Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File:                     iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier:          +Uf91qU46dTUNgWwhXXpeAiWX0RaRj0XBzYoXHZTyIk=
Subject key identifier:   89:0D:4F:22:BC:6D:7E:45:FC:BE:EE:A9:6F:5C:2D:C5:E6:12:C6:27
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer:       /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial:       01988242A32DDFFFEEB306159C83A548FDC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number:          15B4
Signing time:             Thu 07 Aug 2025 02:01:01 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:01 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:01 +0000
Files and hashes:         1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: iaRE2EHp4yN9IaXAg2ahFAcr0sWFhHibD10WjSlr6E8=)
                          2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:a3:2d:df:ff:ee:b3:06:15:9c:83:a5:48:fd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
        Validity
            Not Before: Aug  7 02:01:01 2025 GMT
            Not After : Aug  8 02:01:01 2025 GMT
        Subject: CN=890d4f22bc6d7e45fcbeeea96f5c2dc5e612c627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:d2:70:4d:ef:06:a9:32:bd:1c:65:3e:cb:
                    88:90:bf:1c:14:c9:20:e0:0d:b9:ab:5f:39:9c:ef:
                    3a:b0:da:1a:79:74:00:f0:9a:40:ba:b6:f3:8a:7a:
                    2c:fd:d9:b3:62:a5:15:a4:df:b6:7e:c5:3e:a5:7e:
                    98:e5:eb:1d:97:27:d1:d4:0f:d1:0d:6e:72:07:38:
                    5c:0c:d6:1d:da:77:23:17:0a:83:5d:27:d1:ca:32:
                    0f:a2:63:58:78:ef:08:e1:8f:8d:88:5f:a0:af:81:
                    a3:cf:a1:b2:56:a6:fc:88:1a:c3:ab:73:59:fa:82:
                    05:eb:85:06:19:20:bb:3c:1d:d1:8e:f0:2c:a2:c8:
                    a7:ba:15:d6:67:79:61:04:0a:27:73:6d:f5:05:de:
                    0b:94:d3:03:a9:89:88:c1:40:e8:c5:7e:56:12:37:
                    5d:de:67:d2:b5:83:ce:81:55:77:11:e7:fc:f1:ef:
                    e9:42:58:10:dd:01:51:22:ad:61:1e:bf:4b:9f:bb:
                    e6:ce:91:fe:b9:d1:28:6d:56:cc:ae:4a:c0:ba:41:
                    0b:f7:ee:72:f3:f6:7a:07:df:d1:f0:9f:2b:b1:01:
                    b5:8e:11:6d:5e:0a:c2:48:2b:7e:5e:52:4f:8c:84:
                    af:ed:92:d2:6b:4a:7c:8b:41:11:fe:e4:20:15:1c:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0D:4F:22:BC:6D:7E:45:FC:BE:EE:A9:6F:5C:2D:C5:E6:12:C6:27
            X509v3 Authority Key Identifier:
                keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:92:f1:48:66:d5:be:e5:65:c5:21:fc:eb:6d:85:4c:99:7d:
         ac:7c:42:ba:8f:7c:28:4c:4c:0b:8c:57:e5:70:b7:56:d4:ad:
         5b:6c:4b:b6:ba:69:c2:d4:82:c7:d6:45:35:17:83:34:4b:1c:
         a4:e7:3d:a6:24:46:b7:bd:63:ae:c4:81:b6:42:ee:32:e9:ee:
         6e:37:3a:a2:73:5b:83:05:73:8d:1b:74:63:b4:e3:65:4c:6a:
         60:70:c1:ec:59:3c:69:fc:a2:7b:19:cf:f8:2d:00:da:a0:fe:
         1c:ec:79:2f:65:4a:f6:c3:c2:69:90:17:48:aa:23:51:e0:b4:
         f6:43:fb:2b:07:21:d9:98:31:86:b0:38:25:0c:35:e4:9b:e5:
         8b:ca:83:67:44:d0:ff:00:7a:13:6b:bd:35:ca:6c:cd:aa:14:
         41:b4:a0:b2:ef:bf:fc:1a:27:7c:9f:eb:34:33:6a:4f:db:5c:
         5b:ec:4b:3d:23:80:a6:b2:c1:43:df:39:d7:ba:3a:8f:1b:bd:
         2c:2d:2a:ea:58:bb:c1:e4:92:03:41:4d:f5:0b:e4:2b:0f:b8:
         39:c5:63:61:50:24:19:db:17:5a:eb:ed:99:1a:ef:7d:3c:d5:
         2c:13:11:c4:06:82:2c:02:49:9f:a1:fc:f0:65:99:4d:79:c1:
         7a:d9:f2:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQqMt3//uswYVnIOlSP3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5
NjlkZDUwHhcNMjUwODA3MDIwMTAxWhcNMjUwODA4MDIwMTAxWjAzMTEwLwYDVQQD
Eyg4OTBkNGYyMmJjNmQ3ZTQ1ZmNiZWVlYTk2ZjVjMmRjNWU2MTJjNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudTScE3vBqkyvRxlPsuIkL8cFMkg
4A25q185nO86sNoaeXQA8JpAurbzinos/dmzYqUVpN+2fsU+pX6Y5esdlyfR1A/R
DW5yBzhcDNYd2ncjFwqDXSfRyjIPomNYeO8I4Y+NiF+gr4Gjz6GyVqb8iBrDq3NZ
+oIF64UGGSC7PB3RjvAsosinuhXWZ3lhBAonc231Bd4LlNMDqYmIwUDoxX5WEjdd
3mfStYPOgVV3Eef88e/pQlgQ3QFRIq1hHr9Ln7vmzpH+udEobVbMrkrAukEL9+5y
8/Z6B9/R8J8rsQG1jhFtXgrCSCt+XlJPjISv7ZLSa0p8i0ER/uQgFRz72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkNTyK8bX5F/L7uqW9cLcXmEsYnMB8GA1UdIwQY
MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt
OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm
LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJLxSGbV
vuVlxSH8622FTJl9rHxCuo98KExMC4xX5XC3VtStW2xLtrppwtSCx9ZFNReDNEsc
pOc9piRGt71jrsSBtkLuMunubjc6onNbgwVzjRt0Y7TjZUxqYHDB7Fk8afyiexnP
+C0A2qD+HOx5L2VK9sPCaZAXSKojUeC09kP7Kwch2ZgxhrA4JQw15Jvli8qDZ0TQ
/wB6E2u9NcpszaoUQbSgsu+//BonfJ/rNDNqT9tcW+xLPSOAprLBQ98517o6jxu9
LC0q6li7weSSA0FN9QvkKw+4OcVjYVAkGdsXWuvtmRrvfTzVLBMRxAaCLAJJn6H8
8GWZTXnBetnyew==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:16 2025 by rpki-client