Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File:                     M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier:          zG+MKn7hq/z4AEF5d/lSzpR3O+b8KbQn/yJtzygpAU0=
Subject key identifier:   4E:04:5C:B9:7D:F3:DF:7B:1A:4E:47:C6:A1:66:58:EC:29:4C:7E:5C
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer:       /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial:       01987419230E8CDCF510670BF05BFD8D5544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 08:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:01 +0000
Files and hashes:         1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: wVgy5TMIGmeBPc3ncK3jkhaku9ejf3W79jvxKWLfjtM=)
                          2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:23:0e:8c:dc:f5:10:67:0b:f0:5b:fd:8d:55:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
        Validity
            Not Before: Aug  4 08:01:01 2025 GMT
            Not After : Aug  5 08:01:01 2025 GMT
        Subject: CN=4e045cb97df3df7b1a4e47c6a16658ec294c7e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:e9:9a:73:ae:80:b2:d1:4c:f2:75:39:8c:
                    03:27:b7:df:b7:d0:6e:26:93:05:3e:da:d6:b6:93:
                    2d:bc:a8:ca:92:48:5b:5b:ae:44:13:6c:a5:0f:11:
                    36:d0:dc:59:a7:c2:c5:a5:ce:0d:b0:09:a3:97:72:
                    48:6f:26:16:7f:0c:51:37:f5:ac:ff:a9:96:ba:b5:
                    01:8e:fd:bb:1c:a0:1f:38:df:49:24:bd:46:de:6d:
                    48:5a:a5:24:77:ab:6d:a0:d9:3d:89:94:9a:8b:19:
                    a6:5f:e0:78:42:ba:36:94:30:b3:71:9f:6c:2a:1e:
                    40:05:3a:21:df:74:c2:be:ae:01:19:43:28:d0:52:
                    60:f7:08:4f:01:79:e6:4f:0b:3d:cf:61:03:fd:85:
                    9f:b2:2a:2c:ec:17:ac:8e:7e:89:ab:03:5e:37:fe:
                    ce:b8:91:c2:e9:91:e7:3c:64:cd:80:ad:91:23:73:
                    35:ee:82:6a:be:be:55:54:49:27:35:27:a3:d7:e7:
                    46:a9:dd:53:93:7a:1f:4c:a1:0f:bf:2a:93:b1:44:
                    77:78:8e:da:e3:de:6e:95:63:57:a5:36:3a:de:8f:
                    53:0b:68:24:63:8e:c3:42:5e:44:a2:14:3e:74:e4:
                    07:fa:7e:44:6c:8f:fb:37:95:b8:13:d9:bf:62:02:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:04:5C:B9:7D:F3:DF:7B:1A:4E:47:C6:A1:66:58:EC:29:4C:7E:5C
            X509v3 Authority Key Identifier:
                keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:95:66:38:07:80:28:dc:43:b9:a5:83:03:78:67:58:92:
         7c:c5:33:b1:4d:82:66:e0:8d:8d:c6:40:54:ba:80:fa:00:7f:
         5b:79:f4:53:54:4a:9b:dd:1b:8c:61:d2:79:35:81:5b:68:5f:
         91:46:a3:f3:f1:be:ee:45:d9:0b:a2:4f:97:1b:d0:5e:96:4b:
         8d:87:ce:fb:d2:70:6e:d0:30:10:df:99:b4:1f:36:a4:49:3d:
         e8:9c:f2:6c:9b:1b:f1:8d:b2:c5:17:6c:6c:a8:82:45:fb:76:
         1d:02:70:ff:b0:99:59:7a:f9:7e:fc:c9:0d:a8:d7:06:d7:d2:
         b1:22:c9:17:3f:e8:70:2a:0e:1d:56:f7:12:6b:45:02:ea:5e:
         db:b6:f7:42:6b:c6:28:e8:81:08:b5:aa:88:a4:27:14:0f:c6:
         de:e2:33:32:7a:b2:ff:af:76:61:19:78:74:84:93:63:75:16:
         83:cc:66:57:dc:18:fe:a3:43:a4:29:0e:9b:fc:4d:b2:04:85:
         f1:dc:b4:d5:cd:f8:49:ca:2d:9e:4c:5b:86:fc:d9:e2:34:5d:
         44:77:8a:62:63:63:24:49:c9:05:3a:9b:f7:72:e0:ed:31:c5:
         4c:00:76:bc:28:9a:08:95:19:e8:07:93:5d:40:a3:ef:d1:01:
         2f:54:98:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GSMOjNz1EGcL8Fv9jVVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx
YzFhZWYwHhcNMjUwODA0MDgwMTAxWhcNMjUwODA1MDgwMTAxWjAzMTEwLwYDVQQD
Eyg0ZTA0NWNiOTdkZjNkZjdiMWE0ZTQ3YzZhMTY2NThlYzI5NGM3ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEPpmnOugLLRTPJ1OYwDJ7fft9Bu
JpMFPtrWtpMtvKjKkkhbW65EE2ylDxE20NxZp8LFpc4NsAmjl3JIbyYWfwxRN/Ws
/6mWurUBjv27HKAfON9JJL1G3m1IWqUkd6ttoNk9iZSaixmmX+B4Qro2lDCzcZ9s
Kh5ABToh33TCvq4BGUMo0FJg9whPAXnmTws9z2ED/YWfsios7Besjn6JqwNeN/7O
uJHC6ZHnPGTNgK2RI3M17oJqvr5VVEknNSej1+dGqd1Tk3ofTKEPvyqTsUR3eI7a
495ulWNXpTY63o9TC2gkY47DQl5EohQ+dOQH+n5EbI/7N5W4E9m/YgKjZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4EXLl98997Gk5HxqFmWOwpTH5cMB8GA1UdIwQY
MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt
MjJlYTNhZDVkZTVjLzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj
LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMCVZjgH
gCjcQ7mlgwN4Z1iSfMUzsU2CZuCNjcZAVLqA+gB/W3n0U1RKm90bjGHSeTWBW2hf
kUaj8/G+7kXZC6JPlxvQXpZLjYfO+9JwbtAwEN+ZtB82pEk96JzybJsb8Y2yxRds
bKiCRft2HQJw/7CZWXr5fvzJDajXBtfSsSLJFz/ocCoOHVb3EmtFAupe27b3QmvG
KOiBCLWqiKQnFA/G3uIzMnqy/692YRl4dISTY3UWg8xmV9wY/qNDpCkOm/xNsgSF
8dy01c34ScotnkxbhvzZ4jRdRHeKYmNjJEnJBTqb93Lg7THFTAB2vCiaCJUZ6AeT
XUCj79EBL1SYGw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:34 2025 by rpki-client