Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File:                     I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier:          vIumYGfy38FiezEDT6mFLpUrnc1MDAMkx+XOeIO3API=
Subject key identifier:   6E:A7:87:06:76:2B:6B:A0:9F:84:99:B9:5A:94:0C:D5:D6:47:71:4F
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer:       /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial:       0198737455D9AD288ABE25A713D315A869ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number:          1203
Signing time:             Mon 04 Aug 2025 05:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:00 +0000
Files and hashes:         1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
                          2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: WpJvkpI8pxZYEKKZXeg8De/cyRf4pT4j4VLtAst7FLY=)
                          3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:55:d9:ad:28:8a:be:25:a7:13:d3:15:a8:69:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
        Validity
            Not Before: Aug  4 05:01:00 2025 GMT
            Not After : Aug  5 05:01:00 2025 GMT
        Subject: CN=6ea78706762b6ba09f8499b95a940cd5d647714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:9b:38:14:67:0e:fe:26:85:36:60:a5:96:
                    16:1f:01:85:f5:7c:3c:28:ca:2e:4e:85:c2:8b:75:
                    75:86:93:24:c1:7e:c6:64:93:b4:51:83:fe:f1:9a:
                    1e:89:e2:a0:1f:6e:8f:09:62:72:69:ec:43:90:b0:
                    cb:76:35:48:e6:b4:e1:ca:b9:19:5e:48:66:e5:7f:
                    79:6e:f1:b1:be:32:64:d0:40:7f:0a:18:fb:c7:b4:
                    44:12:44:18:b6:f9:6b:09:88:ac:fa:01:d7:38:c5:
                    74:a3:dd:19:a2:eb:e6:c9:4c:96:8c:fc:4c:29:db:
                    52:b6:f7:4b:29:92:c9:5d:e1:49:db:c7:9f:e0:98:
                    5d:ce:eb:ef:fb:67:f4:6c:f4:57:9a:6c:4f:82:02:
                    0b:75:b4:2e:1c:ab:db:16:d0:f4:af:c6:52:c8:99:
                    44:51:88:cd:f6:d7:35:11:f8:e7:f9:ca:50:04:a8:
                    5b:f8:16:93:b7:7e:29:71:28:6a:86:99:99:9b:64:
                    b4:24:ca:91:ef:71:48:99:4b:7e:64:05:80:95:44:
                    47:fd:dc:47:66:85:e3:63:7f:25:2e:9c:d7:9b:85:
                    59:30:52:1f:51:fa:b7:90:d2:4a:03:79:59:9e:e8:
                    2e:a8:56:a8:16:fe:4f:08:67:96:06:12:ed:88:d0:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A7:87:06:76:2B:6B:A0:9F:84:99:B9:5A:94:0C:D5:D6:47:71:4F
            X509v3 Authority Key Identifier:
                keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:90:31:59:52:a5:75:a2:cd:39:74:ef:e0:47:3a:52:a0:fe:
         c4:d5:b4:03:70:77:f0:50:70:88:e0:f2:d6:9c:f3:a7:6f:bc:
         f7:26:58:21:7b:b6:35:ed:ac:be:b7:da:08:14:c8:aa:06:0d:
         e9:f5:38:b7:6b:eb:8a:01:7b:1d:28:b8:17:83:a9:61:c2:94:
         57:d7:e1:bc:63:c7:74:dd:3a:98:4d:28:c5:bd:e1:1b:10:7f:
         64:36:ac:27:b6:a2:5e:39:f4:76:01:c7:15:f3:cf:35:87:a4:
         4b:2a:f0:3b:1b:17:08:d2:a0:8a:99:ab:ed:7d:9f:c6:5e:19:
         97:50:e1:c9:1e:75:4f:89:cf:f7:f0:13:fa:4b:cd:67:5f:00:
         ce:28:62:d4:60:e8:59:fe:f6:0b:a8:45:16:eb:f4:e0:ff:3b:
         a0:f0:98:4a:63:24:61:4f:7b:50:2f:e1:75:10:fe:8a:32:25:
         c3:96:ea:dc:da:c4:df:46:45:2d:9d:01:59:9c:0a:1f:95:98:
         52:e2:3e:da:9d:70:28:ac:91:db:6b:61:76:63:40:c4:ae:54:
         6a:c9:8f:d8:ea:e6:52:73:b3:71:ae:5d:c3:af:63:e9:21:6f:
         95:9a:2e:82:8b:8d:a8:98:bb:0f:f9:1f:52:00:5d:5c:e7:1d:
         54:8d:db:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdFXZrSiKviWnE9MVqGntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjUwODA0MDUwMTAwWhcNMjUwODA1MDUwMTAwWjAzMTEwLwYDVQQD
Eyg2ZWE3ODcwNjc2MmI2YmEwOWY4NDk5Yjk1YTk0MGNkNWQ2NDc3MTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHabOBRnDv4mhTZgpZYWHwGF9Xw8
KMouToXCi3V1hpMkwX7GZJO0UYP+8ZoeieKgH26PCWJyaexDkLDLdjVI5rThyrkZ
Xkhm5X95bvGxvjJk0EB/Chj7x7REEkQYtvlrCYis+gHXOMV0o90ZouvmyUyWjPxM
KdtStvdLKZLJXeFJ28ef4Jhdzuvv+2f0bPRXmmxPggILdbQuHKvbFtD0r8ZSyJlE
UYjN9tc1Efjn+cpQBKhb+BaTt34pcShqhpmZm2S0JMqR73FImUt+ZAWAlURH/dxH
ZoXjY38lLpzXm4VZMFIfUfq3kNJKA3lZnuguqFaoFv5PCGeWBhLtiNCdVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6nhwZ2K2ugn4SZuVqUDNXWR3FPMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5AxWVKl
daLNOXTv4Ec6UqD+xNW0A3B38FBwiODy1pzzp2+89yZYIXu2Ne2svrfaCBTIqgYN
6fU4t2vrigF7HSi4F4OpYcKUV9fhvGPHdN06mE0oxb3hGxB/ZDasJ7aiXjn0dgHH
FfPPNYekSyrwOxsXCNKgipmr7X2fxl4Zl1DhyR51T4nP9/AT+kvNZ18Azihi1GDo
Wf72C6hFFuv04P87oPCYSmMkYU97UC/hdRD+ijIlw5bq3NrE30ZFLZ0BWZwKH5WY
UuI+2p1wKKyR22thdmNAxK5UasmP2OrmUnOzca5dw69j6SFvlZougouNqJi7D/kf
UgBdXOcdVI3bNA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:00 2025 by rpki-client