Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
File:                     ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json)
Hash identifier:          QUnNEfAHrRV5rlDiRnW4+fQUgZlCM6fBZS3ycoKpL0I=
Subject key identifier:   6C:6A:63:95:93:F6:73:46:04:B7:01:9D:F5:28:B3:98:09:0A:A6:B3
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Certificate issuer:       /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial:       0198529F00EC9659CD5DE9B294DD7B35BFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
Manifest number:          1605
Signing time:             Mon 28 Jul 2025 20:00:08 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:08 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:08 +0000
Files and hashes:         1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: IPlulvsoFPzr1rMCLaIFnLR6YIkYho7/jaCjYrJfETI=)
                          2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:00:ec:96:59:cd:5d:e9:b2:94:dd:7b:35:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
        Validity
            Not Before: Jul 28 20:00:08 2025 GMT
            Not After : Jul 29 20:00:08 2025 GMT
        Subject: CN=6c6a639593f6734604b7019df528b398090aa6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:94:b7:b9:c6:13:d6:86:bc:9d:85:45:94:
                    2e:f4:6c:94:7c:70:ce:64:d0:98:18:de:63:ef:ff:
                    4b:48:d1:60:17:71:70:20:09:9b:37:03:3f:df:99:
                    f9:5c:a0:cd:76:98:f4:34:6f:3f:b4:64:16:76:7b:
                    a5:95:b7:b7:9c:b5:08:7f:f2:33:03:df:00:26:a6:
                    6a:0c:29:f2:57:3e:c9:8d:fb:37:33:3e:09:da:c8:
                    39:5e:f3:1c:f1:fc:e7:77:11:27:b3:42:a8:c6:bf:
                    90:44:d0:ab:1b:94:7a:47:f9:9b:af:da:78:06:ca:
                    f5:ac:32:6c:89:b2:7d:71:ae:2e:df:c3:17:8e:fc:
                    db:7e:f3:1c:f2:02:21:35:7c:4e:53:8a:e5:1b:2b:
                    29:5c:d6:a7:d1:58:fe:7a:ec:9e:ee:6d:e2:02:74:
                    f1:c3:17:24:a0:98:ab:f7:d9:01:16:aa:ff:c8:cb:
                    68:16:d3:ae:25:11:e0:ff:e0:af:77:e1:62:f1:c7:
                    2a:8b:d9:aa:31:39:1a:06:c0:48:c3:7a:0f:7b:9a:
                    08:27:84:ff:9a:d4:8b:2f:7b:d7:7f:8c:70:de:f5:
                    a8:4f:8d:0f:b4:a7:51:48:cd:88:36:e8:00:f7:ea:
                    da:33:af:72:cc:a0:29:57:a0:2e:b8:e6:65:97:9c:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6A:63:95:93:F6:73:46:04:B7:01:9D:F5:28:B3:98:09:0A:A6:B3
            X509v3 Authority Key Identifier:
                keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:09:80:29:d9:fb:64:ad:5a:63:79:53:45:ca:f7:b1:cc:a8:
         01:19:1d:86:18:56:bf:0e:04:97:73:c1:84:32:af:d8:12:7a:
         8d:be:a0:f9:d2:16:3c:20:09:cc:7f:37:cc:ad:28:e5:db:1c:
         f1:72:c5:f0:f4:e4:38:a9:0b:7e:65:5c:b2:30:9d:1a:02:bd:
         35:75:f9:45:ca:c6:6a:22:ab:c4:17:1c:b8:b8:97:60:aa:76:
         ed:d5:30:f5:6b:79:40:fb:89:ac:4e:22:10:09:1c:27:01:60:
         19:87:93:8a:6d:9a:3e:65:e8:e0:da:12:eb:cb:de:69:7b:3d:
         25:c3:f6:2c:23:a5:07:71:be:d3:5c:51:7e:27:dc:8f:b3:ee:
         bd:91:9d:29:2c:36:85:e8:76:5f:a0:2b:69:94:36:73:08:d1:
         f5:f2:02:f2:42:17:c6:5d:5a:86:5b:c7:a2:24:8e:d1:32:55:
         f1:98:f7:22:ab:b7:80:08:c6:0a:0c:db:28:30:d8:a2:a4:70:
         d5:4a:db:f0:91:44:c0:4a:c0:55:de:44:2e:9e:d5:81:93:da:
         63:b6:e0:e0:20:52:5a:df:5e:76:45:d6:f4:8c:82:63:88:4e:
         cb:29:3c:9b:6c:4f:66:34:ef:e9:42:b1:12:8d:15:19:3b:91:
         a2:41:1a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSnwDsllnNXemylN17Nb/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl
M2I2NjAwHhcNMjUwNzI4MjAwMDA4WhcNMjUwNzI5MjAwMDA4WjAzMTEwLwYDVQQD
Eyg2YzZhNjM5NTkzZjY3MzQ2MDRiNzAxOWRmNTI4YjM5ODA5MGFhNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifOUt7nGE9aGvJ2FRZQu9GyUfHDO
ZNCYGN5j7/9LSNFgF3FwIAmbNwM/35n5XKDNdpj0NG8/tGQWdnullbe3nLUIf/Iz
A98AJqZqDCnyVz7Jjfs3Mz4J2sg5XvMc8fzndxEns0Koxr+QRNCrG5R6R/mbr9p4
Bsr1rDJsibJ9ca4u38MXjvzbfvMc8gIhNXxOU4rlGyspXNan0Vj+euye7m3iAnTx
wxckoJir99kBFqr/yMtoFtOuJRHg/+Cvd+Fi8ccqi9mqMTkaBsBIw3oPe5oIJ4T/
mtSLL3vXf4xw3vWoT40PtKdRSM2INugA9+raM69yzKApV6AuuOZll5zK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxqY5WT9nNGBLcBnfUos5gJCqazMB8GA1UdIwQY
MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt
NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh
LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgmAKdn7
ZK1aY3lTRcr3scyoARkdhhhWvw4El3PBhDKv2BJ6jb6g+dIWPCAJzH83zK0o5dsc
8XLF8PTkOKkLfmVcsjCdGgK9NXX5RcrGaiKrxBccuLiXYKp27dUw9Wt5QPuJrE4i
EAkcJwFgGYeTim2aPmXo4NoS68veaXs9JcP2LCOlB3G+01xRfifcj7PuvZGdKSw2
heh2X6AraZQ2cwjR9fIC8kIXxl1ahlvHoiSO0TJV8Zj3Iqu3gAjGCgzbKDDYoqRw
1Urb8JFEwErAVd5ELp7VgZPaY7bg4CBSWt9edkXW9IyCY4hOyyk8m2xPZjTv6UKx
Eo0VGTuRokEasQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 06:16:31 2025 by rpki-client