Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          MUPip5AUponSFu0FuHb5mUko80aCDLBZKllFrpg0pzY=
Subject key identifier:   E6:78:D5:50:27:B8:A2:63:71:E3:D3:F7:A8:44:2C:9A:AF:7E:C8:ED
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       01988167941CE4446292573252CC18F49D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1633
Signing time:             Wed 06 Aug 2025 22:01:45 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:45 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:45 +0000
Files and hashes:         1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
                          2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
                          3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
                          4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
                          5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: O1dDEfSUzZ6mHkdfLf0caOSUCTFmW7edq/nbvtuOuhI=)
                          7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:94:1c:e4:44:62:92:57:32:52:cc:18:f4:9d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Aug  6 22:01:45 2025 GMT
            Not After : Aug  7 22:01:45 2025 GMT
        Subject: CN=e678d55027b8a26371e3d3f7a8442c9aaf7ec8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:d4:9a:5b:b4:de:ac:bf:f9:43:77:40:53:
                    c7:4e:67:38:42:31:f7:7a:ee:8d:2a:ec:3c:09:78:
                    8a:58:29:25:7c:7e:90:b8:f4:0b:43:a0:4c:f1:0e:
                    4c:20:0f:34:99:3c:8c:84:69:b1:44:6a:5a:7c:e6:
                    da:83:3d:4c:e9:d4:6d:43:13:cf:aa:c7:d6:30:63:
                    93:28:9e:19:54:57:23:ec:4b:9d:8f:09:d0:a6:84:
                    ac:8f:cd:2e:00:dd:0f:b8:98:a8:7e:99:65:27:59:
                    d5:57:66:a4:2f:d9:18:f8:c5:2b:77:7e:80:7b:8c:
                    29:82:d9:2d:0d:ac:56:fa:1e:45:51:90:79:18:09:
                    c2:fa:64:a0:30:f0:e5:9e:4b:2a:d5:3f:03:b0:13:
                    24:3e:08:ea:8d:22:8d:4c:26:22:fc:03:06:40:51:
                    30:1c:fb:44:0e:67:da:8c:98:70:1a:74:59:8d:ed:
                    ce:30:6a:4c:2c:d1:f7:2a:58:9b:58:df:b3:d1:21:
                    1b:68:dc:d9:41:99:6a:dc:4e:31:c8:82:c7:ad:4d:
                    ec:97:cf:0d:7a:a7:03:8c:21:6d:21:54:92:e2:23:
                    26:eb:d9:fe:a1:23:48:b0:6d:86:4d:d4:0f:ae:e9:
                    48:d4:18:a3:73:8e:ed:3f:81:9d:ca:fc:f6:40:ee:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:78:D5:50:27:B8:A2:63:71:E3:D3:F7:A8:44:2C:9A:AF:7E:C8:ED
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d8:1f:16:fa:0f:8c:30:3d:46:40:42:42:a5:39:a4:27:27:
         9e:d4:ad:6c:ea:17:d2:60:b2:35:81:06:35:3d:0a:52:7c:01:
         32:6f:f6:39:34:01:39:df:a7:53:7a:0e:0e:4f:1d:8f:fb:8b:
         d2:27:36:3f:40:0c:db:6f:fe:3b:7c:de:fc:f0:d9:12:7a:e2:
         5d:b6:37:b0:4c:a0:2c:10:15:94:43:b1:03:a7:9c:9d:a0:f2:
         d8:30:ce:2d:28:ff:06:da:4e:23:f7:83:7c:8a:7d:fc:1a:50:
         4f:fb:d5:5d:91:42:aa:4a:a5:ed:79:d9:9c:01:fa:fd:f3:b9:
         e7:d1:c5:cf:3a:8e:fe:86:70:b1:82:bb:04:22:6d:75:3d:3b:
         63:0e:62:ad:3e:84:52:be:1e:b3:7d:7b:9c:ff:35:24:5a:56:
         5f:53:41:87:72:65:9e:16:2e:0d:5b:a2:77:28:af:56:29:03:
         02:cc:ba:82:bb:1c:0f:00:5a:05:5c:b4:f9:b9:51:0c:90:36:
         6e:b0:1a:54:76:8d:b5:1e:9e:6f:0e:22:36:5e:9d:84:19:54:
         56:ce:d9:ca:86:dd:be:4b:9d:77:2b:e8:a9:07:a7:28:36:f3:
         50:60:e3:fe:cd:97:92:1a:ae:30:a7:5b:a9:67:4b:52:93:0e:
         b1:cd:e9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ5Qc5ERiklcyUswY9J03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjUwODA2MjIwMTQ1WhcNMjUwODA3MjIwMTQ1WjAzMTEwLwYDVQQD
EyhlNjc4ZDU1MDI3YjhhMjYzNzFlM2QzZjdhODQ0MmM5YWFmN2VjOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+rUmlu03qy/+UN3QFPHTmc4QjH3
eu6NKuw8CXiKWCklfH6QuPQLQ6BM8Q5MIA80mTyMhGmxRGpafObagz1M6dRtQxPP
qsfWMGOTKJ4ZVFcj7EudjwnQpoSsj80uAN0PuJiofpllJ1nVV2akL9kY+MUrd36A
e4wpgtktDaxW+h5FUZB5GAnC+mSgMPDlnksq1T8DsBMkPgjqjSKNTCYi/AMGQFEw
HPtEDmfajJhwGnRZje3OMGpMLNH3KlibWN+z0SEbaNzZQZlq3E4xyILHrU3sl88N
eqcDjCFtIVSS4iMm69n+oSNIsG2GTdQPrulI1Bijc47tP4Gdyvz2QO7lOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ41VAnuKJjcePT96hELJqvfsjtMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdgfFvoP
jDA9RkBCQqU5pCcnntStbOoX0mCyNYEGNT0KUnwBMm/2OTQBOd+nU3oODk8dj/uL
0ic2P0AM22/+O3ze/PDZEnriXbY3sEygLBAVlEOxA6ecnaDy2DDOLSj/BtpOI/eD
fIp9/BpQT/vVXZFCqkql7XnZnAH6/fO559HFzzqO/oZwsYK7BCJtdT07Yw5irT6E
Ur4es317nP81JFpWX1NBh3JlnhYuDVuidyivVikDAsy6grscDwBaBVy0+blRDJA2
brAaVHaNtR6ebw4iNl6dhBlUVs7ZyobdvkuddyvoqQenKDbzUGDj/s2XkhquMKdb
qWdLUpMOsc3pFg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:26:27 2025 by rpki-client