Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File:                     R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier:          LZ3kqsh3xBDov75duM+8cUvchfLzgpxF5pX54nExn4I=
Subject key identifier:   02:B4:9C:EC:39:22:91:FB:3E:87:58:60:1B:DE:AD:F5:B5:9E:8F:31
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer:       /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial:       01984708B5993C7E21AAF0B40AC5ABE19B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number:          156C
Signing time:             Sat 26 Jul 2025 14:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:09 +0000
Files and hashes:         1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: FE+shcU6fdzWPaJf0wzTF0ovwJSGTASct+KDiKRa93E=)
                          2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:08:b5:99:3c:7e:21:aa:f0:b4:0a:c5:ab:e1:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
        Validity
            Not Before: Jul 26 14:00:09 2025 GMT
            Not After : Jul 27 14:00:09 2025 GMT
        Subject: CN=02b49cec392291fb3e8758601bdeadf5b59e8f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:16:c6:7b:09:d9:b5:d2:b1:1b:e1:4f:82:
                    2f:f3:9e:5c:be:ff:e9:00:e3:2e:77:4e:ad:f6:3d:
                    a1:b2:2d:bc:2e:e2:e9:b0:54:58:9c:94:6f:0c:a4:
                    2a:c6:6e:3a:b4:7a:64:ec:9a:50:e5:d9:2b:f3:02:
                    a2:ce:68:1e:9e:80:95:66:37:d7:40:16:4c:0f:b9:
                    65:5a:08:7a:39:39:3d:f4:9f:b3:14:01:87:ab:6d:
                    34:2b:46:ca:0d:ae:b3:53:84:8d:e2:e4:ad:90:5a:
                    1b:fa:3c:ca:b3:2b:aa:fc:58:3c:61:ac:92:11:6b:
                    8c:f8:9d:9b:10:83:6b:9b:9b:4e:14:af:01:30:d8:
                    2c:07:b6:79:1a:e5:16:d7:95:18:c8:a8:81:8c:f6:
                    7e:d2:4a:72:4d:68:8d:c3:56:ae:d8:be:5b:2c:10:
                    64:2c:4c:f8:fe:5d:ab:07:41:0f:e8:39:89:b3:f3:
                    31:b2:c3:80:2a:5d:22:41:1c:24:e4:39:57:e3:24:
                    b2:87:5d:26:4d:99:64:c8:dd:7b:19:04:7f:23:2f:
                    1f:3f:1f:6e:07:20:26:ba:a2:fe:1e:e3:0c:f9:91:
                    0d:e1:72:89:98:7a:28:1b:a5:bf:dd:d9:8e:f2:ac:
                    b8:67:65:53:58:20:ae:42:e1:86:09:b9:12:42:06:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:9C:EC:39:22:91:FB:3E:87:58:60:1B:DE:AD:F5:B5:9E:8F:31
            X509v3 Authority Key Identifier:
                keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:fb:28:78:a5:d2:71:ac:bd:f6:0e:9c:01:df:26:d4:de:
         b5:2a:3c:d0:5c:e6:54:05:0f:e8:c8:52:f0:63:3b:db:bd:e7:
         c9:a3:89:66:9f:be:f8:81:4d:15:2a:34:51:97:96:e8:b5:79:
         9a:74:5c:3f:a7:7c:15:25:07:71:7c:66:36:dd:6d:19:a5:3c:
         e8:29:61:eb:b3:93:a8:ac:79:aa:0b:08:a0:ab:b7:57:21:e3:
         b4:a0:e3:a6:28:08:06:99:8f:3f:9c:4d:a8:a8:21:29:94:ab:
         5d:17:fe:01:95:dc:87:6f:89:44:84:a6:a4:da:49:1d:dd:b3:
         f8:2a:77:17:e5:c9:1f:c2:7d:15:63:19:7b:98:6a:c0:2b:9c:
         ba:cf:af:22:d1:5d:13:06:06:e2:f1:d5:87:8c:eb:1d:af:e6:
         6c:db:e4:aa:8e:32:c5:0f:52:fa:68:a0:76:a8:3c:d1:4b:da:
         8a:11:fc:b2:4e:3c:64:7e:83:be:69:93:d8:db:53:6d:3b:55:
         d2:fb:b0:9e:3a:88:a0:48:20:a9:11:d6:02:df:43:f1:dc:75:
         e1:01:34:5b:81:e8:29:e7:05:3a:44:3a:6f:11:3d:5c:ce:c1:
         4c:24:2c:64:dc:74:4b:6f:0e:89:04:6a:6d:13:14:a7:02:49:
         ad:96:fb:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCLWZPH4hqvC0CsWr4ZtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWQzNGY4YzIwYTUwNzNlODYwODIxYzhjMDliZjc1Nzlh
MjZkMGIwHhcNMjUwNzI2MTQwMDA5WhcNMjUwNzI3MTQwMDA5WjAzMTEwLwYDVQQD
EygwMmI0OWNlYzM5MjI5MWZiM2U4NzU4NjAxYmRlYWRmNWI1OWU4ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxcWxnsJ2bXSsRvhT4Iv855cvv/p
AOMud06t9j2hsi28LuLpsFRYnJRvDKQqxm46tHpk7JpQ5dkr8wKizmgenoCVZjfX
QBZMD7llWgh6OTk99J+zFAGHq200K0bKDa6zU4SN4uStkFob+jzKsyuq/Fg8YayS
EWuM+J2bEINrm5tOFK8BMNgsB7Z5GuUW15UYyKiBjPZ+0kpyTWiNw1au2L5bLBBk
LEz4/l2rB0EP6DmJs/MxssOAKl0iQRwk5DlX4ySyh10mTZlkyN17GQR/Iy8fPx9u
ByAmuqL+HuMM+ZEN4XKJmHooG6W/3dmO8qy4Z2VTWCCuQuGGCbkSQgZiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK0nOw5IpH7PodYYBverfW1no8xMB8GA1UdIwQY
MBaAFEetNPjCClBz6GCCHIwJv3V5om0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTkt
MjU0MTNjMjYwZTQ1LzEvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMDdkYjQtOWZkNy00ZmNkLThkMTktMjU0MTNjMjYwZTQ1
LzEvUjYwMC1NSUtVSFBvWUlJY2pBbV9kWG1pYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPH7KHil
0nGsvfYOnAHfJtTetSo80FzmVAUP6MhS8GM7273nyaOJZp+++IFNFSo0UZeW6LV5
mnRcP6d8FSUHcXxmNt1tGaU86Clh67OTqKx5qgsIoKu3VyHjtKDjpigIBpmPP5xN
qKghKZSrXRf+AZXch2+JRISmpNpJHd2z+Cp3F+XJH8J9FWMZe5hqwCucus+vItFd
EwYG4vHVh4zrHa/mbNvkqo4yxQ9S+migdqg80UvaihH8sk48ZH6DvmmT2NtTbTtV
0vuwnjqIoEggqRHWAt9D8dx14QE0W4HoKecFOkQ6bxE9XM7BTCQsZNx0S28OiQRq
bRMUpwJJrZb7zg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:46:51 2025 by rpki-client