Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File:                     IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier:          6j9HiARFFPY5u9Lg5U9cQwYdRABBCyBg671sgo77P8E=
Subject key identifier:   FA:05:AC:50:F8:BB:91:54:DC:B0:12:C1:15:49:F1:A9:EE:47:E6:D8
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer:       /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial:       01984589B72E91465BB07DEB875745BC3278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number:          12EE
Signing time:             Sat 26 Jul 2025 07:01:49 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:49 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:49 +0000
Files and hashes:         1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
                          2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: MfEV4+Js463rPc72kqmREBi/ox8GAjvOw5H7sR6YsK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:b7:2e:91:46:5b:b0:7d:eb:87:57:45:bc:32:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
        Validity
            Not Before: Jul 26 07:01:49 2025 GMT
            Not After : Jul 27 07:01:49 2025 GMT
        Subject: CN=fa05ac50f8bb9154dcb012c11549f1a9ee47e6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:8c:9a:e4:3a:52:0b:3a:1c:45:af:29:20:
                    ae:8c:87:61:10:1b:23:83:47:93:70:94:e1:3d:f0:
                    09:a2:c9:f6:57:ed:62:82:14:b5:e7:99:0e:a5:5e:
                    79:a4:3f:2a:c0:ee:b0:11:ba:c9:af:fd:c4:f5:7a:
                    5d:04:7e:0e:f5:a3:1b:ac:c3:7a:3d:99:55:97:0d:
                    2d:34:8b:92:34:36:3e:2d:d9:d5:7f:c9:70:de:c0:
                    0d:46:6d:7d:ca:57:a6:d5:76:98:54:19:05:18:2d:
                    8b:d9:19:d4:96:cb:7b:17:35:20:e3:f8:ea:6e:d0:
                    19:59:76:00:3b:03:d5:24:74:6b:fb:f9:ff:d8:68:
                    de:1c:40:80:06:40:9b:76:b1:be:5c:6e:3d:55:0b:
                    b1:43:e6:87:49:1d:77:d0:61:08:67:e5:6f:f0:c3:
                    6f:bc:a8:05:fe:41:1b:1d:f6:a7:00:b1:f5:15:8d:
                    85:d2:22:de:1c:a1:6f:aa:13:2f:07:d7:b1:37:94:
                    ae:67:c9:a4:41:41:4e:64:95:0f:d9:90:b4:12:70:
                    85:61:18:a4:40:1b:4a:8b:4c:f4:19:2e:d4:c0:8d:
                    7e:43:37:4e:c1:04:65:36:1a:a6:80:fe:7e:ef:a8:
                    13:a4:78:19:84:18:90:7c:a0:de:70:44:a1:04:54:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:05:AC:50:F8:BB:91:54:DC:B0:12:C1:15:49:F1:A9:EE:47:E6:D8
            X509v3 Authority Key Identifier:
                keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:04:55:1f:2d:06:ac:93:cc:d0:d9:1a:91:6f:07:55:32:16:
         3a:51:a9:be:6d:58:85:6e:67:de:b0:27:b8:51:af:63:eb:5b:
         76:48:00:9b:c3:c6:11:a8:da:52:57:12:7e:ee:3c:2a:54:96:
         00:e2:4c:30:65:dc:82:7c:00:08:a0:c3:77:84:9d:27:8d:66:
         06:67:3a:54:89:a3:fd:bd:ec:a0:a6:f6:0c:fe:ff:90:8b:53:
         2e:02:64:e2:6e:37:6f:4b:a6:aa:bd:14:94:e5:21:6d:7b:51:
         21:cb:2e:1b:b7:d6:80:0a:43:61:58:d3:ae:3d:26:e8:4a:fb:
         04:9d:41:66:8e:f2:93:97:8e:02:33:c5:49:6e:45:d8:93:99:
         a8:5f:9c:45:e7:10:4b:ee:09:b0:3d:9f:37:7f:18:af:58:22:
         e1:a5:04:95:82:e3:df:78:72:86:18:c6:f0:89:97:7f:83:a7:
         6c:63:50:16:56:08:8b:b9:94:7c:63:94:dc:aa:c1:1c:69:6f:
         db:b5:48:01:53:55:a5:e1:89:12:e1:ff:89:fe:96:c5:40:ac:
         f2:02:5c:c5:4c:e0:55:ff:08:0f:65:3d:dc:00:5a:63:ec:67:
         c8:62:9e:80:99:f1:0e:14:d3:f7:56:bf:4b:aa:f0:fb:2e:6b:
         4d:a9:5d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFibcukUZbsH3rh1dFvDJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz
NTdiZmIwHhcNMjUwNzI2MDcwMTQ5WhcNMjUwNzI3MDcwMTQ5WjAzMTEwLwYDVQQD
EyhmYTA1YWM1MGY4YmI5MTU0ZGNiMDEyYzExNTQ5ZjFhOWVlNDdlNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusmMmuQ6Ugs6HEWvKSCujIdhEBsj
g0eTcJThPfAJosn2V+1ighS155kOpV55pD8qwO6wEbrJr/3E9XpdBH4O9aMbrMN6
PZlVlw0tNIuSNDY+LdnVf8lw3sANRm19ylem1XaYVBkFGC2L2RnUlst7FzUg4/jq
btAZWXYAOwPVJHRr+/n/2GjeHECABkCbdrG+XG49VQuxQ+aHSR130GEIZ+Vv8MNv
vKgF/kEbHfanALH1FY2F0iLeHKFvqhMvB9exN5SuZ8mkQUFOZJUP2ZC0EnCFYRik
QBtKi0z0GS7UwI1+QzdOwQRlNhqmgP5+76gTpHgZhBiQfKDecEShBFTLiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoFrFD4u5FU3LASwRVJ8anuR+bYMB8GA1UdIwQY
MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt
NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1
LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQRVHy0G
rJPM0NkakW8HVTIWOlGpvm1YhW5n3rAnuFGvY+tbdkgAm8PGEajaUlcSfu48KlSW
AOJMMGXcgnwACKDDd4SdJ41mBmc6VImj/b3soKb2DP7/kItTLgJk4m43b0umqr0U
lOUhbXtRIcsuG7fWgApDYVjTrj0m6Er7BJ1BZo7yk5eOAjPFSW5F2JOZqF+cRecQ
S+4JsD2fN38Yr1gi4aUElYLj33hyhhjG8ImXf4OnbGNQFlYIi7mUfGOU3KrBHGlv
27VIAVNVpeGJEuH/if6WxUCs8gJcxUzgVf8ID2U93ABaY+xnyGKegJnxDhTT91a/
S6rw+y5rTaldqw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:46:02 2025 by rpki-client