Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          UozZyzx4g3kfHqMd3fH5h/8U1ZOR1c7YnrDr1yE3qoc=
Subject key identifier:   0A:C9:42:C8:E6:B0:49:AB:30:C5:62:5A:9B:08:32:2D:1D:FD:A9:2B
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       019873743F8069BAFF0768E20E5643E8CE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 05:00:54 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:54 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:54 +0000
Files and hashes:         1: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: SmvekQiCwxdEfJVtsTw9IRY57POCUUeVIrBVve4f0nw=)
                          2: zHPhmmLDGByafp8E3VT46VQbn28.roa (hash: +VxtcUh5QNApX1IKUuR65fYbpYpFCHnfMHhjgpFPsbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:3f:80:69:ba:ff:07:68:e2:0e:56:43:e8:ce:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Aug  4 05:00:54 2025 GMT
            Not After : Aug  5 05:00:54 2025 GMT
        Subject: CN=0ac942c8e6b049ab30c5625a9b08322d1dfda92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:07:ab:72:74:4e:00:d3:39:f8:dd:5e:29:
                    04:dd:89:6a:3e:7f:08:c7:4a:be:0d:68:9f:81:e9:
                    f9:a8:a3:71:7e:92:17:43:3c:73:1f:46:b4:d4:55:
                    56:3e:64:92:dc:cb:b8:8a:71:eb:2b:36:85:35:9d:
                    75:80:3d:15:c1:da:a1:12:c9:90:90:96:71:2b:e3:
                    24:09:fc:c6:76:9a:14:92:33:44:31:05:e1:19:1f:
                    03:15:3a:f0:58:3f:31:31:52:70:22:2f:ff:47:36:
                    eb:21:f8:c2:ff:24:5d:c1:7b:d6:72:89:96:99:f9:
                    27:85:99:8f:51:66:31:0c:73:54:31:0c:01:6e:5b:
                    fc:b9:23:bd:dd:ee:bd:6d:52:ce:df:08:e1:11:ef:
                    e0:f3:3b:01:e0:b6:7d:6d:91:40:84:f4:44:28:0d:
                    ef:93:99:03:95:55:c9:77:0f:a4:6f:e4:1b:62:4c:
                    dc:20:8d:ba:78:3b:b6:a0:e7:ad:38:ba:cc:a0:53:
                    20:f2:2f:74:43:0c:3c:ea:6d:0b:3e:de:9d:43:e6:
                    98:05:7c:72:72:6f:f0:73:4b:3f:5b:4a:43:70:1e:
                    35:b4:d8:ec:c1:8e:91:84:dd:2a:a4:54:b8:b5:a6:
                    11:7c:9c:e8:c4:61:4a:fe:e8:7f:93:f8:34:86:26:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C9:42:C8:E6:B0:49:AB:30:C5:62:5A:9B:08:32:2D:1D:FD:A9:2B
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:5a:c7:97:ee:55:08:bb:26:76:3c:31:47:1a:38:64:d7:
         57:e9:13:cf:75:12:cf:57:2f:0d:27:0a:91:38:77:9d:07:4b:
         82:56:07:42:0c:36:a4:ed:f8:f3:87:55:a6:9d:5b:ae:8d:90:
         7b:0a:60:5c:89:85:48:e8:13:0d:3d:13:81:36:98:3b:c1:38:
         e5:a7:85:5d:b7:b8:f7:e6:7e:de:7f:48:fe:77:45:6e:37:4a:
         18:0d:fc:25:55:34:8c:61:e7:b2:9b:c0:30:17:5b:5f:9c:7e:
         78:e4:75:fe:3b:67:93:3a:0d:9e:3e:13:42:cd:23:ff:b7:54:
         75:9d:9a:1d:c5:96:36:d3:7b:50:1f:9e:ce:f1:55:88:0f:e9:
         db:76:2e:33:3a:a9:6e:5a:43:2e:6f:e9:75:e9:80:bc:cc:1b:
         fd:76:c0:ad:39:02:bb:17:9b:7c:0a:ac:f7:92:df:35:a9:dc:
         3c:2e:b1:27:c6:dd:7b:4f:f0:bc:b5:55:db:38:a6:67:d2:64:
         f8:cd:71:fa:ee:89:33:a0:d1:d8:ed:95:a6:34:89:6a:3f:c1:
         38:82:cf:6e:bb:62:83:fc:b0:a0:4c:65:ed:88:9e:ce:cc:72:
         3f:39:b8:ee:a5:de:06:4e:68:1c:46:26:0a:5a:b2:d6:72:7f:
         af:49:8e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdD+Aabr/B2jiDlZD6M6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGM0OGQ5YWIxMGYwZTQyYTNkYzY3ZmJkMGY0Y2I4ZTQ0
Y2FiNjkwHhcNMjUwODA0MDUwMDU0WhcNMjUwODA1MDUwMDU0WjAzMTEwLwYDVQQD
EygwYWM5NDJjOGU2YjA0OWFiMzBjNTYyNWE5YjA4MzIyZDFkZmRhOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXYHq3J0TgDTOfjdXikE3YlqPn8I
x0q+DWifgen5qKNxfpIXQzxzH0a01FVWPmSS3Mu4inHrKzaFNZ11gD0VwdqhEsmQ
kJZxK+MkCfzGdpoUkjNEMQXhGR8DFTrwWD8xMVJwIi//RzbrIfjC/yRdwXvWcomW
mfknhZmPUWYxDHNUMQwBblv8uSO93e69bVLO3wjhEe/g8zsB4LZ9bZFAhPREKA3v
k5kDlVXJdw+kb+QbYkzcII26eDu2oOetOLrMoFMg8i90Qww86m0LPt6dQ+aYBXxy
cm/wc0s/W0pDcB41tNjswY6RhN0qpFS4taYRfJzoxGFK/uh/k/g0hiaLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArJQsjmsEmrMMViWpsIMi0d/akrMB8GA1UdIwQY
MBaAFO/cSNmrEPDkKj3Gf70PTLjkTKtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MDRmZWItYThiYy00YzU0LTkwYWMt
MDY2MGMxNmVmY2NlLzEvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MDRmZWItYThiYy00YzU0LTkwYWMtMDY2MGMxNmVmY2Nl
LzEvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWytax5fu
VQi7JnY8MUcaOGTXV+kTz3USz1cvDScKkTh3nQdLglYHQgw2pO3484dVpp1bro2Q
ewpgXImFSOgTDT0TgTaYO8E45aeFXbe49+Z+3n9I/ndFbjdKGA38JVU0jGHnspvA
MBdbX5x+eOR1/jtnkzoNnj4TQs0j/7dUdZ2aHcWWNtN7UB+ezvFViA/p23YuMzqp
blpDLm/pdemAvMwb/XbArTkCuxebfAqs95LfNancPC6xJ8bde0/wvLVV2zimZ9Jk
+M1x+u6JM6DR2O2VpjSJaj/BOILPbrtig/ywoExl7YiezsxyPzm47qXeBk5oHEYm
Clqy1nJ/r0mOOA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:14 2025 by rpki-client