Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          9eiKI48GOIaPu8wsokGJjneXVAqPJF+Pt3S0u0oD40A=
Subject key identifier:   B0:66:A3:9E:6E:46:A6:DC:29:25:B4:E8:11:8F:E2:66:3D:BC:03:01
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       019894B7B379EBE6568CA8943490EA5F3AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 16:02:03 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:03 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:03 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
                          3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: VggV7f0otGeb5OMqY1D2dnk3fNPquwYtGADAi/D/r7w=)
                          5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
                          6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:b3:79:eb:e6:56:8c:a8:94:34:90:ea:5f:3a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Aug 10 16:02:03 2025 GMT
            Not After : Aug 11 16:02:03 2025 GMT
        Subject: CN=b066a39e6e46a6dc2925b4e8118fe2663dbc0301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:68:49:91:3f:92:bb:c1:b2:2f:a5:d6:c9:
                    9a:a1:46:35:7e:62:f8:f3:79:e6:39:a4:68:6e:8f:
                    ee:77:87:b0:57:69:63:fc:37:f2:e5:52:f8:e7:47:
                    e2:b7:fd:2f:3a:0f:18:e4:60:06:b9:54:5d:5c:94:
                    79:b6:95:f8:71:af:60:8c:c6:b2:2e:6d:be:e2:7d:
                    61:94:43:8b:84:ee:bf:da:6a:6a:42:38:bd:76:f9:
                    6e:7e:10:51:96:87:3a:83:2e:bd:ca:1e:f6:12:c3:
                    79:6e:4a:54:63:cf:69:bd:77:6d:6d:3e:95:f3:c3:
                    1a:f5:4f:05:f5:f8:38:4c:95:ea:db:e1:92:89:9c:
                    0c:71:39:7b:c8:78:90:dd:d0:18:b8:74:b0:c8:ff:
                    d7:d3:46:3a:e0:6b:06:ee:0a:29:4c:d0:e1:c6:fc:
                    9f:b4:1d:b0:ed:aa:1f:d5:dc:51:39:93:07:67:f0:
                    8c:72:67:87:25:c6:ee:c1:2b:00:b1:04:d2:93:2f:
                    94:c1:b1:1c:bd:7a:79:81:d0:dc:f3:88:9a:fd:06:
                    da:b3:52:26:93:0c:5e:ec:6f:f5:42:e5:34:45:9f:
                    ce:92:af:0a:91:d4:62:60:88:c9:be:86:a0:95:b9:
                    1c:d4:9f:3d:1b:c3:a9:a1:d9:61:8a:5c:20:da:ca:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:A3:9E:6E:46:A6:DC:29:25:B4:E8:11:8F:E2:66:3D:BC:03:01
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:0f:77:d0:81:d8:07:c7:44:ca:3a:f8:2e:d8:7c:11:a7:
         6c:ed:cb:a1:2c:9b:c5:7b:7b:ec:87:27:8d:1f:aa:e8:0d:3b:
         22:ad:ac:1c:03:6f:88:ba:da:57:8d:cd:35:28:a3:4b:63:f9:
         34:92:6e:0e:75:00:37:99:da:3d:1c:28:b3:df:f7:f4:1e:03:
         6f:98:ba:73:6c:b7:45:c8:ee:cb:5f:d2:83:f9:f0:cf:0f:1d:
         0f:2c:44:17:5c:d4:5a:c2:00:3f:78:b1:7c:d8:75:68:f3:51:
         36:2c:92:75:50:94:57:c1:47:c9:24:70:ff:d8:7c:0d:4e:71:
         29:a9:0c:95:1c:09:cb:08:3f:ee:a3:a4:e9:95:fe:28:24:9d:
         62:1e:43:5b:01:e2:1f:9d:d3:80:aa:9c:20:b9:87:e7:0b:83:
         95:a8:a5:a2:60:d6:60:1b:f3:28:de:35:01:a5:0d:73:71:f6:
         6f:f3:4f:45:c8:36:bf:84:9b:85:54:70:cb:ba:73:89:81:13:
         90:99:7e:09:dc:41:29:15:ac:ad:c4:f0:fd:fe:b9:03:45:e4:
         9a:6f:6e:64:fb:80:7c:23:cb:ab:c5:8e:10:86:c9:48:7a:07:
         55:a3:6a:3e:e4:fb:4f:4d:32:c7:e4:55:ac:f1:f5:56:3a:02:
         aa:c9:ae:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt7N56+ZWjKiUNJDqXzr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi
YjM2ODYwHhcNMjUwODEwMTYwMjAzWhcNMjUwODExMTYwMjAzWjAzMTEwLwYDVQQD
EyhiMDY2YTM5ZTZlNDZhNmRjMjkyNWI0ZTgxMThmZTI2NjNkYmMwMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnENoSZE/krvBsi+l1smaoUY1fmL4
83nmOaRobo/ud4ewV2lj/Dfy5VL450fit/0vOg8Y5GAGuVRdXJR5tpX4ca9gjMay
Lm2+4n1hlEOLhO6/2mpqQji9dvlufhBRloc6gy69yh72EsN5bkpUY89pvXdtbT6V
88Ma9U8F9fg4TJXq2+GSiZwMcTl7yHiQ3dAYuHSwyP/X00Y64GsG7gopTNDhxvyf
tB2w7aof1dxROZMHZ/CMcmeHJcbuwSsAsQTSky+UwbEcvXp5gdDc84ia/Qbas1Im
kwxe7G/1QuU0RZ/Okq8KkdRiYIjJvoaglbkc1J89G8Opodlhilwg2sryqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBmo55uRqbcKSW06BGP4mY9vAMBMB8GA1UdIwQY
MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt
YzdmZTYyMjI3ZGYzLzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz
LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfgPd9CB
2AfHRMo6+C7YfBGnbO3LoSybxXt77IcnjR+q6A07Iq2sHANviLraV43NNSijS2P5
NJJuDnUAN5naPRwos9/39B4Db5i6c2y3Rcjuy1/Sg/nwzw8dDyxEF1zUWsIAP3ix
fNh1aPNRNiySdVCUV8FHySRw/9h8DU5xKakMlRwJywg/7qOk6ZX+KCSdYh5DWwHi
H53TgKqcILmH5wuDlailomDWYBvzKN41AaUNc3H2b/NPRcg2v4SbhVRwy7pziYET
kJl+CdxBKRWsrcTw/f65A0Xkmm9uZPuAfCPLq8WOEIbJSHoHVaNqPuT7T00yx+RV
rPH1VjoCqsmu7Q==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:09 2025 by rpki-client