Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          LWXE1bgCyc3/qx96CY2C2hWeR9DLU2Vcc8hblM7t1Dg=
Subject key identifier:   FF:5D:08:4C:C6:35:F2:80:4D:91:81:99:9F:23:D8:E2:D3:0F:70:47
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       0199221F209065FA862E7222A4343E79F888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          05E2
Signing time:             Sun 07 Sep 2025 03:01:29 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:29 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:29 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: dVfA860rEHIeN77Z0xVXUCn/HkVLoeHifPpyepjrQCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:20:90:65:fa:86:2e:72:22:a4:34:3e:79:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: Sep  7 03:01:29 2025 GMT
            Not After : Sep  8 03:01:29 2025 GMT
        Subject: CN=ff5d084cc635f2804d9181999f23d8e2d30f7047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:e8:3e:3c:04:66:18:b4:7d:67:04:d6:2a:
                    a4:7e:d3:d5:ef:8e:a3:76:aa:7e:bd:63:9e:94:2c:
                    19:db:7b:66:45:2b:59:ab:15:c3:90:c5:8a:45:7c:
                    14:a8:34:35:6d:ef:49:e0:5a:fb:8a:2f:60:96:26:
                    48:52:c8:a6:76:4a:3e:72:d0:cb:26:90:60:2b:a7:
                    fb:3c:da:23:e8:48:a2:1d:59:79:73:38:0a:e1:3a:
                    6d:c4:f5:d9:87:93:5e:b9:4e:12:98:18:eb:ab:c5:
                    ef:cc:f0:91:7e:5c:32:da:38:19:c4:1c:55:5d:b0:
                    a7:11:6b:85:8b:b8:75:a0:ff:d0:de:10:48:a4:b4:
                    22:6c:dd:57:16:f4:f3:e8:fa:52:96:c4:54:f4:fc:
                    74:45:fc:a1:52:c7:12:5c:11:94:fb:43:93:27:ff:
                    0d:0c:4e:a4:11:5b:da:3b:2a:20:34:09:66:1e:9c:
                    8e:c6:08:ee:08:5d:fe:19:d5:5b:cb:7c:ba:e2:84:
                    e5:53:f5:aa:16:3a:98:87:73:38:2c:61:e7:1b:1d:
                    9a:51:51:2e:69:bb:91:29:0c:9b:07:b0:82:1e:64:
                    ff:d2:4b:ec:fc:90:4f:53:2d:66:57:df:59:71:bd:
                    46:76:54:a9:63:9f:ab:c6:22:d4:9d:94:59:00:de:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5D:08:4C:C6:35:F2:80:4D:91:81:99:9F:23:D8:E2:D3:0F:70:47
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:96:52:3f:4f:8e:82:35:79:16:1b:d1:70:c6:9d:72:c9:cd:
         e1:71:ef:35:8e:a1:68:ae:32:03:cb:5a:aa:2c:1a:03:60:cf:
         64:7c:19:7f:27:9f:59:6d:76:c6:05:d2:e6:06:9f:c7:09:41:
         da:99:d3:76:61:5c:cc:d5:4b:35:10:f4:2b:99:7c:9b:d2:40:
         34:a3:c4:b6:f3:cd:a4:90:b2:c6:f7:f7:e5:79:c9:1c:d7:44:
         40:3a:40:60:6d:8f:a8:6c:0e:d1:b7:c3:98:f7:4e:2f:90:08:
         0f:31:30:8c:60:7a:19:d7:57:3b:f5:0d:f9:07:80:16:47:9a:
         a2:8b:e9:0c:31:c6:b9:df:cd:30:ea:44:35:0f:87:76:6e:72:
         41:ed:7c:42:93:b1:73:5f:0f:59:ec:b8:99:1b:60:62:e0:d0:
         f8:83:ad:48:40:3e:89:a1:8e:e8:c2:dc:d6:56:93:79:20:a2:
         67:82:4f:91:18:ed:6d:ef:83:18:e7:0e:3f:d9:5f:67:01:2c:
         6c:5d:00:0c:40:ab:a6:80:98:3f:7e:27:3a:31:be:52:41:91:
         f2:d5:24:ad:41:ef:6c:22:b8:7c:54:3c:48:d7:29:27:12:9a:
         4f:16:f4:1a:04:37:6c:ac:e4:13:fc:eb:91:4d:f0:5c:e1:cb:
         b6:0e:42:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHyCQZfqGLnIipDQ+efiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjYzNWFjOGNlOTEzZmE3Y2NkNWQ3NmRkODYyZTI0OGM3
MWNiZjMwHhcNMjUwOTA3MDMwMTI5WhcNMjUwOTA4MDMwMTI5WjAzMTEwLwYDVQQD
EyhmZjVkMDg0Y2M2MzVmMjgwNGQ5MTgxOTk5ZjIzZDhlMmQzMGY3MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/oPjwEZhi0fWcE1iqkftPV746j
dqp+vWOelCwZ23tmRStZqxXDkMWKRXwUqDQ1be9J4Fr7ii9gliZIUsimdko+ctDL
JpBgK6f7PNoj6EiiHVl5czgK4TptxPXZh5NeuU4SmBjrq8XvzPCRflwy2jgZxBxV
XbCnEWuFi7h1oP/Q3hBIpLQibN1XFvTz6PpSlsRU9Px0RfyhUscSXBGU+0OTJ/8N
DE6kEVvaOyogNAlmHpyOxgjuCF3+GdVby3y64oTlU/WqFjqYh3M4LGHnGx2aUVEu
abuRKQybB7CCHmT/0kvs/JBPUy1mV99Zcb1GdlSpY5+rxiLUnZRZAN67AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9dCEzGNfKATZGBmZ8j2OLTD3BHMB8GA1UdIwQY
MBaAFAAmNayM6RP6fM1ddt2GLiSMccvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYt
YjRlOTE5ZjA4MjVjLzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYtYjRlOTE5ZjA4MjVj
LzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpZSP0+O
gjV5FhvRcMadcsnN4XHvNY6haK4yA8taqiwaA2DPZHwZfyefWW12xgXS5gafxwlB
2pnTdmFczNVLNRD0K5l8m9JANKPEtvPNpJCyxvf35XnJHNdEQDpAYG2PqGwO0bfD
mPdOL5AIDzEwjGB6GddXO/UN+QeAFkeaoovpDDHGud/NMOpENQ+Hdm5yQe18QpOx
c18PWey4mRtgYuDQ+IOtSEA+iaGO6MLc1laTeSCiZ4JPkRjtbe+DGOcOP9lfZwEs
bF0ADECrpoCYP34nOjG+UkGR8tUkrUHvbCK4fFQ8SNcpJxKaTxb0GgQ3bKzkE/zr
kU3wXOHLtg5Cgw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:42 2025 by rpki-client