Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          2LQtQ+KHemT5Yv1QqsONJtT/KVejcy2rvsIQWMdXUNg=
Subject key identifier:   6F:29:F1:D2:8F:53:D2:E9:A1:5D:78:8E:A4:5F:6E:9A:81:8F:67:A4
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019874870DE14923D740402E0133A9006C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1345
Signing time:             Mon 04 Aug 2025 10:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:04 +0000
Files and hashes:         1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
                          2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: KKwLnff1katcpaUtMDt5ltPR01ITrtzYtzNchFXQdJI=)
                          3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
                          4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
                          5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:0d:e1:49:23:d7:40:40:2e:01:33:a9:00:6c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Aug  4 10:01:04 2025 GMT
            Not After : Aug  5 10:01:04 2025 GMT
        Subject: CN=6f29f1d28f53d2e9a15d788ea45f6e9a818f67a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:b3:08:62:23:ed:93:54:dc:28:83:ae:8a:
                    54:5c:df:b7:f5:69:af:98:46:26:1e:df:70:74:75:
                    57:d0:3b:90:e4:5b:3e:8a:ae:6b:e5:c8:28:5f:95:
                    6e:33:5b:29:8a:04:44:a1:67:de:38:3a:b3:f1:63:
                    ba:b6:88:79:b4:fa:0a:93:fc:32:6d:e1:ee:e3:e5:
                    c7:54:0a:7e:b4:7b:76:07:e9:cf:27:49:5e:de:90:
                    05:5b:f5:cf:89:16:8c:80:fe:1e:d0:79:3e:39:65:
                    0d:76:e9:2d:ce:50:97:41:ae:b0:51:85:df:51:7a:
                    26:2f:f7:05:fb:75:24:05:7c:6b:4e:d8:cb:ee:ac:
                    e7:08:74:00:20:76:59:e9:90:1d:4a:c7:cb:b7:d5:
                    03:21:1c:00:34:59:51:af:a4:e6:da:96:d0:4b:31:
                    62:6e:41:f1:b3:45:50:55:d6:7a:21:e4:8c:37:e2:
                    d7:ed:2e:e2:96:64:a2:59:ea:f2:bc:b0:46:d2:a6:
                    7e:ad:25:80:cb:a3:28:ce:10:aa:20:40:92:0a:b0:
                    8b:89:78:b0:fa:87:1b:96:f7:14:44:84:0f:6e:d8:
                    63:01:df:82:26:06:14:c4:47:f2:6c:ed:56:0e:fd:
                    7c:ec:91:ab:4a:4e:9e:d0:29:76:ba:bc:35:03:f5:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:29:F1:D2:8F:53:D2:E9:A1:5D:78:8E:A4:5F:6E:9A:81:8F:67:A4
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6d:0a:fd:ff:d1:73:ec:99:26:f3:22:83:3a:07:b2:d3:c9:
         a8:cf:0f:b6:31:c9:ac:66:5e:cc:13:0e:81:8c:c3:5b:d6:69:
         ed:b5:b8:18:ca:96:58:4a:b1:b9:53:bc:88:a4:a3:bd:17:6b:
         a3:9a:ca:0f:54:09:4f:5b:60:b7:f4:7f:5d:4b:dc:82:b0:7b:
         88:d0:6d:51:83:c2:f5:8a:b0:e9:fa:97:4d:df:48:58:e0:f4:
         57:87:60:fb:be:63:7f:aa:3f:44:d4:33:1a:ce:58:56:39:d6:
         50:6e:73:5a:c8:54:94:93:20:5e:cd:32:96:8b:58:9f:8c:95:
         3f:84:3d:29:e4:92:45:90:41:d6:b1:69:e4:21:d6:f1:b2:a1:
         55:fd:70:00:ea:c0:ed:16:36:16:57:ce:54:0b:77:21:f9:5f:
         35:2f:b0:9e:5f:2d:eb:3b:ac:d0:f4:e1:c4:91:62:40:2e:cb:
         56:38:86:5d:4a:4d:5b:3f:52:d9:18:2d:67:3b:ff:16:35:1a:
         12:62:0a:7a:cf:a4:89:a0:bd:71:45:76:23:2e:59:57:33:c4:
         dd:08:93:5c:3c:7b:0e:8a:ee:58:84:86:83:a1:32:48:c3:9b:
         bb:7a:9c:e4:f5:e5:bb:88:e2:3f:c3:67:fc:0f:94:7f:5e:a4:
         d6:f2:2e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hw3hSSPXQEAuATOpAGxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx
ZGQ0MTMwHhcNMjUwODA0MTAwMTA0WhcNMjUwODA1MTAwMTA0WjAzMTEwLwYDVQQD
Eyg2ZjI5ZjFkMjhmNTNkMmU5YTE1ZDc4OGVhNDVmNmU5YTgxOGY2N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU2zCGIj7ZNU3CiDropUXN+39Wmv
mEYmHt9wdHVX0DuQ5Fs+iq5r5cgoX5VuM1spigREoWfeODqz8WO6toh5tPoKk/wy
beHu4+XHVAp+tHt2B+nPJ0le3pAFW/XPiRaMgP4e0Hk+OWUNduktzlCXQa6wUYXf
UXomL/cF+3UkBXxrTtjL7qznCHQAIHZZ6ZAdSsfLt9UDIRwANFlRr6Tm2pbQSzFi
bkHxs0VQVdZ6IeSMN+LX7S7ilmSiWeryvLBG0qZ+rSWAy6MozhCqIECSCrCLiXiw
+ocblvcURIQPbthjAd+CJgYUxEfybO1WDv187JGrSk6e0Cl2urw1A/UEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8p8dKPU9LpoV14jqRfbpqBj2ekMB8GA1UdIwQY
MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct
OTU4MTEyYTQ4OWE0LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0
LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG0K/f/R
c+yZJvMigzoHstPJqM8PtjHJrGZezBMOgYzDW9Zp7bW4GMqWWEqxuVO8iKSjvRdr
o5rKD1QJT1tgt/R/XUvcgrB7iNBtUYPC9Yqw6fqXTd9IWOD0V4dg+75jf6o/RNQz
Gs5YVjnWUG5zWshUlJMgXs0ylotYn4yVP4Q9KeSSRZBB1rFp5CHW8bKhVf1wAOrA
7RY2FlfOVAt3IflfNS+wnl8t6zus0PThxJFiQC7LVjiGXUpNWz9S2RgtZzv/FjUa
EmIKes+kiaC9cUV2Iy5ZVzPE3QiTXDx7DoruWISGg6EySMObu3qc5PXlu4jiP8Nn
/A+Uf16k1vIutA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:01:24 2025 by rpki-client