Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          zKYm6+jUPFNH0dLIXhKRCMFbzojezi058N7ULUM7lPo=
Subject key identifier:   66:9F:70:C8:51:39:1C:F6:58:E6:63:36:45:44:D2:AA:B9:AF:DE:55
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       01989448935312F0D5591641B5EDDD0500DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          1634
Signing time:             Sun 10 Aug 2025 14:00:40 +0000
Manifest this update:     Sun 10 Aug 2025 14:00:40 +0000
Manifest next update:     Mon 11 Aug 2025 14:00:40 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: kdSnP0kAeiBpUlksKNWfeXiJCrmWriLjALRnCazK3b8=)
                          2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=)
                          3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=)
                          4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:48:93:53:12:f0:d5:59:16:41:b5:ed:dd:05:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Aug 10 14:00:40 2025 GMT
            Not After : Aug 11 14:00:40 2025 GMT
        Subject: CN=669f70c851391cf658e663364544d2aab9afde55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:4f:cc:21:4e:be:1b:a0:ed:a8:a0:5e:fe:
                    cd:81:f3:73:32:72:2b:31:97:08:b2:15:cb:16:84:
                    80:77:8a:1d:9d:ce:a2:48:ac:f0:c6:55:34:ca:ca:
                    d4:a7:c2:cb:e4:4c:8c:90:68:38:69:92:6a:01:f9:
                    a2:67:6c:02:5a:36:b5:3f:6a:a0:05:c4:4e:68:56:
                    76:83:6e:21:fc:b0:b5:60:58:1a:8e:b7:8d:2f:8c:
                    77:79:63:4d:a2:a9:91:a2:be:25:e9:b6:01:9a:45:
                    31:bf:59:5d:66:db:2a:d7:27:30:7a:d3:91:5a:5b:
                    c4:a9:cd:43:45:44:85:b5:6d:22:40:30:71:8d:14:
                    d2:7d:24:0c:41:62:f2:08:84:c5:72:c7:56:1d:1f:
                    19:9a:74:cb:9e:c5:80:d4:39:3d:7f:b0:71:23:47:
                    fc:c4:01:fc:bc:c4:66:5f:87:e8:9c:ad:f5:84:f2:
                    d6:5e:89:41:7c:b2:ca:95:00:f3:a1:b2:25:c4:63:
                    c2:a1:20:d8:e8:e0:67:bc:3e:bf:91:cc:3a:fa:fd:
                    06:72:b6:e8:ce:a0:80:93:cb:73:9a:ac:4e:4c:78:
                    88:61:58:bf:03:04:33:c5:f4:5a:b9:6e:41:80:9d:
                    03:05:45:dd:78:03:ce:54:1f:3b:89:00:1d:b0:58:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9F:70:C8:51:39:1C:F6:58:E6:63:36:45:44:D2:AA:B9:AF:DE:55
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:07:af:3e:5f:37:d1:3a:67:15:e1:7c:2f:54:6a:30:f1:
         88:55:3d:80:76:ec:27:34:db:ae:e5:b8:f8:29:ec:c0:41:00:
         24:5f:32:75:40:25:d8:8e:7a:6b:c7:9f:97:4a:c9:06:7a:ac:
         60:2f:6b:db:21:f8:f1:81:56:f4:0d:6f:f6:61:c3:e0:09:67:
         e0:31:73:93:f4:70:5f:48:a7:ef:61:3f:00:16:de:95:61:61:
         42:d3:8f:60:55:4a:a3:9a:0f:b3:f1:90:cb:86:30:9b:9d:1a:
         a5:77:c3:84:33:23:33:ee:36:28:99:0d:2a:04:13:db:93:8e:
         20:c1:a1:09:1a:af:eb:8a:37:3d:94:16:74:cd:4d:b5:0e:bc:
         a6:6a:7e:31:c7:19:44:3d:b3:c1:96:36:51:a9:6f:88:dc:63:
         a7:03:fa:05:d4:31:94:5f:26:ed:98:9f:5b:dd:7e:b5:42:45:
         9f:52:c6:a0:47:8e:75:e8:39:a4:8f:f2:95:ee:84:17:e3:f3:
         54:58:bb:51:a7:b3:3e:f2:5d:b9:ec:8a:07:5c:89:94:6c:01:
         8f:0f:37:14:e0:dc:a2:15:63:29:37:02:9f:27:78:fc:13:41:
         e3:1f:e6:6f:13:d2:48:7c:39:1e:48:38:5b:85:bc:5c:f0:2a:
         db:58:98:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUSJNTEvDVWRZBte3dBQDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3
MjFlNTUwHhcNMjUwODEwMTQwMDQwWhcNMjUwODExMTQwMDQwWjAzMTEwLwYDVQQD
Eyg2NjlmNzBjODUxMzkxY2Y2NThlNjYzMzY0NTQ0ZDJhYWI5YWZkZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyehPzCFOvhug7aigXv7NgfNzMnIr
MZcIshXLFoSAd4odnc6iSKzwxlU0ysrUp8LL5EyMkGg4aZJqAfmiZ2wCWja1P2qg
BcROaFZ2g24h/LC1YFgajreNL4x3eWNNoqmRor4l6bYBmkUxv1ldZtsq1ycwetOR
WlvEqc1DRUSFtW0iQDBxjRTSfSQMQWLyCITFcsdWHR8ZmnTLnsWA1Dk9f7BxI0f8
xAH8vMRmX4fonK31hPLWXolBfLLKlQDzobIlxGPCoSDY6OBnvD6/kcw6+v0Gcrbo
zqCAk8tzmqxOTHiIYVi/AwQzxfRauW5BgJ0DBUXdeAPOVB87iQAdsFjBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGafcMhRORz2WOZjNkVE0qq5r95VMB8GA1UdIwQY
MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt
NmQ2NTVjZDk0NDY4LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4
LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFT4Hrz5f
N9E6ZxXhfC9UajDxiFU9gHbsJzTbruW4+CnswEEAJF8ydUAl2I56a8efl0rJBnqs
YC9r2yH48YFW9A1v9mHD4Aln4DFzk/RwX0in72E/ABbelWFhQtOPYFVKo5oPs/GQ
y4Ywm50apXfDhDMjM+42KJkNKgQT25OOIMGhCRqv64o3PZQWdM1NtQ68pmp+MccZ
RD2zwZY2UalviNxjpwP6BdQxlF8m7ZifW91+tUJFn1LGoEeOdeg5pI/yle6EF+Pz
VFi7UaezPvJdueyKB1yJlGwBjw83FODcohVjKTcCnyd4/BNB4x/mbxPSSHw5Hkg4
W4W8XPAq21iYzw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:10 2025 by rpki-client