Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File:                     JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier:          kx6QYzjpjYA9LLNurLtaqYHsSQkBwmS6yr87mljN8C8=
Subject key identifier:   4D:1E:D6:CB:2C:D3:7E:C8:CB:3A:74:EB:5C:DA:92:2F:A9:51:A4:4D
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer:       /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial:       0198898E0BAB2995EFCCCB883D999C511BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number:          15A4
Signing time:             Fri 08 Aug 2025 12:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 12:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 12:00:44 +0000
Files and hashes:         1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
                          2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: x03j77G8MJ8kvbGGJmTFIZgNEEzAdgKDEbZzLeI5Abw=)
                          3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:8e:0b:ab:29:95:ef:cc:cb:88:3d:99:9c:51:1b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
        Validity
            Not Before: Aug  8 12:00:44 2025 GMT
            Not After : Aug  9 12:00:44 2025 GMT
        Subject: CN=4d1ed6cb2cd37ec8cb3a74eb5cda922fa951a44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:52:f9:c6:3d:61:d0:be:84:d1:12:d5:cd:
                    4c:90:fd:2f:d0:79:c9:26:fc:18:22:e8:a5:8f:ea:
                    9d:54:83:6d:61:1a:68:a0:63:60:16:f9:16:18:38:
                    e3:a1:d7:31:d7:fc:20:b0:41:71:1c:94:b4:e1:2e:
                    2b:1c:a7:a0:c2:b1:77:9f:fa:65:19:c8:3d:a4:26:
                    05:41:ca:31:04:73:55:c0:9c:84:d4:a7:7c:fe:1b:
                    73:40:2a:07:68:80:e3:84:8d:d4:c4:78:74:b1:b8:
                    ce:8d:0a:de:33:2b:d3:e5:f2:e4:06:8a:10:88:2a:
                    26:5a:e1:6f:4a:d7:e4:12:ae:25:40:50:d9:52:e0:
                    1c:37:39:05:71:7d:e4:55:e8:9f:84:9a:34:af:3e:
                    e2:53:8d:ae:c0:61:24:de:78:f6:9d:ab:fb:21:a8:
                    87:4b:77:52:11:b9:d7:42:cd:e9:97:46:1f:d1:40:
                    0a:3d:2d:54:9b:6f:2c:03:d7:35:b8:9b:8b:a4:43:
                    dd:48:d8:39:53:52:4c:40:7f:eb:76:10:17:01:12:
                    a8:f0:25:e7:7c:3c:86:17:46:04:0a:ec:b1:88:15:
                    b6:97:13:50:8d:6e:84:2e:56:48:9d:16:63:49:f9:
                    4a:9d:68:4b:eb:f4:1b:a4:ce:1f:32:ec:de:fc:9a:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:D6:CB:2C:D3:7E:C8:CB:3A:74:EB:5C:DA:92:2F:A9:51:A4:4D
            X509v3 Authority Key Identifier:
                keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:16:0d:c5:84:4c:76:c1:af:10:56:c5:49:3f:d9:dd:94:5e:
         a4:37:85:51:38:63:11:39:bc:eb:9b:a2:a9:ca:14:0a:04:12:
         d9:53:b0:7b:cc:07:d2:af:01:14:88:8a:fd:2e:f1:13:ce:90:
         0d:77:73:ca:29:f4:d5:3e:16:99:5e:70:88:68:c4:80:9a:03:
         71:c6:7a:65:ae:02:22:fc:3a:38:50:d9:90:6b:f1:8e:b7:55:
         0e:f3:84:d8:f5:bf:e0:c0:d5:80:53:84:24:db:fe:fe:cb:73:
         ef:24:9d:e1:0c:b4:f3:c1:4f:d9:ce:a6:a0:ec:a3:ae:78:41:
         fb:47:9f:d7:2b:46:c2:12:77:01:45:c4:2b:c4:bb:bc:73:32:
         59:a2:be:4c:ea:fe:c2:c6:d1:e5:c4:8f:00:a5:b2:6f:b6:38:
         80:11:6a:96:b8:c2:a5:a4:3f:1a:03:c9:8d:ad:89:bf:0c:f7:
         6f:4a:62:55:3e:0d:89:83:88:42:84:71:83:77:26:32:58:c3:
         e2:bf:2d:60:c0:90:11:66:14:f6:c1:5d:99:3a:de:60:db:e1:
         b1:ef:64:6e:eb:f8:00:a1:ee:3a:54:1e:27:33:d0:20:13:fc:
         7e:fa:a6:8d:62:2e:61:7d:ec:39:a5:1b:98:00:77:0b:b1:da:
         02:37:05:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJjgurKZXvzMuIPZmcURuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl
ZGMwYTcwHhcNMjUwODA4MTIwMDQ0WhcNMjUwODA5MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZDFlZDZjYjJjZDM3ZWM4Y2IzYTc0ZWI1Y2RhOTIyZmE5NTFhNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUZS+cY9YdC+hNES1c1MkP0v0HnJ
JvwYIuilj+qdVINtYRpooGNgFvkWGDjjodcx1/wgsEFxHJS04S4rHKegwrF3n/pl
Gcg9pCYFQcoxBHNVwJyE1Kd8/htzQCoHaIDjhI3UxHh0sbjOjQreMyvT5fLkBooQ
iComWuFvStfkEq4lQFDZUuAcNzkFcX3kVeifhJo0rz7iU42uwGEk3nj2nav7IaiH
S3dSEbnXQs3pl0Yf0UAKPS1Um28sA9c1uJuLpEPdSNg5U1JMQH/rdhAXARKo8CXn
fDyGF0YECuyxiBW2lxNQjW6ELlZInRZjSflKnWhL6/QbpM4fMuze/JqH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0e1sss037Iyzp061zaki+pUaRNMB8GA1UdIwQY
MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt
Y2U2OTU1Njc2MWJkLzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk
LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBYNxYRM
dsGvEFbFST/Z3ZRepDeFUThjETm865uiqcoUCgQS2VOwe8wH0q8BFIiK/S7xE86Q
DXdzyin01T4WmV5wiGjEgJoDccZ6Za4CIvw6OFDZkGvxjrdVDvOE2PW/4MDVgFOE
JNv+/stz7ySd4Qy088FP2c6moOyjrnhB+0ef1ytGwhJ3AUXEK8S7vHMyWaK+TOr+
wsbR5cSPAKWyb7Y4gBFqlrjCpaQ/GgPJja2Jvwz3b0piVT4NiYOIQoRxg3cmMljD
4r8tYMCQEWYU9sFdmTreYNvhse9kbuv4AKHuOlQeJzPQIBP8fvqmjWIuYX3sOaUb
mAB3C7HaAjcF2g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:08 2025 by rpki-client