Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          /TQamgwjXev9Stjj85iABVa+eSu2kAQOdpd4Vfj+aJU=
Subject key identifier:   42:9A:81:50:A5:70:4A:47:54:60:43:36:CA:4E:9A:74:5A:41:19:A7
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       01988FFDDB1A0897E6170CC0DC2B594F6E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          05E1
Signing time:             Sat 09 Aug 2025 18:00:35 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:35 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:35 +0000
Files and hashes:         1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
                          2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: A9yWjecqMg/RD2mrbzphQ/y/SkOo2ZdzclNpxCUMrME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fd:db:1a:08:97:e6:17:0c:c0:dc:2b:59:4f:6e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: Aug  9 18:00:35 2025 GMT
            Not After : Aug 10 18:00:35 2025 GMT
        Subject: CN=429a8150a5704a4754604336ca4e9a745a4119a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:9f:84:89:44:4e:fd:0a:be:24:76:3e:37:
                    4d:23:d1:c0:af:ac:f3:d9:0f:66:d9:3f:d5:8c:82:
                    66:17:10:4b:f4:88:d8:ea:e1:8e:c1:fd:2b:25:e4:
                    b4:e7:51:ae:50:3d:b2:52:33:59:4b:56:6d:52:9a:
                    82:b5:a4:f8:6d:24:1f:f7:e9:6b:32:f8:83:8e:a8:
                    e8:fb:af:7a:28:09:3a:88:a2:ce:7b:d9:76:63:4f:
                    0d:fb:2c:5f:ec:6c:09:29:82:2e:e6:9a:49:4f:82:
                    59:58:5e:a1:d2:6e:a8:7a:5d:3e:d7:e9:47:6a:d2:
                    96:e4:cd:b3:34:86:46:60:55:55:79:40:df:8c:f3:
                    9a:5b:31:98:4a:72:1b:d5:6e:eb:9e:19:d4:c3:ec:
                    20:9d:22:e5:23:31:17:ef:a0:0a:00:16:83:04:cd:
                    1e:ca:f1:8c:8f:22:65:c0:a5:fa:81:6a:5b:d7:7e:
                    1e:90:3f:37:4b:a6:d1:fd:58:e9:dc:63:1f:1e:a8:
                    76:07:7e:43:f6:6c:14:f2:19:0e:c4:fd:fe:97:10:
                    2f:04:a0:6d:93:e8:fa:3f:cf:3e:86:6c:fd:20:be:
                    00:1f:e4:39:0d:31:14:1d:b6:cc:be:ae:ca:fa:25:
                    29:bf:26:4d:5c:7a:8f:3c:b0:1a:3d:25:21:c9:5f:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:81:50:A5:70:4A:47:54:60:43:36:CA:4E:9A:74:5A:41:19:A7
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:7f:46:1e:d7:b9:d1:92:d2:48:0e:28:d7:91:12:ba:01:
         cd:35:07:99:c7:27:80:ec:7d:1a:d9:63:17:1f:f4:b7:45:0a:
         af:45:74:90:7e:62:24:74:76:4b:79:32:ee:47:92:55:7c:90:
         2b:e8:bc:f1:d0:50:bf:10:50:af:10:d7:89:9d:0a:b6:90:d7:
         5a:69:db:47:b7:43:61:48:92:c9:74:c1:f7:8c:d2:09:eb:a7:
         7b:3c:43:a5:b9:db:b3:9c:ac:fc:72:8d:fb:e7:36:8a:bd:51:
         cc:42:09:50:02:30:86:31:98:a1:4f:0d:af:24:83:b2:d2:5b:
         f1:dd:2a:7c:b5:ce:a3:48:5f:c6:21:d6:8f:8a:af:db:7f:05:
         8e:6d:15:a4:2c:7b:98:81:bd:28:45:a2:63:9d:0e:55:36:d7:
         00:20:21:3a:16:08:c8:82:69:55:55:bd:44:85:49:d2:26:41:
         4e:66:f2:d3:a2:a5:fa:40:c8:d7:66:49:20:f3:9c:d8:ec:a8:
         89:dc:c2:09:23:02:b7:b3:41:67:17:74:78:4d:88:38:c8:02:
         a1:05:2f:03:e5:63:b5:36:c6:0f:9d:ca:93:e4:1c:4a:2c:c6:
         99:41:f4:0e:17:e1:8a:af:81:d4:61:8b:83:ee:1f:c7:83:b2:
         d6:c0:11:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/dsaCJfmFwzA3CtZT25HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2M5ZDUwMDdjMDA1ODk5MzI5YmNlZTM2NjMzMDhhMzdk
NDBlYWUwHhcNMjUwODA5MTgwMDM1WhcNMjUwODEwMTgwMDM1WjAzMTEwLwYDVQQD
Eyg0MjlhODE1MGE1NzA0YTQ3NTQ2MDQzMzZjYTRlOWE3NDVhNDExOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhSfhIlETv0KviR2PjdNI9HAr6zz
2Q9m2T/VjIJmFxBL9IjY6uGOwf0rJeS051GuUD2yUjNZS1ZtUpqCtaT4bSQf9+lr
MviDjqjo+696KAk6iKLOe9l2Y08N+yxf7GwJKYIu5ppJT4JZWF6h0m6oel0+1+lH
atKW5M2zNIZGYFVVeUDfjPOaWzGYSnIb1W7rnhnUw+wgnSLlIzEX76AKABaDBM0e
yvGMjyJlwKX6gWpb134ekD83S6bR/Vjp3GMfHqh2B35D9mwU8hkOxP3+lxAvBKBt
k+j6P88+hmz9IL4AH+Q5DTEUHbbMvq7K+iUpvyZNXHqPPLAaPSUhyV91TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKagVClcEpHVGBDNspOmnRaQRmnMB8GA1UdIwQY
MBaAFCbMnVAHwAWJkym87jZjMIo31A6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgt
M2NiYTRiZTRjMjllLzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgtM2NiYTRiZTRjMjll
LzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7d/Rh7X
udGS0kgOKNeREroBzTUHmccngOx9GtljFx/0t0UKr0V0kH5iJHR2S3ky7keSVXyQ
K+i88dBQvxBQrxDXiZ0KtpDXWmnbR7dDYUiSyXTB94zSCeunezxDpbnbs5ys/HKN
++c2ir1RzEIJUAIwhjGYoU8NrySDstJb8d0qfLXOo0hfxiHWj4qv238Fjm0VpCx7
mIG9KEWiY50OVTbXACAhOhYIyIJpVVW9RIVJ0iZBTmby06Kl+kDI12ZJIPOc2Oyo
idzCCSMCt7NBZxd0eE2IOMgCoQUvA+VjtTbGD53Kk+QcSizGmUH0Dhfhiq+B1GGL
g+4fx4Oy1sARRA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:34 2025 by rpki-client