Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File:                     9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier:          qcbron2UNv6sC8bBAeTEXmqvZHgI6H4ZLlJIKeRUytc=
Subject key identifier:   B4:92:98:1B:29:E4:2E:87:91:75:50:4C:D2:CD:F7:24:ED:08:E4:43
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer:       /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial:       019875D1007B17400D32868A3E6CE95EF302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 16:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:28 +0000
Files and hashes:         1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: 5VWTAoDDN4v0Mw7TFOm/OfKqrokTIyLxVB14i32VtmQ=)
                          2: ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa (hash: n7Rzh1zK0MckYzOS9a8lwv/AGXV+Jr0CvxhzGO4UHW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:00:7b:17:40:0d:32:86:8a:3e:6c:e9:5e:f3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
        Validity
            Not Before: Aug  4 16:01:28 2025 GMT
            Not After : Aug  5 16:01:28 2025 GMT
        Subject: CN=b492981b29e42e879175504cd2cdf724ed08e443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:b9:50:ec:99:80:4b:e2:00:9c:6b:54:01:
                    3b:fd:ec:b1:f9:e4:a4:82:18:c9:82:49:5f:9f:bf:
                    9e:b5:51:3f:84:32:ca:dc:e6:73:fc:0a:51:bf:74:
                    26:fb:d3:0e:67:98:c6:4c:a4:99:17:d9:6f:53:7a:
                    be:50:58:85:56:2c:2a:9a:3c:bd:73:f7:da:a3:72:
                    0d:1c:2e:fd:ce:a6:44:f8:b8:f2:b5:e9:b4:63:1c:
                    5c:a7:8a:53:cc:fc:e6:51:73:10:14:a8:92:33:5e:
                    9c:37:28:55:5e:ed:ac:33:0d:6c:e6:8c:a0:52:2a:
                    e0:85:75:7e:54:82:65:43:15:8a:ee:4e:36:8d:57:
                    bd:c9:c7:17:f3:35:6b:c9:cd:6b:6f:bd:af:39:42:
                    f3:7d:f8:29:95:da:1f:54:43:1a:da:a7:cd:c6:48:
                    a8:52:fd:97:0d:8c:7c:56:4b:08:a1:6d:22:be:7c:
                    47:a8:5c:72:88:47:94:48:8f:63:6f:0b:c0:e0:a0:
                    95:50:0c:d5:f1:fb:2b:72:89:39:02:7d:80:d3:86:
                    2b:c4:7e:c0:29:18:e4:79:8c:35:fa:dd:0e:da:11:
                    15:6d:af:a7:83:a0:1a:11:76:2f:e1:1e:a0:c5:be:
                    19:a5:3f:04:a6:34:34:30:d6:64:30:96:8c:50:f8:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:92:98:1B:29:E4:2E:87:91:75:50:4C:D2:CD:F7:24:ED:08:E4:43
            X509v3 Authority Key Identifier:
                keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:7b:b3:d0:cf:fa:da:a8:a5:cf:f6:47:dd:f6:ca:ba:a1:
         bf:2c:a6:18:37:cc:64:42:8d:d4:07:11:76:5d:09:4d:c9:07:
         e2:6f:c9:74:f5:18:0d:d7:2f:17:0c:74:89:35:e2:e6:02:ac:
         76:ba:6d:30:79:d4:e9:7f:79:7e:73:92:96:fd:8c:c7:61:8a:
         51:58:5d:e5:9b:e4:6e:ff:b3:fb:fe:62:f4:be:f6:f3:26:d9:
         b9:f7:90:ee:68:50:69:98:07:ea:9e:d9:f9:45:9c:60:8c:cc:
         12:9d:32:c7:3e:47:bc:13:b8:b8:ac:4c:32:0e:63:20:c1:f6:
         b4:af:84:ab:8c:ca:2c:fe:9c:5a:41:02:91:9c:84:74:f7:53:
         f1:ee:30:14:1b:ec:4f:ba:ae:f8:cb:e5:aa:38:1f:08:da:4e:
         37:df:f0:7d:f8:6b:75:0d:22:a3:08:96:cf:bf:de:ca:45:39:
         c2:44:5f:60:4f:ca:c8:b2:b0:3e:67:1f:5d:fd:da:f7:8d:82:
         b4:67:c6:f4:2e:7d:0d:10:60:d1:26:70:d0:fd:94:f2:6f:d0:
         5d:91:66:ee:11:b2:80:69:07:21:55:4c:32:b6:0e:4c:11:1f:
         79:f8:10:ae:21:69:b6:a6:74:18:f7:1c:1c:b8:34:07:9a:0a:
         2e:8d:32:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10QB7F0ANMoaKPmzpXvMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YWRhOTAxZDQwOGJmN2Y1Yjk0MzU5MjFlNDgwMGE4Zjgy
ZGJkYWIwHhcNMjUwODA0MTYwMTI4WhcNMjUwODA1MTYwMTI4WjAzMTEwLwYDVQQD
EyhiNDkyOTgxYjI5ZTQyZTg3OTE3NTUwNGNkMmNkZjcyNGVkMDhlNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt65UOyZgEviAJxrVAE7/eyx+eSk
ghjJgklfn7+etVE/hDLK3OZz/ApRv3Qm+9MOZ5jGTKSZF9lvU3q+UFiFViwqmjy9
c/fao3INHC79zqZE+Ljytem0Yxxcp4pTzPzmUXMQFKiSM16cNyhVXu2sMw1s5oyg
UirghXV+VIJlQxWK7k42jVe9yccX8zVryc1rb72vOULzffgpldofVEMa2qfNxkio
Uv2XDYx8VksIoW0ivnxHqFxyiEeUSI9jbwvA4KCVUAzV8fsrcok5An2A04YrxH7A
KRjkeYw1+t0O2hEVba+ng6AaEXYv4R6gxb4ZpT8EpjQ0MNZkMJaMUPgVJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSSmBsp5C6HkXVQTNLN9yTtCORDMB8GA1UdIwQY
MBaAFPWtqQHUCL9/W5Q1kh5IAKj4Lb2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2Yt
YTMzNjQ5ZTNlMmM1LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2YtYTMzNjQ5ZTNlMmM1
LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSB7s9DP
+tqopc/2R932yrqhvyymGDfMZEKN1AcRdl0JTckH4m/JdPUYDdcvFwx0iTXi5gKs
drptMHnU6X95fnOSlv2Mx2GKUVhd5Zvkbv+z+/5i9L728ybZufeQ7mhQaZgH6p7Z
+UWcYIzMEp0yxz5HvBO4uKxMMg5jIMH2tK+Eq4zKLP6cWkECkZyEdPdT8e4wFBvs
T7qu+MvlqjgfCNpON9/wffhrdQ0iowiWz7/eykU5wkRfYE/KyLKwPmcfXf3a942C
tGfG9C59DRBg0SZw0P2U8m/QXZFm7hGygGkHIVVMMrYOTBEfefgQriFptqZ0GPcc
HLg0B5oKLo0yxQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:19:24 2025 by rpki-client