Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File:                     1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier:          w1dpPo1RukHDtl3RNAlptbr/NubKIZxQiUbLq3FK3E8=
Subject key identifier:   5F:8C:D5:93:B3:F5:28:CB:B0:E1:76:B8:AD:8F:02:0C:1A:2E:36:54
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer:       /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial:       019873E2A3FCA22106F9BF9492183326F4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number:          02D7
Signing time:             Mon 04 Aug 2025 07:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:29 +0000
Files and hashes:         1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: ROlpW369+nzL/A8+bzpCgme5J33MqToD79bwr8C2hEc=)
                          2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:a3:fc:a2:21:06:f9:bf:94:92:18:33:26:f4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
        Validity
            Not Before: Aug  4 07:01:29 2025 GMT
            Not After : Aug  5 07:01:29 2025 GMT
        Subject: CN=5f8cd593b3f528cbb0e176b8ad8f020c1a2e3654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:12:76:33:27:60:9b:c1:c1:0f:07:39:8a:
                    78:36:bf:9a:42:6e:2a:03:46:41:7a:c9:a7:d0:75:
                    8d:7a:64:5b:46:91:ef:db:e3:e2:9d:8b:f3:66:c7:
                    ac:d0:f3:67:6e:8c:0a:65:f7:25:cc:50:98:63:7a:
                    ef:49:d0:86:41:f9:d1:9c:f1:04:a2:31:0a:b0:c3:
                    2c:ce:19:db:c8:7f:f7:4d:cf:44:f1:76:64:8e:5f:
                    55:77:de:26:24:de:ce:3f:96:f9:2e:97:e0:c3:9c:
                    9b:37:d8:71:9d:bc:d4:ce:fb:4c:b0:3d:75:6c:15:
                    db:a1:fe:5b:a2:88:d2:1f:50:ba:b0:8c:d3:0a:55:
                    06:db:b6:d4:88:e2:14:6d:2c:10:b3:88:97:ee:95:
                    60:e2:73:18:34:f2:78:f7:63:56:48:a3:44:dc:d1:
                    bc:35:eb:9b:de:54:30:f9:07:47:17:c4:bd:b9:8f:
                    0b:fd:dc:9b:ac:60:fe:df:11:86:ec:cc:4a:66:86:
                    18:e7:86:a6:75:24:22:0c:d9:36:c7:cd:f1:d7:4f:
                    84:ab:69:9d:9e:60:7a:9d:82:d8:a4:ff:9f:f1:aa:
                    32:e2:2f:7d:c7:fb:c8:0c:d3:05:b6:51:58:3b:d3:
                    94:f5:89:53:3a:88:46:9f:4c:00:11:54:a1:61:cb:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:D5:93:B3:F5:28:CB:B0:E1:76:B8:AD:8F:02:0C:1A:2E:36:54
            X509v3 Authority Key Identifier:
                keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:b1:2f:44:f0:b6:fb:43:f1:f7:da:03:46:12:99:43:37:
         69:a6:70:35:6f:b2:ac:c0:54:f3:cc:ee:a5:e7:95:8c:2c:7b:
         58:7a:0f:d2:a7:5f:a9:7a:f2:b3:e1:23:7d:59:9a:0d:9f:b5:
         86:9c:33:9d:e1:20:cd:40:e7:15:06:cf:d0:af:d3:52:6a:f1:
         bf:d4:94:d7:a0:84:64:4d:e8:1b:7b:ac:c0:97:ba:d2:2e:18:
         fd:77:41:7e:37:3c:50:2b:48:75:d0:30:0c:fc:d0:2f:33:d1:
         48:80:65:1b:c5:af:d2:9c:6d:ca:e9:e2:47:e6:6b:61:ef:70:
         6a:2b:d9:ba:8e:d1:3f:4d:16:a9:52:cf:49:34:8f:9f:74:77:
         74:43:f0:24:af:f7:59:e1:7c:1e:6c:f6:78:6e:76:7e:40:6e:
         14:3c:65:8a:60:db:49:ec:84:53:ad:7b:ab:55:5c:17:f6:ef:
         61:4e:d6:8e:10:33:98:6c:b7:f9:e9:c1:a5:5a:e0:ae:7a:e7:
         7b:e3:86:be:25:fe:dd:e7:15:68:3a:7f:25:1f:57:d0:9e:ac:
         db:75:81:d9:aa:26:69:ef:68:95:c6:6d:4c:72:7b:12:d0:c0:
         c5:aa:26:e2:b5:6b:92:16:90:5a:74:71:d5:76:55:49:08:a5:
         12:2c:d6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4qP8oiEG+b+UkhgzJvTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTg5YmQyYzBmYmU3ZTJkODU5MmNlZTY4NzE5MmJiYjU3
OTc5ZjcwHhcNMjUwODA0MDcwMTI5WhcNMjUwODA1MDcwMTI5WjAzMTEwLwYDVQQD
Eyg1ZjhjZDU5M2IzZjUyOGNiYjBlMTc2YjhhZDhmMDIwYzFhMmUzNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXgSdjMnYJvBwQ8HOYp4Nr+aQm4q
A0ZBesmn0HWNemRbRpHv2+PinYvzZses0PNnbowKZfclzFCYY3rvSdCGQfnRnPEE
ojEKsMMszhnbyH/3Tc9E8XZkjl9Vd94mJN7OP5b5Lpfgw5ybN9hxnbzUzvtMsD11
bBXbof5boojSH1C6sIzTClUG27bUiOIUbSwQs4iX7pVg4nMYNPJ492NWSKNE3NG8
Neub3lQw+QdHF8S9uY8L/dybrGD+3xGG7MxKZoYY54amdSQiDNk2x83x10+Eq2md
nmB6nYLYpP+f8aoy4i99x/vIDNMFtlFYO9OU9YlTOohGn0wAEVShYctEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+M1ZOz9SjLsOF2uK2PAgwaLjZUMB8GA1UdIwQY
MBaAFNRYm9LA++fi2Fks7mhxkru1eXn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAt
ZjA0OTgzOWZhNzMwLzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hZDZhZDMtNDAxNC00MDAwLWE0MDAtZjA0OTgzOWZhNzMw
LzEvMUZpYjBzRDc1LUxZV1N6dWFIR1N1N1Y1ZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibWxL0Tw
tvtD8ffaA0YSmUM3aaZwNW+yrMBU88zupeeVjCx7WHoP0qdfqXrys+EjfVmaDZ+1
hpwzneEgzUDnFQbP0K/TUmrxv9SU16CEZE3oG3uswJe60i4Y/XdBfjc8UCtIddAw
DPzQLzPRSIBlG8Wv0pxtyuniR+ZrYe9waivZuo7RP00WqVLPSTSPn3R3dEPwJK/3
WeF8Hmz2eG52fkBuFDxlimDbSeyEU617q1VcF/bvYU7WjhAzmGy3+enBpVrgrnrn
e+OGviX+3ecVaDp/JR9X0J6s23WB2aomae9olcZtTHJ7EtDAxaom4rVrkhaQWnRx
1XZVSQilEizWag==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:27 2025 by rpki-client