Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          Q5/bb918ZpajJ/1uKxOy9v68V3mQVrRiGdpQ76BniNc=
Subject key identifier:   B2:AD:05:8C:B9:6E:35:76:E5:6F:3E:7E:71:66:8D:DC:C7:21:07:92
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019826D9C345F80F2F054D18971D5F33B9C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          15FE
Signing time:             Sun 20 Jul 2025 08:01:02 +0000
Manifest this update:     Sun 20 Jul 2025 08:01:02 +0000
Manifest next update:     Mon 21 Jul 2025 08:01:02 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: FDxJURGNxQomjHzaDetVHbrkiaDd1ufmEerXokVn4UM=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:d9:c3:45:f8:0f:2f:05:4d:18:97:1d:5f:33:b9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jul 20 08:01:02 2025 GMT
            Not After : Jul 21 08:01:02 2025 GMT
        Subject: CN=b2ad058cb96e3576e56f3e7e71668ddcc7210792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:39:08:26:68:a9:ab:0b:f7:72:09:93:6d:
                    59:7f:5e:7d:e9:06:1f:73:8d:65:70:2b:0b:da:50:
                    f2:94:24:6f:c3:3c:3f:cc:ea:80:79:e2:39:96:79:
                    45:e7:44:14:b9:e9:a0:d1:fe:b6:f8:26:fc:bc:4e:
                    8b:a0:62:0d:3b:39:79:67:a9:a3:02:a1:b3:c7:dd:
                    de:08:41:a6:52:95:6b:69:f5:20:12:48:96:8b:8b:
                    52:cd:13:3d:44:2d:23:a8:b0:b7:26:4a:49:d4:d2:
                    cd:4d:f7:1c:68:23:c1:68:41:bf:fa:e8:05:e3:23:
                    a2:39:c2:8f:9a:1c:6f:c0:d5:52:11:ae:eb:5f:6b:
                    d0:db:38:26:31:ec:bf:f4:33:6c:64:4b:cf:17:d4:
                    71:d1:05:7d:b9:b6:cd:36:93:26:6e:a9:19:b0:3f:
                    b1:39:9a:55:bf:de:2c:7e:df:96:8a:da:8f:34:e4:
                    50:3f:5d:dd:a1:09:6a:c3:b9:52:fd:c3:7f:26:1f:
                    bc:1f:46:24:fc:a2:ca:03:34:ce:86:60:3b:b9:3b:
                    73:df:1c:fc:5b:5e:85:59:47:86:23:aa:e9:54:8c:
                    8e:d1:8f:29:bc:83:2c:96:5b:f6:66:18:32:03:b9:
                    af:5c:e1:17:37:c4:8e:d5:c7:7f:37:91:78:d5:57:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:05:8C:B9:6E:35:76:E5:6F:3E:7E:71:66:8D:DC:C7:21:07:92
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:8f:0b:77:a7:92:ba:a0:2a:2a:f1:97:fa:a8:56:3f:6a:
         d9:b7:68:b9:9d:ae:c9:20:e7:f0:9a:88:54:84:e8:35:bc:44:
         20:b7:39:16:a0:61:8d:25:7f:09:e9:7e:0c:0e:48:42:f0:ec:
         0b:5a:d0:9a:01:f0:a1:e2:1c:e1:d7:75:b7:47:3d:b0:1d:e7:
         13:55:e1:9b:06:76:3b:b0:87:12:b3:ab:20:17:83:f4:c4:87:
         31:5b:db:68:f2:44:11:34:16:8c:6b:53:8f:07:94:af:69:8c:
         f6:f3:f5:ed:7e:fd:5d:6f:34:65:9a:93:47:f4:2f:e9:aa:9e:
         95:d0:05:c4:00:71:8f:3d:06:63:86:81:ee:77:40:fd:1b:19:
         fe:6c:9a:e8:42:f4:31:53:f9:c0:e0:ee:ba:1f:ed:6b:01:76:
         89:1a:62:2d:ac:0c:06:62:4e:e1:9c:5a:0c:83:f3:e9:ba:3a:
         82:df:56:98:14:57:8e:01:ae:f5:5b:97:07:28:01:d7:6e:68:
         8c:15:e0:75:85:21:1d:6e:b9:2c:0c:85:60:7e:18:f4:1d:57:
         d4:67:c1:3e:f6:8b:a0:6b:f4:eb:a5:72:77:16:7b:76:05:e0:
         43:3b:ce:27:16:73:06:1e:dc:87:cc:28:d8:6b:1b:c7:62:4f:
         2e:25:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:43 2025 by rpki-client