Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          Ec7y/ScRFEFEr4QCbAbUPL9anfRC+iXBS57AxfxfavU=
Subject key identifier:   A2:50:28:A1:07:B6:2C:10:7E:7E:CC:02:A3:E5:4B:5C:91:73:DA:8B
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       019877F5EDEF634B0119AC86CE68C61F6434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          1618
Signing time:             Tue 05 Aug 2025 02:01:02 +0000
Manifest this update:     Tue 05 Aug 2025 02:01:02 +0000
Manifest next update:     Wed 06 Aug 2025 02:01:02 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: DdCRpokOWDjpNwXaSkKFhVXD7RYQ+hwQiSosmWZ9QA4=)
                          2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
                          3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
                          4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
                          5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
                          6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:77:f5:ed:ef:63:4b:01:19:ac:86:ce:68:c6:1f:64:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Aug  5 02:01:02 2025 GMT
            Not After : Aug  6 02:01:02 2025 GMT
        Subject: CN=a25028a107b62c107e7ecc02a3e54b5c9173da8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:7e:42:84:0e:bd:ea:ee:4b:e8:a3:31:14:
                    ab:9f:38:10:d6:a1:c0:7b:51:46:8b:b8:8d:5a:c4:
                    44:e9:47:34:67:4c:25:06:ca:d1:e1:d6:dd:57:6c:
                    20:d0:10:a5:e6:7f:28:3a:9f:9f:38:23:26:94:ce:
                    19:2c:16:05:9b:cd:43:a3:66:0c:2c:bc:5d:78:24:
                    11:80:0c:e5:9d:5a:ea:18:36:5c:e5:af:ee:9d:68:
                    c9:ec:1c:66:36:98:45:a1:d8:67:a8:ab:79:6f:9f:
                    0a:87:5e:6a:7d:81:61:bc:7c:53:b1:80:6c:78:1c:
                    bb:31:63:5e:89:fc:27:ed:28:66:23:e6:f5:e1:4d:
                    a4:aa:24:79:e6:f3:e8:f9:49:52:58:6a:3b:78:9e:
                    b7:0b:b8:bd:43:a9:78:e5:4d:17:ec:1e:41:b8:37:
                    1c:5b:18:f1:c3:5a:74:78:90:8a:dd:9e:9a:ee:64:
                    bb:2d:1b:af:27:27:39:48:91:d0:33:e5:18:38:28:
                    5f:22:35:e0:75:ad:1f:dc:cf:62:c0:b4:29:ee:7f:
                    e2:8e:39:c4:e8:cd:7b:36:db:df:6c:a4:73:87:f2:
                    55:73:c1:80:39:e0:73:38:1e:ad:38:8e:a3:dc:1e:
                    d1:a0:1e:a2:04:91:04:af:b2:e8:94:f4:88:41:bb:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:50:28:A1:07:B6:2C:10:7E:7E:CC:02:A3:E5:4B:5C:91:73:DA:8B
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:92:2b:75:29:5d:79:63:08:b8:9b:45:58:92:8d:db:b1:f9:
         d1:d1:e1:8b:ab:09:51:3f:9e:4d:32:92:ed:21:58:75:63:f5:
         b0:f3:18:a4:7c:76:8b:9f:e4:ea:83:08:3a:35:bf:f1:0a:78:
         2f:fb:8a:6d:54:1d:50:af:a6:18:71:21:e3:97:19:3b:eb:17:
         26:ad:87:0a:f7:e8:40:d5:58:f9:4c:42:3c:13:4f:91:16:5e:
         e1:d9:2d:62:7e:ba:db:d4:70:39:05:9a:fa:a5:0d:2f:d1:f2:
         b0:0a:9d:00:64:70:0d:c2:37:1b:b8:84:41:6f:a7:db:17:95:
         5a:1b:7b:09:57:d2:77:2d:33:ad:6e:37:63:32:b5:27:e9:8d:
         48:84:b6:10:14:85:a1:7e:83:6b:fe:b0:91:94:12:41:bd:86:
         49:90:0b:ed:b6:27:8c:57:05:ac:e9:0a:38:09:20:f7:e7:bd:
         24:09:7a:e0:ff:69:07:b7:e9:1e:d7:80:b6:0e:12:67:d9:48:
         45:05:ff:1c:46:74:fb:45:60:5d:6c:4b:5c:5f:9a:d3:3d:1b:
         8d:97:98:1e:78:43:03:f9:bf:f1:b4:3f:f4:53:06:dd:c5:68:
         f7:f3:cb:8c:ce:8b:64:6b:d7:81:9b:a7:85:af:1d:b1:93:94:
         f2:bc:6b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh39e3vY0sBGayGzmjGH2Q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5
M2U3ODkwHhcNMjUwODA1MDIwMTAyWhcNMjUwODA2MDIwMTAyWjAzMTEwLwYDVQQD
EyhhMjUwMjhhMTA3YjYyYzEwN2U3ZWNjMDJhM2U1NGI1YzkxNzNkYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc5+QoQOveruS+ijMRSrnzgQ1qHA
e1FGi7iNWsRE6Uc0Z0wlBsrR4dbdV2wg0BCl5n8oOp+fOCMmlM4ZLBYFm81Do2YM
LLxdeCQRgAzlnVrqGDZc5a/unWjJ7BxmNphFodhnqKt5b58Kh15qfYFhvHxTsYBs
eBy7MWNeifwn7ShmI+b14U2kqiR55vPo+UlSWGo7eJ63C7i9Q6l45U0X7B5BuDcc
Wxjxw1p0eJCK3Z6a7mS7LRuvJyc5SJHQM+UYOChfIjXgda0f3M9iwLQp7n/ijjnE
6M17NtvfbKRzh/JVc8GAOeBzOB6tOI6j3B7RoB6iBJEEr7LolPSIQbtACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJQKKEHtiwQfn7MAqPlS1yRc9qLMB8GA1UdIwQY
MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt
NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2
LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZIrdSld
eWMIuJtFWJKN27H50dHhi6sJUT+eTTKS7SFYdWP1sPMYpHx2i5/k6oMIOjW/8Qp4
L/uKbVQdUK+mGHEh45cZO+sXJq2HCvfoQNVY+UxCPBNPkRZe4dktYn6629RwOQWa
+qUNL9HysAqdAGRwDcI3G7iEQW+n2xeVWht7CVfSdy0zrW43YzK1J+mNSIS2EBSF
oX6Da/6wkZQSQb2GSZAL7bYnjFcFrOkKOAkg9+e9JAl64P9pB7fpHteAtg4SZ9lI
RQX/HEZ0+0VgXWxLXF+a0z0bjZeYHnhDA/m/8bQ/9FMG3cVo9/PLjM6LZGvXgZun
ha8dsZOU8rxrIQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:21 2025 by rpki-client