEzMDItM2Q3NWM0ZjQ4OWU3
LzEvQS13SXJtcVRKU2hiM1VwSzNwd2dmWC1oQkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAki7dHO3B
9OwGA7UM4Y9QBgtotBlPFyq2GulrkGF3Gdf6gI48x77gsxUNRGpEqdqPoPjFJ6pN
7S905NMQHjr4zSKsg5KxpsoCTk2t3uCz3NK/6kVht++zkx2X3GCDoJ6eBIeSchIa
KAqGRN5M2antMfcxuHEVqZ0So3mFfdsjrdYcefN8mLOmYiuA0cfGPeNUlR3YEKwX
i52sAtqQKrgN8Y2yO2jxd+RBZxJ0k4pPwwoqEmcDOgbH5rLbutWS2+4LJGApFOHC
jyK8vzxtKl+VLYzICG8vzQbMq+1QeNdCRS6c0/EXtnoHOa/KMgj7HDoILpwVoe4k
xAiYlZuiu2gZ+g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:37 2025 by rpki-client