Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          QzX6svfulbMtNLiV6NW+Ey9Z7agoXTrGQDzpbV5WcNM=
Subject key identifier:   37:EC:F8:71:65:98:05:F9:C5:2B:4D:A0:BE:EB:10:3F:79:79:78:1A
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       019873E2F45181A116BB47023D72246CF5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          119F
Signing time:             Mon 04 Aug 2025 07:01:50 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:50 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:50 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: Ym9GIiVWlPVGhDDUrbPUkmb9wRVdbNsq3uIPhAZMIys=)
                          2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:f4:51:81:a1:16:bb:47:02:3d:72:24:6c:f5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: Aug  4 07:01:50 2025 GMT
            Not After : Aug  5 07:01:50 2025 GMT
        Subject: CN=37ecf871659805f9c52b4da0beeb103f7979781a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:ac:fc:00:3e:a7:14:08:fc:11:74:b6:df:
                    5c:00:a1:b2:7d:b0:fb:02:6f:15:64:e2:65:37:ef:
                    88:18:36:1d:d3:5e:62:df:92:65:fe:4d:78:a9:25:
                    4e:da:fb:30:ce:c8:7b:1b:15:2a:8b:e7:0c:ee:bc:
                    ff:dd:cb:62:b5:da:00:79:a7:48:54:27:52:c8:91:
                    fd:0e:84:a8:89:73:92:6c:22:d0:3d:dd:d1:78:5d:
                    33:1f:db:a7:25:6d:5a:b1:8a:8f:68:0a:45:4b:11:
                    af:25:ef:85:77:2d:18:82:1a:6c:9b:93:0a:d8:2d:
                    96:68:0d:71:10:20:20:74:d5:63:d6:37:22:f7:b3:
                    4b:ba:f1:5b:9c:15:ac:73:be:4f:93:5c:f2:3f:fb:
                    6d:7d:b3:93:f7:2a:a6:22:9a:58:19:2c:55:27:c1:
                    e2:e1:68:7e:68:e4:85:3f:c3:36:e7:87:de:02:bc:
                    19:7c:8e:4f:db:0c:ab:f4:08:de:22:09:8f:6e:0e:
                    f2:cd:04:11:21:dc:b1:95:c8:2a:05:a9:29:f7:fd:
                    1b:e9:b9:92:92:4d:a0:b1:fd:64:eb:ac:6c:92:ea:
                    09:28:4b:21:f0:2b:ed:a7:32:06:70:01:95:28:47:
                    f2:cc:bf:fc:8c:90:2e:75:70:dd:45:c1:89:ba:9e:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:F8:71:65:98:05:F9:C5:2B:4D:A0:BE:EB:10:3F:79:79:78:1A
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:04:a1:fa:2b:27:d4:37:5b:dd:0b:46:36:06:04:85:71:5a:
         59:6c:ef:39:91:4d:ff:c3:84:ea:39:53:f0:95:df:b5:5f:cc:
         4e:f0:d8:05:c2:28:7c:8d:53:67:75:d7:a0:5b:3e:80:3d:b9:
         92:71:de:34:2e:b5:7a:60:aa:3d:13:06:03:4c:75:78:7b:ab:
         f6:7e:f3:23:53:a2:94:c1:d6:4e:f0:7e:1f:dc:70:87:07:8c:
         a7:e6:a5:ef:08:2d:c2:de:1c:14:ad:d5:d5:cd:56:30:bd:5b:
         77:35:d0:cd:93:3d:14:fb:d5:ab:2e:94:30:1c:e4:cb:a2:42:
         f4:a3:72:82:20:28:00:df:2a:cf:f5:02:b5:f7:81:e4:e0:93:
         5c:06:3b:33:53:fb:1c:04:61:b5:15:3b:d6:44:da:a7:cc:46:
         ff:d0:fb:bf:79:0f:2b:00:48:1b:d9:72:69:04:4f:a2:b6:f0:
         d3:4a:dd:f5:81:bc:4b:91:ad:89:f9:e0:73:06:4e:86:fd:fd:
         c1:24:57:4f:f7:80:e9:ef:53:d8:6b:1d:79:04:cf:eb:cd:6f:
         c3:70:41:6b:c2:6c:6e:63:6c:fa:22:c0:75:39:f7:04:be:80:
         a5:80:b4:fe:4d:2e:be:b4:24:85:d3:91:75:c2:11:65:8d:07:
         cb:35:44:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4vRRgaEWu0cCPXIkbPXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1
ODQwN2EwHhcNMjUwODA0MDcwMTUwWhcNMjUwODA1MDcwMTUwWjAzMTEwLwYDVQQD
EygzN2VjZjg3MTY1OTgwNWY5YzUyYjRkYTBiZWViMTAzZjc5Nzk3ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bKs/AA+pxQI/BF0tt9cAKGyfbD7
Am8VZOJlN++IGDYd015i35Jl/k14qSVO2vswzsh7GxUqi+cM7rz/3ctitdoAeadI
VCdSyJH9DoSoiXOSbCLQPd3ReF0zH9unJW1asYqPaApFSxGvJe+Fdy0Yghpsm5MK
2C2WaA1xECAgdNVj1jci97NLuvFbnBWsc75Pk1zyP/ttfbOT9yqmIppYGSxVJ8Hi
4Wh+aOSFP8M254feArwZfI5P2wyr9AjeIgmPbg7yzQQRIdyxlcgqBakp9/0b6bmS
kk2gsf1k66xskuoJKEsh8CvtpzIGcAGVKEfyzL/8jJAudXDdRcGJup7agQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfs+HFlmAX5xStNoL7rED95eXgaMB8GA1UdIwQY
MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt
OGM0OTgwNzc1NzhmLzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm
LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwSh+isn
1Ddb3QtGNgYEhXFaWWzvOZFN/8OE6jlT8JXftV/MTvDYBcIofI1TZ3XXoFs+gD25
knHeNC61emCqPRMGA0x1eHur9n7zI1OilMHWTvB+H9xwhweMp+al7wgtwt4cFK3V
1c1WML1bdzXQzZM9FPvVqy6UMBzky6JC9KNygiAoAN8qz/UCtfeB5OCTXAY7M1P7
HARhtRU71kTap8xG/9D7v3kPKwBIG9lyaQRPorbw00rd9YG8S5GtifngcwZOhv39
wSRXT/eA6e9T2GsdeQTP681vw3BBa8JsbmNs+iLAdTn3BL6ApYC0/k0uvrQkhdOR
dcIRZY0HyzVEPA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:52 2025 by rpki-client