Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File:                     ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier:          DzZVTHkXEdbn9hytUlEgxaiHt+F+VT7vuC2otpZpR+4=
Subject key identifier:   DE:DB:68:E8:4A:4B:8E:EA:FE:0C:59:E7:33:51:71:38:8A:75:5C:6F
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer:       /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial:       019872CF4E73921F51DC3FB606C44FAD6DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number:          1557
Signing time:             Mon 04 Aug 2025 02:00:45 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:45 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:45 +0000
Files and hashes:         1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
                          2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: a1CFk6jZ/iOhbPuX3nuPPcYlLavOEPWGqDJGdEixH+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:4e:73:92:1f:51:dc:3f:b6:06:c4:4f:ad:6d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
        Validity
            Not Before: Aug  4 02:00:45 2025 GMT
            Not After : Aug  5 02:00:45 2025 GMT
        Subject: CN=dedb68e84a4b8eeafe0c59e7335171388a755c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:cd:a7:90:7d:4f:6b:f8:63:c2:70:50:d1:
                    e9:a2:cf:61:57:95:32:e1:fd:ac:0e:d9:aa:d6:26:
                    e1:5a:66:9e:dd:88:dc:96:a9:65:d9:1b:ce:64:86:
                    00:60:fb:b2:af:0e:73:e6:f8:c7:cf:97:8f:4d:51:
                    fe:36:9b:09:c6:e6:7f:cc:53:0b:13:05:1f:a0:b3:
                    26:c1:d1:0b:36:54:f1:64:ee:86:5a:85:1f:17:6f:
                    4c:16:d9:84:bc:36:24:ae:c3:43:55:89:c9:b4:4b:
                    88:ee:99:61:07:3e:5e:2e:24:b1:d7:82:e2:b7:f4:
                    6e:65:1f:49:10:1e:0a:0e:76:e5:da:0b:5d:ac:3c:
                    df:a1:9f:e9:69:3e:a0:86:b8:fb:02:6f:42:cc:0b:
                    b9:2b:0a:de:8e:f1:36:a0:1c:10:f0:3d:83:ae:ac:
                    e7:9d:00:9d:8e:f7:42:c4:b3:bd:a9:5c:ac:04:e8:
                    aa:38:2b:0a:44:71:77:21:4c:c9:e2:6e:62:e2:a6:
                    98:29:6f:c6:97:c6:29:cd:9d:91:26:30:3d:23:85:
                    de:1c:3e:57:41:8b:05:38:51:ee:a3:df:d9:c4:69:
                    3f:a6:35:1a:53:2f:9f:a4:e6:92:28:8e:6e:4c:e3:
                    01:9c:2c:f4:cc:74:df:a0:d7:ba:7b:cc:26:84:d6:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DB:68:E8:4A:4B:8E:EA:FE:0C:59:E7:33:51:71:38:8A:75:5C:6F
            X509v3 Authority Key Identifier:
                keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8f:97:53:32:33:0c:50:fb:d2:cf:f0:9b:04:ac:91:fd:be:
         4d:31:0a:ea:00:8e:25:2c:45:f6:a3:d8:63:21:dc:e1:74:57:
         af:93:1b:0f:54:04:31:29:09:67:96:60:9a:15:1a:49:4a:5f:
         68:45:93:b1:d6:02:66:53:fd:7f:10:0b:ed:0b:1d:3a:c2:18:
         8c:1a:58:e6:ac:d1:b2:b9:93:f5:19:02:01:cd:ab:af:57:5d:
         16:85:e1:1c:9a:e8:27:2e:85:55:8b:7d:31:f3:8c:e3:75:38:
         ff:3b:5d:25:c2:6d:d4:42:22:97:8d:20:02:c9:45:71:13:5b:
         9d:04:e9:12:33:94:6d:a7:b2:b7:0d:a2:d2:29:b6:69:4a:ad:
         12:12:47:aa:69:8e:76:dc:a9:4b:0f:4e:3a:8a:11:1c:47:58:
         62:38:de:0a:99:cf:11:0f:26:f9:f3:35:9e:32:99:a5:7c:e2:
         42:41:42:1a:71:d8:ab:63:e6:63:31:d9:fe:e4:20:ca:e0:c8:
         38:4f:77:50:b4:f7:13:8a:09:44:43:66:c4:56:d8:4e:61:dc:
         e9:79:03:ac:1e:88:5f:ad:98:2c:67:b6:e6:7e:fa:68:64:8b:
         00:3e:62:d2:28:6b:d7:28:86:d9:19:91:2e:a6:a2:d9:77:25:
         c9:9f:d9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz05zkh9R3D+2BsRPrW3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjUwODA0MDIwMDQ1WhcNMjUwODA1MDIwMDQ1WjAzMTEwLwYDVQQD
EyhkZWRiNjhlODRhNGI4ZWVhZmUwYzU5ZTczMzUxNzEzODhhNzU1YzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZzNp5B9T2v4Y8JwUNHpos9hV5Uy
4f2sDtmq1ibhWmae3Yjclqll2RvOZIYAYPuyrw5z5vjHz5ePTVH+NpsJxuZ/zFML
EwUfoLMmwdELNlTxZO6GWoUfF29MFtmEvDYkrsNDVYnJtEuI7plhBz5eLiSx14Li
t/RuZR9JEB4KDnbl2gtdrDzfoZ/paT6ghrj7Am9CzAu5KwrejvE2oBwQ8D2Drqzn
nQCdjvdCxLO9qVysBOiqOCsKRHF3IUzJ4m5i4qaYKW/Gl8YpzZ2RJjA9I4XeHD5X
QYsFOFHuo9/ZxGk/pjUaUy+fpOaSKI5uTOMBnCz0zHTfoNe6e8wmhNaBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7baOhKS47q/gxZ5zNRcTiKdVxvMB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo+XUzIz
DFD70s/wmwSskf2+TTEK6gCOJSxF9qPYYyHc4XRXr5MbD1QEMSkJZ5ZgmhUaSUpf
aEWTsdYCZlP9fxAL7QsdOsIYjBpY5qzRsrmT9RkCAc2rr1ddFoXhHJroJy6FVYt9
MfOM43U4/ztdJcJt1EIil40gAslFcRNbnQTpEjOUbaeytw2i0im2aUqtEhJHqmmO
dtypSw9OOooRHEdYYjjeCpnPEQ8m+fM1njKZpXziQkFCGnHYq2PmYzHZ/uQgyuDI
OE93ULT3E4oJRENmxFbYTmHc6XkDrB6IX62YLGe25n76aGSLAD5i0ihr1yiG2RmR
Lqai2XclyZ/Z1w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:15 2025 by rpki-client