Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File:                     2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier:          E2xnjc77srW6JRXmhRTMLSRd3CyeDMDbhuGdZ0S2rjE=
Subject key identifier:   A4:25:2D:24:EC:7F:31:24:5F:B9:C9:D2:5F:04:DC:CE:8F:99:1C:FB
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer:       /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial:       01987DC0E146787A7DA849BA0AFD44C8BAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number:          05CB
Signing time:             Wed 06 Aug 2025 05:00:49 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:49 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:49 +0000
Files and hashes:         1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: +ph4ASInmjiFqoG+7O3SrRIy6j0iORdClIgszIpNFX8=)
                          2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
                          3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:e1:46:78:7a:7d:a8:49:ba:0a:fd:44:c8:ba:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
        Validity
            Not Before: Aug  6 05:00:49 2025 GMT
            Not After : Aug  7 05:00:49 2025 GMT
        Subject: CN=a4252d24ec7f31245fb9c9d25f04dcce8f991cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:5c:9b:fd:ac:1d:e2:fb:26:7a:76:e1:49:
                    11:ec:02:5d:4c:bd:b9:11:eb:57:66:bb:f8:5d:07:
                    f3:cd:02:58:de:70:01:e6:34:38:a1:ac:59:27:4c:
                    1e:df:8b:f0:5e:56:1f:26:c1:29:0f:be:8d:fe:29:
                    4d:cc:ff:37:46:6d:ed:5f:29:1e:19:ee:28:bc:c7:
                    e8:be:d2:6c:d9:2e:53:80:22:5c:42:75:4d:62:9f:
                    c5:8b:26:42:cb:56:a8:18:ab:f6:d6:b0:f5:13:f7:
                    17:16:6b:4b:9e:94:5d:cd:57:da:f1:7d:23:30:de:
                    21:6c:ec:95:59:ed:8f:27:24:6d:93:dc:aa:b3:15:
                    6b:c7:87:0d:ae:28:23:83:82:b2:89:43:71:86:f8:
                    2e:d5:25:0c:c9:53:ed:2e:24:ef:43:15:10:10:bd:
                    50:af:e2:fe:3b:6c:b3:ac:4f:57:51:e0:83:c5:87:
                    16:9a:1d:24:60:29:84:e2:47:66:06:64:a8:f8:fc:
                    7b:ab:4f:14:08:bf:50:c0:77:bb:31:da:e0:fc:23:
                    67:bb:a5:69:d9:40:85:3f:09:ed:04:9e:4b:f1:ae:
                    68:b3:9d:91:3a:6e:c8:85:4d:02:b2:ed:79:e1:64:
                    44:2c:a1:81:8c:43:c8:7e:e5:32:2c:b5:86:c0:ae:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:2D:24:EC:7F:31:24:5F:B9:C9:D2:5F:04:DC:CE:8F:99:1C:FB
            X509v3 Authority Key Identifier:
                keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:15:57:e9:54:98:27:c6:c9:6d:1b:d9:9a:ca:38:e8:16:07:
         a3:e6:3f:96:63:57:a8:21:84:e0:47:27:94:3c:79:7e:64:71:
         63:d6:3c:60:09:d4:db:57:cf:a6:69:dd:94:51:54:55:3b:f4:
         dc:ae:38:88:67:f4:db:91:74:63:d6:59:d4:0c:ab:8f:7c:24:
         82:70:6f:74:e4:48:d5:a1:fc:58:f5:44:7e:0f:90:c6:6a:b9:
         0f:bc:3f:81:73:38:66:97:91:2c:80:35:5a:6b:46:11:50:ff:
         23:3e:f4:c5:84:35:37:dd:34:d2:4e:c5:14:ff:ab:f4:23:45:
         c7:92:4e:ff:21:44:2f:88:3a:59:90:5b:dd:05:76:20:c3:e4:
         ad:d9:3c:96:c0:7a:6e:86:ec:d0:3a:45:75:22:bd:93:0d:62:
         e5:ec:f5:96:11:1c:36:96:3a:57:fc:e2:23:bf:68:26:05:34:
         fa:1d:c7:49:51:9b:66:46:1f:7b:51:92:fe:c2:85:d7:e1:cf:
         ab:35:c4:32:97:77:1b:a0:89:0c:94:7c:5f:8b:49:bb:44:7e:
         9e:8e:24:a0:63:2d:1c:7c:96:cf:8c:7c:ca:7c:77:4a:61:56:
         29:ad:2a:41:1e:ed:06:43:1a:7b:ed:07:4c:d3:5b:cc:32:aa:
         7e:77:20:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wOFGeHp9qEm6Cv1EyLrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm
MmE0OWIwHhcNMjUwODA2MDUwMDQ5WhcNMjUwODA3MDUwMDQ5WjAzMTEwLwYDVQQD
EyhhNDI1MmQyNGVjN2YzMTI0NWZiOWM5ZDI1ZjA0ZGNjZThmOTkxY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgdcm/2sHeL7Jnp24UkR7AJdTL25
EetXZrv4XQfzzQJY3nAB5jQ4oaxZJ0we34vwXlYfJsEpD76N/ilNzP83Rm3tXyke
Ge4ovMfovtJs2S5TgCJcQnVNYp/FiyZCy1aoGKv21rD1E/cXFmtLnpRdzVfa8X0j
MN4hbOyVWe2PJyRtk9yqsxVrx4cNrigjg4KyiUNxhvgu1SUMyVPtLiTvQxUQEL1Q
r+L+O2yzrE9XUeCDxYcWmh0kYCmE4kdmBmSo+Px7q08UCL9QwHe7Mdrg/CNnu6Vp
2UCFPwntBJ5L8a5os52ROm7IhU0Csu154WRELKGBjEPIfuUyLLWGwK6X9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQlLSTsfzEkX7nJ0l8E3M6PmRz7MB8GA1UdIwQY
MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt
NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj
LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxVX6VSY
J8bJbRvZmso46BYHo+Y/lmNXqCGE4EcnlDx5fmRxY9Y8YAnU21fPpmndlFFUVTv0
3K44iGf025F0Y9ZZ1Ayrj3wkgnBvdORI1aH8WPVEfg+Qxmq5D7w/gXM4ZpeRLIA1
WmtGEVD/Iz70xYQ1N9000k7FFP+r9CNFx5JO/yFEL4g6WZBb3QV2IMPkrdk8lsB6
bobs0DpFdSK9kw1i5ez1lhEcNpY6V/ziI79oJgU0+h3HSVGbZkYfe1GS/sKF1+HP
qzXEMpd3G6CJDJR8X4tJu0R+no4koGMtHHyWz4x8ynx3SmFWKa0qQR7tBkMae+0H
TNNbzDKqfncgSg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:28 2025 by rpki-client