Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File:                     1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier:          Hm1+/FbqTMbPuHbydtHFACA1VLzWfkkaajK6WIP03Gk=
Subject key identifier:   39:58:E0:C2:4E:F4:90:02:66:13:D5:24:06:A9:89:43:FF:36:48:62
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer:       /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial:       01987298AD26A5B6EF00FFC1FE7606978EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number:          026A
Signing time:             Mon 04 Aug 2025 01:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:04 +0000
Files and hashes:         1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: Lsq7AB/UyL8fDofWFO5QqWibIGrNoUBTzRZlL7o9Nd0=)
                          2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:ad:26:a5:b6:ef:00:ff:c1:fe:76:06:97:8e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
        Validity
            Not Before: Aug  4 01:01:04 2025 GMT
            Not After : Aug  5 01:01:04 2025 GMT
        Subject: CN=3958e0c24ef490026613d52406a98943ff364862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:cd:bc:9e:8e:e6:9c:01:1e:29:7c:59:8b:
                    3b:57:ed:6c:60:d1:e3:8a:62:69:e3:b3:5d:b8:8f:
                    db:da:60:72:14:ac:a7:f1:ab:9e:ff:3f:a1:ca:93:
                    5a:35:5c:f4:fd:80:a1:0f:d4:7c:ef:9f:f1:5d:7e:
                    16:32:a8:d4:14:50:d3:24:52:a1:c2:22:bf:c5:47:
                    e7:af:78:2f:c9:0c:66:c2:37:a8:36:3a:af:aa:ea:
                    8f:e6:ca:55:0f:4d:d0:ef:55:66:b2:60:2c:bd:8e:
                    46:38:10:78:72:22:2b:41:8e:9d:cd:df:86:6c:8b:
                    1c:df:81:79:71:d1:65:16:07:65:fa:16:ef:29:17:
                    ba:14:7b:9d:cd:28:21:21:a1:51:9d:f7:63:e3:04:
                    d3:5e:6d:bc:9a:50:b0:40:93:87:66:76:a7:e7:a0:
                    c7:e2:30:70:c1:9e:24:f6:a2:6f:32:d4:61:2c:43:
                    54:e7:e1:60:e7:fb:0c:ca:8e:1b:fb:a6:6e:bc:a1:
                    76:ff:36:9a:54:5d:30:73:9d:ea:19:58:a7:e3:e8:
                    37:03:74:81:d6:5c:b0:8f:aa:c2:50:0b:17:f3:e5:
                    05:ff:61:55:56:0f:d9:96:c4:fc:8e:c3:77:33:f9:
                    41:fd:d3:d2:a7:d8:61:e6:d3:3f:71:2a:f1:b5:b3:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:E0:C2:4E:F4:90:02:66:13:D5:24:06:A9:89:43:FF:36:48:62
            X509v3 Authority Key Identifier:
                keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:23:2f:90:c3:c4:58:ad:65:3c:ce:37:49:36:1d:66:7d:
         c7:8f:e9:08:1d:17:07:b2:9a:04:3a:f2:82:e4:f8:6b:ba:3c:
         ee:7e:e6:d0:e1:ad:e6:1a:a2:a4:f4:bc:4a:ee:fb:02:24:72:
         a8:36:24:ec:bc:ff:72:9a:ff:a1:ee:cd:b0:69:7a:a6:d1:d1:
         4f:81:d5:03:d5:1b:f1:49:59:30:6b:f0:53:62:dd:a5:2b:26:
         9e:c2:53:ff:bf:e8:84:df:79:ca:97:5c:0d:38:40:11:64:94:
         19:a8:b2:1f:90:ca:d5:4f:5f:0d:42:ec:18:42:43:04:28:40:
         3f:61:55:0d:94:22:fc:1b:38:1b:c4:58:e2:cf:e2:8b:a5:81:
         47:2f:11:89:79:a0:4a:7a:40:89:a5:6d:df:41:48:e6:58:97:
         b3:42:06:31:8d:fd:d7:da:57:cc:8b:c2:02:99:c0:cd:85:3a:
         23:43:42:ae:c4:e4:72:89:25:20:77:f9:d3:6e:26:71:2e:46:
         31:37:14:46:26:07:ab:25:f2:43:e1:65:87:28:07:25:88:16:
         27:63:3a:e7:2a:2d:75:6e:32:74:5a:ee:a7:45:4a:12:f2:bb:
         32:54:80:46:50:4d:03:df:57:25:4d:3d:58:4c:c9:d7:81:67:
         5d:40:6a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymK0mpbbvAP/B/nYGl47BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGU0M2NkMWY4YWY0NWM2ODk4NjdkOWY1YTg4MWEyYWVj
MzRiMzEwHhcNMjUwODA0MDEwMTA0WhcNMjUwODA1MDEwMTA0WjAzMTEwLwYDVQQD
EygzOTU4ZTBjMjRlZjQ5MDAyNjYxM2Q1MjQwNmE5ODk0M2ZmMzY0ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjHNvJ6O5pwBHil8WYs7V+1sYNHj
imJp47NduI/b2mByFKyn8aue/z+hypNaNVz0/YChD9R875/xXX4WMqjUFFDTJFKh
wiK/xUfnr3gvyQxmwjeoNjqvquqP5spVD03Q71VmsmAsvY5GOBB4ciIrQY6dzd+G
bIsc34F5cdFlFgdl+hbvKRe6FHudzSghIaFRnfdj4wTTXm28mlCwQJOHZnan56DH
4jBwwZ4k9qJvMtRhLENU5+Fg5/sMyo4b+6ZuvKF2/zaaVF0wc53qGVin4+g3A3SB
1lywj6rCUAsX8+UF/2FVVg/ZlsT8jsN3M/lB/dPSp9hh5tM/cSrxtbPfaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlY4MJO9JACZhPVJAapiUP/NkhiMB8GA1UdIwQY
MBaAFNXeQ80fivRcaJhn2fWogaKuw0sxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYt
NGQwYTdlYzA3Nzg2LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYtNGQwYTdlYzA3Nzg2
LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorcjL5DD
xFitZTzON0k2HWZ9x4/pCB0XB7KaBDryguT4a7o87n7m0OGt5hqipPS8Su77AiRy
qDYk7Lz/cpr/oe7NsGl6ptHRT4HVA9Ub8UlZMGvwU2LdpSsmnsJT/7/ohN95ypdc
DThAEWSUGaiyH5DK1U9fDULsGEJDBChAP2FVDZQi/Bs4G8RY4s/ii6WBRy8RiXmg
SnpAiaVt30FI5liXs0IGMY3919pXzIvCApnAzYU6I0NCrsTkcoklIHf5024mcS5G
MTcURiYHqyXyQ+FlhygHJYgWJ2M65yotdW4ydFrup0VKEvK7MlSARlBNA99XJU09
WEzJ14FnXUBqeg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:14 2025 by rpki-client