Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
File:                     F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json)
Hash identifier:          B5WzCaMjeSznuBmq28LgmMS069N/6ybh5/Y5nYMuOo0=
Subject key identifier:   D5:16:12:EB:9D:07:D7:F8:28:9E:AA:4B:66:A5:C7:0E:6F:0F:DF:BB
Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36
Certificate issuer:       /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
Certificate serial:       01988F59EC4DA53AD6A9CB4FB8655391C614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 15:01:31 +0000
Manifest this update:     Sat 09 Aug 2025 15:01:31 +0000
Manifest next update:     Sun 10 Aug 2025 15:01:31 +0000
Files and hashes:         1: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: YEX25F60K9tZq9EB/ViaP/gwRKOv7hF0GI0PTr+Bgvk=)
                          2: _66GUATo4F62e-zSRdrY5Scw7vI.roa (hash: fGRThmRK99/VwtLpaDe06S96FPLhmaswQib9OqrGAEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:59:ec:4d:a5:3a:d6:a9:cb:4f:b8:65:53:91:c6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36
        Validity
            Not Before: Aug  9 15:01:31 2025 GMT
            Not After : Aug 10 15:01:31 2025 GMT
        Subject: CN=d51612eb9d07d7f8289eaa4b66a5c70e6f0fdfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:02:2c:e8:2b:60:3e:5f:09:e9:d8:81:ff:
                    d7:b2:17:b0:2f:d9:c2:49:c2:6d:27:4c:71:3f:d8:
                    ed:be:a7:d6:bb:f7:cb:98:09:64:99:d4:89:73:e6:
                    85:73:3c:6c:05:44:db:ad:ea:a7:cf:d1:15:f7:14:
                    e5:f0:1e:2f:e9:c7:c9:71:48:3a:37:2d:e9:7e:ab:
                    f1:18:87:22:11:1f:ce:fd:37:31:4a:5e:78:a8:9b:
                    73:f5:06:45:fa:12:aa:f5:57:47:3f:8f:9d:84:33:
                    38:19:61:e1:10:d2:6f:bb:2f:6d:58:de:fb:1b:f3:
                    54:1d:69:e1:4a:97:51:4d:e8:37:3d:2f:19:93:0b:
                    c5:ce:c5:ca:f7:74:93:aa:84:00:64:42:d0:08:57:
                    27:ee:7b:db:f0:b3:e1:77:b8:b0:2b:10:f9:02:44:
                    8c:f6:98:24:e7:b8:14:d0:61:ae:b5:7c:1d:d5:f5:
                    7a:76:13:a9:9e:8f:5e:a3:b3:bb:b1:d6:f4:db:61:
                    4b:2d:2f:76:dc:57:d2:44:23:32:e9:37:59:b7:71:
                    42:c3:6e:43:e7:0f:9f:2b:38:15:a4:84:9e:84:3b:
                    bb:13:db:0f:8b:cf:8a:c4:6e:09:b9:ed:69:68:3e:
                    51:c2:b9:56:65:54:86:77:27:68:dd:04:68:89:4d:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:16:12:EB:9D:07:D7:F8:28:9E:AA:4B:66:A5:C7:0E:6F:0F:DF:BB
            X509v3 Authority Key Identifier:
                keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d9:98:69:94:06:fd:9f:a5:84:f1:91:ed:03:c5:f2:d3:b3:
         7a:31:13:1d:e0:36:29:94:2a:bd:10:19:50:96:94:0d:2d:18:
         3a:bb:44:99:59:08:cf:62:47:db:0a:8d:01:e6:e1:0d:c4:3f:
         ed:88:a8:10:fb:86:0d:9c:ff:35:03:8b:15:5e:ec:d6:a6:70:
         6d:4e:42:10:6c:53:8d:99:8d:c4:99:2c:14:b9:35:a2:80:82:
         8a:6d:e6:b4:df:fb:07:58:4b:cf:33:51:7f:1b:c0:87:7d:d5:
         1f:12:11:55:f5:fd:25:5c:2e:4e:0b:4b:e7:ea:82:a9:9e:b0:
         16:19:56:63:b4:2b:79:da:32:2c:a8:91:f8:ad:03:a1:7e:d6:
         0f:e7:78:d1:4c:a5:36:f7:a5:fe:9d:18:21:1a:cd:6a:e5:58:
         32:2f:c9:c9:21:02:b8:0a:0e:9c:49:10:21:7f:a1:72:d2:03:
         34:49:34:99:08:e7:a6:42:7e:c6:6b:bb:bb:b8:25:a7:98:9a:
         d8:f9:cd:66:72:d7:77:b6:1f:35:2a:e0:af:5c:96:f8:08:db:
         3a:1c:19:f5:25:03:b0:0c:0a:82:02:94:75:72:42:9b:c8:08:
         dd:cd:57:c4:88:75:cd:1d:da:88:b3:bb:ef:9e:0d:f4:de:47:
         64:8e:37:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPWexNpTrWqctPuGVTkcYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWY2ZTFlYmI4MzE5MzVjODQyMmM5NzJiY2FiMmU1NmQx
ZDllMzYwHhcNMjUwODA5MTUwMTMxWhcNMjUwODEwMTUwMTMxWjAzMTEwLwYDVQQD
EyhkNTE2MTJlYjlkMDdkN2Y4Mjg5ZWFhNGI2NmE1YzcwZTZmMGZkZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VoCLOgrYD5fCenYgf/XshewL9nC
ScJtJ0xxP9jtvqfWu/fLmAlkmdSJc+aFczxsBUTbreqnz9EV9xTl8B4v6cfJcUg6
Ny3pfqvxGIciER/O/TcxSl54qJtz9QZF+hKq9VdHP4+dhDM4GWHhENJvuy9tWN77
G/NUHWnhSpdRTeg3PS8ZkwvFzsXK93STqoQAZELQCFcn7nvb8LPhd7iwKxD5AkSM
9pgk57gU0GGutXwd1fV6dhOpno9eo7O7sdb022FLLS923FfSRCMy6TdZt3FCw25D
5w+fKzgVpISehDu7E9sPi8+KxG4Jue1paD5RwrlWZVSGdydo3QRoiU3inwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUWEuudB9f4KJ6qS2alxw5vD9+7MB8GA1UdIwQY
MBaAFBdfbh67gxk1yEIslyvKsuVtHZ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQt
MDI4NWMxNWZjNTFlLzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQtMDI4NWMxNWZjNTFl
LzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNmYaZQG
/Z+lhPGR7QPF8tOzejETHeA2KZQqvRAZUJaUDS0YOrtEmVkIz2JH2wqNAebhDcQ/
7YioEPuGDZz/NQOLFV7s1qZwbU5CEGxTjZmNxJksFLk1ooCCim3mtN/7B1hLzzNR
fxvAh33VHxIRVfX9JVwuTgtL5+qCqZ6wFhlWY7QredoyLKiR+K0DoX7WD+d40Uyl
Nvel/p0YIRrNauVYMi/JySECuAoOnEkQIX+hctIDNEk0mQjnpkJ+xmu7u7glp5ia
2PnNZnLXd7YfNSrgr1yW+AjbOhwZ9SUDsAwKggKUdXJCm8gI3c1XxIh1zR3aiLO7
754N9N5HZI43WQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:41 2025 by rpki-client