Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          hoZb/oRmFJcytlOn62LXLQRfxxOliuHFquLDQolIhOc=
Subject key identifier:   EB:65:44:E3:5F:25:12:83:15:8C:77:7B:38:4E:F2:7A:AB:76:89:9C
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       01994A4093326B114EB8EFB56B8ECC2E1C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0B30
Signing time:             Sun 14 Sep 2025 22:02:49 +0000
Manifest this update:     Sun 14 Sep 2025 22:02:49 +0000
Manifest next update:     Mon 15 Sep 2025 22:02:49 +0000
Files and hashes:         1: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (hash: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=)
                          2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=)
                          3: IilMeITi2WRlzRXCm9op0c2uedk.roa (hash: UrspHFNf1bj1Z6XmUbLX3sSXcdX5yH0r772wbyb2ttQ=)
                          4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: cugKb9a1oQkHQrINktSNh8GHjCSpgc0zjGMEFfx+qFw=)
                          5: Qv4r9KoCM0llZGGIu0ESO7fsTrk.roa (hash: 2dbd9G4ssUUV7QjZ8jn5D3p3tWBPiALD7SCeLQ3ju+s=)
                          6: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Sep 2025 22:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4a:40:93:32:6b:11:4e:b8:ef:b5:6b:8e:cc:2e:1c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Sep 14 22:02:49 2025 GMT
            Not After : Sep 15 22:02:49 2025 GMT
        Subject: CN=eb6544e35f251283158c777b384ef27aab76899c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:50:17:51:ce:81:13:0b:ad:36:3e:5a:08:
                    6a:2c:c9:97:f1:5a:73:5a:f5:38:cb:3e:fa:0d:dd:
                    31:17:38:b2:c1:6b:1d:ed:b1:b6:59:8f:dd:8b:de:
                    31:3e:39:3a:e1:5e:8f:7c:ea:8a:eb:c2:b6:15:97:
                    2a:54:1b:14:ea:a4:c1:de:fd:67:df:20:b6:61:84:
                    ae:e6:0b:d1:17:2b:05:ff:51:fa:c5:46:77:94:e7:
                    37:4d:98:ea:2b:24:cd:5f:b0:2c:f2:60:4e:bf:db:
                    34:e2:8b:95:e3:50:01:6a:04:5a:a5:a5:7c:87:93:
                    d5:ba:04:37:c2:59:9f:00:b5:60:20:10:37:50:71:
                    9d:a9:35:64:61:cf:af:02:5b:b0:5c:e9:d0:8b:ee:
                    13:14:03:1d:b9:a7:ff:d3:90:f5:dd:59:65:3e:ca:
                    e2:54:2c:38:ce:5f:e6:08:89:6f:f2:12:96:45:34:
                    ad:c3:cf:f1:dd:dc:e3:4d:57:ee:37:64:b8:46:8b:
                    c0:49:be:ca:79:ac:c7:aa:a2:8f:d4:66:70:ad:92:
                    a8:ca:b3:1d:a3:18:53:ce:c8:58:64:73:5e:ac:8b:
                    73:7d:a2:5d:33:f8:bf:81:b8:f0:97:d1:15:88:ad:
                    8d:d3:4d:71:fc:bc:16:3a:b3:6a:00:f2:8d:b2:59:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:44:E3:5F:25:12:83:15:8C:77:7B:38:4E:F2:7A:AB:76:89:9C
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:64:73:16:06:4b:17:38:86:25:1a:76:08:a1:81:e8:65:
         f9:a6:9a:49:c1:4d:6a:a9:37:da:dc:f3:b3:19:76:2b:e6:ae:
         39:09:23:3b:62:bb:b1:4e:90:bb:b7:ee:88:c3:7f:94:75:dd:
         96:7f:4b:25:5c:50:1f:3a:5e:ea:f0:35:73:3a:17:3a:17:cd:
         34:a6:cd:94:bf:67:e2:bb:f8:61:58:6c:61:df:8b:a5:9d:fa:
         fc:44:28:14:76:5e:35:76:3b:bf:f5:1f:df:46:eb:cc:07:4d:
         12:f0:1a:23:dc:10:93:52:00:98:af:7e:c5:ee:df:75:74:c7:
         de:c1:8e:49:7f:b9:a5:a4:85:1c:41:da:ca:38:4f:68:51:98:
         71:d5:6f:0a:43:a0:9a:ca:67:a0:55:cc:cf:9a:fd:e6:03:fa:
         10:37:02:d8:32:49:7c:ab:d5:7f:33:56:32:51:c3:80:2d:e3:
         98:43:0a:0c:7b:be:76:13:64:28:a2:1d:59:a1:bd:b8:31:bd:
         28:52:6e:37:6a:9e:ea:b5:16:d3:b2:b1:67:a2:3b:01:fc:84:
         22:50:de:0d:10:ea:44:63:62:e9:ac:fc:11:22:ff:e1:ad:1c:
         14:33:43:d1:7d:40:86:cd:84:c8:14:fd:40:83:e0:56:5f:e7:
         fd:c2:58:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlKQJMyaxFOuO+1a47MLhwNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjUwOTE0MjIwMjQ5WhcNMjUwOTE1MjIwMjQ5WjAzMTEwLwYDVQQD
EyhlYjY1NDRlMzVmMjUxMjgzMTU4Yzc3N2IzODRlZjI3YWFiNzY4OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXhQF1HOgRMLrTY+WghqLMmX8Vpz
WvU4yz76Dd0xFziywWsd7bG2WY/di94xPjk64V6PfOqK68K2FZcqVBsU6qTB3v1n
3yC2YYSu5gvRFysF/1H6xUZ3lOc3TZjqKyTNX7As8mBOv9s04ouV41ABagRapaV8
h5PVugQ3wlmfALVgIBA3UHGdqTVkYc+vAluwXOnQi+4TFAMduaf/05D13VllPsri
VCw4zl/mCIlv8hKWRTStw8/x3dzjTVfuN2S4RovASb7KeazHqqKP1GZwrZKoyrMd
oxhTzshYZHNerItzfaJdM/i/gbjwl9EViK2N001x/LwWOrNqAPKNslnOuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtlRONfJRKDFYx3ezhO8nqrdomcMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8RkcxYG
Sxc4hiUadgihgehl+aaaScFNaqk32tzzsxl2K+auOQkjO2K7sU6Qu7fuiMN/lHXd
ln9LJVxQHzpe6vA1czoXOhfNNKbNlL9n4rv4YVhsYd+LpZ36/EQoFHZeNXY7v/Uf
30brzAdNEvAaI9wQk1IAmK9+xe7fdXTH3sGOSX+5paSFHEHayjhPaFGYcdVvCkOg
mspnoFXMz5r95gP6EDcC2DJJfKvVfzNWMlHDgC3jmEMKDHu+dhNkKKIdWaG9uDG9
KFJuN2qe6rUW07KxZ6I7AfyEIlDeDRDqRGNi6az8ESL/4a0cFDND0X1Ahs2EyBT9
QIPgVl/n/cJYEQ==
-----END CERTIFICATE-----
Generated at Mon Sep 15 07:27:58 2025 by rpki-client