Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File:                     r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier:          vUF1adp/SdhSlqxDKdGv7C7YOICStWa0s5Mtag/300w=
Subject key identifier:   CF:20:12:9E:83:26:22:36:97:47:5D:B9:D3:CD:7F:3D:93:1E:82:57
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer:       /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial:       0198477693C41E6DF5861FB05ED03769BD2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 16:00:10 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:10 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:10 +0000
Files and hashes:         1: 1F7uxkd5CHW5Nl3RYcymdv41PuQ.roa (hash: CcbwxJuJRF3/aA4m69pX7txPfcLVx2hNzHSkmTtnNVg=)
                          2: 6OJY_cLGBp28NDNyp5KhfLaq0T4.roa (hash: Q7dSDBkkqsY0c5wjzpyUd8BOdypnvTRmRZWsgkhxLKs=)
                          3: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=)
                          4: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=)
                          5: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=)
                          6: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: cNyuoZxLcGGKqnxcCkPk6k7xLOQSbNAHi8HZ0T5p3CE=)
                          7: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:93:c4:1e:6d:f5:86:1f:b0:5e:d0:37:69:bd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
        Validity
            Not Before: Jul 26 16:00:10 2025 GMT
            Not After : Jul 27 16:00:10 2025 GMT
        Subject: CN=cf20129e8326223697475db9d3cd7f3d931e8257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:c1:7a:81:d1:33:e7:df:c3:84:1c:a2:02:
                    fb:e9:c1:9d:b3:52:1e:f6:95:d9:0d:05:cb:f5:66:
                    7c:42:f4:59:dd:63:ae:44:ed:07:6b:98:30:89:d9:
                    00:82:5b:bb:25:38:13:9b:91:bb:aa:12:49:5d:50:
                    d1:6a:88:47:f5:1e:2a:3c:e4:97:b9:5f:4c:6f:a5:
                    9c:36:1f:b4:64:5c:22:56:71:01:46:d3:ed:72:cb:
                    54:29:ca:60:d6:08:6e:7d:37:18:70:b2:db:a3:50:
                    08:78:63:03:2d:1f:9a:24:cb:49:47:7e:92:44:3f:
                    6e:26:e4:50:d3:41:c7:4a:54:8b:a5:15:d3:68:18:
                    63:e5:cf:a7:3a:65:f6:d8:22:c0:0a:09:48:50:b5:
                    3a:73:25:82:2d:84:6c:88:46:55:a3:31:f2:a7:53:
                    87:d5:9e:b2:18:14:6d:d0:df:fb:39:6b:39:01:10:
                    11:03:6b:69:fd:a7:c1:d1:90:e2:bc:0b:ab:20:b0:
                    3b:33:ee:04:73:f9:0f:f3:2a:9c:13:6e:c7:b9:29:
                    f2:a9:ae:b2:8d:0d:e6:e0:cd:2b:4a:9c:5d:69:76:
                    26:5e:e9:9a:07:7a:3a:f3:84:d3:2f:fe:90:d3:f3:
                    90:fc:ec:c1:f3:c8:68:6b:b9:36:41:73:11:62:ea:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:12:9E:83:26:22:36:97:47:5D:B9:D3:CD:7F:3D:93:1E:82:57
            X509v3 Authority Key Identifier:
                keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:0e:76:ef:cc:05:43:09:c4:f1:a3:11:c9:90:bd:ff:6c:
         fc:a4:e4:43:67:27:a2:f2:74:86:9e:df:9e:0f:95:15:89:47:
         b9:15:3c:28:f3:a6:1a:99:d9:9e:09:5c:5c:f4:46:7b:a8:5a:
         66:eb:a4:07:16:e0:73:2d:ca:05:36:30:c1:eb:de:53:c9:13:
         39:66:f3:d1:d0:cc:a7:f7:11:1b:30:5f:4d:93:04:03:1d:5e:
         14:77:25:b6:4c:0c:f7:2c:31:9c:db:a2:4e:06:b1:5f:27:3f:
         d9:4e:ec:92:e2:51:40:e2:4c:88:3c:9d:cf:f5:d7:20:b1:db:
         0b:a1:83:55:8b:e6:59:63:98:57:b0:80:8a:14:60:aa:c0:a6:
         31:44:fd:36:3a:cd:dd:dc:2f:a0:71:00:ae:42:1e:22:0d:8e:
         19:24:2a:b1:d3:38:e9:7a:3d:59:17:cc:51:7b:4a:6d:04:bf:
         d4:3d:4c:f7:70:c7:52:c2:ab:70:34:91:d3:36:44:0e:b5:97:
         1a:8f:54:a3:bb:6d:46:a0:b7:9a:ff:36:25:4d:2b:da:f2:2b:
         86:9e:9a:d5:de:b1:c2:c0:c5:d9:94:f0:59:dd:0e:88:29:7b:
         c3:d2:95:d2:9c:f7:f2:b0:36:91:c7:3c:9f:d7:27:92:18:26:
         2c:46:ea:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdpPEHm31hh+wXtA3ab0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjUwNzI2MTYwMDEwWhcNMjUwNzI3MTYwMDEwWjAzMTEwLwYDVQQD
EyhjZjIwMTI5ZTgzMjYyMjM2OTc0NzVkYjlkM2NkN2YzZDkzMWU4MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf/BeoHRM+ffw4QcogL76cGds1Ie
9pXZDQXL9WZ8QvRZ3WOuRO0Ha5gwidkAglu7JTgTm5G7qhJJXVDRaohH9R4qPOSX
uV9Mb6WcNh+0ZFwiVnEBRtPtcstUKcpg1ghufTcYcLLbo1AIeGMDLR+aJMtJR36S
RD9uJuRQ00HHSlSLpRXTaBhj5c+nOmX22CLACglIULU6cyWCLYRsiEZVozHyp1OH
1Z6yGBRt0N/7OWs5ARARA2tp/afB0ZDivAurILA7M+4Ec/kP8yqcE27HuSnyqa6y
jQ3m4M0rSpxdaXYmXumaB3o684TTL/6Q0/OQ/OzB88hoa7k2QXMRYuo+JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8gEp6DJiI2l0ddudPNfz2THoJXMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCcOdu/M
BUMJxPGjEcmQvf9s/KTkQ2cnovJ0hp7fng+VFYlHuRU8KPOmGpnZnglcXPRGe6ha
ZuukBxbgcy3KBTYwweveU8kTOWbz0dDMp/cRGzBfTZMEAx1eFHcltkwM9ywxnNui
TgaxXyc/2U7skuJRQOJMiDydz/XXILHbC6GDVYvmWWOYV7CAihRgqsCmMUT9NjrN
3dwvoHEArkIeIg2OGSQqsdM46Xo9WRfMUXtKbQS/1D1M93DHUsKrcDSR0zZEDrWX
Go9Uo7ttRqC3mv82JU0r2vIrhp6a1d6xwsDF2ZTwWd0OiCl7w9KV0pz38rA2kcc8
n9cnkhgmLEbqsw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:00 2025 by rpki-client