Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
File:                     mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json)
Hash identifier:          JtlnvgK1eFQNY+mmkLs/xfcET075dhMejdqROCip2dI=
Subject key identifier:   76:87:2C:BC:04:2F:96:82:F5:71:6D:7B:79:A8:5E:61:5E:FA:27:2B
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Certificate issuer:       /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial:       01988C8F2700316F33AFC1805F07E82933BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 02:00:48 +0000
Manifest this update:     Sat 09 Aug 2025 02:00:48 +0000
Manifest next update:     Sun 10 Aug 2025 02:00:48 +0000
Files and hashes:         1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: r/NP9chHC4YrE6pchPNW2ZVPqjMvRtb5CuYt+q0plYE=)
                          2: s3dIm20GepVqtr86hU4U0PO_ew8.roa (hash: IACsMI0iHVIsWExBAgSS418a6ZTtpolE9FZ0jLsNao8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:27:00:31:6f:33:af:c1:80:5f:07:e8:29:33:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
        Validity
            Not Before: Aug  9 02:00:48 2025 GMT
            Not After : Aug 10 02:00:48 2025 GMT
        Subject: CN=76872cbc042f9682f5716d7b79a85e615efa272b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:66:58:1c:56:0c:85:76:25:07:04:53:d5:
                    ed:23:58:35:3c:ef:32:07:b0:95:e2:45:ba:9f:92:
                    37:c3:2f:dd:f2:af:81:b1:9d:d6:6d:c0:d3:b8:55:
                    6c:8e:8c:cb:75:a6:16:c4:f1:2b:eb:4d:84:b5:ec:
                    a6:85:25:e1:4e:25:32:b2:a9:01:13:7a:1a:7c:1a:
                    7b:bb:1e:eb:7b:0b:6a:af:64:2b:92:c6:5b:64:c1:
                    bd:4f:16:80:d0:00:80:0b:d6:67:a0:3a:78:a8:b8:
                    2d:db:e4:7e:a5:99:0d:e9:6a:77:ff:c2:9f:fe:e0:
                    f8:4f:0c:92:5d:d8:f6:2f:94:f2:42:57:ae:03:71:
                    9c:92:e6:c3:71:26:49:06:7b:b1:2a:76:97:a6:c4:
                    a5:af:3c:c1:e5:e7:52:7c:46:31:54:89:ac:4d:15:
                    8e:5f:df:1f:89:e9:05:d3:46:0a:c6:c6:e7:10:28:
                    d6:22:e4:98:3e:c2:c6:05:38:95:8c:a3:0f:f7:92:
                    cd:d6:69:96:f7:34:69:80:95:a9:da:a0:f8:16:b2:
                    60:79:68:59:9d:26:ca:e4:27:7b:97:58:6d:94:69:
                    98:6a:11:13:c0:96:83:5a:b0:b6:d9:b0:96:f8:30:
                    13:ae:8c:69:a8:29:9a:c2:25:e5:ae:dc:d9:a6:7f:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:87:2C:BC:04:2F:96:82:F5:71:6D:7B:79:A8:5E:61:5E:FA:27:2B
            X509v3 Authority Key Identifier:
                keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:a2:b9:fa:74:8f:73:aa:a6:d1:21:76:c4:67:df:31:af:
         42:df:a1:81:77:0f:94:54:f7:3f:5e:ef:26:47:6c:f8:99:22:
         bd:a3:74:11:28:b9:20:83:c4:e7:9e:c6:b2:b8:59:d4:13:80:
         e4:96:0d:5f:d0:e5:02:9b:2b:fd:b8:0d:34:09:47:30:31:6e:
         06:3e:e8:8a:f3:d6:f7:39:13:31:25:9c:c0:85:86:bc:80:e3:
         bb:fa:fd:3e:b7:1d:0c:25:21:3c:9d:62:19:c9:fe:8c:80:d8:
         1e:3e:38:e5:68:11:88:15:3b:c5:9a:f8:bf:3e:65:5c:31:9f:
         aa:b5:08:1f:cf:20:b0:91:bd:49:e4:3b:b0:40:a5:c3:12:96:
         ca:c8:bc:2f:e0:44:8e:3e:5f:e6:cc:de:c8:78:2b:07:b3:13:
         38:91:60:8b:39:77:8a:ae:2a:cf:89:91:86:34:7e:94:ec:60:
         45:89:31:db:0d:d8:9e:a8:a7:4a:2c:b4:46:c0:5d:e2:b9:bf:
         b7:86:17:81:31:69:24:fa:bb:a3:2f:21:40:a0:3e:29:10:18:
         4a:6b:93:06:d8:2c:5d:58:b9:4d:7f:45:e9:47:b7:bc:28:75:
         6f:60:eb:ce:22:96:bf:12:f1:dd:d9:c8:2d:81:d8:af:8b:e9:
         46:4f:2a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMjycAMW8zr8GAXwfoKTO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2I2ODEyY2Y3YTA3NDU4MGY1OTQyYmU3NjJmNDc3ZjY3
Yzk1MDAwHhcNMjUwODA5MDIwMDQ4WhcNMjUwODEwMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg3Njg3MmNiYzA0MmY5NjgyZjU3MTZkN2I3OWE4NWU2MTVlZmEyNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRmWBxWDIV2JQcEU9XtI1g1PO8y
B7CV4kW6n5I3wy/d8q+BsZ3WbcDTuFVsjozLdaYWxPEr602EteymhSXhTiUysqkB
E3oafBp7ux7rewtqr2QrksZbZMG9TxaA0ACAC9ZnoDp4qLgt2+R+pZkN6Wp3/8Kf
/uD4TwySXdj2L5TyQleuA3GckubDcSZJBnuxKnaXpsSlrzzB5edSfEYxVImsTRWO
X98fiekF00YKxsbnECjWIuSYPsLGBTiVjKMP95LN1mmW9zRpgJWp2qD4FrJgeWhZ
nSbK5Cd7l1htlGmYahETwJaDWrC22bCW+DATroxpqCmawiXlrtzZpn+zGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaHLLwEL5aC9XFte3moXmFe+icrMB8GA1UdIwQY
MBaAFJh7aBLPegdFgPWUK+di9Hf2fJUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMt
NzRhYTNjMGZhZWUwLzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMtNzRhYTNjMGZhZWUw
LzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUKiufp0
j3OqptEhdsRn3zGvQt+hgXcPlFT3P17vJkds+JkivaN0ESi5IIPE557GsrhZ1BOA
5JYNX9DlApsr/bgNNAlHMDFuBj7oivPW9zkTMSWcwIWGvIDju/r9PrcdDCUhPJ1i
Gcn+jIDYHj445WgRiBU7xZr4vz5lXDGfqrUIH88gsJG9SeQ7sEClwxKWysi8L+BE
jj5f5szeyHgrB7MTOJFgizl3iq4qz4mRhjR+lOxgRYkx2w3YnqinSiy0RsBd4rm/
t4YXgTFpJPq7oy8hQKA+KRAYSmuTBtgsXVi5TX9F6Ue3vCh1b2DrziKWvxLx3dnI
LYHYr4vpRk8qLQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:16 2025 by rpki-client