Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          0ZPjnFyppckuwnVdn07I2hGhI1vimyjVD6QmCqVxO2c=
Subject key identifier:   AB:4A:CA:C3:F6:ED:7C:A9:14:35:AE:CB:A2:07:2C:E2:83:B4:EE:7E
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       019838049DE2C49DD62F83AC7EE9E2F55FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1611
Signing time:             Wed 23 Jul 2025 16:01:23 +0000
Manifest this update:     Wed 23 Jul 2025 16:01:23 +0000
Manifest next update:     Thu 24 Jul 2025 16:01:23 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
                          3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: TU2DbjeUciBrzdokGc6dZLLd9RdBFI8ugQnW7XVfIJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:04:9d:e2:c4:9d:d6:2f:83:ac:7e:e9:e2:f5:5f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jul 23 16:01:23 2025 GMT
            Not After : Jul 24 16:01:23 2025 GMT
        Subject: CN=ab4acac3f6ed7ca91435aecba2072ce283b4ee7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:d7:c3:cf:2d:41:ce:c1:c7:80:6d:34:f7:
                    26:cf:da:40:a0:a4:ac:d8:b8:e6:e3:a1:a7:62:df:
                    46:b4:14:8d:1b:08:d8:7e:13:52:de:55:aa:1b:10:
                    b4:96:f3:bf:06:4a:87:14:0e:00:14:49:06:69:17:
                    1c:1d:a4:fe:f6:0d:fa:88:17:9d:61:61:03:6e:41:
                    f8:10:55:3b:d2:5d:b7:af:b0:ba:a7:95:1f:f8:05:
                    1c:b2:27:99:dc:c0:ef:f5:3b:7f:08:8b:85:e4:46:
                    df:94:c9:ad:8c:b9:11:d7:9b:2c:0d:80:01:79:80:
                    bd:4a:d5:0f:91:1c:dd:6a:4d:72:e4:6f:6b:5b:4f:
                    4a:20:df:b5:f4:66:58:bb:64:68:c7:1a:27:94:5b:
                    fa:f5:ed:34:b0:a9:f1:11:e8:21:e5:09:76:d9:35:
                    ea:1a:73:90:44:be:41:b4:af:11:15:65:e9:fe:a5:
                    42:34:0b:74:c4:45:f4:3d:c9:25:a2:d2:8e:18:19:
                    55:86:a1:25:3b:d1:29:a8:3f:d3:0e:e3:a8:3e:cd:
                    ba:c6:eb:bf:f4:c5:63:0c:24:92:2f:87:68:5c:27:
                    94:bd:46:87:8b:3b:fd:d6:a6:51:c1:03:e9:3d:2f:
                    07:4c:6a:91:7d:72:3d:5a:38:b7:f2:7c:3c:9e:46:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:CA:C3:F6:ED:7C:A9:14:35:AE:CB:A2:07:2C:E2:83:B4:EE:7E
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a0:4c:b2:15:a6:89:90:23:8c:17:3e:a2:73:e5:71:76:21:
         3c:77:25:a0:8e:08:fc:ee:af:a5:6f:eb:20:af:f1:f5:c3:b0:
         18:be:3e:3a:70:dd:28:40:5d:6f:25:fa:cd:a0:d9:44:b8:88:
         33:07:74:13:aa:8f:1d:a2:dc:23:4b:13:2a:ac:0b:67:aa:e2:
         43:e1:63:7a:7f:46:4f:67:76:5a:f7:f5:14:2c:ae:25:e6:63:
         e3:64:f9:20:85:67:75:76:6b:8e:5a:2b:41:a1:7f:19:28:6b:
         15:34:00:86:c2:94:0a:72:c9:4a:35:eb:4f:14:31:19:2d:83:
         d5:c8:d0:c9:8c:cb:b6:fb:c7:e2:76:fb:9c:4e:8c:e0:10:59:
         31:6d:7a:03:0c:f7:07:c7:04:f8:e3:38:f2:62:33:05:d4:cc:
         c6:e3:fc:74:01:fa:c4:09:fb:47:0f:ed:5b:6b:0d:f9:1a:09:
         e3:e0:0f:6c:a2:6b:0b:df:f6:fd:bd:78:28:f8:74:ab:26:5f:
         45:4a:16:15:1f:4c:12:ce:ee:61:3d:72:2d:f4:44:de:28:29:
         95:70:7b:1f:bf:4a:70:c4:8f:d6:97:6f:ab:fa:c7:02:bb:19:
         e1:fe:91:22:46:16:9b:aa:70:88:59:1f:52:2b:11:bb:f0:81:
         b7:7d:8d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BJ3ixJ3WL4Osfuni9V/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjUwNzIzMTYwMTIzWhcNMjUwNzI0MTYwMTIzWjAzMTEwLwYDVQQD
EyhhYjRhY2FjM2Y2ZWQ3Y2E5MTQzNWFlY2JhMjA3MmNlMjgzYjRlZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fbXw88tQc7Bx4BtNPcmz9pAoKSs
2Ljm46GnYt9GtBSNGwjYfhNS3lWqGxC0lvO/BkqHFA4AFEkGaRccHaT+9g36iBed
YWEDbkH4EFU70l23r7C6p5Uf+AUcsieZ3MDv9Tt/CIuF5EbflMmtjLkR15ssDYAB
eYC9StUPkRzdak1y5G9rW09KIN+19GZYu2RoxxonlFv69e00sKnxEegh5Ql22TXq
GnOQRL5BtK8RFWXp/qVCNAt0xEX0PcklotKOGBlVhqElO9EpqD/TDuOoPs26xuu/
9MVjDCSSL4doXCeUvUaHizv91qZRwQPpPS8HTGqRfXI9Wji38nw8nkaesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtKysP27XypFDWuy6IHLOKDtO5+MB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqBMshWm
iZAjjBc+onPlcXYhPHcloI4I/O6vpW/rIK/x9cOwGL4+OnDdKEBdbyX6zaDZRLiI
Mwd0E6qPHaLcI0sTKqwLZ6riQ+Fjen9GT2d2Wvf1FCyuJeZj42T5IIVndXZrjlor
QaF/GShrFTQAhsKUCnLJSjXrTxQxGS2D1cjQyYzLtvvH4nb7nE6M4BBZMW16Awz3
B8cE+OM48mIzBdTMxuP8dAH6xAn7Rw/tW2sN+RoJ4+APbKJrC9/2/b14KPh0qyZf
RUoWFR9MEs7uYT1yLfRE3igplXB7H79KcMSP1pdvq/rHArsZ4f6RIkYWm6pwiFkf
UisRu/CBt32NnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:34 2025 by rpki-client