Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File:                     76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier:          S0OStcGWkSBXXF/ISzGeL+oOEWj0Pdf87vcKE2n9Xus=
Subject key identifier:   8D:E2:72:C5:C5:4F:E8:D0:DD:86:43:31:F8:97:E5:95:85:B7:DA:9A
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer:       /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial:       019844E42661640679678ECFCA71160D62CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number:          1593
Signing time:             Sat 26 Jul 2025 04:00:59 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:59 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:59 +0000
Files and hashes:         1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: rnjdTlVXjnlFspK9HcZjf4fKdZPI5FXM5/ZdFVotDu8=)
                          2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e4:26:61:64:06:79:67:8e:cf:ca:71:16:0d:62:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
        Validity
            Not Before: Jul 26 04:00:59 2025 GMT
            Not After : Jul 27 04:00:59 2025 GMT
        Subject: CN=8de272c5c54fe8d0dd864331f897e59585b7da9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:52:34:7c:a2:74:73:f4:6c:ad:59:f7:74:
                    23:fa:d2:9a:3f:30:fd:fb:e5:ac:aa:16:8e:27:f8:
                    1e:e3:5c:30:44:c0:77:e1:c7:52:2b:8a:6c:91:a5:
                    d1:c5:75:a5:6e:d9:cb:c9:9f:01:75:8e:21:07:92:
                    8e:90:28:62:2b:2a:15:6b:90:77:00:f8:55:37:bb:
                    ac:d6:7f:80:64:50:ba:02:bd:c7:4e:1c:03:c6:e8:
                    ec:63:c8:95:65:47:63:95:eb:5a:2f:d0:67:45:65:
                    b2:8c:b9:2d:7e:dd:b6:5b:55:36:b7:88:ad:13:20:
                    bc:00:2c:f2:fc:bf:8c:b5:ae:2d:f2:e7:6a:1d:b1:
                    8f:82:9b:c4:79:2b:f0:c2:b1:85:e4:bc:ca:ad:a5:
                    cf:59:92:2c:b2:12:62:bc:6d:40:9d:e8:52:37:d1:
                    a0:50:ab:4c:b1:64:a3:d5:6a:70:46:ed:f4:d0:88:
                    24:fa:a2:ee:97:8b:13:bd:ea:24:f5:d9:06:06:b1:
                    89:fa:99:02:48:98:2e:dc:24:db:24:a9:34:96:5c:
                    52:ba:5a:24:36:ff:67:b4:36:fc:b1:99:db:5d:f8:
                    dd:3a:84:c3:2c:44:7a:78:2c:ae:4a:40:c3:01:17:
                    94:c9:dd:c0:3b:36:b4:18:69:0c:95:68:7b:49:a5:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E2:72:C5:C5:4F:E8:D0:DD:86:43:31:F8:97:E5:95:85:B7:DA:9A
            X509v3 Authority Key Identifier:
                keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:cc:6a:e8:0b:42:78:57:af:b2:e0:53:19:ed:3a:d2:60:
         0e:7e:f3:f9:26:22:aa:da:a1:74:90:d9:bb:38:b2:44:45:b9:
         5c:c0:9f:a4:bd:e4:62:26:e6:32:b3:71:62:56:e3:a8:1d:d3:
         01:e5:4f:a4:8b:eb:01:9e:02:42:ed:dd:fd:ef:3e:5e:3c:82:
         36:d6:23:cd:7a:98:13:73:f9:f1:a0:01:4c:32:6f:0a:af:c2:
         ef:dc:27:24:ba:d9:36:22:2d:b3:96:aa:40:97:b1:4f:63:40:
         bd:80:59:bd:28:e8:aa:3e:ee:48:10:2f:aa:75:bd:fc:5f:e6:
         0b:d0:3a:e8:19:f1:e7:12:76:a8:1d:1a:f8:91:45:2f:dd:65:
         29:49:93:89:9a:fa:79:6e:5f:da:21:fa:48:1f:b2:4a:1a:cc:
         d2:38:f3:4e:aa:eb:53:9c:6c:a8:60:3a:c4:86:b4:59:a3:a1:
         f2:6b:c7:2e:cd:93:43:65:53:dd:54:70:00:dc:48:3e:45:10:
         50:78:50:28:05:b3:1d:3c:be:ae:e2:24:cd:64:9c:cb:f0:3c:
         43:89:10:1d:49:e5:8b:f2:57:21:62:75:d6:e1:de:c7:be:d6:
         cc:ab:e7:cf:1a:70:99:a7:68:90:46:2c:07:d8:c1:f4:3a:ce:
         8a:13:7f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhE5CZhZAZ5Z47PynEWDWLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTQ3NzI0NjNjZGJlMTJiNzNiMTZhZDBkMjUxNmYwN2Q2
MzgzMGQwHhcNMjUwNzI2MDQwMDU5WhcNMjUwNzI3MDQwMDU5WjAzMTEwLwYDVQQD
Eyg4ZGUyNzJjNWM1NGZlOGQwZGQ4NjQzMzFmODk3ZTU5NTg1YjdkYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNSNHyidHP0bK1Z93Qj+tKaPzD9
++WsqhaOJ/ge41wwRMB34cdSK4pskaXRxXWlbtnLyZ8BdY4hB5KOkChiKyoVa5B3
APhVN7us1n+AZFC6Ar3HThwDxujsY8iVZUdjletaL9BnRWWyjLktft22W1U2t4it
EyC8ACzy/L+Mta4t8udqHbGPgpvEeSvwwrGF5LzKraXPWZIsshJivG1AnehSN9Gg
UKtMsWSj1WpwRu300Igk+qLul4sTveok9dkGBrGJ+pkCSJgu3CTbJKk0llxSulok
Nv9ntDb8sZnbXfjdOoTDLER6eCyuSkDDAReUyd3AOza0GGkMlWh7SaUv4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3icsXFT+jQ3YZDMfiX5ZWFt9qaMB8GA1UdIwQY
MBaAFO+kdyRjzb4StzsWrQ0lFvB9Y4MNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEt
ODAxY2FiNzIwZWRiLzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEtODAxY2FiNzIwZWRi
LzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9PMaugL
QnhXr7LgUxntOtJgDn7z+SYiqtqhdJDZuziyREW5XMCfpL3kYibmMrNxYlbjqB3T
AeVPpIvrAZ4CQu3d/e8+XjyCNtYjzXqYE3P58aABTDJvCq/C79wnJLrZNiIts5aq
QJexT2NAvYBZvSjoqj7uSBAvqnW9/F/mC9A66Bnx5xJ2qB0a+JFFL91lKUmTiZr6
eW5f2iH6SB+yShrM0jjzTqrrU5xsqGA6xIa0WaOh8mvHLs2TQ2VT3VRwANxIPkUQ
UHhQKAWzHTy+ruIkzWScy/A8Q4kQHUnli/JXIWJ11uHex77WzKvnzxpwmadokEYs
B9jB9DrOihN/pQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:32:11 2025 by rpki-client