Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          F+5pyUJrsMivUzOMu/COZCXunuE7Vbv88u6LNBcCVLc=
Subject key identifier:   47:90:E7:80:BF:36:97:C6:89:B4:80:68:F5:E5:51:FA:D1:59:9B:98
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       01988D33BB15A3D90382698A8373A7A8099A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 05:00:34 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:34 +0000
Manifest next update:     Sun 10 Aug 2025 05:00:34 +0000
Files and hashes:         1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: LtttxbeZklakviD/guhXo1m89W0P8RY5/gSQz81WNQY=)
                          2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
                          3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
                          4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
                          5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:33:bb:15:a3:d9:03:82:69:8a:83:73:a7:a8:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Aug  9 05:00:34 2025 GMT
            Not After : Aug 10 05:00:34 2025 GMT
        Subject: CN=4790e780bf3697c689b48068f5e551fad1599b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:9d:16:df:5a:42:6c:44:47:57:08:88:84:
                    64:17:a9:d9:65:3e:76:15:55:e6:08:91:2c:1f:94:
                    96:dc:36:5b:88:98:d4:f4:e8:56:79:a9:63:4a:9c:
                    1d:8f:c7:f8:73:a6:04:62:49:e7:3b:a9:29:b1:62:
                    62:61:1b:0f:d2:54:00:67:80:28:ff:67:6f:32:68:
                    95:02:9c:b7:6e:ce:75:ce:07:10:83:30:b2:a0:5e:
                    5f:16:c6:8c:ad:54:34:d0:ad:ff:ad:8a:53:41:c4:
                    b9:3a:aa:07:e9:00:f4:a6:3c:59:f3:bc:06:5e:d9:
                    2f:03:82:e6:38:6d:cb:4b:58:6c:c7:10:b8:43:b4:
                    e9:33:9e:b8:76:5f:65:3b:73:6a:d6:bf:56:ef:3e:
                    05:17:ff:66:87:9f:21:6f:83:d8:9a:56:be:7d:da:
                    a6:12:17:b4:a8:52:7b:f5:72:bd:e6:63:e7:01:9f:
                    2f:cd:a8:6c:f8:61:4e:a8:59:aa:6f:56:dc:5a:e7:
                    54:a4:dd:7c:da:6c:47:e6:21:b7:d2:57:4f:77:6f:
                    d7:77:80:77:b2:20:13:75:f1:b8:25:36:2b:ba:e6:
                    e0:4a:45:cf:ec:46:fe:c5:eb:ce:2f:8d:a6:85:b9:
                    3a:7e:a1:c7:75:d7:06:d2:6d:81:79:ea:64:03:1e:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:E7:80:BF:36:97:C6:89:B4:80:68:F5:E5:51:FA:D1:59:9B:98
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:5a:15:90:3a:81:0c:36:45:8e:3f:2d:1b:0c:c6:3d:a8:
         05:e7:14:72:c1:60:b3:01:9f:45:04:2e:01:e0:e6:3c:ff:33:
         24:3e:e2:9b:98:6c:d8:c7:3c:84:54:f0:59:7b:1c:f8:df:b6:
         3d:95:73:44:93:06:16:e4:e5:f5:83:13:c7:84:21:d8:b6:43:
         8a:39:34:76:6f:cd:bf:f7:77:b2:66:dd:64:29:cd:d8:ae:6a:
         6e:2d:38:09:6c:fc:0c:bd:a1:ac:18:0a:d2:e1:4e:29:49:50:
         eb:9a:a8:ef:be:f0:a8:07:f5:54:4c:b8:b8:6e:a7:74:69:79:
         70:bb:3a:4b:4d:69:5d:59:de:99:bd:d0:02:73:bd:08:8f:74:
         9c:6d:39:05:57:6c:68:5a:64:65:ad:93:bb:79:73:a0:4b:b3:
         f3:cd:4c:53:1a:6a:e2:5b:69:66:b2:ae:08:6c:a6:44:5e:4e:
         cb:30:91:50:3b:94:98:07:1c:c8:de:c7:4e:53:eb:48:30:1d:
         e7:f9:25:da:6b:68:09:f8:ec:ec:8c:e4:42:6a:bc:d5:e3:db:
         9e:7c:fe:ad:7a:04:01:2e:aa:68:6b:c9:3f:94:5b:ad:ae:d3:
         f5:41:c1:a2:88:b5:00:f6:f2:91:a8:b5:f4:64:4d:db:83:ea:
         ad:77:24:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNM7sVo9kDgmmKg3OnqAmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2
N2VkMDIwHhcNMjUwODA5MDUwMDM0WhcNMjUwODEwMDUwMDM0WjAzMTEwLwYDVQQD
Eyg0NzkwZTc4MGJmMzY5N2M2ODliNDgwNjhmNWU1NTFmYWQxNTk5Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVmdFt9aQmxER1cIiIRkF6nZZT52
FVXmCJEsH5SW3DZbiJjU9OhWealjSpwdj8f4c6YEYknnO6kpsWJiYRsP0lQAZ4Ao
/2dvMmiVApy3bs51zgcQgzCyoF5fFsaMrVQ00K3/rYpTQcS5OqoH6QD0pjxZ87wG
XtkvA4LmOG3LS1hsxxC4Q7TpM564dl9lO3Nq1r9W7z4FF/9mh58hb4PYmla+fdqm
Ehe0qFJ79XK95mPnAZ8vzahs+GFOqFmqb1bcWudUpN182mxH5iG30ldPd2/Xd4B3
siATdfG4JTYruubgSkXP7Eb+xevOL42mhbk6fqHHddcG0m2BeepkAx6UMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeQ54C/NpfGibSAaPXlUfrRWZuYMB8GA1UdIwQY
MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP9aFZA6
gQw2RY4/LRsMxj2oBecUcsFgswGfRQQuAeDmPP8zJD7im5hs2Mc8hFTwWXsc+N+2
PZVzRJMGFuTl9YMTx4Qh2LZDijk0dm/Nv/d3smbdZCnN2K5qbi04CWz8DL2hrBgK
0uFOKUlQ65qo777wqAf1VEy4uG6ndGl5cLs6S01pXVnemb3QAnO9CI90nG05BVds
aFpkZa2Tu3lzoEuz881MUxpq4ltpZrKuCGymRF5OyzCRUDuUmAccyN7HTlPrSDAd
5/kl2mtoCfjs7IzkQmq81ePbnnz+rXoEAS6qaGvJP5Rbra7T9UHBooi1APbykai1
9GRN24PqrXckRw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:34 2025 by rpki-client