Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File:                     ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier:          +YPZV0d5Trkp6f5kAnZbZG+kRHFFrBrSdwrTeR49r30=
Subject key identifier:   CB:D8:B0:9C:CA:83:2E:43:02:D3:A4:CB:35:74:63:58:D8:AD:7D:82
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer:       /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial:       0198793F26B29474BE9F5D2DA3A82E878CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number:          1619
Signing time:             Tue 05 Aug 2025 08:00:38 +0000
Manifest this update:     Tue 05 Aug 2025 08:00:38 +0000
Manifest next update:     Wed 06 Aug 2025 08:00:38 +0000
Files and hashes:         1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: go7mTDNuZ9vY7RRhndgHuo+MIcAgE91qboVx2yrS8og=)
                          2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:3f:26:b2:94:74:be:9f:5d:2d:a3:a8:2e:87:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
        Validity
            Not Before: Aug  5 08:00:38 2025 GMT
            Not After : Aug  6 08:00:38 2025 GMT
        Subject: CN=cbd8b09cca832e4302d3a4cb35746358d8ad7d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:56:db:dd:30:14:4c:23:d5:d6:fd:44:aa:
                    c6:b5:e8:42:42:10:3c:15:ac:0b:ac:52:49:3f:86:
                    2d:f5:45:9b:d0:75:7a:c8:33:72:38:5f:df:c9:9f:
                    c6:59:6f:0a:0e:5b:6b:f3:59:c4:c0:28:ac:3b:37:
                    9f:4d:1c:8d:3a:4c:7f:59:e6:cd:e0:68:08:fb:16:
                    c8:29:5f:cb:c9:b2:5d:0f:84:ed:2b:72:25:82:88:
                    98:1a:71:6c:9f:ad:f7:9b:cb:a1:cb:cd:0d:96:e2:
                    26:a1:a6:85:7f:91:ea:f8:25:08:a1:fa:2d:95:e4:
                    3c:fb:ed:c6:6d:fb:04:95:70:b4:49:c4:a2:4e:04:
                    52:7d:ae:80:19:f3:5e:79:4e:9a:67:13:b4:ad:d4:
                    03:c9:98:07:a8:a7:41:7e:09:b1:31:45:39:39:80:
                    4e:8a:33:a7:ac:57:e8:75:64:14:b4:fd:6d:01:e7:
                    d2:90:a9:18:93:11:ad:51:96:8c:11:69:8d:f8:3e:
                    d4:96:c4:d0:83:19:b6:cf:bf:19:b3:be:57:89:6d:
                    94:50:f1:52:5d:90:55:e7:e0:f4:19:ee:e9:32:22:
                    7b:1b:12:3f:d8:fd:5d:74:db:d6:c8:c5:5f:81:ae:
                    f8:51:71:6e:ad:b3:cb:d5:35:26:9d:69:b8:d5:66:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D8:B0:9C:CA:83:2E:43:02:D3:A4:CB:35:74:63:58:D8:AD:7D:82
            X509v3 Authority Key Identifier:
                keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:e3:fd:49:46:6e:63:65:d4:c8:4c:b3:06:6c:ef:d0:0f:
         88:e0:e5:36:4a:26:52:34:7a:75:8c:6f:41:b1:4c:dc:3f:52:
         48:40:96:bc:17:2d:59:03:b1:3b:de:30:a0:c8:0c:eb:c0:f7:
         0d:c7:2c:1d:e4:a9:7b:a4:75:90:44:f7:2d:6b:c3:f3:d5:58:
         f9:27:7d:4c:29:ef:ab:46:04:05:92:af:6a:8a:e7:ed:1d:e3:
         16:cb:60:d1:33:ac:d9:86:41:95:46:85:ce:0d:70:72:31:8f:
         e1:dd:e1:00:86:45:cd:38:75:61:b6:a3:69:0d:00:51:f3:70:
         27:85:95:51:54:80:31:58:ca:6a:46:88:c3:8f:73:cc:c4:af:
         64:66:8f:70:96:8b:df:fc:39:88:26:85:83:61:9c:2b:47:2d:
         1a:f8:b1:53:e0:ac:62:76:e5:12:a9:5d:74:1b:eb:34:f4:83:
         68:20:77:2e:a4:15:7d:f5:de:a9:91:e9:8d:30:e6:52:df:a5:
         f9:89:d0:09:0a:1b:f0:af:92:54:16:3c:86:f8:4b:ef:c4:38:
         c0:78:8d:de:18:81:0a:bf:d2:a1:ea:35:f3:47:e3:2b:55:2c:
         49:5d:a4:40:30:15:5b:1a:c1:ff:05:9e:14:5c:52:f0:97:1c:
         9b:dd:e9:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5PyaylHS+n10to6guh4zgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl
M2I2NjAwHhcNMjUwODA1MDgwMDM4WhcNMjUwODA2MDgwMDM4WjAzMTEwLwYDVQQD
EyhjYmQ4YjA5Y2NhODMyZTQzMDJkM2E0Y2IzNTc0NjM1OGQ4YWQ3ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBxW290wFEwj1db9RKrGtehCQhA8
FawLrFJJP4Yt9UWb0HV6yDNyOF/fyZ/GWW8KDltr81nEwCisOzefTRyNOkx/WebN
4GgI+xbIKV/LybJdD4TtK3IlgoiYGnFsn633m8uhy80NluImoaaFf5Hq+CUIofot
leQ8++3GbfsElXC0ScSiTgRSfa6AGfNeeU6aZxO0rdQDyZgHqKdBfgmxMUU5OYBO
ijOnrFfodWQUtP1tAefSkKkYkxGtUZaMEWmN+D7UlsTQgxm2z78Zs75XiW2UUPFS
XZBV5+D0Ge7pMiJ7GxI/2P1ddNvWyMVfga74UXFurbPL1TUmnWm41WaFcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvYsJzKgy5DAtOkyzV0Y1jYrX2CMB8GA1UdIwQY
MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt
NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh
LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv/j/UlG
bmNl1MhMswZs79APiODlNkomUjR6dYxvQbFM3D9SSECWvBctWQOxO94woMgM68D3
DccsHeSpe6R1kET3LWvD89VY+Sd9TCnvq0YEBZKvaorn7R3jFstg0TOs2YZBlUaF
zg1wcjGP4d3hAIZFzTh1YbajaQ0AUfNwJ4WVUVSAMVjKakaIw49zzMSvZGaPcJaL
3/w5iCaFg2GcK0ctGvixU+CsYnblEqlddBvrNPSDaCB3LqQVffXeqZHpjTDmUt+l
+YnQCQob8K+SVBY8hvhL78Q4wHiN3hiBCr/Soeo180fjK1UsSV2kQDAVWxrB/wWe
FFxS8Jccm93plw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:13 2025 by rpki-client