Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          42F21G4ggUbmCWkFPK7zAo3W82XBKwFICOLmC7gf0jo=
Subject key identifier:   A4:F1:D5:51:E8:62:77:89:98:C4:F6:B2:26:07:7D:43:D7:67:58:20
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       019826D9AB69E81D139AEDCC6E132276991D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          1096
Signing time:             Sun 20 Jul 2025 08:00:55 +0000
Manifest this update:     Sun 20 Jul 2025 08:00:55 +0000
Manifest next update:     Mon 21 Jul 2025 08:00:55 +0000
Files and hashes:         1: 8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa (hash: twXscxBiA6A/cPdgQ7hNA9EiiSEcOyWKVNdA2W42KG4=)
                          2: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
                          3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: oS46iRoDkpzXPcR9K4Er1u51n7OMixUNLMwxt0rW75Q=)
                          4: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
                          5: UEQBycXO84xxZEefVNxr90yQeH0.roa (hash: TEj6JdNtANQj346QJ0SBfIpcEXL1H4ox6W/yWcLs2Y0=)
                          6: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:d9:ab:69:e8:1d:13:9a:ed:cc:6e:13:22:76:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: Jul 20 08:00:55 2025 GMT
            Not After : Jul 21 08:00:55 2025 GMT
        Subject: CN=a4f1d551e862778998c4f6b226077d43d7675820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:5a:8c:f9:57:03:08:0d:d1:85:57:01:06:
                    9d:bc:6b:04:f6:27:83:69:a8:93:b4:21:3c:fa:4e:
                    b4:84:23:7f:12:c7:62:e4:d9:97:1b:4c:5e:bc:ae:
                    3e:8e:7c:81:22:8f:9d:04:8d:0d:14:35:2d:79:03:
                    a3:a1:b0:b4:95:61:3a:c1:05:42:0e:12:fd:ad:ea:
                    2a:2c:28:d6:18:8d:be:24:11:d9:01:65:8e:f5:b5:
                    cf:7c:d8:6e:f5:f3:66:e8:45:cd:93:c0:10:ef:8d:
                    af:ca:96:9d:b9:ae:37:52:b0:b2:51:58:e6:ef:ec:
                    12:99:5f:7f:ae:f5:ea:33:4b:f9:34:48:b0:f1:26:
                    a0:83:c7:a8:03:40:22:41:54:c4:62:8e:b4:8d:43:
                    0c:da:f4:8c:3d:60:61:6e:89:7d:f1:e4:36:6c:4a:
                    95:de:a1:f8:16:7b:86:81:45:4c:db:e2:28:f4:c4:
                    a4:94:aa:e4:fe:98:c6:dd:37:be:ed:c2:62:a2:9c:
                    72:8a:d6:c6:db:b9:c3:24:c9:2c:ba:b2:df:f2:03:
                    d5:43:7d:ef:f9:e5:7e:ea:d0:69:7b:55:8f:82:8a:
                    bb:f6:38:7c:89:ea:ea:7f:1d:8c:af:72:d2:7c:e9:
                    a1:6c:59:b3:95:72:01:62:ad:28:c9:a7:55:96:d1:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F1:D5:51:E8:62:77:89:98:C4:F6:B2:26:07:7D:43:D7:67:58:20
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:00:03:3a:d8:51:60:50:e5:02:18:15:91:16:24:b4:c4:d7:
         96:91:e8:85:cc:54:39:bd:d6:ce:7c:c4:8d:bc:24:1e:59:0e:
         9c:be:c6:d5:12:29:ff:17:51:f9:da:91:e1:58:84:e9:16:08:
         95:55:cb:e5:4b:d4:e1:df:3a:79:97:b4:d2:18:7c:7e:d0:12:
         e4:5b:54:77:d8:37:77:66:ba:65:36:22:b1:c0:4a:cc:6d:30:
         76:d0:ab:5e:47:7f:bd:4d:dd:3f:0f:df:c6:6f:dd:78:ab:a3:
         54:26:7d:e9:9a:64:b4:78:43:25:7f:6d:b3:8d:dc:10:57:91:
         9a:d0:fd:09:02:72:ff:7b:4b:20:a4:90:f2:bc:ba:cc:ee:f4:
         c4:e7:c5:0e:9e:c8:6e:fa:14:93:fd:47:0e:76:ec:dd:20:37:
         ad:f4:da:0c:89:2a:8b:e0:c9:9c:6e:9e:4d:2d:c7:de:89:e1:
         b7:81:9f:9f:f6:83:4e:00:00:4a:76:2f:27:53:dd:1c:86:02:
         c7:8b:af:b1:a2:d1:d2:1a:c4:3e:f8:84:26:a9:8d:63:77:b5:
         f6:aa:06:c2:a6:b9:a5:82:97:c5:bd:3b:c0:8e:49:ce:89:32:
         89:42:20:89:1d:1a:d8:c5:8d:b9:19:4b:24:51:b2:63:7b:80:
         5e:9a:4a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgm2atp6B0Tmu3MbhMidpkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm
ZTAwOWEwHhcNMjUwNzIwMDgwMDU1WhcNMjUwNzIxMDgwMDU1WjAzMTEwLwYDVQQD
EyhhNGYxZDU1MWU4NjI3Nzg5OThjNGY2YjIyNjA3N2Q0M2Q3Njc1ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJhajPlXAwgN0YVXAQadvGsE9ieD
aaiTtCE8+k60hCN/Esdi5NmXG0xevK4+jnyBIo+dBI0NFDUteQOjobC0lWE6wQVC
DhL9reoqLCjWGI2+JBHZAWWO9bXPfNhu9fNm6EXNk8AQ742vypadua43UrCyUVjm
7+wSmV9/rvXqM0v5NEiw8Sagg8eoA0AiQVTEYo60jUMM2vSMPWBhbol98eQ2bEqV
3qH4FnuGgUVM2+Io9MSklKrk/pjG3Te+7cJiopxyitbG27nDJMksurLf8gPVQ33v
+eV+6tBpe1WPgoq79jh8ierqfx2Mr3LSfOmhbFmzlXIBYq0oyadVltGe4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTx1VHoYneJmMT2siYHfUPXZ1ggMB8GA1UdIwQY
MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt
ZWZhYWZmMGE5ODJmLzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm
LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgADOthR
YFDlAhgVkRYktMTXlpHohcxUOb3WznzEjbwkHlkOnL7G1RIp/xdR+dqR4ViE6RYI
lVXL5UvU4d86eZe00hh8ftAS5FtUd9g3d2a6ZTYiscBKzG0wdtCrXkd/vU3dPw/f
xm/deKujVCZ96ZpktHhDJX9ts43cEFeRmtD9CQJy/3tLIKSQ8ry6zO70xOfFDp7I
bvoUk/1HDnbs3SA3rfTaDIkqi+DJnG6eTS3H3onht4Gfn/aDTgAASnYvJ1PdHIYC
x4uvsaLR0hrEPviEJqmNY3e19qoGwqa5pYKXxb07wI5JzokyiUIgiR0a2MWNuRlL
JFGyY3uAXppKgA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:10:26 2025 by rpki-client