Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File:                     zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier:          pJgaZjJrX2NgxmeYr0KK5PBwBEQz5IAc83z1FhzfoEs=
Subject key identifier:   A9:A7:A8:91:90:83:BE:BB:A1:7B:C4:99:96:34:35:28:7D:6D:25:DA
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer:       /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial:       01988B105F1ACEF3EC07D8F7B99667E7AF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 19:02:42 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:42 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:42 +0000
Files and hashes:         1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
                          2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: Ebc4iUcF8RH3GDfiIjTr8atUFs2/aqnXiOOBM0pplUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:5f:1a:ce:f3:ec:07:d8:f7:b9:96:67:e7:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
        Validity
            Not Before: Aug  8 19:02:42 2025 GMT
            Not After : Aug  9 19:02:42 2025 GMT
        Subject: CN=a9a7a8919083bebba17bc499963435287d6d25da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:3b:4b:09:7d:c0:86:69:c5:f1:92:c2:b0:
                    65:ca:87:ee:74:ab:08:c0:10:ac:84:13:f1:e0:09:
                    98:0c:db:40:82:cc:90:93:f3:db:91:14:78:e9:7b:
                    91:02:dd:88:b4:74:80:05:8d:6a:f9:7d:74:70:d6:
                    ec:20:2e:ea:2c:41:91:a1:7e:ad:29:78:e2:b6:a7:
                    a3:39:60:ba:e0:59:1f:bf:a1:32:c1:2e:a8:7c:6b:
                    91:d5:83:df:80:83:e7:60:e5:40:2c:ba:56:76:73:
                    d7:45:77:57:58:cf:6c:0e:bd:5e:81:c1:e2:f1:76:
                    ea:bf:c5:80:56:75:d8:08:c4:fa:14:08:53:39:14:
                    f7:38:35:af:ed:f6:a1:39:4b:66:6f:57:f2:4e:b5:
                    d8:5f:b1:65:a9:9b:c4:e9:f3:e5:ea:c1:44:54:a2:
                    1a:78:a3:82:52:3e:62:7c:78:59:66:b3:fc:e5:57:
                    78:be:de:dc:06:c8:1c:59:fe:f1:2b:d4:96:f0:48:
                    02:58:b6:b2:2b:e6:fc:81:a2:29:94:9e:2b:12:6f:
                    f8:e8:fb:d0:f1:f0:8d:2b:f6:b2:af:7a:83:11:1a:
                    09:55:d3:d0:9a:dd:bf:3f:93:12:d1:97:b8:b9:d6:
                    29:bd:15:13:91:8a:71:44:ac:df:25:d1:8b:e7:39:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A7:A8:91:90:83:BE:BB:A1:7B:C4:99:96:34:35:28:7D:6D:25:DA
            X509v3 Authority Key Identifier:
                keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:19:c1:af:81:7e:1c:b3:51:2a:59:1b:e4:b5:6a:aa:ed:8c:
         2d:37:f4:84:9c:39:2d:a2:89:fc:6b:cc:c0:ee:90:3b:a3:a7:
         7e:c0:7e:21:3e:54:8d:6a:51:04:e9:f2:d8:30:d4:b9:43:55:
         b9:49:47:b1:e3:82:b9:6c:3b:0c:30:f3:68:19:c7:21:10:44:
         ae:c6:eb:81:65:78:d2:98:81:41:6f:35:a7:c7:1a:66:dc:e4:
         0c:a1:e2:1f:cd:95:fa:81:be:ac:45:7b:5c:9d:7d:0b:8c:09:
         c7:bc:b9:17:e8:b2:1c:32:a5:cf:8b:f5:8b:78:e5:19:15:95:
         07:01:3c:24:2a:7d:8a:dd:54:c2:27:49:96:68:65:cf:c9:36:
         64:53:49:24:24:71:ec:96:48:79:40:2a:36:08:e7:87:46:e3:
         78:ef:9e:76:2a:a4:e1:8c:c6:e8:a5:e8:50:ca:c4:ac:c1:5c:
         6a:68:fd:55:35:a9:f0:5d:b3:34:58:26:e5:11:71:71:5f:f7:
         f4:d9:f8:b0:e4:07:7e:44:b6:18:b2:b4:78:aa:ef:82:42:e5:
         07:aa:f2:02:f7:87:7d:5c:1b:41:e4:ed:11:7c:b8:27:07:28:
         32:e8:35:ca:8d:a3:21:29:1f:e7:14:65:dc:58:c3:d9:bb:d3:
         8b:3e:10:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEF8azvPsB9j3uZZn56+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZThlNjU0Mzk5MmRiNDk3NTk4YzIyZTdhOGI5NTc4Zjg4
ZDk4MmYwHhcNMjUwODA4MTkwMjQyWhcNMjUwODA5MTkwMjQyWjAzMTEwLwYDVQQD
EyhhOWE3YTg5MTkwODNiZWJiYTE3YmM0OTk5NjM0MzUyODdkNmQyNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEk7Swl9wIZpxfGSwrBlyofudKsI
wBCshBPx4AmYDNtAgsyQk/PbkRR46XuRAt2ItHSABY1q+X10cNbsIC7qLEGRoX6t
KXjitqejOWC64Fkfv6EywS6ofGuR1YPfgIPnYOVALLpWdnPXRXdXWM9sDr1egcHi
8Xbqv8WAVnXYCMT6FAhTORT3ODWv7fahOUtmb1fyTrXYX7FlqZvE6fPl6sFEVKIa
eKOCUj5ifHhZZrP85Vd4vt7cBsgcWf7xK9SW8EgCWLayK+b8gaIplJ4rEm/46PvQ
8fCNK/ayr3qDERoJVdPQmt2/P5MS0Ze4udYpvRUTkYpxRKzfJdGL5zmlOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmnqJGQg767oXvEmZY0NSh9bSXaMB8GA1UdIwQY
MBaAFM3o5lQ5kttJdZjCLnqLlXj4jZgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVqbVZEbVMyMGwxbU1JdWVvdVZlUGlObUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9kMTM1M2ItZmE5ZC00ZTZlLThjMjIt
MGFiMjVkMGIwYmVlLzEvemVqbVZEbVMyMGwxbU1JdWVvdVZlUGlObUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9kMTM1M2ItZmE5ZC00ZTZlLThjMjItMGFiMjVkMGIwYmVl
LzEvemVqbVZEbVMyMGwxbU1JdWVvdVZlUGlObUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRnBr4F+
HLNRKlkb5LVqqu2MLTf0hJw5LaKJ/GvMwO6QO6OnfsB+IT5UjWpRBOny2DDUuUNV
uUlHseOCuWw7DDDzaBnHIRBErsbrgWV40piBQW81p8caZtzkDKHiH82V+oG+rEV7
XJ19C4wJx7y5F+iyHDKlz4v1i3jlGRWVBwE8JCp9it1UwidJlmhlz8k2ZFNJJCRx
7JZIeUAqNgjnh0bjeO+ediqk4YzG6KXoUMrErMFcamj9VTWp8F2zNFgm5RFxcV/3
9Nn4sOQHfkS2GLK0eKrvgkLlB6ryAveHfVwbQeTtEXy4JwcoMug1yo2jISkf5xRl
3FjD2bvTiz4Qeg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:06 2025 by rpki-client