Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File:                     w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier:          E9PmzMA/Iay+YTMHO9+Va1vHATMemdJV/KXRx9XqaB8=
Subject key identifier:   48:4A:97:CF:14:F4:8F:60:40:99:5A:06:C8:F2:43:1B:32:E2:5C:9F
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer:       /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial:       0199228C5413F04344ABD48EA78B6284291F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number:          05F8
Signing time:             Sun 07 Sep 2025 05:00:45 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:45 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:45 +0000
Files and hashes:         1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: dmOMl8XJkATBHIDXA0wpH2ehV9qPzNG5CQYWjSXK/oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:54:13:f0:43:44:ab:d4:8e:a7:8b:62:84:29:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
        Validity
            Not Before: Sep  7 05:00:45 2025 GMT
            Not After : Sep  8 05:00:45 2025 GMT
        Subject: CN=484a97cf14f48f6040995a06c8f2431b32e25c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:aa:39:15:5a:43:06:5f:64:52:1a:bb:17:
                    f9:15:8c:98:ba:75:f1:3b:0c:f6:dd:0a:10:46:e3:
                    94:b9:e4:2b:c8:7b:96:96:eb:16:dc:f8:15:90:c3:
                    93:07:59:14:29:5e:c4:68:5d:c4:56:e3:cf:cf:e1:
                    2b:a5:32:04:5d:38:00:a1:45:d0:fa:af:83:e7:9d:
                    e5:5d:5d:00:14:7b:31:2d:55:b3:d0:6f:8b:cb:52:
                    c9:83:e3:52:96:b5:8e:27:6d:a2:8e:57:a7:e3:37:
                    2d:e6:ad:78:5e:1e:44:42:19:e8:3e:5d:76:e5:3e:
                    aa:d7:3e:d4:e8:5b:ab:cd:3a:ed:67:2b:3f:2f:4e:
                    64:ea:01:6c:12:87:0a:6a:a8:52:5e:47:5e:ca:77:
                    8b:26:f1:53:e0:8e:8b:83:fe:18:f4:3e:c0:51:ef:
                    16:fa:32:1f:8d:38:7f:b1:b4:bb:9f:f7:f5:99:fd:
                    a2:4a:08:f9:7d:c0:bb:76:df:1b:f1:c2:0f:e8:4a:
                    b0:37:49:42:f7:cf:3c:e7:5a:89:3d:6b:36:9a:62:
                    7d:1d:5a:d9:55:67:12:6b:2b:3a:5d:e8:3b:11:25:
                    79:8f:08:fe:e6:75:a0:05:cd:02:7d:13:36:c4:bb:
                    be:11:87:8a:f9:30:23:30:0f:c7:9a:3f:2b:5c:60:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:97:CF:14:F4:8F:60:40:99:5A:06:C8:F2:43:1B:32:E2:5C:9F
            X509v3 Authority Key Identifier:
                keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:46:d9:2a:57:77:44:cc:08:3e:b9:d9:14:91:d5:4f:64:32:
         7a:ab:ae:05:88:73:0c:ab:e4:e7:81:7e:30:2d:d7:78:a4:16:
         f3:c5:58:fa:4c:f2:27:54:0f:9e:18:5e:b3:0d:6c:d9:e2:1b:
         ca:65:21:47:f2:65:51:17:ee:a8:31:54:df:82:0c:9e:4a:23:
         59:e9:4a:d6:2b:bf:8d:82:20:5e:83:65:56:11:bf:a9:87:af:
         d9:55:2c:72:10:4b:a0:b7:d1:c1:60:65:74:f1:eb:cd:9c:86:
         9f:0b:65:bd:4c:20:05:1b:54:d6:b0:dd:05:9c:a7:b9:67:0c:
         bb:6b:3f:67:90:94:c0:bc:43:86:32:d8:e5:0c:81:5a:c3:af:
         2e:31:5f:e0:3a:be:c0:a7:7c:19:f2:c6:7f:8f:b6:d4:d2:b9:
         92:08:e9:5c:91:7c:65:ac:ce:8d:fe:4c:72:33:2d:4f:bb:26:
         b3:50:c0:8b:4f:44:9f:d2:b7:81:6d:73:d6:28:d8:66:3e:b9:
         d2:e9:54:cc:65:a0:84:e7:bc:74:76:a9:03:31:1d:de:55:dc:
         28:9f:b4:96:df:6b:8b:eb:07:06:e8:ae:2d:aa:bb:21:ef:3c:
         2e:32:38:3c:bb:f3:7d:3a:f2:aa:27:c0:c7:c1:7a:7f:d2:81:
         f2:4e:6f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijFQT8ENEq9SOp4tihCkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw
OGY4NWYwHhcNMjUwOTA3MDUwMDQ1WhcNMjUwOTA4MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg0ODRhOTdjZjE0ZjQ4ZjYwNDA5OTVhMDZjOGYyNDMxYjMyZTI1YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqeqORVaQwZfZFIauxf5FYyYunXx
Owz23QoQRuOUueQryHuWlusW3PgVkMOTB1kUKV7EaF3EVuPPz+ErpTIEXTgAoUXQ
+q+D553lXV0AFHsxLVWz0G+Ly1LJg+NSlrWOJ22ijlen4zct5q14Xh5EQhnoPl12
5T6q1z7U6FurzTrtZys/L05k6gFsEocKaqhSXkdeyneLJvFT4I6Lg/4Y9D7AUe8W
+jIfjTh/sbS7n/f1mf2iSgj5fcC7dt8b8cIP6EqwN0lC988851qJPWs2mmJ9HVrZ
VWcSays6Xeg7ESV5jwj+5nWgBc0CfRM2xLu+EYeK+TAjMA/Hmj8rXGAu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhKl88U9I9gQJlaBsjyQxsy4lyfMB8GA1UdIwQY
MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt
OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl
LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEbZKld3
RMwIPrnZFJHVT2QyequuBYhzDKvk54F+MC3XeKQW88VY+kzyJ1QPnhhesw1s2eIb
ymUhR/JlURfuqDFU34IMnkojWelK1iu/jYIgXoNlVhG/qYev2VUschBLoLfRwWBl
dPHrzZyGnwtlvUwgBRtU1rDdBZynuWcMu2s/Z5CUwLxDhjLY5QyBWsOvLjFf4Dq+
wKd8GfLGf4+21NK5kgjpXJF8ZazOjf5McjMtT7sms1DAi09En9K3gW1z1ijYZj65
0ulUzGWghOe8dHapAzEd3lXcKJ+0lt9ri+sHBuiuLaq7Ie88LjI4PLvzfTryqifA
x8F6f9KB8k5v6g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:33 2025 by rpki-client