Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          xw2I+mr7O0238zX5r4iPZBX97soWaI183qfmVhoI6As=
Subject key identifier:   45:7F:60:D3:24:9C:31:00:4D:00:F5:22:FB:A4:95:F6:8E:53:86:6E
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       019882E76DC4204A9F1B4043BE73B37CCCCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          111E
Signing time:             Thu 07 Aug 2025 05:01:01 +0000
Manifest this update:     Thu 07 Aug 2025 05:01:01 +0000
Manifest next update:     Fri 08 Aug 2025 05:01:01 +0000
Files and hashes:         1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
                          2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
                          3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: 461JEV1uSSGKP9xE+Korw0jnfyl2YF4Kiaq419MT3sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:e7:6d:c4:20:4a:9f:1b:40:43:be:73:b3:7c:cc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Aug  7 05:01:01 2025 GMT
            Not After : Aug  8 05:01:01 2025 GMT
        Subject: CN=457f60d3249c31004d00f522fba495f68e53866e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:6c:1d:dd:f4:f5:fa:5f:17:42:6e:df:51:
                    f3:b5:ff:8a:0d:cc:25:f6:44:84:48:12:2c:34:d0:
                    48:be:92:c7:4b:ea:be:6d:31:20:5f:da:27:13:43:
                    72:f6:4c:96:15:ac:87:47:59:a5:37:5d:9a:60:c9:
                    e8:18:d5:df:96:f6:b6:30:a2:d5:e8:f8:7b:77:4f:
                    67:70:58:07:12:3f:d2:8c:02:04:1c:c8:c3:eb:87:
                    93:eb:44:c6:8b:5d:f0:cc:48:f2:92:c0:16:c4:de:
                    9c:05:25:1c:34:0a:b7:ba:55:4f:56:3f:24:16:d4:
                    4f:dd:b0:63:7a:4c:f2:33:76:df:fa:a4:8b:d0:b9:
                    3f:bc:8f:2e:1e:d1:33:7c:b8:17:91:65:4d:8d:23:
                    58:74:4c:41:54:c8:92:0d:11:13:7d:fb:a4:3f:f7:
                    da:23:a5:d4:d5:b9:57:52:90:2d:cd:3d:cf:4c:7c:
                    f1:09:63:68:2e:d5:9a:cb:4c:68:2b:4f:1a:87:13:
                    4c:fa:37:e7:cc:31:8e:61:fa:f4:f8:49:cb:08:df:
                    a9:1e:a1:74:f7:e0:3e:02:ef:60:7b:c3:fa:a2:01:
                    17:11:b0:66:5c:1f:08:50:99:4e:1c:42:80:b4:19:
                    37:60:3d:4a:6a:fb:17:06:c2:ce:8b:c3:65:9c:a6:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:60:D3:24:9C:31:00:4D:00:F5:22:FB:A4:95:F6:8E:53:86:6E
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:35:82:a8:5c:98:7e:f7:42:14:86:95:99:c7:37:9b:8d:b6:
         38:39:68:f0:4d:7e:f9:35:28:5a:53:e9:7e:1a:8d:d8:b6:cc:
         ca:34:d1:f4:22:5c:02:3b:24:c0:df:d7:35:5e:bd:d8:67:e0:
         61:cb:f2:a1:45:ff:97:2f:e6:19:31:c0:56:e6:6d:e8:0e:f7:
         05:51:d4:27:c7:f1:e9:3d:44:cc:4c:d9:83:53:6f:35:0a:29:
         d7:73:0b:9a:e8:a7:e2:df:73:9a:e1:55:8c:3a:c6:32:ba:3c:
         50:cf:6e:9b:eb:a0:0e:b8:17:6f:b7:c9:60:c3:29:fb:e6:03:
         06:90:ee:14:02:7e:1b:18:af:bf:24:ef:62:6b:5e:25:ec:d7:
         a1:3d:12:3b:bc:90:f6:c6:d6:b3:26:c3:da:b7:d7:ba:a4:8e:
         c0:a2:b2:4a:a5:9e:8f:d1:98:72:79:e9:28:9d:97:df:b2:fb:
         6d:14:5f:89:1e:20:21:55:3b:ca:ac:82:7b:7e:8d:ac:14:d7:
         ba:7c:67:f0:2f:b6:d2:8e:fe:3e:d2:e9:bd:c4:37:f7:2c:70:
         a2:1c:ba:ca:7e:5b:f2:30:fb:73:53:ad:a5:4e:29:3d:e3:ed:
         62:33:18:c4:80:53:a9:17:39:99:af:90:71:44:3c:bf:0e:c4:
         6e:a9:e4:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiC523EIEqfG0BDvnOzfMzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh
NTk0NTYwHhcNMjUwODA3MDUwMTAxWhcNMjUwODA4MDUwMTAxWjAzMTEwLwYDVQQD
Eyg0NTdmNjBkMzI0OWMzMTAwNGQwMGY1MjJmYmE0OTVmNjhlNTM4NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD5sHd309fpfF0Ju31Hztf+KDcwl
9kSESBIsNNBIvpLHS+q+bTEgX9onE0Ny9kyWFayHR1mlN12aYMnoGNXflva2MKLV
6Ph7d09ncFgHEj/SjAIEHMjD64eT60TGi13wzEjyksAWxN6cBSUcNAq3ulVPVj8k
FtRP3bBjekzyM3bf+qSL0Lk/vI8uHtEzfLgXkWVNjSNYdExBVMiSDRETffukP/fa
I6XU1blXUpAtzT3PTHzxCWNoLtWay0xoK08ahxNM+jfnzDGOYfr0+EnLCN+pHqF0
9+A+Au9ge8P6ogEXEbBmXB8IUJlOHEKAtBk3YD1KavsXBsLOi8NlnKYZewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV/YNMknDEATQD1IvuklfaOU4ZuMB8GA1UdIwQY
MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt
NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl
LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDWCqFyY
fvdCFIaVmcc3m422ODlo8E1++TUoWlPpfhqN2LbMyjTR9CJcAjskwN/XNV692Gfg
YcvyoUX/ly/mGTHAVuZt6A73BVHUJ8fx6T1EzEzZg1NvNQop13MLmuin4t9zmuFV
jDrGMro8UM9um+ugDrgXb7fJYMMp++YDBpDuFAJ+GxivvyTvYmteJezXoT0SO7yQ
9sbWsybD2rfXuqSOwKKySqWej9GYcnnpKJ2X37L7bRRfiR4gIVU7yqyCe36NrBTX
unxn8C+20o7+PtLpvcQ39yxwohy6yn5b8jD7c1OtpU4pPePtYjMYxIBTqRc5ma+Q
cUQ8vw7EbqnkTA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:57:43 2025 by rpki-client