Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
File:                     4YVsMIKrL8jdGzWaezmRNoU4tNA.mft (raw, json)
Hash identifier:          YZzzZmHWh5SywpkiIFm2Dc7F+l/3t4TBQGr8vhYs4ps=
Subject key identifier:   96:15:B7:3B:44:98:EA:B9:E5:2B:7C:68:2B:6B:D6:99:B7:2F:85:B2
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Certificate issuer:       /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial:       0198548DA52661FC12EFB1B44A5EDCF4D27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
Manifest number:          0A9B
Signing time:             Tue 29 Jul 2025 05:00:25 +0000
Manifest this update:     Tue 29 Jul 2025 05:00:25 +0000
Manifest next update:     Wed 30 Jul 2025 05:00:25 +0000
Files and hashes:         1: 4YVsMIKrL8jdGzWaezmRNoU4tNA.crl (hash: qQIPEnCUoHgKNyzWdYtq5haNhEw8qHzhwe2L3TaLCsY=)
                          2: DubK0ajew1E_RURQjQNCAhLGbkc.roa (hash: o2iba58UUQFPb0v5v5MuvKEyUlVzhsgsqL1rMivQOXg=)
                          3: Kq9oy1uLDEVjPK7uo7CtOBtF3Fs.roa (hash: +hOcbW8T2Du+uljugS3IXJD+qzn/X9C29PD+zWkfcl4=)
                          4: hn2vtXI_FxI2fK5snrvER2liYkI.roa (hash: h1TFBwFQDb6c/MRMsjXSVpwRX890l+6Op+4syOnaFGY=)
                          5: hzE5LvcG1hl--6wBh1ojQ7tfIYE.roa (hash: 87OEa14cIeRPup2IlbeWtF8BT8tzrS9k5/ocOLGWxJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:8d:a5:26:61:fc:12:ef:b1:b4:4a:5e:dc:f4:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
        Validity
            Not Before: Jul 29 05:00:25 2025 GMT
            Not After : Jul 30 05:00:25 2025 GMT
        Subject: CN=9615b73b4498eab9e52b7c682b6bd699b72f85b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:9e:67:e7:e2:ed:f6:d1:0e:0e:c4:fd:1b:
                    7f:32:2a:36:ac:d5:61:e3:20:93:de:68:ff:e5:89:
                    ff:cb:3c:ac:18:da:73:73:67:58:40:63:79:be:e3:
                    3a:0f:91:66:a6:81:e8:4b:48:0e:92:1f:97:5b:81:
                    42:05:9e:da:5c:d8:78:47:89:aa:a8:fe:6e:d3:84:
                    af:f0:d7:69:f3:9e:c6:4c:d1:68:a7:32:a2:a1:50:
                    34:8a:e8:db:d0:24:b6:b9:1f:97:80:ad:73:08:c5:
                    ce:90:39:4c:68:33:0e:51:67:32:96:be:fa:06:3f:
                    b2:29:21:ab:d1:f3:d0:aa:74:25:d4:e8:ae:72:64:
                    03:15:9d:f0:03:d7:88:eb:1f:3a:2e:44:70:fb:89:
                    5e:5c:f4:36:50:b2:37:77:ce:0a:91:e4:27:5f:7d:
                    7a:22:a4:d2:7c:69:c6:2c:2a:01:2e:43:39:af:9c:
                    b4:42:4c:6d:e2:a5:a7:bf:33:d8:16:91:ec:da:0d:
                    e0:94:25:f2:7e:ea:d0:90:bf:80:b3:6c:86:0b:3f:
                    a8:f5:a0:7d:9c:80:10:f8:c5:18:0b:8f:c0:f4:d9:
                    e9:a8:ee:d9:18:03:66:04:09:1e:01:d4:09:4b:a6:
                    69:29:a2:e2:83:35:5b:87:c1:85:c5:b5:6c:a1:52:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:B7:3B:44:98:EA:B9:E5:2B:7C:68:2B:6B:D6:99:B7:2F:85:B2
            X509v3 Authority Key Identifier:
                keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:f3:83:96:b2:ad:8c:7f:2e:e8:5a:52:1a:99:37:32:be:
         b8:26:29:cf:f0:5d:fe:36:99:ff:5f:51:93:3d:b6:b5:3f:1f:
         90:86:5f:44:1f:06:73:b7:c8:a1:d5:27:8b:c2:63:9b:66:d2:
         fa:6a:5d:a3:f2:e4:f4:52:af:88:96:c4:3c:d0:e6:a7:0c:05:
         b3:ba:c4:87:3a:a5:80:bf:b8:4a:53:9d:d3:23:a0:6d:af:9f:
         01:96:5f:91:ea:0e:51:6e:f4:9b:23:47:73:28:53:18:18:c9:
         39:f2:c7:1e:e4:01:2a:44:91:8b:73:87:fe:08:19:9e:f0:c1:
         ed:2d:e2:bb:ef:32:e2:19:63:7e:7b:b7:a7:64:8b:c7:66:07:
         71:76:72:45:14:e7:64:09:60:52:fb:c4:7c:7c:84:bb:59:9f:
         a1:88:3d:3b:f4:0f:19:1e:aa:8e:e7:2a:1b:69:3b:bd:63:6b:
         84:eb:ee:7c:5b:89:3c:c4:ee:86:cf:7b:bb:4f:60:16:e7:04:
         30:8f:58:38:ed:a9:98:ad:2c:c9:fe:47:6b:b8:73:de:27:78:
         98:ca:2d:7b:af:2a:a7:0b:3c:b6:1d:9f:33:01:a6:1a:83:c8:
         01:fc:42:61:69:dc:15:9b:f6:28:cc:1a:f2:63:c5:4a:6c:0f:
         f7:f0:ef:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjaUmYfwS77G0Sl7c9NJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODU2YzMwODJhYjJmYzhkZDFiMzU5YTdiMzk5MTM2ODUz
OGI0ZDAwHhcNMjUwNzI5MDUwMDI1WhcNMjUwNzMwMDUwMDI1WjAzMTEwLwYDVQQD
Eyg5NjE1YjczYjQ0OThlYWI5ZTUyYjdjNjgyYjZiZDY5OWI3MmY4NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4yeZ+fi7fbRDg7E/Rt/Mio2rNVh
4yCT3mj/5Yn/yzysGNpzc2dYQGN5vuM6D5FmpoHoS0gOkh+XW4FCBZ7aXNh4R4mq
qP5u04Sv8Ndp857GTNFopzKioVA0iujb0CS2uR+XgK1zCMXOkDlMaDMOUWcylr76
Bj+yKSGr0fPQqnQl1OiucmQDFZ3wA9eI6x86LkRw+4leXPQ2ULI3d84KkeQnX316
IqTSfGnGLCoBLkM5r5y0Qkxt4qWnvzPYFpHs2g3glCXyfurQkL+As2yGCz+o9aB9
nIAQ+MUYC4/A9NnpqO7ZGANmBAkeAdQJS6ZpKaLigzVbh8GFxbVsoVKDcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYVtztEmOq55St8aCtr1pm3L4WyMB8GA1UdIwQY
MBaAFOGFbDCCqy/I3Rs1mns5kTaFOLTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmIt
OGVhYTZiZjQwMzU3LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmItOGVhYTZiZjQwMzU3
LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdHzg5ay
rYx/LuhaUhqZNzK+uCYpz/Bd/jaZ/19Rkz22tT8fkIZfRB8Gc7fIodUni8Jjm2bS
+mpdo/Lk9FKviJbEPNDmpwwFs7rEhzqlgL+4SlOd0yOgba+fAZZfkeoOUW70myNH
cyhTGBjJOfLHHuQBKkSRi3OH/ggZnvDB7S3iu+8y4hljfnu3p2SLx2YHcXZyRRTn
ZAlgUvvEfHyEu1mfoYg9O/QPGR6qjucqG2k7vWNrhOvufFuJPMTuhs97u09gFucE
MI9YOO2pmK0syf5Ha7hz3id4mMote68qpws8th2fMwGmGoPIAfxCYWncFZv2KMwa
8mPFSmwP9/Dv/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:46:46 2025 by rpki-client