Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
File:                     edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json)
Hash identifier:          RBhpQkhdnXMNu5UpU6LtztKoc0pH8OaTbIykBxQ+xRU=
Subject key identifier:   1C:8D:41:44:A7:7D:DA:38:BA:C2:37:A5:FA:E4:4E:33:6B:6B:F7:0C
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Certificate issuer:       /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial:       019921E7BB5D9FA2E1737E60780F4F254993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 02:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:58 +0000
Files and hashes:         1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: nlg/d1IpuVUN1CeYJ32XUseb4Olw87/Hknzd+GB3j08=)
                          2: hqnI55-BtuuM4vFpZ56v79LAU1E.roa (hash: de3zBJnkxcrGTCeqUEM+8xu6xpr3xr2UbYA58RD5CTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:bb:5d:9f:a2:e1:73:7e:60:78:0f:4f:25:49:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
        Validity
            Not Before: Sep  7 02:00:58 2025 GMT
            Not After : Sep  8 02:00:58 2025 GMT
        Subject: CN=1c8d4144a77dda38bac237a5fae44e336b6bf70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:f6:65:63:fa:62:0e:18:6a:91:13:9a:a5:
                    19:30:17:bc:f2:57:6e:79:40:a6:7a:2b:2e:6c:9c:
                    3f:b6:a9:15:51:45:3f:9f:a3:31:d6:bc:fc:20:dc:
                    19:40:21:90:b0:07:46:6a:ef:f6:94:4e:8c:96:1d:
                    25:5b:87:30:66:49:6f:f1:24:e9:c7:e3:de:da:b3:
                    9b:dc:23:45:db:2d:1f:31:a6:78:4b:ad:27:7f:77:
                    f9:fc:9e:31:ce:ec:d1:ca:8f:74:1b:39:3c:a8:16:
                    92:eb:7a:b6:07:6e:ba:eb:63:f7:0c:7b:b8:93:6b:
                    fe:11:fa:66:43:0b:32:26:31:2f:99:b6:9d:b0:f6:
                    b5:0b:cb:45:d3:7c:e1:38:b9:a9:57:c6:de:d4:f1:
                    f4:cd:f3:9d:12:17:01:9a:94:e5:e9:07:05:e4:df:
                    27:b2:e5:fb:3c:0d:c3:c7:04:bc:be:9d:67:28:34:
                    92:80:8b:f7:df:76:08:2a:5c:f6:cb:54:4f:0e:21:
                    29:94:ee:2a:d5:32:fd:b7:e7:da:f2:05:7b:8f:e9:
                    37:38:04:40:c3:40:8d:d0:2d:14:f9:ad:05:2f:0a:
                    1d:fa:46:ac:28:a1:40:bb:3b:f3:a9:ae:0b:dc:1c:
                    4a:62:24:36:dc:ac:e7:53:6f:2c:c5:f7:fc:02:16:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8D:41:44:A7:7D:DA:38:BA:C2:37:A5:FA:E4:4E:33:6B:6B:F7:0C
            X509v3 Authority Key Identifier:
                keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:db:8f:b5:9f:98:9d:06:ab:79:62:aa:aa:f4:d3:25:2b:
         d9:3e:5c:79:02:75:51:b4:48:39:7f:7d:98:7c:2e:d0:e9:35:
         1b:da:39:20:5f:d5:11:83:ab:25:fc:7a:68:89:11:08:b7:3a:
         4a:af:d9:6a:25:37:13:11:aa:d6:06:45:ef:78:63:2b:f2:26:
         05:75:3e:e7:3d:a9:d9:a8:9a:ae:00:ec:ec:2b:3c:eb:3d:76:
         6c:0a:ac:f8:cb:b7:34:6c:e4:97:1e:b3:d2:18:03:10:72:3a:
         3c:5b:e0:03:10:00:42:64:63:21:45:02:b6:8c:9d:68:f2:ce:
         8c:ff:8e:88:3a:63:21:c1:75:f5:15:8f:f8:12:64:3e:e7:d9:
         a9:14:d3:71:d3:18:33:b5:ee:16:50:6c:e0:53:91:cb:de:29:
         df:de:4f:0b:51:76:0b:da:bf:d6:b1:34:73:2e:9f:37:15:0d:
         35:e2:bb:4b:35:b7:52:2e:2a:ff:cc:c2:83:ba:3a:aa:03:0d:
         7d:ed:32:16:bc:47:0e:01:29:c4:0b:5e:94:60:15:44:09:66:
         e4:ba:03:d7:b2:1e:a8:ff:1c:44:42:eb:49:73:79:bf:7a:23:
         0d:a6:35:ee:5a:79:c7:10:7e:ea:53:2c:9c:6b:e6:16:ed:e5:
         8a:e8:c0:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh57tdn6Lhc35geA9PJUmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDY5ZGQ5ODMzMzU1ODQwMWVkZDFhNjAxNjgyNjVkZDFh
MGQ5NTgwHhcNMjUwOTA3MDIwMDU4WhcNMjUwOTA4MDIwMDU4WjAzMTEwLwYDVQQD
EygxYzhkNDE0NGE3N2RkYTM4YmFjMjM3YTVmYWU0NGUzMzZiNmJmNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLX2ZWP6Yg4YapETmqUZMBe88ldu
eUCmeisubJw/tqkVUUU/n6Mx1rz8INwZQCGQsAdGau/2lE6Mlh0lW4cwZklv8STp
x+Pe2rOb3CNF2y0fMaZ4S60nf3f5/J4xzuzRyo90Gzk8qBaS63q2B26662P3DHu4
k2v+EfpmQwsyJjEvmbadsPa1C8tF03zhOLmpV8be1PH0zfOdEhcBmpTl6QcF5N8n
suX7PA3DxwS8vp1nKDSSgIv333YIKlz2y1RPDiEplO4q1TL9t+fa8gV7j+k3OARA
w0CN0C0U+a0FLwod+kasKKFAuzvzqa4L3BxKYiQ23KznU28sxff8AhaLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByNQUSnfdo4usI3pfrkTjNra/cMMB8GA1UdIwQY
MBaAFHnWndmDM1WEAe3RpgFoJl3RoNlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYt
NGZkNmI3ZDc2YTJmLzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYtNGZkNmI3ZDc2YTJm
LzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPfbj7Wf
mJ0Gq3liqqr00yUr2T5ceQJ1UbRIOX99mHwu0Ok1G9o5IF/VEYOrJfx6aIkRCLc6
Sq/ZaiU3ExGq1gZF73hjK/ImBXU+5z2p2aiargDs7Cs86z12bAqs+Mu3NGzklx6z
0hgDEHI6PFvgAxAAQmRjIUUCtoydaPLOjP+OiDpjIcF19RWP+BJkPufZqRTTcdMY
M7XuFlBs4FORy94p395PC1F2C9q/1rE0cy6fNxUNNeK7SzW3Ui4q/8zCg7o6qgMN
fe0yFrxHDgEpxAtelGAVRAlm5LoD17IeqP8cRELrSXN5v3ojDaY17lp5xxB+6lMs
nGvmFu3liujAPQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:38 2025 by rpki-client