Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File:                     iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier:          nBQ7002UperTWU8FU5gRjPc38Jfy1WporAwMcoeWILE=
Subject key identifier:   F2:4E:77:EB:08:A2:CC:3E:10:3D:20:2D:F4:9E:DB:65:9A:04:50:3A
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer:       /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial:       01987FE654BAD50B4908E0673739C1BA3EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number:          1018
Signing time:             Wed 06 Aug 2025 15:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 15:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 15:00:57 +0000
Files and hashes:         1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
                          2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: Yi7gq0QNf5/LxiACPIxxAeJRz7suG8gsJ4LxXhc4gHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:54:ba:d5:0b:49:08:e0:67:37:39:c1:ba:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
        Validity
            Not Before: Aug  6 15:00:57 2025 GMT
            Not After : Aug  7 15:00:57 2025 GMT
        Subject: CN=f24e77eb08a2cc3e103d202df49edb659a04503a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:7a:02:48:0e:49:c2:c2:d7:6c:d0:d3:7a:
                    2f:eb:06:85:be:b6:c0:36:3d:28:67:04:18:ac:1e:
                    78:28:1e:a7:1f:25:c7:36:86:91:76:23:35:7c:2b:
                    6d:98:35:00:85:91:98:78:53:04:dc:c3:34:aa:88:
                    26:cc:eb:6e:63:6d:f0:a4:28:ce:b8:23:9c:53:f5:
                    67:60:7f:9c:82:42:ff:d1:39:19:21:57:52:bc:28:
                    9b:da:3c:92:29:32:0c:d3:0b:f0:07:1d:02:8c:08:
                    d2:a4:8d:07:62:65:00:a9:9f:97:b5:a0:2e:fb:5b:
                    c1:06:f6:d9:07:08:b8:88:a5:24:31:ca:39:0b:50:
                    cc:04:0f:63:68:e3:94:e6:31:5d:4e:fc:ef:42:63:
                    0c:06:ca:ff:b4:b3:aa:cb:0f:ab:03:88:fc:b3:cd:
                    0a:ac:8b:a7:b8:39:0b:24:a8:22:30:67:b9:50:44:
                    96:22:aa:e2:9a:64:67:f4:af:cb:f5:00:5a:15:e2:
                    dd:bb:36:b5:cf:17:c3:91:b8:52:52:83:bc:97:72:
                    a8:79:b5:93:ea:15:63:ba:68:fd:7d:e5:01:dc:fa:
                    a8:da:93:9f:3f:e6:21:b5:ed:95:32:9d:a2:ac:72:
                    2e:2f:e9:fe:83:d6:d1:2d:6a:3e:4e:e9:37:50:7f:
                    9b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4E:77:EB:08:A2:CC:3E:10:3D:20:2D:F4:9E:DB:65:9A:04:50:3A
            X509v3 Authority Key Identifier:
                keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:be:76:49:12:9c:a2:af:8c:8b:87:44:94:d9:b1:de:ec:80:
         25:1a:5e:6c:00:4a:b8:da:ed:d6:d2:a1:4f:3d:b1:87:f0:73:
         2a:2c:d7:db:a9:a9:44:c3:3f:62:c7:8f:94:af:8c:30:b4:aa:
         14:38:f2:db:f7:65:36:77:64:b9:6e:52:df:76:d8:30:4a:52:
         79:90:35:0e:51:38:98:06:db:64:84:8b:29:90:d6:1b:fb:b6:
         30:63:9c:aa:7b:8b:f9:38:de:3c:a0:c8:6c:2e:2f:ab:ac:c2:
         7b:69:8b:15:96:85:ce:0e:36:61:dd:96:6d:f9:fd:3c:e9:ec:
         1a:ed:1a:19:a1:a4:e8:2c:26:cb:4e:1d:8b:e9:ad:16:24:3a:
         e8:2c:2d:dc:b8:00:80:61:ef:da:c7:fe:db:96:8b:67:b0:2f:
         a2:7d:76:d2:08:f9:84:98:31:1f:12:f5:73:cd:99:22:c0:bc:
         17:f9:0c:ab:db:4a:32:6c:13:f0:b3:1e:fc:32:b9:59:99:4e:
         2c:0b:db:0e:6e:1d:3b:27:d7:01:d8:4d:60:61:73:9a:12:ed:
         e6:22:a8:c5:4a:13:7d:04:24:e5:a1:1a:57:b5:5e:46:f8:bf:
         fa:53:d0:5e:1d:bd:47:38:d3:28:7e:d6:63:fb:71:b9:b3:a7:
         07:16:c7:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/5lS61QtJCOBnNznBuj7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OGM3Yjk0NjQyZDJlNGJiZmI5NTgzYWQ5NDFmNTFlYjhj
NDU2NDAwHhcNMjUwODA2MTUwMDU3WhcNMjUwODA3MTUwMDU3WjAzMTEwLwYDVQQD
EyhmMjRlNzdlYjA4YTJjYzNlMTAzZDIwMmRmNDllZGI2NTlhMDQ1MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2R6AkgOScLC12zQ03ov6waFvrbA
Nj0oZwQYrB54KB6nHyXHNoaRdiM1fCttmDUAhZGYeFME3MM0qogmzOtuY23wpCjO
uCOcU/VnYH+cgkL/0TkZIVdSvCib2jySKTIM0wvwBx0CjAjSpI0HYmUAqZ+XtaAu
+1vBBvbZBwi4iKUkMco5C1DMBA9jaOOU5jFdTvzvQmMMBsr/tLOqyw+rA4j8s80K
rIunuDkLJKgiMGe5UESWIqrimmRn9K/L9QBaFeLduza1zxfDkbhSUoO8l3KoebWT
6hVjumj9feUB3Pqo2pOfP+Yhte2VMp2irHIuL+n+g9bRLWo+Tuk3UH+bVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJOd+sIosw+ED0gLfSe22WaBFA6MB8GA1UdIwQY
MBaAFIiMe5RkLS5Lv7lYOtlB9R64xFZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWIt
NzE4Nzk3N2UwNTdlLzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jY2JmN2EtZWMzOC00NGU2LWIyZWItNzE4Nzk3N2UwNTdl
LzEvaUl4N2xHUXRMa3VfdVZnNjJVSDFIcmpFVmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA752SRKc
oq+Mi4dElNmx3uyAJRpebABKuNrt1tKhTz2xh/BzKizX26mpRMM/YsePlK+MMLSq
FDjy2/dlNndkuW5S33bYMEpSeZA1DlE4mAbbZISLKZDWG/u2MGOcqnuL+TjePKDI
bC4vq6zCe2mLFZaFzg42Yd2Wbfn9POnsGu0aGaGk6Cwmy04di+mtFiQ66Cwt3LgA
gGHv2sf+25aLZ7Avon120gj5hJgxHxL1c82ZIsC8F/kMq9tKMmwT8LMe/DK5WZlO
LAvbDm4dOyfXAdhNYGFzmhLt5iKoxUoTfQQk5aEaV7VeRvi/+lPQXh29RzjTKH7W
Y/txubOnBxbHlQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:09 2025 by rpki-client