Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File:                     phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier:          uMgO6Rwj3u14O2rhP0s8I1y7G80CIRVvNpC6gbUY3FI=
Subject key identifier:   00:5A:D1:C3:7C:94:AC:07:D0:97:3D:94:DF:DD:A2:FE:E9:9D:CD:5B
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer:       /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial:       0198496684F1314DB01D6A683BA910560C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number:          1323
Signing time:             Sun 27 Jul 2025 01:01:52 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:52 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:52 +0000
Files and hashes:         1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
                          2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: YjkfmZQZMT9tKn1LNFDC3+mP5VgNl724SO6v67wVwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:84:f1:31:4d:b0:1d:6a:68:3b:a9:10:56:0c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
        Validity
            Not Before: Jul 27 01:01:52 2025 GMT
            Not After : Jul 28 01:01:52 2025 GMT
        Subject: CN=005ad1c37c94ac07d0973d94dfdda2fee99dcd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:66:5b:a9:98:d3:f8:d8:ad:5c:a1:06:91:
                    b9:b9:c2:c7:da:c8:b8:20:e5:1f:74:d9:98:0a:ba:
                    2c:bb:13:2e:a0:6a:c4:f5:64:e8:07:6d:d7:dd:14:
                    cd:a2:57:82:49:e5:ae:53:5d:c2:d9:77:40:c8:52:
                    9e:f7:6c:86:19:f0:f3:da:51:1e:70:03:0a:8b:6a:
                    bb:01:99:65:61:be:ff:19:77:34:b8:e5:b8:49:11:
                    68:00:2f:6b:c1:57:52:c6:9d:2d:10:c3:94:23:a4:
                    78:57:73:5f:c9:20:42:3f:e7:43:84:10:89:6e:4a:
                    a2:ed:2e:94:a2:73:59:f4:da:cb:ab:79:b3:1e:69:
                    23:80:db:d3:9d:83:a4:ee:30:33:83:c8:73:e3:51:
                    55:eb:a6:16:a9:8a:6a:07:fb:a8:ad:48:aa:f4:ed:
                    77:53:af:47:2b:6d:3e:a7:ce:f9:3f:43:3c:af:32:
                    03:37:88:1b:34:77:2f:04:c5:48:72:06:6f:7e:ca:
                    10:1d:de:c0:8a:02:72:2c:b2:37:02:17:3f:44:cf:
                    de:b7:c7:35:f3:14:27:24:88:76:00:1f:24:26:86:
                    c8:cc:74:6f:0c:95:31:3f:28:33:6d:2a:40:55:27:
                    74:0f:93:a8:2c:9f:39:5c:f5:fe:e5:97:16:63:b1:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:D1:C3:7C:94:AC:07:D0:97:3D:94:DF:DD:A2:FE:E9:9D:CD:5B
            X509v3 Authority Key Identifier:
                keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:70:03:0b:23:89:7a:42:8a:b9:07:02:52:d9:32:73:83:
         68:22:55:e0:e0:a5:65:5b:da:ab:c3:25:63:aa:c3:3d:1b:f3:
         86:34:77:25:36:c4:c8:69:86:ab:9c:c2:1c:91:ee:83:00:8b:
         31:0b:39:4d:a5:43:5c:1e:cb:96:c5:3f:94:10:be:8e:b9:12:
         8d:7d:a1:00:5c:b5:c1:c6:6a:1f:83:53:c8:1b:09:99:ac:a6:
         ba:e7:70:9c:29:4b:39:7b:d9:9d:17:8b:53:6d:41:d0:94:00:
         96:c2:83:f8:b6:2b:6c:a4:13:1e:5b:d0:cc:a5:02:04:fb:5d:
         6f:73:22:7c:aa:a0:1e:4f:10:d9:26:a1:41:36:7d:47:fe:4b:
         a6:dc:c1:84:bd:b3:c5:37:90:8c:d4:00:c3:c7:05:87:e3:c0:
         d7:ca:fa:3b:da:ad:a3:2f:e9:a0:78:5b:4e:f8:ea:64:3e:86:
         d8:e3:b7:8b:fc:62:19:66:c1:e4:6d:1e:37:a3:7f:c8:01:c8:
         3c:aa:20:64:ff:d1:1a:ce:8a:f8:dc:8d:49:e5:94:41:5c:c8:
         cc:91:da:e3:a3:47:28:15:9d:51:d8:0f:c9:e3:5a:fd:62:d4:
         34:0a:55:dc:60:ae:ab:96:a6:58:f4:d6:76:1d:d4:75:f0:3f:
         2c:b5:67:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZoTxMU2wHWpoO6kQVgxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz
ZDA0YTcwHhcNMjUwNzI3MDEwMTUyWhcNMjUwNzI4MDEwMTUyWjAzMTEwLwYDVQQD
EygwMDVhZDFjMzdjOTRhYzA3ZDA5NzNkOTRkZmRkYTJmZWU5OWRjZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JVmW6mY0/jYrVyhBpG5ucLH2si4
IOUfdNmYCrosuxMuoGrE9WToB23X3RTNoleCSeWuU13C2XdAyFKe92yGGfDz2lEe
cAMKi2q7AZllYb7/GXc0uOW4SRFoAC9rwVdSxp0tEMOUI6R4V3NfySBCP+dDhBCJ
bkqi7S6UonNZ9NrLq3mzHmkjgNvTnYOk7jAzg8hz41FV66YWqYpqB/uorUiq9O13
U69HK20+p875P0M8rzIDN4gbNHcvBMVIcgZvfsoQHd7AigJyLLI3Ahc/RM/et8c1
8xQnJIh2AB8kJobIzHRvDJUxPygzbSpAVSd0D5OoLJ85XPX+5ZcWY7GmRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABa0cN8lKwH0Jc9lN/dov7pnc1bMB8GA1UdIwQY
MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt
NDNmNWJjZjY3NzVkLzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk
LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9FwAwsj
iXpCirkHAlLZMnODaCJV4OClZVvaq8MlY6rDPRvzhjR3JTbEyGmGq5zCHJHugwCL
MQs5TaVDXB7LlsU/lBC+jrkSjX2hAFy1wcZqH4NTyBsJmaymuudwnClLOXvZnReL
U21B0JQAlsKD+LYrbKQTHlvQzKUCBPtdb3MifKqgHk8Q2SahQTZ9R/5LptzBhL2z
xTeQjNQAw8cFh+PA18r6O9qtoy/poHhbTvjqZD6G2OO3i/xiGWbB5G0eN6N/yAHI
PKogZP/RGs6K+NyNSeWUQVzIzJHa46NHKBWdUdgPyeNa/WLUNApV3GCuq5amWPTW
dh3UdfA/LLVnFQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:32 2025 by rpki-client