Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File:                     jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier:          oGhXbS/Pj4DC9xOg0QuyHZwhq4PMrGN7o/0eK3l0L5I=
Subject key identifier:   49:26:CC:D1:01:C9:7B:FC:A0:DB:A2:C0:56:DE:5F:2D:C8:E4:79:57
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer:       /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial:       01987374121A7515F671C1DDFF6856C9925B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number:          135E
Signing time:             Mon 04 Aug 2025 05:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:43 +0000
Files and hashes:         1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: nO+gN/QCz0JqwB5kSwv2TqcApl0a0gLSR+eXP7urpN0=)
                          2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:12:1a:75:15:f6:71:c1:dd:ff:68:56:c9:92:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
        Validity
            Not Before: Aug  4 05:00:43 2025 GMT
            Not After : Aug  5 05:00:43 2025 GMT
        Subject: CN=4926ccd101c97bfca0dba2c056de5f2dc8e47957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:0a:6b:f1:27:25:60:f9:0d:b7:f8:e1:9b:
                    55:89:14:4a:80:0e:f4:f6:2a:c4:0f:e9:fc:84:98:
                    52:83:ba:38:6e:a2:2a:48:9b:98:39:e4:df:01:fa:
                    83:d7:5e:d5:61:45:53:38:34:c6:a2:af:6c:90:40:
                    57:f8:58:d6:d4:e5:1c:ae:e0:11:5d:db:f4:53:7d:
                    34:35:89:04:a1:b6:35:b3:5f:b3:03:da:b7:ca:a8:
                    89:bb:b6:37:6b:b2:75:79:83:d4:ca:5f:70:c5:f7:
                    63:87:1e:29:ae:11:a9:19:ba:8f:f5:5b:99:d5:42:
                    0f:9d:f1:92:24:05:ec:dc:9c:dd:41:38:54:08:ce:
                    74:ac:46:4f:ff:e7:67:5b:56:5c:29:82:33:26:cb:
                    3c:df:a2:96:16:97:df:e4:8e:90:3a:98:66:2b:e8:
                    99:99:f5:09:c3:33:0d:03:31:8b:3f:f9:5a:28:a9:
                    0f:e6:d7:6f:58:34:c1:3d:4d:d2:7f:ae:02:d4:ed:
                    a0:79:26:a4:02:c0:d1:8a:70:15:03:c4:1d:b3:49:
                    78:eb:15:00:df:cf:dc:cb:36:81:51:37:48:c8:a9:
                    a8:be:ec:bd:9c:23:60:a4:eb:47:18:c3:ab:e8:81:
                    46:8c:e5:96:07:98:53:23:0e:f8:57:0d:f5:6d:44:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:26:CC:D1:01:C9:7B:FC:A0:DB:A2:C0:56:DE:5F:2D:C8:E4:79:57
            X509v3 Authority Key Identifier:
                keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:e4:8c:a5:11:98:1d:01:9b:a2:a0:5b:f3:11:e7:4a:cf:
         07:c0:ea:23:d4:68:b7:30:69:2f:bb:77:91:1e:9b:e5:a9:1a:
         61:86:6e:d2:ff:9e:b3:78:b1:ad:a0:7d:b5:3a:70:75:db:e7:
         4a:04:d5:52:3c:89:89:39:d0:4d:f0:72:51:fa:a1:ef:c9:49:
         44:ab:12:a0:a6:fb:6e:c9:a1:d3:53:2c:9b:17:11:20:ed:84:
         c6:75:56:73:89:d9:f5:69:43:42:3f:71:83:fd:d0:92:e0:f3:
         7e:91:c1:30:1b:cf:f2:aa:f9:64:69:be:09:96:08:03:71:64:
         f4:01:72:96:09:6f:6d:66:f4:01:75:1a:ac:78:06:87:0d:6f:
         da:7f:23:af:e3:71:89:c7:e5:5a:a9:1e:14:0d:54:82:48:b8:
         92:74:c1:64:af:3a:8d:16:97:b3:b9:64:78:11:2d:08:f7:96:
         9c:f4:50:b4:f6:09:6f:80:24:e1:29:38:43:c7:23:4b:b1:21:
         80:5d:57:08:8a:5e:a6:06:8a:74:79:80:e7:c8:3b:12:eb:04:
         fe:09:24:e2:2f:a1:90:32:26:8e:d7:10:8c:a2:f0:a6:17:61:
         90:e7:7d:9e:ae:89:f6:64:57:6f:98:10:b9:6e:38:fd:7c:42:
         5a:5e:7a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdBIadRX2ccHd/2hWyZJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjUwODA0MDUwMDQzWhcNMjUwODA1MDUwMDQzWjAzMTEwLwYDVQQD
Eyg0OTI2Y2NkMTAxYzk3YmZjYTBkYmEyYzA1NmRlNWYyZGM4ZTQ3OTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CUKa/EnJWD5Dbf44ZtViRRKgA70
9irED+n8hJhSg7o4bqIqSJuYOeTfAfqD117VYUVTODTGoq9skEBX+FjW1OUcruAR
Xdv0U300NYkEobY1s1+zA9q3yqiJu7Y3a7J1eYPUyl9wxfdjhx4prhGpGbqP9VuZ
1UIPnfGSJAXs3JzdQThUCM50rEZP/+dnW1ZcKYIzJss836KWFpff5I6QOphmK+iZ
mfUJwzMNAzGLP/laKKkP5tdvWDTBPU3Sf64C1O2geSakAsDRinAVA8Qds0l46xUA
38/cyzaBUTdIyKmovuy9nCNgpOtHGMOr6IFGjOWWB5hTIw74Vw31bUSYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkmzNEByXv8oNuiwFbeXy3I5HlXMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/nkjKUR
mB0Bm6KgW/MR50rPB8DqI9RotzBpL7t3kR6b5akaYYZu0v+es3ixraB9tTpwddvn
SgTVUjyJiTnQTfByUfqh78lJRKsSoKb7bsmh01MsmxcRIO2ExnVWc4nZ9WlDQj9x
g/3QkuDzfpHBMBvP8qr5ZGm+CZYIA3Fk9AFylglvbWb0AXUarHgGhw1v2n8jr+Nx
icflWqkeFA1Ugki4knTBZK86jRaXs7lkeBEtCPeWnPRQtPYJb4Ak4Sk4Q8cjS7Eh
gF1XCIpepgaKdHmA58g7EusE/gkk4i+hkDImjtcQjKLwphdhkOd9nq6J9mRXb5gQ
uW44/XxCWl56Nw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:07 2025 by rpki-client