Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          fcVKrCi9zSKDsvF3HT7gja357K77Kwjjwcd+mhjkn3c=
Subject key identifier:   9A:4A:AA:7C:00:F2:AF:49:A1:B9:6D:7C:0B:F7:1D:14:DF:EB:20:28
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       01988B7D41767DB919C8F8AAE77FB77D71D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          11F6
Signing time:             Fri 08 Aug 2025 21:01:38 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:38 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:38 +0000
Files and hashes:         1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: d4gOojhvdNrIw0vlos26bkOuDGro/986lU2rBZzM4nA=)
                          3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
                          4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
                          5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:41:76:7d:b9:19:c8:f8:aa:e7:7f:b7:7d:71:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Aug  8 21:01:38 2025 GMT
            Not After : Aug  9 21:01:38 2025 GMT
        Subject: CN=9a4aaa7c00f2af49a1b96d7c0bf71d14dfeb2028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:ec:60:32:04:46:6f:f2:37:e9:d1:35:31:
                    13:f8:4b:6c:f7:30:9b:b9:5d:20:3e:cc:a1:42:8c:
                    23:b5:07:6d:9c:58:c8:e9:6d:ad:02:62:e3:7a:a4:
                    61:bc:aa:5b:b1:96:53:6e:0a:d9:82:32:bf:f7:38:
                    91:c4:05:e1:e3:c3:91:f0:a2:9d:78:46:44:82:ff:
                    d9:57:77:4e:91:77:9f:24:25:10:b0:1f:95:13:40:
                    b8:22:d9:f5:da:b5:26:28:68:01:a4:72:80:05:c9:
                    96:63:f4:e2:55:bb:c4:36:ef:93:58:f7:91:01:07:
                    e5:7a:be:4e:07:44:05:0c:f7:ab:92:ed:a0:67:62:
                    36:e6:85:b2:cf:86:dd:23:ec:c2:2d:52:43:98:8a:
                    26:66:82:a7:5d:29:49:4b:bb:2c:fb:5f:5b:b0:a3:
                    f3:2c:2a:41:08:c3:7b:ac:37:52:59:95:27:04:5d:
                    d6:de:c8:ae:c6:09:45:55:fd:81:25:32:60:13:68:
                    09:d2:be:66:ab:30:06:d5:98:66:55:b7:18:8c:66:
                    77:96:12:d0:f6:72:74:4c:67:51:3c:af:1d:1a:a5:
                    73:45:37:64:99:eb:52:9c:ba:c4:bb:ac:0b:a3:3f:
                    13:85:2a:5c:45:f9:55:0f:1b:39:fe:9e:a4:b1:61:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:AA:7C:00:F2:AF:49:A1:B9:6D:7C:0B:F7:1D:14:DF:EB:20:28
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:39:b1:b5:9c:ca:99:ae:cd:a5:f9:04:7c:1f:a3:aa:d1:6c:
         bb:fd:c5:2f:b4:dc:05:97:1d:bc:29:58:09:96:58:dd:3b:82:
         34:69:3f:25:a4:f8:73:97:da:22:bc:3b:03:92:20:cc:50:de:
         28:81:e7:db:4b:90:b0:0e:6c:5a:4a:9d:67:5f:41:74:ac:67:
         cd:69:4f:38:09:51:2d:5c:71:3c:ac:ab:19:8a:f9:d7:56:4e:
         06:98:8a:8d:cb:b3:9b:cf:ca:cf:6f:ed:f3:2e:82:6e:52:36:
         22:f9:06:00:89:5d:0c:f4:df:4b:62:30:b8:72:b4:2d:2b:e4:
         a1:57:dd:06:c1:3c:30:3c:38:e9:fd:d3:47:57:37:ab:a0:25:
         56:9a:f6:78:dd:af:25:be:9c:d1:01:cb:94:4a:61:b6:92:47:
         0f:3b:2e:fb:cd:1b:dc:a8:20:8d:3b:c8:96:04:bb:fb:21:d2:
         7f:34:f2:3d:df:8d:00:53:49:81:8c:60:10:a0:93:b6:de:0b:
         78:45:0c:dd:8e:91:bd:08:f9:fe:2d:ac:7f:bd:0e:b5:74:3b:
         cd:89:7c:7a:12:e2:d7:15:94:cf:82:1b:ca:36:5d:6e:75:d0:
         0e:7d:a3:ea:1a:a7:fa:c5:bc:77:8c:5b:0f:16:23:e3:8f:f3:
         62:03:bc:2d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiLfUF2fbkZyPiq53+3fXHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh
NWQ0MGIwHhcNMjUwODA4MjEwMTM4WhcNMjUwODA5MjEwMTM4WjAzMTEwLwYDVQQD
Eyg5YTRhYWE3YzAwZjJhZjQ5YTFiOTZkN2MwYmY3MWQxNGRmZWIyMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgvsYDIERm/yN+nRNTET+Ets9zCb
uV0gPsyhQowjtQdtnFjI6W2tAmLjeqRhvKpbsZZTbgrZgjK/9ziRxAXh48OR8KKd
eEZEgv/ZV3dOkXefJCUQsB+VE0C4Itn12rUmKGgBpHKABcmWY/TiVbvENu+TWPeR
AQfler5OB0QFDPerku2gZ2I25oWyz4bdI+zCLVJDmIomZoKnXSlJS7ss+19bsKPz
LCpBCMN7rDdSWZUnBF3W3siuxglFVf2BJTJgE2gJ0r5mqzAG1ZhmVbcYjGZ3lhLQ
9nJ0TGdRPK8dGqVzRTdkmetSnLrEu6wLoz8ThSpcRflVDxs5/p6ksWGOqQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJpKqnwA8q9JobltfAv3HRTf6yAoMB8GA1UdIwQY
MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2
LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg3LzJkYzEzNi00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1Yzhi
MWYvMS8xLUE0QmZQRnhGUm13XzU5bGhZeEpHeS1sMUFzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDmx
tZzKma7NpfkEfB+jqtFsu/3FL7TcBZcdvClYCZZY3TuCNGk/JaT4c5faIrw7A5Ig
zFDeKIHn20uQsA5sWkqdZ19BdKxnzWlPOAlRLVxxPKyrGYr511ZOBpiKjcuzm8/K
z2/t8y6CblI2IvkGAIldDPTfS2IwuHK0LSvkoVfdBsE8MDw46f3TR1c3q6AlVpr2
eN2vJb6c0QHLlEphtpJHDzsu+80b3KggjTvIlgS7+yHSfzTyPd+NAFNJgYxgEKCT
tt4LeEUM3Y6RvQj5/i2sf70OtXQ7zYl8ehLi1xWUz4IbyjZdbnXQDn2j6hqn+sW8
d4xbDxYj44/zYgO8LQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:11:50 2025 by rpki-client