Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          o/VenXaZ2ZTIoUAu+MY0EtaW9cX7HBTzDlWlF7LVYng=
Subject key identifier:   01:88:25:E9:E1:2F:95:4F:77:EC:20:EF:37:90:DE:E0:EA:46:68:30
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       01984A77A1B8CDCA0034FD3D5D1CA3C0F8CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 06:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:10 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: ulIq452FbHDo/pGeSkJktK0tavhmXFIjNp1L9oD1RGs=)
                          2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:a1:b8:cd:ca:00:34:fd:3d:5d:1c:a3:c0:f8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Jul 27 06:00:10 2025 GMT
            Not After : Jul 28 06:00:10 2025 GMT
        Subject: CN=018825e9e12f954f77ec20ef3790dee0ea466830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:37:fe:d8:04:36:54:48:f4:53:97:4b:5d:
                    7a:66:10:0e:9e:11:83:1a:0d:09:66:f4:30:a9:bb:
                    c9:c1:4a:4b:3e:b5:c7:4e:b6:be:b1:0f:da:c1:32:
                    4b:0b:c4:c1:38:c1:33:ed:ae:ac:62:3a:61:83:65:
                    cb:ea:57:c5:a6:89:9f:47:1b:a3:9b:8f:61:b3:c6:
                    f1:78:8d:89:23:51:fa:a4:b1:c8:a9:fa:6c:a9:44:
                    1b:bf:86:b8:68:92:d6:e7:da:a6:fe:cd:53:82:33:
                    c2:2e:9d:1e:35:a5:a8:5b:2f:33:2d:9f:2c:52:13:
                    e7:47:77:5e:dd:71:d2:8e:8a:20:ea:1d:9c:e8:5f:
                    99:a4:08:98:d0:fa:fa:89:e3:8d:72:72:b3:80:49:
                    35:91:c7:f8:37:70:a0:fd:88:54:ad:6e:d1:e2:cb:
                    33:4d:bf:29:6b:a5:1f:75:77:7a:85:38:d7:1b:b4:
                    93:bc:57:49:3b:35:37:bd:1e:1b:69:26:38:86:d4:
                    fd:9d:14:c4:ff:59:60:27:b3:d4:a2:15:54:0e:b8:
                    9a:ce:8b:b7:62:94:c2:27:15:6f:8c:7e:bb:a6:ac:
                    ec:4f:50:10:65:9e:f1:52:d5:f7:5b:a7:24:7e:c3:
                    df:06:5e:72:8c:56:8d:68:df:38:58:40:30:da:b8:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:88:25:E9:E1:2F:95:4F:77:EC:20:EF:37:90:DE:E0:EA:46:68:30
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b2:d3:6e:92:0f:27:58:d0:f7:25:e0:b9:1f:cf:d1:fa:b1:
         b2:85:78:53:db:bf:c2:8d:87:1a:32:7b:24:20:e0:6f:4f:68:
         90:dc:f9:67:57:a6:88:3a:f9:a2:f1:17:88:6a:4c:76:aa:9f:
         4c:74:9a:ff:1f:9a:0a:ee:d6:d9:94:c5:a0:96:bd:b5:7c:67:
         df:10:1d:f6:d3:28:55:52:79:46:0a:ed:b4:de:cd:eb:1d:46:
         a1:5e:e1:3e:b1:2d:d0:c9:86:54:63:95:e8:40:8f:c0:e2:da:
         3f:ef:d1:1f:b5:63:c3:fa:9d:10:98:cd:61:05:65:98:e9:e8:
         e1:3a:99:98:c0:ca:e3:df:87:47:c2:00:a7:72:14:47:78:34:
         93:19:85:d3:4f:9a:31:75:6c:cd:cd:6a:d9:f6:68:03:de:b2:
         49:18:12:94:c3:d1:63:f9:9b:78:49:cb:67:2a:3f:2d:1b:71:
         a0:36:43:56:ec:96:05:32:21:ff:87:74:de:34:08:3d:95:f5:
         a5:fe:c6:4c:0f:ac:51:ce:c1:5f:5f:45:ed:21:f5:52:3d:74:
         d3:0b:30:c9:9b:f4:f4:09:56:55:14:b8:58:79:b8:17:ae:d6:
         3a:df:ac:2d:01:f9:64:7b:fd:7d:61:38:6e:4d:bb:40:f9:13:
         38:eb:a5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd6G4zcoANP09XRyjwPjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzZlOTg1NWY5YmNhMzAxN2ExMDEzN2I0NDNlZThjNTI4
Y2E5NTIwHhcNMjUwNzI3MDYwMDEwWhcNMjUwNzI4MDYwMDEwWjAzMTEwLwYDVQQD
EygwMTg4MjVlOWUxMmY5NTRmNzdlYzIwZWYzNzkwZGVlMGVhNDY2ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH83/tgENlRI9FOXS116ZhAOnhGD
Gg0JZvQwqbvJwUpLPrXHTra+sQ/awTJLC8TBOMEz7a6sYjphg2XL6lfFpomfRxuj
m49hs8bxeI2JI1H6pLHIqfpsqUQbv4a4aJLW59qm/s1TgjPCLp0eNaWoWy8zLZ8s
UhPnR3de3XHSjoog6h2c6F+ZpAiY0Pr6ieONcnKzgEk1kcf4N3Cg/YhUrW7R4ssz
Tb8pa6UfdXd6hTjXG7STvFdJOzU3vR4baSY4htT9nRTE/1lgJ7PUohVUDriazou3
YpTCJxVvjH67pqzsT1AQZZ7xUtX3W6ckfsPfBl5yjFaNaN84WEAw2rgTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGIJenhL5VPd+wg7zeQ3uDqRmgwMB8GA1UdIwQY
MBaAFDB26YVfm8owF6EBN7RD7oxSjKlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUt
N2Y3ODZiYjM0MzQ0LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUtN2Y3ODZiYjM0MzQ0
LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7LTbpIP
J1jQ9yXguR/P0fqxsoV4U9u/wo2HGjJ7JCDgb09okNz5Z1emiDr5ovEXiGpMdqqf
THSa/x+aCu7W2ZTFoJa9tXxn3xAd9tMoVVJ5RgrttN7N6x1GoV7hPrEt0MmGVGOV
6ECPwOLaP+/RH7Vjw/qdEJjNYQVlmOno4TqZmMDK49+HR8IAp3IUR3g0kxmF00+a
MXVszc1q2fZoA96ySRgSlMPRY/mbeEnLZyo/LRtxoDZDVuyWBTIh/4d03jQIPZX1
pf7GTA+sUc7BX19F7SH1Uj100wswyZv09AlWVRS4WHm4F67WOt+sLQH5ZHv9fWE4
bk27QPkTOOulJg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:19 2025 by rpki-client