Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          +09QWp7Mh5kmmrPnfaiOlpFoSES6CIiZddl7Rsu6thw=
Subject key identifier:   6D:1A:5C:D7:16:92:09:E5:6E:3C:BC:BD:C4:CC:CA:AA:2A:16:82:B2
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       01988B459DCE35040B26AD6FC2473CEDCA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0D73
Signing time:             Fri 08 Aug 2025 20:00:52 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:52 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:52 +0000
Files and hashes:         1: 36LgSmoTYXDGLabuVqpVL_HY_bo.roa (hash: jlUxcS1bmgVem5MV0QJTckeBjIjhWcwd8IXi6NlQXXM=)
                          2: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: kQtqON0mCmj1sYre0SKdhqMufhr5aXIZD9YGQ7k2Kmc=)
                          4: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          5: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:9d:ce:35:04:0b:26:ad:6f:c2:47:3c:ed:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Aug  8 20:00:52 2025 GMT
            Not After : Aug  9 20:00:52 2025 GMT
        Subject: CN=6d1a5cd7169209e56e3cbcbdc4cccaaa2a1682b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:46:c3:08:9e:4f:21:22:48:ff:f8:e0:fb:
                    a5:08:31:e1:51:35:3f:49:d8:cd:d3:2b:37:9a:7a:
                    26:fb:44:46:54:8c:fe:d5:e8:01:5d:0d:6d:b4:ea:
                    14:8e:6e:bf:85:13:68:a7:cf:b5:50:d6:2d:7c:bd:
                    9d:4b:f8:6a:5e:21:9d:17:b5:52:f1:c4:0e:5d:aa:
                    0c:8f:a2:a1:6a:f6:06:05:61:44:0d:b5:df:2f:3a:
                    94:7d:64:0b:7f:dd:04:e4:d6:a7:2e:62:2b:1a:73:
                    92:08:e0:93:3f:2b:f3:bb:7a:20:a6:24:c6:d2:ae:
                    54:d1:14:2e:55:33:74:7d:0e:64:69:2c:db:49:a5:
                    9d:1c:72:7f:e3:d9:af:a8:36:f5:8b:9f:99:e7:7f:
                    94:ae:b0:19:eb:ba:cb:16:07:b4:3d:e6:e3:e6:23:
                    7c:3d:2e:b7:2a:35:a2:a5:da:bb:64:ef:c4:e7:23:
                    44:71:ac:19:db:b5:80:68:2a:0a:9a:bb:f1:aa:06:
                    50:ee:19:3a:17:0a:09:48:f9:71:02:aa:58:81:49:
                    17:ec:02:68:83:de:b3:3c:20:f1:f1:21:dc:22:36:
                    44:e5:c6:21:94:fc:83:3f:71:8a:ba:11:ef:03:46:
                    6a:9b:19:a4:2f:85:c8:7b:69:c6:af:36:01:52:ee:
                    4c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:5C:D7:16:92:09:E5:6E:3C:BC:BD:C4:CC:CA:AA:2A:16:82:B2
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d9:fb:5e:b3:86:fa:fc:88:07:3e:c8:cc:59:e5:87:e8:8e:
         c2:e2:00:a0:67:8f:29:98:d5:e0:a1:96:d1:c2:80:ad:e7:b7:
         35:77:e8:08:23:7e:fc:e0:ab:96:f1:00:95:98:90:25:4a:db:
         08:e8:28:9b:8c:ff:dc:11:ab:14:19:6f:58:42:7c:c7:6f:23:
         c7:7d:ae:05:cc:ad:28:66:d8:94:30:cc:3a:18:69:d0:86:f3:
         df:72:bb:46:5c:1d:10:6e:37:c2:39:08:a7:a1:b9:7f:29:b1:
         e5:9c:a3:95:53:ac:ab:18:48:1c:e8:24:59:5e:0c:39:36:5e:
         a8:fd:af:37:c8:d7:70:1f:a1:08:74:2e:ab:b7:b7:3e:5e:39:
         f6:5c:49:79:51:d9:5d:0d:56:a0:7c:9c:ce:62:ea:a1:34:55:
         2a:0e:d8:8e:a0:4b:a1:8e:5e:07:81:3d:fc:6b:44:16:6d:16:
         83:e0:2f:59:d6:be:c4:07:41:b9:3b:b6:5e:15:61:d4:2b:b9:
         f9:5e:13:b6:08:e8:06:c4:4b:f5:75:a9:40:02:58:c8:54:9d:
         ca:a8:0e:c0:b5:86:b1:fe:61:0b:48:8d:4e:92:5c:e9:17:33:
         68:f0:b4:dd:78:a5:5f:ac:ef:7c:3a:17:53:1e:1b:08:9b:e8:
         3b:9d:50:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRZ3ONQQLJq1vwkc87cqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm
Y2VmODMwHhcNMjUwODA4MjAwMDUyWhcNMjUwODA5MjAwMDUyWjAzMTEwLwYDVQQD
Eyg2ZDFhNWNkNzE2OTIwOWU1NmUzY2JjYmRjNGNjY2FhYTJhMTY4MmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshdGwwieTyEiSP/44PulCDHhUTU/
SdjN0ys3mnom+0RGVIz+1egBXQ1ttOoUjm6/hRNop8+1UNYtfL2dS/hqXiGdF7VS
8cQOXaoMj6KhavYGBWFEDbXfLzqUfWQLf90E5NanLmIrGnOSCOCTPyvzu3ogpiTG
0q5U0RQuVTN0fQ5kaSzbSaWdHHJ/49mvqDb1i5+Z53+UrrAZ67rLFge0Pebj5iN8
PS63KjWipdq7ZO/E5yNEcawZ27WAaCoKmrvxqgZQ7hk6FwoJSPlxAqpYgUkX7AJo
g96zPCDx8SHcIjZE5cYhlPyDP3GKuhHvA0ZqmxmkL4XIe2nGrzYBUu5MuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0aXNcWkgnlbjy8vcTMyqoqFoKyMB8GA1UdIwQY
MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt
YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh
LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9n7XrOG
+vyIBz7IzFnlh+iOwuIAoGePKZjV4KGW0cKAree3NXfoCCN+/OCrlvEAlZiQJUrb
COgom4z/3BGrFBlvWEJ8x28jx32uBcytKGbYlDDMOhhp0Ibz33K7RlwdEG43wjkI
p6G5fymx5ZyjlVOsqxhIHOgkWV4MOTZeqP2vN8jXcB+hCHQuq7e3Pl459lxJeVHZ
XQ1WoHyczmLqoTRVKg7YjqBLoY5eB4E9/GtEFm0Wg+AvWda+xAdBuTu2XhVh1Cu5
+V4TtgjoBsRL9XWpQAJYyFSdyqgOwLWGsf5hC0iNTpJc6RczaPC03XilX6zvfDoX
Ux4bCJvoO51QsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:30 2025 by rpki-client