Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          96VcwgEvEmkL847P5rAS7GTenOwjStXOdD+RalkA+YY=
Subject key identifier:   C0:AD:B6:FE:DC:C9:CD:67:E4:1F:39:6F:BA:E8:68:E7:64:DA:F1:30
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       01987BD29A68859473311BB8B39184235FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          76
Signing time:             Tue 05 Aug 2025 20:00:56 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:56 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:56 +0000
Files and hashes:         1: AaqGc6BSfnPK1j4fwRiQ9B5z8Ko.roa (hash: JZb3yca7iWrB+TqkYDnL3xcicD4SCErsZ4tkUL7SBA4=)
                          2: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=)
                          3: hYZifB394Q_fg_dn2DSKA_YIZwA.roa (hash: qAci8Pygint2lrSaNgNslvSojUdYL0XMttlZXK/07DQ=)
                          4: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: ejZflzJD9QX6/+ylc8N+rBfeaPHzq7gPU3e5S0ZOY2Q=)
                          5: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:9a:68:85:94:73:31:1b:b8:b3:91:84:23:5f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Aug  5 20:00:56 2025 GMT
            Not After : Aug  6 20:00:56 2025 GMT
        Subject: CN=c0adb6fedcc9cd67e41f396fbae868e764daf130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8f:0f:af:dd:45:78:dd:48:ca:0c:58:0f:c8:
                    d6:8e:90:6d:8f:b5:ac:2c:db:a5:fb:91:20:92:c7:
                    ba:1d:b6:e9:dd:97:82:30:8f:14:f1:0a:8c:36:9d:
                    1d:81:d9:0f:12:7e:27:ec:14:6a:cd:0c:1c:47:0f:
                    18:61:f7:95:ef:59:c7:33:ee:b9:df:c7:14:9b:ee:
                    72:90:1e:10:6d:11:cc:5f:e9:ee:50:3e:9e:43:f5:
                    53:0d:0e:ba:89:46:7f:f5:8c:e6:d8:84:a7:44:dd:
                    e5:6e:3c:b0:b3:d1:c9:95:4e:14:6f:33:13:62:b3:
                    0a:e1:f6:d3:8d:45:c5:26:30:e4:97:39:07:f9:8c:
                    78:26:aa:cc:65:3e:95:3a:28:1f:fe:6b:3c:32:e8:
                    34:92:3b:47:ae:e3:66:f1:41:c2:ec:32:d2:59:70:
                    64:c2:38:0d:a3:b8:21:86:1a:fb:91:76:a5:aa:2e:
                    4d:4b:f6:9e:b1:8f:01:bf:2d:12:36:c9:64:06:ac:
                    06:79:3c:24:1f:b3:92:f3:4b:92:b6:0f:e7:77:db:
                    5a:c9:e5:ef:13:0f:a8:00:b6:a4:ef:e1:44:77:12:
                    64:cd:da:d7:04:d5:3c:30:1b:37:3b:50:e6:bc:f0:
                    48:62:5a:1d:be:00:41:9d:a5:ed:6e:e3:2c:02:df:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AD:B6:FE:DC:C9:CD:67:E4:1F:39:6F:BA:E8:68:E7:64:DA:F1:30
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:2c:a1:ff:34:74:8f:23:0e:78:7d:52:0c:94:f9:76:27:
         27:ec:b6:39:ae:85:60:fb:7c:0f:03:9d:40:45:db:0c:c4:81:
         79:ad:89:4b:95:54:99:41:3b:54:62:4d:41:31:f0:e7:41:53:
         4f:af:d3:78:4a:67:0f:1c:71:81:95:d2:9a:62:2b:70:3e:21:
         5e:68:77:4b:c4:c1:bf:61:2f:c2:74:a8:25:cf:39:91:e9:c0:
         a2:76:9b:3a:27:47:c4:fb:93:8d:17:ad:4e:79:d1:cc:fa:5c:
         ed:5b:80:da:a2:3e:40:0d:15:a5:41:11:de:2e:19:f7:d9:36:
         2b:0f:98:16:00:02:d8:74:cb:99:96:24:97:77:a5:28:01:ec:
         dc:ce:4b:8f:a5:9c:ca:69:80:be:7f:0e:03:e1:52:44:23:99:
         6e:55:d7:ce:07:a8:47:11:b6:9e:11:0e:cf:3d:e7:2f:2b:17:
         42:76:62:6d:18:05:bf:af:46:c3:40:66:ff:3e:f5:f5:c2:ee:
         88:bc:0c:c5:c8:50:9f:28:3d:e6:90:b9:31:2b:bf:df:45:bf:
         53:aa:16:cb:30:b5:5e:51:4e:98:56:b2:01:a1:66:04:33:0e:
         9c:f0:2b:26:2f:38:a6:5f:2d:cc:86:7d:76:b7:18:8b:74:5e:
         78:5a:47:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70ppohZRzMRu4s5GEI1+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw
OTg1ZjEwHhcNMjUwODA1MjAwMDU2WhcNMjUwODA2MjAwMDU2WjAzMTEwLwYDVQQD
EyhjMGFkYjZmZWRjYzljZDY3ZTQxZjM5NmZiYWU4NjhlNzY0ZGFmMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo8Pr91FeN1IygxYD8jWjpBtj7Ws
LNul+5Egkse6Hbbp3ZeCMI8U8QqMNp0dgdkPEn4n7BRqzQwcRw8YYfeV71nHM+65
38cUm+5ykB4QbRHMX+nuUD6eQ/VTDQ66iUZ/9Yzm2ISnRN3lbjyws9HJlU4UbzMT
YrMK4fbTjUXFJjDklzkH+Yx4JqrMZT6VOigf/ms8Mug0kjtHruNm8UHC7DLSWXBk
wjgNo7ghhhr7kXalqi5NS/aesY8Bvy0SNslkBqwGeTwkH7OS80uStg/nd9tayeXv
Ew+oALak7+FEdxJkzdrXBNU8MBs3O1DmvPBIYlodvgBBnaXtbuMsAt9fRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCttv7cyc1n5B85b7roaOdk2vEwMB8GA1UdIwQY
MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt
NDk0NzEzYTk5NjNhLzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh
LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy4sof80
dI8jDnh9UgyU+XYnJ+y2Oa6FYPt8DwOdQEXbDMSBea2JS5VUmUE7VGJNQTHw50FT
T6/TeEpnDxxxgZXSmmIrcD4hXmh3S8TBv2EvwnSoJc85kenAonabOidHxPuTjRet
TnnRzPpc7VuA2qI+QA0VpUER3i4Z99k2Kw+YFgAC2HTLmZYkl3elKAHs3M5Lj6Wc
ymmAvn8OA+FSRCOZblXXzgeoRxG2nhEOzz3nLysXQnZibRgFv69Gw0Bm/z719cLu
iLwMxchQnyg95pC5MSu/30W/U6oWyzC1XlFOmFayAaFmBDMOnPArJi84pl8tzIZ9
drcYi3ReeFpHHQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:57 2025 by rpki-client