Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
File:                     1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json)
Hash identifier:          SyLmPFrWVn2xPWgMx4EHUAxbBL47GdM/+sjrPoNm+Rw=
Subject key identifier:   D6:C7:C6:1E:68:26:4E:6A:29:3C:E4:58:19:F6:E0:9A:70:56:14:36
Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
Certificate issuer:       /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Certificate serial:       01988AA09F01F740D9816F3FD333AF53CFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
Manifest number:          011D
Signing time:             Fri 08 Aug 2025 17:00:38 +0000
Manifest this update:     Fri 08 Aug 2025 17:00:38 +0000
Manifest next update:     Sat 09 Aug 2025 17:00:38 +0000
Files and hashes:         1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: OBJt4KdYr3wc+SbYZq5p0TXddxZ5g6BPp+GOHpgBk1E=)
                          2: BcelUhdXxacAQU97XkdcwjtJzVg.roa (hash: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:9f:01:f7:40:d9:81:6f:3f:d3:33:af:53:cf:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
        Validity
            Not Before: Aug  8 17:00:38 2025 GMT
            Not After : Aug  9 17:00:38 2025 GMT
        Subject: CN=d6c7c61e68264e6a293ce45819f6e09a70561436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:c8:33:4b:41:1f:22:30:10:b5:b2:f3:22:
                    41:25:ee:b8:84:d7:9d:e6:e0:a1:af:99:87:ad:a5:
                    1e:58:2e:60:7d:f8:d1:b7:02:54:29:1c:03:0d:fe:
                    3f:27:90:b1:62:d8:5b:61:ac:10:bc:65:01:31:12:
                    fa:76:a8:35:5b:b7:24:ad:09:ca:bc:a4:e4:a9:b3:
                    d5:e0:1a:cb:f2:16:3f:3b:90:71:2f:f0:e0:6e:e3:
                    80:f4:59:8e:5e:36:c1:74:29:b1:fa:08:c9:06:52:
                    c6:98:96:4a:a4:5f:d7:8b:1d:ec:9d:60:6b:25:50:
                    62:9d:b6:5d:4a:3e:8b:8d:99:16:a0:44:4b:a3:43:
                    b8:1b:19:64:87:97:04:19:99:51:b7:54:7a:b6:ed:
                    6b:7e:82:07:01:09:c7:59:09:7f:42:5f:08:5d:c4:
                    46:52:c1:76:aa:a0:84:75:9d:cf:6b:f2:77:6a:af:
                    dc:cb:ff:a2:33:50:33:17:49:73:4c:1c:79:53:a4:
                    dc:9c:a8:62:ae:7f:d3:de:87:23:f0:d9:a8:fe:6c:
                    09:4f:cd:ac:f7:72:97:28:e1:28:81:79:86:70:1d:
                    eb:23:cf:0d:8d:a2:04:5b:b3:1b:3c:3b:9c:65:d1:
                    e6:87:c7:08:18:c2:5a:9c:52:fe:99:0d:5d:30:93:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C7:C6:1E:68:26:4E:6A:29:3C:E4:58:19:F6:E0:9A:70:56:14:36
            X509v3 Authority Key Identifier:
                keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:74:17:5f:27:3c:ca:0c:72:54:ee:a3:c7:77:6b:f6:f1:76:
         aa:50:65:e1:a1:87:25:d0:89:c5:11:2a:d5:ed:d2:27:e2:47:
         36:4b:ee:af:cb:77:0d:b4:de:e7:4b:ab:de:af:5d:0c:0e:4c:
         de:09:fb:72:af:25:2a:ff:75:8d:7b:4b:29:5b:a9:52:de:06:
         26:7d:57:d8:b0:c0:4d:3d:ee:e5:15:e4:01:57:6a:13:96:57:
         f7:a1:bf:79:e6:54:cd:6b:94:83:0b:07:19:bd:99:f9:a4:64:
         48:ad:64:e6:96:25:aa:0d:28:a3:b2:4b:a4:17:94:bc:b6:4b:
         99:ee:c1:52:00:bc:cd:a9:71:1d:54:fe:4b:18:d8:c4:95:1f:
         03:61:17:38:f9:7c:c0:af:22:07:5d:31:c7:4a:97:06:a5:35:
         71:ab:6b:66:f9:5a:7b:44:eb:68:a2:b7:07:ee:be:89:8d:1a:
         66:45:65:5e:85:e3:77:84:c7:80:5d:1e:5c:91:b9:34:2c:bc:
         ef:b6:f1:0f:f5:02:bb:70:8b:17:37:70:87:75:f7:54:6b:0a:
         56:38:56:20:07:f2:cf:f1:97:6b:c3:7a:d9:25:95:d7:fc:78:
         0b:fd:95:1f:f7:77:c7:c2:35:81:17:1d:c8:bd:a5:5e:bb:7e:
         db:e7:cd:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoJ8B90DZgW8/0zOvU8/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NTg1YTJlMDhmZTQ0M2NlN2ZkMGNiZjQwNmY3YjlhZGEy
YTdjYzUwHhcNMjUwODA4MTcwMDM4WhcNMjUwODA5MTcwMDM4WjAzMTEwLwYDVQQD
EyhkNmM3YzYxZTY4MjY0ZTZhMjkzY2U0NTgxOWY2ZTA5YTcwNTYxNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnnIM0tBHyIwELWy8yJBJe64hNed
5uChr5mHraUeWC5gffjRtwJUKRwDDf4/J5CxYthbYawQvGUBMRL6dqg1W7ckrQnK
vKTkqbPV4BrL8hY/O5BxL/DgbuOA9FmOXjbBdCmx+gjJBlLGmJZKpF/Xix3snWBr
JVBinbZdSj6LjZkWoERLo0O4Gxlkh5cEGZlRt1R6tu1rfoIHAQnHWQl/Ql8IXcRG
UsF2qqCEdZ3Pa/J3aq/cy/+iM1AzF0lzTBx5U6TcnKhirn/T3ocj8Nmo/mwJT82s
93KXKOEogXmGcB3rI88NjaIEW7MbPDucZdHmh8cIGMJanFL+mQ1dMJPN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbHxh5oJk5qKTzkWBn24JpwVhQ2MB8GA1UdIwQY
MBaAFNVYWi4I/kQ85/0Mv0Bve5raKnzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUt
NjI4NDAwNjcxZDBlLzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUtNjI4NDAwNjcxZDBl
LzEvMVZoYUxnai1SRHpuX1F5X1FHOTdtdG9xZk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnQXXyc8
ygxyVO6jx3dr9vF2qlBl4aGHJdCJxREq1e3SJ+JHNkvur8t3DbTe50ur3q9dDA5M
3gn7cq8lKv91jXtLKVupUt4GJn1X2LDATT3u5RXkAVdqE5ZX96G/eeZUzWuUgwsH
Gb2Z+aRkSK1k5pYlqg0oo7JLpBeUvLZLme7BUgC8zalxHVT+SxjYxJUfA2EXOPl8
wK8iB10xx0qXBqU1catrZvlae0TraKK3B+6+iY0aZkVlXoXjd4THgF0eXJG5NCy8
77bxD/UCu3CLFzdwh3X3VGsKVjhWIAfyz/GXa8N62SWV1/x4C/2VH/d3x8I1gRcd
yL2lXrt+2+fNRA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:47 2025 by rpki-client