Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File:                     aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier:          XU0NWUVH1XNvth5xgYnbixIT38P8Rqx0YdG6pzkmdB8=
Subject key identifier:   F0:6B:4B:F7:08:E4:2E:3A:12:F7:B4:25:CE:98:B6:E0:0A:09:65:2A
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer:       /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial:       0198820B8BB1D93539CC4435A4E1ABCFB2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 01:00:51 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:51 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:51 +0000
Files and hashes:         1: Al5XA-JtcwQZgxg8lrEchelWFKc.roa (hash: awq0OKEpSlRcquvq5uS+1UqeIOS4jFcQD5+W9s9X3Ag=)
                          2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: bcEoT6IFgxsLUkUMJOmGA6h7fnQkf6xVYLtt7BAJlcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:8b:b1:d9:35:39:cc:44:35:a4:e1:ab:cf:b2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
        Validity
            Not Before: Aug  7 01:00:51 2025 GMT
            Not After : Aug  8 01:00:51 2025 GMT
        Subject: CN=f06b4bf708e42e3a12f7b425ce98b6e00a09652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:a1:7a:5d:aa:9c:5a:f1:8d:de:a5:bd:98:
                    6e:30:0b:9f:90:e7:59:4a:11:a3:ba:c8:5d:7f:18:
                    f5:d1:a7:33:d0:60:c6:b4:ec:c3:e0:19:5d:91:d0:
                    31:ba:75:77:1a:0d:c7:ab:3c:48:b4:f0:27:6e:3c:
                    45:b7:9b:7c:95:14:f0:ca:78:80:ed:bc:b7:c8:47:
                    df:c4:26:df:83:d6:1d:56:6d:7e:fb:75:0f:34:6f:
                    2f:b2:93:b2:07:71:00:b2:55:73:1b:8d:22:4b:4b:
                    eb:99:4f:1a:ae:45:9c:93:2e:16:6a:e2:30:86:32:
                    2f:97:d6:7f:a1:e6:90:28:a6:10:fb:a5:2d:58:9c:
                    d2:a5:83:a2:9e:0f:f9:47:85:3f:0d:9d:95:3b:d1:
                    e3:a9:62:87:b8:41:56:bc:d9:02:d5:cc:41:e4:70:
                    d4:4d:79:9a:69:be:06:cd:cf:07:d9:7a:63:f8:96:
                    9d:fb:87:6d:b9:c2:75:53:d6:78:f4:54:6b:0a:60:
                    7e:9b:0b:40:8e:34:10:28:6f:5c:f4:c5:bd:dd:6a:
                    e5:b8:c9:57:6e:af:56:9e:de:0e:d7:93:cf:c0:11:
                    37:01:c9:cc:00:e4:66:b4:2d:95:49:d4:f4:b4:d5:
                    0b:1b:1a:01:1f:48:25:d0:89:0a:94:14:aa:93:79:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6B:4B:F7:08:E4:2E:3A:12:F7:B4:25:CE:98:B6:E0:0A:09:65:2A
            X509v3 Authority Key Identifier:
                keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:96:b6:6d:40:ab:74:d6:c3:8c:d2:27:21:00:9d:d6:02:
         94:e2:53:b3:ff:91:53:59:30:0d:13:40:b0:e0:d2:b7:49:6d:
         c2:03:8a:f4:7e:c5:a5:20:b5:b1:90:17:c1:a4:d0:a6:7c:5e:
         e1:de:69:fe:fb:7b:50:e2:ce:31:db:d1:f6:a2:aa:b1:05:0e:
         bd:6b:9e:e9:63:25:f8:cb:40:35:1e:b5:ef:90:f6:37:7a:30:
         d2:8c:c8:6b:97:c8:ad:ad:57:47:03:02:25:b3:64:32:21:a6:
         07:c3:d6:89:61:a5:55:3b:b5:22:97:85:ed:a5:92:48:26:12:
         61:1c:d9:a7:68:39:2d:2e:58:99:82:fb:21:fd:45:34:46:78:
         73:97:9b:4a:c0:36:a7:09:bd:c3:68:7f:f0:a3:48:56:bd:2a:
         2f:b3:3c:61:92:69:11:7a:aa:ef:b9:e8:c1:85:55:c9:9d:1b:
         6f:80:a4:ac:16:31:38:2f:0f:56:c9:f3:f4:ed:1e:8a:71:2f:
         4e:30:49:51:81:71:ef:a1:e4:5e:e0:a5:4b:f0:06:72:b2:be:
         6e:24:ba:8d:47:30:1f:f1:bc:78:d9:76:49:df:a8:32:9f:67:
         6b:bb:0f:0a:11:74:7c:4f:89:ef:cc:21:f4:eb:51:f9:51:e2:
         ff:72:e0:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC4ux2TU5zEQ1pOGrz7LVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk
YTFiYjMwHhcNMjUwODA3MDEwMDUxWhcNMjUwODA4MDEwMDUxWjAzMTEwLwYDVQQD
EyhmMDZiNGJmNzA4ZTQyZTNhMTJmN2I0MjVjZTk4YjZlMDBhMDk2NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorKhel2qnFrxjd6lvZhuMAufkOdZ
ShGjushdfxj10acz0GDGtOzD4BldkdAxunV3Gg3HqzxItPAnbjxFt5t8lRTwyniA
7by3yEffxCbfg9YdVm1++3UPNG8vspOyB3EAslVzG40iS0vrmU8arkWcky4WauIw
hjIvl9Z/oeaQKKYQ+6UtWJzSpYOing/5R4U/DZ2VO9HjqWKHuEFWvNkC1cxB5HDU
TXmaab4Gzc8H2Xpj+Jad+4dtucJ1U9Z49FRrCmB+mwtAjjQQKG9c9MW93WrluMlX
bq9Wnt4O15PPwBE3AcnMAORmtC2VSdT0tNULGxoBH0gl0IkKlBSqk3mmvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBrS/cI5C46Eve0Jc6YtuAKCWUqMB8GA1UdIwQY
MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt
ODM3YzVlMTJiZDA0LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0
LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8yWtm1A
q3TWw4zSJyEAndYClOJTs/+RU1kwDRNAsODSt0ltwgOK9H7FpSC1sZAXwaTQpnxe
4d5p/vt7UOLOMdvR9qKqsQUOvWue6WMl+MtANR6175D2N3ow0ozIa5fIra1XRwMC
JbNkMiGmB8PWiWGlVTu1IpeF7aWSSCYSYRzZp2g5LS5YmYL7If1FNEZ4c5ebSsA2
pwm9w2h/8KNIVr0qL7M8YZJpEXqq77nowYVVyZ0bb4CkrBYxOC8PVsnz9O0einEv
TjBJUYFx76HkXuClS/AGcrK+biS6jUcwH/G8eNl2Sd+oMp9na7sPChF0fE+J78wh
9OtR+VHi/3LgSQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:57 2025 by rpki-client