Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File:                     mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier:          5x68QBfpgwrCNreL3FkWycUGjx6EJYkNXN4ajqjxdWk=
Subject key identifier:   33:41:6C:17:70:43:D6:30:45:04:B3:24:1E:88:DE:06:66:3E:11:42
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer:       /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial:       01984407C41B5DFAA5DE367C77F05DE7B63B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number:          1593
Signing time:             Sat 26 Jul 2025 00:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 00:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 00:00:16 +0000
Files and hashes:         1: V-MtEFAl-wCRS2pESKzV6P6YTGg.roa (hash: eJVKgFjZ3+wJXzgqDKuQr6XkPa6E31J6OO87/ztXlAY=)
                          2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: Fy2fz8fLGcxc8W9+PFeoCRGxB+3X9l6OqYT8fWxrbqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:07:c4:1b:5d:fa:a5:de:36:7c:77:f0:5d:e7:b6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
        Validity
            Not Before: Jul 26 00:00:16 2025 GMT
            Not After : Jul 27 00:00:16 2025 GMT
        Subject: CN=33416c177043d6304504b3241e88de06663e1142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:5f:7c:f9:5d:45:90:a4:f8:14:90:91:27:
                    c6:3c:65:2d:8a:bc:31:86:00:c0:c7:91:ae:73:9b:
                    4d:23:9a:13:d0:dd:16:33:d0:8f:f1:b4:4a:d9:9e:
                    76:11:4e:e7:49:6a:cf:85:ce:aa:fe:73:87:c6:d6:
                    7e:cc:bf:c0:fe:db:4f:96:a7:9b:d6:7f:d3:71:72:
                    b4:90:a6:d5:14:81:19:bf:e7:55:cc:c0:d6:50:d2:
                    3a:26:5e:52:bd:a1:fb:80:9f:ef:f0:36:ec:ae:b4:
                    4c:7b:4f:3e:11:b6:6f:e6:8e:6a:dc:05:f6:71:39:
                    c5:f8:ea:53:b9:5b:89:6b:6a:9a:c1:e3:8f:28:02:
                    e6:34:a2:3b:ff:f7:a8:a9:2e:0b:24:1c:73:07:be:
                    e4:e6:dc:7a:e9:7e:6e:34:28:62:b9:1c:7f:2c:b5:
                    96:b1:86:51:07:96:c0:4b:6b:38:c0:c5:8d:0b:6d:
                    46:ad:fb:5e:c4:cf:67:f9:4c:2e:94:f5:d9:94:c0:
                    a2:24:aa:79:3d:ff:5a:69:02:2c:72:23:1c:a4:4b:
                    a3:3b:5f:12:08:cd:91:2f:7f:54:4f:63:df:14:15:
                    92:4a:7c:74:11:b5:09:92:94:0e:8d:f1:bd:a3:b8:
                    44:8b:37:51:26:c9:3c:b5:47:45:8b:79:f8:07:27:
                    81:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:6C:17:70:43:D6:30:45:04:B3:24:1E:88:DE:06:66:3E:11:42
            X509v3 Authority Key Identifier:
                keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:d0:8a:0d:aa:98:9f:13:dc:43:9e:50:ea:2b:76:c5:5a:
         37:19:d3:2e:5a:ce:37:e6:9f:9d:3a:42:a6:1d:ff:c6:f9:58:
         00:e9:f0:da:ad:c4:f2:9a:7b:be:97:0f:47:e7:a7:9c:d4:8c:
         b3:e6:e7:f0:54:43:c7:fa:51:fb:a1:6e:da:86:e7:a3:e1:a2:
         8c:a3:97:db:7b:a3:e8:ce:12:71:87:47:a1:21:ac:9e:01:11:
         de:57:65:61:56:af:0b:45:d4:e8:4e:32:6c:ee:0a:c6:f6:17:
         14:41:b7:20:45:cc:bc:3f:33:18:1d:09:b7:d3:0a:7e:15:6f:
         ee:1f:e4:b5:0f:d1:51:20:22:a4:78:dc:e3:f1:f2:98:78:1b:
         ee:e1:1f:c8:cf:23:ee:d7:13:6d:c7:e5:ed:7a:37:fe:80:aa:
         56:eb:fa:29:d4:6e:1b:00:80:81:79:2e:06:c7:dc:88:d9:f8:
         8f:e0:4b:2f:dc:24:55:44:31:6e:a3:3b:25:ef:f1:48:3f:d7:
         fa:06:49:c1:a2:33:f8:74:e3:4b:15:0f:cf:1c:80:80:60:c2:
         39:65:79:f4:c8:ad:56:43:9b:4a:95:48:ee:d9:cb:9a:39:1a:
         08:26:a5:12:0c:dc:56:00:71:f7:ac:03:62:df:cb:11:4d:72:
         cd:70:21:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEB8QbXfql3jZ8d/Bd57Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm
NzNjYjUwHhcNMjUwNzI2MDAwMDE2WhcNMjUwNzI3MDAwMDE2WjAzMTEwLwYDVQQD
EygzMzQxNmMxNzcwNDNkNjMwNDUwNGIzMjQxZTg4ZGUwNjY2M2UxMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3ZffPldRZCk+BSQkSfGPGUtirwx
hgDAx5Guc5tNI5oT0N0WM9CP8bRK2Z52EU7nSWrPhc6q/nOHxtZ+zL/A/ttPlqeb
1n/TcXK0kKbVFIEZv+dVzMDWUNI6Jl5SvaH7gJ/v8DbsrrRMe08+EbZv5o5q3AX2
cTnF+OpTuVuJa2qaweOPKALmNKI7//eoqS4LJBxzB77k5tx66X5uNChiuRx/LLWW
sYZRB5bAS2s4wMWNC21GrftexM9n+UwulPXZlMCiJKp5Pf9aaQIsciMcpEujO18S
CM2RL39UT2PfFBWSSnx0EbUJkpQOjfG9o7hEizdRJsk8tUdFi3n4ByeBiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNBbBdwQ9YwRQSzJB6I3gZmPhFCMB8GA1UdIwQY
MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct
MDEyMDhkODZkZGNjLzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj
LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbrQig2q
mJ8T3EOeUOordsVaNxnTLlrON+afnTpCph3/xvlYAOnw2q3E8pp7vpcPR+ennNSM
s+bn8FRDx/pR+6Fu2obno+GijKOX23uj6M4ScYdHoSGsngER3ldlYVavC0XU6E4y
bO4KxvYXFEG3IEXMvD8zGB0Jt9MKfhVv7h/ktQ/RUSAipHjc4/HymHgb7uEfyM8j
7tcTbcfl7Xo3/oCqVuv6KdRuGwCAgXkuBsfciNn4j+BLL9wkVUQxbqM7Je/xSD/X
+gZJwaIz+HTjSxUPzxyAgGDCOWV59MitVkObSpVI7tnLmjkaCCalEgzcVgBx96wD
Yt/LEU1yzXAhZg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 05:43:41 2025 by rpki-client