Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File:                     WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier:          vYofz3bjpZiKnUqW85FbFtFzAmHsmoZgpF9ksSYyJBM=
Subject key identifier:   6A:F9:E5:4F:E5:1B:90:29:D1:FE:73:A0:64:52:B1:61:2B:6B:3F:8E
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer:       /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial:       0198530E3FFBB88D23BDA1D165E4677524CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number:          1607
Signing time:             Mon 28 Jul 2025 22:01:39 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:39 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:39 +0000
Files and hashes:         1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: 4YVqSIgojw2L0Aqe1H8r8p5LXmDn9Rr0jQWtTitOt98=)
                          2: oz4j6XAA3JSDTaFAUqvMD6Q_gKU.roa (hash: alaiQ7nYgvlQJD63x0493TKwZeIQqdX8mBDJEuCO9ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:3f:fb:b8:8d:23:bd:a1:d1:65:e4:67:75:24:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
        Validity
            Not Before: Jul 28 22:01:39 2025 GMT
            Not After : Jul 29 22:01:39 2025 GMT
        Subject: CN=6af9e54fe51b9029d1fe73a06452b1612b6b3f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:78:20:24:2b:26:55:94:78:48:e6:57:9d:
                    b6:31:71:8b:21:ec:e0:41:a6:54:a0:6f:2e:1a:27:
                    68:c0:a1:60:c3:2f:7e:32:8d:b1:c2:6a:46:e8:a5:
                    47:9b:98:1d:08:5f:6e:16:d9:03:f1:d3:d6:bd:9c:
                    cf:96:3f:32:ec:c5:25:b6:5f:75:70:0a:e7:fe:af:
                    fd:63:48:6c:07:a4:2c:eb:d0:fb:22:70:9f:c2:11:
                    a1:a2:56:f8:4c:a2:62:7d:c5:16:d7:b3:72:92:fd:
                    90:53:4c:7a:58:9d:22:25:d8:5a:eb:dd:61:02:06:
                    c9:ed:5c:93:65:dc:df:52:cd:9c:c8:8d:3c:7a:16:
                    5a:09:72:5e:1e:f6:55:c5:bd:fc:91:e5:d9:9f:b0:
                    80:60:08:f2:5b:a9:10:ab:e5:d1:4a:09:e5:01:22:
                    f9:24:24:68:be:73:0d:87:e5:ab:ad:d6:7e:50:c9:
                    33:d9:1e:69:eb:13:3c:d1:60:3e:16:13:0a:f2:0f:
                    92:08:46:7c:c9:9f:b4:c1:27:35:15:e2:f6:62:3a:
                    4d:17:06:13:ad:3a:e3:59:21:43:a5:53:1b:98:b3:
                    2f:76:33:eb:c6:ea:6d:1d:70:71:bf:1e:c1:ae:6b:
                    09:29:b4:e6:25:a2:14:f9:a3:c3:d6:de:60:92:b8:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:E5:4F:E5:1B:90:29:D1:FE:73:A0:64:52:B1:61:2B:6B:3F:8E
            X509v3 Authority Key Identifier:
                keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:9b:5e:9c:59:ca:99:e9:a5:ff:53:1b:0f:3b:1d:5d:df:5b:
         d1:f1:11:3c:f5:cd:5a:af:b7:89:32:b6:5b:56:36:9d:7d:25:
         c4:fc:09:c0:c9:80:4c:12:a0:f7:bf:b9:52:0e:b3:f6:82:7e:
         a8:0f:ee:e9:60:78:b2:2e:26:a2:ed:2e:d6:b1:b7:90:b8:04:
         05:59:77:16:94:84:23:b1:d3:bf:93:ec:64:5c:ae:45:06:03:
         ca:29:5e:fe:09:c9:a8:d0:df:d4:83:19:4c:2c:b5:48:a7:99:
         75:31:02:ce:92:1f:7c:5e:96:c8:97:c6:2b:68:f1:bf:63:be:
         7f:95:97:df:39:6c:05:e4:5f:23:8a:84:55:1f:72:02:f8:2e:
         d3:92:8e:31:1d:35:1d:7c:61:81:ab:0c:d2:df:27:dd:73:da:
         22:fe:f6:90:20:5f:a2:5d:5b:87:ab:07:a0:53:97:ca:e7:f0:
         b0:f7:95:eb:e5:63:58:fc:1d:eb:d3:4d:93:80:4a:81:8f:fd:
         c8:6d:09:36:de:44:11:11:13:8a:85:2c:db:bb:b4:09:02:04:
         2f:c9:7b:63:91:09:0a:b3:7c:1a:fa:86:05:2c:3d:88:c1:9d:
         92:fb:93:41:bd:39:b0:19:44:4d:c9:42:9d:e0:23:5d:ab:fe:
         e9:4c:cd:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDj/7uI0jvaHRZeRndSTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGFkNDJjNjRjNGY1NWZlY2U3OGIyNDI3MDcxZmU2Njg0
YzIwYzkwHhcNMjUwNzI4MjIwMTM5WhcNMjUwNzI5MjIwMTM5WjAzMTEwLwYDVQQD
Eyg2YWY5ZTU0ZmU1MWI5MDI5ZDFmZTczYTA2NDUyYjE2MTJiNmIzZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZF4ICQrJlWUeEjmV522MXGLIezg
QaZUoG8uGidowKFgwy9+Mo2xwmpG6KVHm5gdCF9uFtkD8dPWvZzPlj8y7MUltl91
cArn/q/9Y0hsB6Qs69D7InCfwhGholb4TKJifcUW17Nykv2QU0x6WJ0iJdha691h
AgbJ7VyTZdzfUs2cyI08ehZaCXJeHvZVxb38keXZn7CAYAjyW6kQq+XRSgnlASL5
JCRovnMNh+WrrdZ+UMkz2R5p6xM80WA+FhMK8g+SCEZ8yZ+0wSc1FeL2YjpNFwYT
rTrjWSFDpVMbmLMvdjPrxuptHXBxvx7BrmsJKbTmJaIU+aPD1t5gkrh+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr55U/lG5Ap0f5zoGRSsWEraz+OMB8GA1UdIwQY
MBaAFFgK1CxkxPVf7OeLJCcHH+ZoTCDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEt
NzM2OWE0MjU3MDE0LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84Y2IzNGQtOTRlNy00ZTU3LTk4YjEtNzM2OWE0MjU3MDE0
LzEvV0FyVUxHVEU5Vl9zNTRza0p3Y2Y1bWhNSU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZtenFnK
meml/1MbDzsdXd9b0fERPPXNWq+3iTK2W1Y2nX0lxPwJwMmATBKg97+5Ug6z9oJ+
qA/u6WB4si4mou0u1rG3kLgEBVl3FpSEI7HTv5PsZFyuRQYDyile/gnJqNDf1IMZ
TCy1SKeZdTECzpIffF6WyJfGK2jxv2O+f5WX3zlsBeRfI4qEVR9yAvgu05KOMR01
HXxhgasM0t8n3XPaIv72kCBfol1bh6sHoFOXyufwsPeV6+VjWPwd69NNk4BKgY/9
yG0JNt5EERETioUs27u0CQIEL8l7Y5EJCrN8GvqGBSw9iMGdkvuTQb05sBlETclC
neAjXav+6UzNdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 05:49:41 2025 by rpki-client