Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File:                     sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier:          Kh+httEZaHVaUe6pBjn6Nm0C+jpSy7yJbyNjxVF8PJc=
Subject key identifier:   41:95:76:80:84:07:C0:47:D8:2F:B6:D2:D9:94:7A:A8:B8:48:34:32
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer:       /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial:       0198936D64A7227E34BB5653B61B2A1E4C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number:          0992
Signing time:             Sun 10 Aug 2025 10:01:16 +0000
Manifest this update:     Sun 10 Aug 2025 10:01:16 +0000
Manifest next update:     Mon 11 Aug 2025 10:01:16 +0000
Files and hashes:         1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
                          2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
                          3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: 48td1mDyoXdCKwSa9TMgCAWZL5vPPwPvUU5zXugS+5w=)
                          4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:6d:64:a7:22:7e:34:bb:56:53:b6:1b:2a:1e:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
        Validity
            Not Before: Aug 10 10:01:16 2025 GMT
            Not After : Aug 11 10:01:16 2025 GMT
        Subject: CN=419576808407c047d82fb6d2d9947aa8b8483432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:e4:54:cb:c7:37:f8:53:c1:f7:4f:da:40:
                    92:3d:21:5a:1d:52:3e:f3:a0:8c:79:27:6e:a9:55:
                    1f:4b:09:92:73:0f:72:5a:b8:32:42:b0:9c:1d:e7:
                    ce:06:42:fb:0b:d2:f5:0d:1b:bd:8e:f3:a9:4c:ca:
                    80:30:eb:9c:d6:4d:83:54:8e:89:63:47:38:f9:41:
                    d4:57:c1:32:cc:0d:16:a8:0c:7d:b1:b5:36:ef:79:
                    6f:28:02:46:fa:2a:4a:2d:78:82:fd:2b:bd:f4:14:
                    7c:c2:56:f8:3d:57:4a:68:22:16:dd:b3:db:75:48:
                    6f:9a:4c:0b:f3:8c:42:e4:b4:fb:ac:2c:0f:d1:4e:
                    7b:fb:4a:4a:27:96:14:8e:44:0b:3a:35:30:0c:31:
                    38:35:02:35:13:b0:d7:85:3b:10:d1:1a:44:db:46:
                    38:6d:57:1c:c0:7a:3b:dd:f9:7b:3e:48:3a:a7:f8:
                    0b:fc:12:45:4b:ec:af:b0:da:0b:0f:ca:dd:0e:b6:
                    2a:f2:87:1f:56:d6:0c:69:c2:95:4a:00:bc:b7:d5:
                    18:8e:d0:3a:f5:2c:5e:c6:a4:c6:ba:48:ea:0f:d6:
                    63:84:2a:64:4f:fc:d0:8d:b5:69:04:0b:00:14:58:
                    c0:9c:d9:0e:01:d3:5e:1e:ce:77:eb:62:81:d3:c6:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:76:80:84:07:C0:47:D8:2F:B6:D2:D9:94:7A:A8:B8:48:34:32
            X509v3 Authority Key Identifier:
                keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:e0:9e:1c:d3:f5:69:ea:a2:51:7e:fb:08:df:cd:71:cf:
         ad:bd:58:86:18:75:b1:bb:1e:77:fb:27:c5:93:a3:f7:70:54:
         e6:d9:5d:17:15:af:e9:d3:96:92:60:6b:75:dc:26:34:6e:9f:
         6b:ef:31:2d:a6:e6:e2:ec:7a:a1:c4:b7:38:a3:21:10:53:57:
         27:64:82:21:09:2d:88:4e:fe:82:f8:a4:a0:ab:7d:44:4a:e5:
         22:a2:c9:d5:14:90:0e:47:e0:d0:50:ee:dc:eb:92:b2:b1:1f:
         86:3d:b3:be:93:27:0e:0d:70:86:0c:42:bc:05:0e:aa:44:11:
         4d:6f:92:83:7f:5e:e7:5b:7f:a7:91:f4:9e:e7:f9:47:33:8f:
         fa:d6:b9:6d:ef:a0:93:76:87:a7:64:e5:c6:90:c6:90:b6:f8:
         8b:df:04:41:3a:d0:07:66:ef:3b:6e:bd:16:f8:57:d8:f2:83:
         a4:e2:ba:1b:19:08:c8:15:8e:29:20:29:c4:ac:c7:3f:65:3a:
         78:03:d4:f3:40:fb:61:d3:06:c8:3c:76:21:f0:cb:7d:db:ca:
         13:8c:f9:47:70:21:58:9a:77:2f:d8:c3:49:f7:f3:39:33:75:
         a9:33:7d:7a:36:0d:fe:e6:94:ae:d8:1d:b6:1e:fc:19:49:46:
         14:cc:2e:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbWSnIn40u1ZTthsqHkxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyM2ViODQ5ZTBiNjk0MGU0ZmY1NDdkZTBiNDFiMDAzZjll
MTEwNWMwHhcNMjUwODEwMTAwMTE2WhcNMjUwODExMTAwMTE2WjAzMTEwLwYDVQQD
Eyg0MTk1NzY4MDg0MDdjMDQ3ZDgyZmI2ZDJkOTk0N2FhOGI4NDgzNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuszkVMvHN/hTwfdP2kCSPSFaHVI+
86CMeSduqVUfSwmScw9yWrgyQrCcHefOBkL7C9L1DRu9jvOpTMqAMOuc1k2DVI6J
Y0c4+UHUV8EyzA0WqAx9sbU273lvKAJG+ipKLXiC/Su99BR8wlb4PVdKaCIW3bPb
dUhvmkwL84xC5LT7rCwP0U57+0pKJ5YUjkQLOjUwDDE4NQI1E7DXhTsQ0RpE20Y4
bVccwHo73fl7Pkg6p/gL/BJFS+yvsNoLD8rdDrYq8ocfVtYMacKVSgC8t9UYjtA6
9SxexqTGukjqD9ZjhCpkT/zQjbVpBAsAFFjAnNkOAdNeHs5362KB08Z6QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGVdoCEB8BH2C+20tmUeqi4SDQyMB8GA1UdIwQY
MBaAFLI+uEngtpQOT/VH3gtBsAP54RBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAt
MTU1ZjQyZGNhYTczLzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAtMTU1ZjQyZGNhYTcz
LzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDPgnhzT
9WnqolF++wjfzXHPrb1Yhhh1sbsed/snxZOj93BU5tldFxWv6dOWkmBrddwmNG6f
a+8xLabm4ux6ocS3OKMhEFNXJ2SCIQktiE7+gvikoKt9RErlIqLJ1RSQDkfg0FDu
3OuSsrEfhj2zvpMnDg1whgxCvAUOqkQRTW+Sg39e51t/p5H0nuf5RzOP+ta5be+g
k3aHp2TlxpDGkLb4i98EQTrQB2bvO269FvhX2PKDpOK6GxkIyBWOKSApxKzHP2U6
eAPU80D7YdMGyDx2IfDLfdvKE4z5R3AhWJp3L9jDSffzOTN1qTN9ejYN/uaUrtgd
th78GUlGFMwuwg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:30 2025 by rpki-client