Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File:                     S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier:          dIVulGF4uk6CixijhB21Anx8iBxR/IyDY/99zMAji6o=
Subject key identifier:   97:98:91:88:A6:48:DC:99:F0:F2:79:75:63:EA:6A:14:63:41:52:4B
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer:       /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial:       019873E286C956D7D79141159B125C142344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number:          0475
Signing time:             Mon 04 Aug 2025 07:01:22 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:22 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:22 +0000
Files and hashes:         1: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (hash: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=)
                          2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: nR38ExAmUpDM4VZHuVoNu1h646leLRFsXDuor0Lq82g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:86:c9:56:d7:d7:91:41:15:9b:12:5c:14:23:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
        Validity
            Not Before: Aug  4 07:01:22 2025 GMT
            Not After : Aug  5 07:01:22 2025 GMT
        Subject: CN=97989188a648dc99f0f2797563ea6a146341524b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:1c:68:c5:64:60:5b:c9:13:3b:c6:39:89:
                    28:9a:bb:f4:c2:54:b5:e0:ad:9e:85:3a:37:62:c2:
                    50:26:54:22:07:c0:d5:ba:45:ea:11:87:77:f0:95:
                    46:c7:8c:9d:1e:f3:c9:ea:c2:cb:51:52:de:fe:32:
                    76:6d:a4:8f:52:65:85:65:ba:e1:ad:40:a7:1d:46:
                    4e:76:08:78:0a:6b:a2:db:9e:66:d8:e0:b0:05:54:
                    47:4a:a8:95:bd:fd:82:60:4b:e3:3f:0f:65:8e:c7:
                    78:9e:0d:a6:0e:9f:f3:7f:54:25:f6:b3:89:a5:a0:
                    d8:bf:fe:f4:b9:c8:bf:52:18:0d:80:60:b5:a7:cc:
                    7d:45:5c:81:71:7b:55:7c:77:2a:8c:86:0d:02:08:
                    21:1b:a4:5e:e4:99:88:6e:d8:ca:9c:c0:b5:4a:3c:
                    f2:a8:90:9d:91:e1:e4:a7:0c:05:d5:d4:59:71:b3:
                    4e:33:88:ca:2d:8e:db:bf:f6:95:4d:7a:45:c1:ad:
                    6a:15:ad:a8:d9:ad:a7:2a:3f:9e:0b:30:c5:c3:75:
                    66:ae:4e:87:7a:97:22:a2:f8:95:c8:60:fa:86:97:
                    38:7d:4c:69:25:6f:1c:90:f3:36:19:de:63:24:ce:
                    b3:21:d2:d6:34:95:c8:56:d0:de:c8:24:1e:d9:f0:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:91:88:A6:48:DC:99:F0:F2:79:75:63:EA:6A:14:63:41:52:4B
            X509v3 Authority Key Identifier:
                keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:07:ea:e3:07:64:22:b9:0a:33:46:9f:b5:1f:79:2a:ec:
         fb:23:c0:45:de:84:b5:50:8a:2f:7e:91:2e:5c:71:02:87:88:
         59:54:82:96:be:5c:fa:46:89:d9:b8:81:78:35:6f:72:84:14:
         63:56:fa:cd:57:7d:8b:68:eb:15:35:be:62:7e:0d:3c:1b:15:
         28:b2:a7:08:78:85:b8:99:be:98:10:33:38:aa:11:53:07:de:
         cd:24:5c:04:5c:f8:64:ef:4f:ad:3a:84:88:55:23:43:1c:26:
         88:8b:04:a4:f3:0b:d0:2c:15:0f:4c:e1:5c:e1:0f:9b:6c:19:
         6e:29:ad:ee:f7:49:ba:36:c7:a1:b0:52:d6:1e:9d:c8:e3:56:
         05:0a:24:97:10:4d:1d:19:35:67:10:7b:29:d4:cf:13:97:2e:
         75:c6:d6:a5:10:68:72:40:35:3b:54:f4:a2:e4:2e:1d:b6:02:
         1f:a9:7b:3b:7e:ca:be:9d:ba:7a:b6:c4:dd:d8:6b:cb:3d:55:
         dd:cd:ce:c3:58:41:5c:92:2c:20:16:63:e0:86:a1:91:36:8c:
         34:15:12:07:72:97:cb:a2:03:ef:f6:b6:5f:9f:7c:6d:50:aa:
         1d:c5:1e:7f:a9:ed:0b:bd:7c:43:8a:8b:e4:be:9d:6e:66:e4:
         ce:0b:8b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4obJVtfXkUEVmxJcFCNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTkxOWE4NGUxYTIyOWY3ODlkOTM5ZDFhYWE3MTJhNGQz
YzM5OWQwHhcNMjUwODA0MDcwMTIyWhcNMjUwODA1MDcwMTIyWjAzMTEwLwYDVQQD
Eyg5Nzk4OTE4OGE2NDhkYzk5ZjBmMjc5NzU2M2VhNmExNDYzNDE1MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/wcaMVkYFvJEzvGOYkomrv0wlS1
4K2ehTo3YsJQJlQiB8DVukXqEYd38JVGx4ydHvPJ6sLLUVLe/jJ2baSPUmWFZbrh
rUCnHUZOdgh4Cmui255m2OCwBVRHSqiVvf2CYEvjPw9ljsd4ng2mDp/zf1Ql9rOJ
paDYv/70uci/UhgNgGC1p8x9RVyBcXtVfHcqjIYNAgghG6Re5JmIbtjKnMC1Sjzy
qJCdkeHkpwwF1dRZcbNOM4jKLY7bv/aVTXpFwa1qFa2o2a2nKj+eCzDFw3Vmrk6H
epcioviVyGD6hpc4fUxpJW8ckPM2Gd5jJM6zIdLWNJXIVtDeyCQe2fAbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeYkYimSNyZ8PJ5dWPqahRjQVJLMB8GA1UdIwQY
MBaAFEvpGahOGiKfeJ2TnRqqcSpNPDmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMt
MTE5NWZlMDUwZGUxLzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zNjc3NDgtODg1Yy00NjIxLWI0NGMtMTE5NWZlMDUwZGUx
LzEvUy1rWnFFNGFJcDk0blpPZEdxcHhLazA4T1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRYH6uMH
ZCK5CjNGn7UfeSrs+yPARd6EtVCKL36RLlxxAoeIWVSClr5c+kaJ2biBeDVvcoQU
Y1b6zVd9i2jrFTW+Yn4NPBsVKLKnCHiFuJm+mBAzOKoRUwfezSRcBFz4ZO9PrTqE
iFUjQxwmiIsEpPML0CwVD0zhXOEPm2wZbimt7vdJujbHobBS1h6dyONWBQoklxBN
HRk1ZxB7KdTPE5cudcbWpRBockA1O1T0ouQuHbYCH6l7O37Kvp26erbE3dhryz1V
3c3Ow1hBXJIsIBZj4IahkTaMNBUSB3KXy6ID7/a2X598bVCqHcUef6ntC718Q4qL
5L6dbmbkzguLMA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:18 2025 by rpki-client