Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          w29pCOm3TdscMmPjGH0hYxQFv7WdAc7t8GjPIKkiAU0=
Subject key identifier:   D2:A7:74:A0:6D:BE:11:74:4C:E5:FE:A5:E8:AD:A7:66:9A:8E:59:B5
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019956E80B671D5B8CDAE785D55EA98D3F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          1698
Signing time:             Wed 17 Sep 2025 09:01:11 +0000
Manifest this update:     Wed 17 Sep 2025 09:01:11 +0000
Manifest next update:     Thu 18 Sep 2025 09:01:11 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: spwYfuIXjLhL6qB+y9guq/5IGGhAIeIG4AS9mmxTCFo=)
                          2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
                          3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
                          4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
                          5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
                          6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Sep 2025 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:56:e8:0b:67:1d:5b:8c:da:e7:85:d5:5e:a9:8d:3f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Sep 17 09:01:11 2025 GMT
            Not After : Sep 18 09:01:11 2025 GMT
        Subject: CN=d2a774a06dbe11744ce5fea5e8ada7669a8e59b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:9a:5c:5a:50:04:63:b9:36:ca:df:ff:56:
                    35:78:59:2d:3c:23:2f:68:c8:92:e3:15:05:61:02:
                    82:96:73:95:01:4c:f2:eb:e0:07:ba:69:d1:c0:48:
                    c9:63:9a:00:e3:05:10:17:49:07:bf:d1:e3:bc:d3:
                    76:1d:64:14:14:30:7a:99:11:1b:f9:d4:1e:84:db:
                    6e:b2:71:8e:97:ab:ab:0d:4d:42:ac:11:25:7e:2a:
                    36:a1:77:2d:a7:f0:7d:bd:ce:25:6d:ee:29:11:2f:
                    9e:bb:aa:a5:56:de:c5:53:d8:66:c3:67:38:df:a6:
                    d3:9b:13:a4:6a:4f:1b:25:8e:8e:d7:3f:a7:ff:00:
                    b0:6a:fb:91:94:fd:2f:fe:67:ce:6e:f2:27:b3:5e:
                    04:37:a8:20:6d:04:b8:94:75:7a:37:6d:7a:2b:ea:
                    a6:9e:5c:62:b8:42:b0:74:48:1c:77:ac:f0:43:3c:
                    58:e8:71:a2:b5:98:38:eb:37:49:5a:ce:ec:eb:43:
                    71:01:bc:6f:7e:e4:dd:27:43:35:4b:25:eb:a1:0c:
                    dc:83:41:99:35:60:c1:f7:ac:a6:d0:b9:ee:47:7c:
                    a6:16:84:32:aa:0f:4d:d7:41:69:82:f5:5e:df:1a:
                    64:b8:82:fa:6f:2f:8b:31:ca:5f:92:ca:0a:3e:08:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A7:74:A0:6D:BE:11:74:4C:E5:FE:A5:E8:AD:A7:66:9A:8E:59:B5
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d2:e9:1b:da:65:df:b1:c3:88:27:a0:98:91:d3:8e:95:d8:
         c8:6d:71:53:6c:39:fc:0a:24:62:49:9b:bf:32:1e:c3:47:4b:
         23:55:4d:72:e1:70:c3:21:12:38:b4:98:31:8a:c4:f9:d1:1c:
         02:09:9f:76:53:50:eb:33:59:25:bd:4d:80:44:ba:3b:86:5f:
         a8:20:aa:44:5f:71:8d:0a:23:6d:00:84:eb:9f:e7:b2:c6:f8:
         f6:fc:0c:08:b9:0a:b6:19:ad:bb:f6:0e:46:99:5d:61:e9:b6:
         81:63:09:91:0f:a7:71:0b:24:52:36:ac:52:bc:8a:4e:05:8b:
         0b:40:f9:c3:0d:f8:e6:72:4c:cf:23:05:d9:c2:44:8d:d1:04:
         01:d3:5a:ee:81:4b:e0:dd:53:e6:fe:34:2a:ad:cc:e1:b6:8a:
         40:2a:d9:33:89:2e:24:42:80:15:69:fe:38:f8:cc:89:22:5e:
         88:06:29:71:ac:3f:c9:8c:22:88:4d:08:f3:d8:2e:1a:a4:8c:
         d5:46:e8:19:ce:a6:5e:44:54:cf:b3:eb:c8:13:70:15:81:f6:
         41:95:86:08:1d:79:b3:eb:11:a3:7b:ea:21:78:04:8a:a4:d6:
         21:10:3f:4a:74:5a:46:b7:40:d2:f4:e4:09:4c:88:56:f2:73:
         3c:11:cf:cb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZlW6AtnHVuM2ueF1V6pjT8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjUwOTE3MDkwMTExWhcNMjUwOTE4MDkwMTExWjAzMTEwLwYDVQQD
EyhkMmE3NzRhMDZkYmUxMTc0NGNlNWZlYTVlOGFkYTc2NjlhOGU1OWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplyaXFpQBGO5Nsrf/1Y1eFktPCMv
aMiS4xUFYQKClnOVAUzy6+AHumnRwEjJY5oA4wUQF0kHv9HjvNN2HWQUFDB6mREb
+dQehNtusnGOl6urDU1CrBElfio2oXctp/B9vc4lbe4pES+eu6qlVt7FU9hmw2c4
36bTmxOkak8bJY6O1z+n/wCwavuRlP0v/mfObvIns14EN6ggbQS4lHV6N216K+qm
nlxiuEKwdEgcd6zwQzxY6HGitZg46zdJWs7s60NxAbxvfuTdJ0M1SyXroQzcg0GZ
NWDB96ym0LnuR3ymFoQyqg9N10FpgvVe3xpkuIL6by+LMcpfksoKPghtOQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNKndKBtvhF0TOX+peitp2aajlm1MB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M4NDk3Ni1kNWVhLTRlN2YtOGVkMy1hODlmODE3NzY0
MDYvMS8xLUlWLXowUWVYcUhYR0Jfc2ZwZm0yOEVpRDhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtLp
G9pl37HDiCegmJHTjpXYyG1xU2w5/AokYkmbvzIew0dLI1VNcuFwwyESOLSYMYrE
+dEcAgmfdlNQ6zNZJb1NgES6O4ZfqCCqRF9xjQojbQCE65/nssb49vwMCLkKthmt
u/YORpldYem2gWMJkQ+ncQskUjasUryKTgWLC0D5ww345nJMzyMF2cJEjdEEAdNa
7oFL4N1T5v40Kq3M4baKQCrZM4kuJEKAFWn+OPjMiSJeiAYpcaw/yYwiiE0I89gu
GqSM1UboGc6mXkRUz7PryBNwFYH2QZWGCB15s+sRo3vqIXgEiqTWIRA/SnRaRrdA
0vTkCUyIVvJzPBHPyw==
-----END CERTIFICATE-----
Generated at Wed Sep 17 19:17:40 2025 by rpki-client