Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          FAuhrOsAOxUzBsd1xCUieGe4GgJtBDqZphpwDZXEqoA=
Subject key identifier:   69:3E:16:EC:4D:A8:F3:13:30:2F:24:0D:CA:D0:C4:DC:B7:13:44:88
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       0198394D856D2A5FDDC6181D83DEF4FC3353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          1611
Signing time:             Wed 23 Jul 2025 22:00:38 +0000
Manifest this update:     Wed 23 Jul 2025 22:00:38 +0000
Manifest next update:     Thu 24 Jul 2025 22:00:38 +0000
Files and hashes:         1: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=)
                          2: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=)
                          3: V9THiIVArSnZ1H4kkTxosx3Tvz4.roa (hash: lUYBTWUgXaqtzw8eN2t3fS8dCvHHrGYo2Uz5MEjddRY=)
                          4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=)
                          5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=)
                          6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=)
                          7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=)
                          8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=)
                          9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=)
                          10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: dPnWNcmZhn9sa1mDKTvOvaoX5IiK6qog+OYD5huUoQI=)
                          11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=)
                          12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:4d:85:6d:2a:5f:dd:c6:18:1d:83:de:f4:fc:33:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: Jul 23 22:00:38 2025 GMT
            Not After : Jul 24 22:00:38 2025 GMT
        Subject: CN=693e16ec4da8f313302f240dcad0c4dcb7134488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:ab:8c:4b:e6:95:03:2f:a8:a3:99:a6:91:
                    d9:51:80:56:c8:26:03:c6:55:50:89:8d:9b:75:29:
                    9e:ed:33:25:0e:2b:d3:b2:5a:d1:28:58:69:ba:27:
                    80:c2:94:68:13:4e:a5:ba:4a:99:f0:a0:01:d3:d7:
                    11:b0:77:22:61:a6:42:82:db:cd:04:e1:09:0d:cf:
                    48:e5:f5:f1:0e:c1:24:07:dc:97:84:36:4e:c0:2b:
                    e3:e9:90:52:bc:59:c7:a7:6c:52:16:ad:08:83:09:
                    8b:b3:76:e5:44:32:db:4c:ff:01:0a:dc:59:1d:91:
                    f2:ad:bb:6d:11:4f:1e:4f:29:fb:0e:f9:28:02:69:
                    e3:f4:79:55:f9:59:d5:f5:c0:0b:06:c5:d5:0d:b9:
                    e7:3f:1b:93:2f:a6:1b:f2:dc:b4:80:5d:57:5e:c7:
                    7d:ff:af:95:76:f5:c1:c4:ff:79:d6:92:d1:ca:19:
                    50:fa:b4:7e:45:f7:29:9a:38:f5:5f:09:7e:af:88:
                    97:17:68:09:a3:0b:73:2c:f4:94:a2:68:24:be:7b:
                    3a:63:18:f9:9e:e1:be:1c:ad:ce:70:43:37:57:26:
                    9c:25:c8:05:97:78:07:a6:6d:f8:e6:33:56:66:8f:
                    9e:13:2c:fd:e4:bf:8a:95:60:64:be:7a:bd:93:a6:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:16:EC:4D:A8:F3:13:30:2F:24:0D:CA:D0:C4:DC:B7:13:44:88
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:6b:3f:07:2c:33:f2:b2:72:64:ef:2e:ca:48:dc:d0:4e:
         d5:49:83:c7:07:e2:0a:ff:d8:e9:5e:8c:61:cd:65:40:29:e4:
         57:d9:d1:1f:bd:b2:fa:74:cf:e9:62:ae:4e:5d:78:94:6c:39:
         17:07:62:50:80:49:89:82:0d:09:7f:a9:4c:2c:c6:87:b6:1c:
         b6:63:d6:84:8a:69:19:9e:58:23:f8:fd:32:4d:e4:69:4a:03:
         db:c7:01:d7:76:c5:ce:55:5a:94:e2:3b:5e:b4:29:a5:e3:ea:
         14:37:e2:68:26:21:d9:3e:4f:36:7f:51:55:2f:86:23:46:2e:
         76:63:53:79:3f:e5:07:14:55:fc:eb:ae:2d:74:4e:6a:02:d2:
         6d:40:21:c8:36:9e:f9:6a:7a:a5:b3:59:4d:54:6a:84:e1:5a:
         99:96:cd:25:cb:08:df:6a:e9:0a:e9:55:cc:ce:18:cb:5a:d3:
         e1:58:ab:ab:b7:28:a6:46:4c:04:94:41:87:65:1d:c3:65:f4:
         34:d7:b6:bf:50:ac:10:4d:f7:eb:78:0e:72:51:18:c8:ab:d5:
         31:4e:e4:da:df:da:ac:81:81:8b:95:70:8d:33:a3:af:0e:b3:
         20:37:2b:0b:51:88:fb:a4:c3:fc:8f:f7:36:e3:93:3c:47:e6:
         fb:e8:e7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg5TYVtKl/dxhgdg970/DNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl
NWUwYmEwHhcNMjUwNzIzMjIwMDM4WhcNMjUwNzI0MjIwMDM4WjAzMTEwLwYDVQQD
Eyg2OTNlMTZlYzRkYThmMzEzMzAyZjI0MGRjYWQwYzRkY2I3MTM0NDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy2rjEvmlQMvqKOZppHZUYBWyCYD
xlVQiY2bdSme7TMlDivTslrRKFhpuieAwpRoE06lukqZ8KAB09cRsHciYaZCgtvN
BOEJDc9I5fXxDsEkB9yXhDZOwCvj6ZBSvFnHp2xSFq0IgwmLs3blRDLbTP8BCtxZ
HZHyrbttEU8eTyn7DvkoAmnj9HlV+VnV9cALBsXVDbnnPxuTL6Yb8ty0gF1XXsd9
/6+VdvXBxP951pLRyhlQ+rR+Rfcpmjj1Xwl+r4iXF2gJowtzLPSUomgkvns6Yxj5
nuG+HK3OcEM3VyacJcgFl3gHpm345jNWZo+eEyz95L+KlWBkvnq9k6aLhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk+FuxNqPMTMC8kDcrQxNy3E0SIMB8GA1UdIwQY
MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt
NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk
LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnNrPwcs
M/KycmTvLspI3NBO1UmDxwfiCv/Y6V6MYc1lQCnkV9nRH72y+nTP6WKuTl14lGw5
FwdiUIBJiYINCX+pTCzGh7YctmPWhIppGZ5YI/j9Mk3kaUoD28cB13bFzlValOI7
XrQppePqFDfiaCYh2T5PNn9RVS+GI0YudmNTeT/lBxRV/OuuLXROagLSbUAhyDae
+Wp6pbNZTVRqhOFamZbNJcsI32rpCulVzM4Yy1rT4Virq7copkZMBJRBh2Udw2X0
NNe2v1CsEE3363gOclEYyKvVMU7k2t/arIGBi5VwjTOjrw6zIDcrC1GI+6TD/I/3
NuOTPEfm++jnyw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:34:58 2025 by rpki-client