Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File:                     _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier:          amK7amnZVZIRwLO8rdtYZ15G9LVRkLN/L7+ixipnhOM=
Subject key identifier:   7A:49:C8:E7:9B:83:3B:B4:F3:D4:4E:60:3D:D5:5F:C6:14:91:F3:1C
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer:       /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial:       019847ADCF62F544045012AC67293D72B181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number:          0386
Signing time:             Sat 26 Jul 2025 17:00:29 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:29 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:29 +0000
Files and hashes:         1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
                          2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: RJK4KPzCYMyxjV9LnUXYvkLKqU/1R3FS0cQ0lokbycI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:cf:62:f5:44:04:50:12:ac:67:29:3d:72:b1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
        Validity
            Not Before: Jul 26 17:00:29 2025 GMT
            Not After : Jul 27 17:00:29 2025 GMT
        Subject: CN=7a49c8e79b833bb4f3d44e603dd55fc61491f31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:3a:eb:d1:b6:ec:a7:95:4b:01:2b:a9:48:
                    83:de:b9:6b:9a:c4:c4:b1:5e:2b:d4:88:49:bc:eb:
                    3c:9e:7b:b0:31:8e:3e:ed:72:4a:80:ab:47:79:0f:
                    3f:8e:43:f6:af:99:9d:42:69:bf:f1:22:3b:71:72:
                    95:6b:c5:94:c0:66:da:04:64:44:be:15:ec:ed:b9:
                    0a:60:59:10:4f:01:ad:97:bf:1d:c7:bf:7e:1e:8a:
                    97:2b:95:72:f3:48:c4:14:8d:c0:ca:f0:af:e8:43:
                    57:fb:ff:5e:17:9e:07:03:cc:50:51:8b:32:81:fa:
                    86:e4:17:56:f5:0c:2a:7d:36:fa:02:89:43:4d:11:
                    cf:7a:f3:92:d8:e8:c4:a5:47:08:12:ba:72:91:41:
                    67:d5:25:99:2a:98:bc:e8:6c:30:e3:2a:2c:15:ac:
                    d6:78:dc:ee:f9:be:f4:29:9c:df:4e:dd:47:96:24:
                    ee:2d:b6:c9:25:01:40:ce:08:bb:55:56:0e:f0:5a:
                    33:3e:83:97:f2:b9:53:8a:7a:cf:77:9d:b9:7f:7b:
                    11:8d:a9:0a:d6:18:4f:ed:d1:3b:a2:7f:b5:68:83:
                    48:ba:07:5b:f4:fe:90:12:d5:06:14:17:fc:0f:c7:
                    73:62:d3:68:91:81:fb:52:3f:52:72:ad:31:e3:fd:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:49:C8:E7:9B:83:3B:B4:F3:D4:4E:60:3D:D5:5F:C6:14:91:F3:1C
            X509v3 Authority Key Identifier:
                keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:24:01:86:4e:b2:17:c6:30:81:fb:aa:a8:7d:c4:2f:41:c9:
         6e:63:78:bb:07:3a:da:84:ed:3c:e7:32:7f:18:c5:21:5f:f5:
         13:d1:d1:aa:75:4e:3f:f0:21:a1:59:9b:28:90:03:9b:15:78:
         f5:11:83:97:c8:da:4b:33:43:ce:3b:4e:ad:66:6b:59:d5:44:
         8d:3a:84:5d:28:1b:2a:1e:a8:a8:e5:c6:0c:d7:a4:b3:93:37:
         39:a3:0a:44:7d:0a:24:72:3f:73:90:86:c5:ad:af:f0:fc:2f:
         e6:9a:ff:51:57:79:a6:70:39:85:66:e8:a9:d5:9c:d7:e7:f1:
         70:a8:85:cc:f3:19:81:e3:ab:0f:73:07:f9:20:27:2b:24:19:
         f5:a9:e3:ad:11:d9:09:5b:81:7f:cb:a5:b1:85:32:f1:ec:5d:
         e5:f6:44:4b:78:1b:fc:18:c1:a0:9a:54:04:9d:01:5c:a0:98:
         a5:e4:a5:57:80:78:e7:a7:60:65:fd:94:1d:48:f8:a8:2e:b0:
         3e:21:5d:2c:ab:73:9c:0c:b0:84:7b:73:b7:a5:9d:79:cf:ce:
         d3:ef:f1:1d:75:dc:38:4e:da:af:16:12:19:da:ea:fc:91:68:
         f6:b6:86:f2:80:8a:9f:fa:8a:1b:86:46:7e:c0:f6:f2:0f:a1:
         04:37:ec:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrc9i9UQEUBKsZyk9crGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz
NjczMTAwHhcNMjUwNzI2MTcwMDI5WhcNMjUwNzI3MTcwMDI5WjAzMTEwLwYDVQQD
Eyg3YTQ5YzhlNzliODMzYmI0ZjNkNDRlNjAzZGQ1NWZjNjE0OTFmMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AU669G27KeVSwErqUiD3rlrmsTE
sV4r1IhJvOs8nnuwMY4+7XJKgKtHeQ8/jkP2r5mdQmm/8SI7cXKVa8WUwGbaBGRE
vhXs7bkKYFkQTwGtl78dx79+HoqXK5Vy80jEFI3AyvCv6ENX+/9eF54HA8xQUYsy
gfqG5BdW9QwqfTb6AolDTRHPevOS2OjEpUcIErpykUFn1SWZKpi86Gww4yosFazW
eNzu+b70KZzfTt1HliTuLbbJJQFAzgi7VVYO8FozPoOX8rlTinrPd525f3sRjakK
1hhP7dE7on+1aINIugdb9P6QEtUGFBf8D8dzYtNokYH7Uj9Scq0x4/2X4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpJyOebgzu089ROYD3VX8YUkfMcMB8GA1UdIwQY
MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut
MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3
LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSQBhk6y
F8YwgfuqqH3EL0HJbmN4uwc62oTtPOcyfxjFIV/1E9HRqnVOP/AhoVmbKJADmxV4
9RGDl8jaSzNDzjtOrWZrWdVEjTqEXSgbKh6oqOXGDNeks5M3OaMKRH0KJHI/c5CG
xa2v8Pwv5pr/UVd5pnA5hWboqdWc1+fxcKiFzPMZgeOrD3MH+SAnKyQZ9anjrRHZ
CVuBf8ulsYUy8exd5fZES3gb/BjBoJpUBJ0BXKCYpeSlV4B456dgZf2UHUj4qC6w
PiFdLKtznAywhHtzt6Wdec/O0+/xHXXcOE7arxYSGdrq/JFo9raG8oCKn/qKG4ZG
fsD28g+hBDfs7A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:32:21 2025 by rpki-client