Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          pJYDuJzx6XX6+EaRTAmrA+peESh5s8w7iJcEhASm1cU=
Subject key identifier:   FE:7D:97:9D:F8:8E:A0:38:8C:09:A8:F9:16:74:BC:4F:66:79:21:92
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019849D357FB38892FBD76C99C9D6EFE620C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          1610
Signing time:             Sun 27 Jul 2025 03:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:44 +0000
Files and hashes:         1: 6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa (hash: x/McLjYuN68G+ok93frZNMwAwTarNWM5GuHdXugF2/o=)
                          2: K0MqLUgS2tQhBLKHortNTvUwCrE.roa (hash: 5dPzYZes7Yb9Rgi9L7tgBSih8hgu0mkoKEg5555chdI=)
                          3: M9easQkcHSQPdpi5ZGfGU4pWoUc.roa (hash: 2qkDycWdk7MJuJuaUzoNpBWkEOF+xOcflpW8m5S6jUM=)
                          4: aa5AbLBPnoYTAUvTmbD3Iub_120.roa (hash: PcPVYbE1FKjarjaLrOxDhw3YIdXoKle1a0a471+wigo=)
                          5: hiFWCOPGKEHEq8VF6PSULM9zArs.roa (hash: mzwmSskFs1sYPh9GW82/FnRxj5gF5oQm2c7vAlUcGR0=)
                          6: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: 7DUv7hi3GcYYqUdC30OAu3abp/K/9WoUoSarhEHMDdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:57:fb:38:89:2f:bd:76:c9:9c:9d:6e:fe:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jul 27 03:00:44 2025 GMT
            Not After : Jul 28 03:00:44 2025 GMT
        Subject: CN=fe7d979df88ea0388c09a8f91674bc4f66792192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:8b:b4:d4:d3:ff:28:23:66:36:f2:c6:46:
                    3d:aa:3a:f0:1a:9f:2e:31:25:2b:f7:1f:c6:df:d3:
                    be:98:c3:65:3c:b9:88:99:e0:e5:12:bf:e0:ca:19:
                    1a:5a:f4:39:95:2b:ad:b8:fc:88:9b:d8:f8:39:76:
                    0f:1f:e6:c6:35:45:e7:ea:6d:f9:34:d7:04:f5:35:
                    0c:6e:ff:fe:76:f8:1c:7d:3c:0d:92:11:3a:44:5e:
                    24:45:7d:57:2a:2f:6f:e7:bf:fb:a9:fe:19:02:cf:
                    05:62:de:ed:b9:1b:89:f5:cc:5b:d2:68:e5:45:c2:
                    02:cf:59:08:f7:a4:0d:0b:b4:8c:6b:77:c3:3a:a9:
                    1b:c0:e9:00:a5:47:da:e5:27:93:f0:ba:8c:3e:fe:
                    a0:22:60:b6:34:99:66:4f:b1:b1:e2:57:6b:9b:35:
                    df:7d:be:72:70:9d:48:d4:3e:90:33:aa:ab:a9:99:
                    da:38:24:1a:78:e9:28:67:d5:8c:c3:c7:8e:3f:b6:
                    54:9b:c5:61:68:4b:f6:e0:1a:a6:ed:a9:65:e7:30:
                    0c:fd:85:ce:8c:fc:dd:c1:fa:9f:53:fb:8c:3e:1d:
                    3d:91:4c:d3:1b:cd:9c:34:bb:f1:ce:f1:08:01:1d:
                    8e:6c:3e:21:8e:27:92:11:87:db:8c:41:9b:51:8f:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:97:9D:F8:8E:A0:38:8C:09:A8:F9:16:74:BC:4F:66:79:21:92
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:e5:80:04:17:ab:c6:e7:a2:ba:e5:30:e4:27:96:73:b6:
         76:19:e0:18:35:42:80:b8:4f:d7:11:0f:6c:63:4c:cc:27:04:
         94:97:e8:20:ee:2b:18:21:d0:dc:32:be:a7:26:eb:cf:57:0f:
         e8:7a:66:e5:1f:6b:b9:17:9c:1b:4b:69:2d:f8:fe:4a:c7:98:
         d9:b8:4d:7f:4f:8e:94:25:10:ca:07:03:6e:16:6c:72:fc:e7:
         28:ce:16:97:a5:74:22:d7:b1:48:f4:4d:84:e7:c1:50:3f:b7:
         52:9c:1d:f8:46:50:c5:01:03:c4:35:23:b0:1b:18:37:96:10:
         80:6d:66:6e:72:69:28:a6:07:32:f1:b7:72:4c:21:7d:89:cf:
         b2:e4:cc:8d:8d:ea:d6:f0:2a:d0:24:25:2a:e6:8a:83:83:38:
         06:30:f3:4a:a7:96:dd:c4:a3:dd:3e:6d:c8:24:b5:20:24:a5:
         67:b4:a0:88:56:56:51:d7:30:c4:85:4c:4a:cc:6f:44:ef:7f:
         8f:ab:91:f6:b8:f8:fd:eb:2c:74:00:34:c3:80:4e:ff:34:39:
         c1:f9:e8:c1:c3:c3:85:8a:e5:c9:c6:cd:eb:fb:c2:4d:c9:7c:
         28:c8:45:21:fa:53:e5:d6:5c:db:e8:f6:fa:08:a8:22:c0:2b:
         a0:0a:26:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ01f7OIkvvXbJnJ1u/mIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjUwNzI3MDMwMDQ0WhcNMjUwNzI4MDMwMDQ0WjAzMTEwLwYDVQQD
EyhmZTdkOTc5ZGY4OGVhMDM4OGMwOWE4ZjkxNjc0YmM0ZjY2NzkyMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkmLtNTT/ygjZjbyxkY9qjrwGp8u
MSUr9x/G39O+mMNlPLmImeDlEr/gyhkaWvQ5lSutuPyIm9j4OXYPH+bGNUXn6m35
NNcE9TUMbv/+dvgcfTwNkhE6RF4kRX1XKi9v57/7qf4ZAs8FYt7tuRuJ9cxb0mjl
RcICz1kI96QNC7SMa3fDOqkbwOkApUfa5SeT8LqMPv6gImC2NJlmT7Gx4ldrmzXf
fb5ycJ1I1D6QM6qrqZnaOCQaeOkoZ9WMw8eOP7ZUm8VhaEv24Bqm7all5zAM/YXO
jPzdwfqfU/uMPh09kUzTG82cNLvxzvEIAR2ObD4hjieSEYfbjEGbUY/niwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP59l534jqA4jAmo+RZ0vE9meSGSMB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyjlgAQX
q8bnorrlMOQnlnO2dhngGDVCgLhP1xEPbGNMzCcElJfoIO4rGCHQ3DK+pybrz1cP
6Hpm5R9ruRecG0tpLfj+SseY2bhNf0+OlCUQygcDbhZscvznKM4Wl6V0ItexSPRN
hOfBUD+3Upwd+EZQxQEDxDUjsBsYN5YQgG1mbnJpKKYHMvG3ckwhfYnPsuTMjY3q
1vAq0CQlKuaKg4M4BjDzSqeW3cSj3T5tyCS1ICSlZ7SgiFZWUdcwxIVMSsxvRO9/
j6uR9rj4/essdAA0w4BO/zQ5wfnowcPDhYrlycbN6/vCTcl8KMhFIfpT5dZc2+j2
+gioIsAroAomYA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:18 2025 by rpki-client