Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          jSKNTybkudXGQ/vqiT7w5OLID9TUdBw4i8d9sa39viE=
Subject key identifier:   3A:F8:8D:69:F9:AF:70:9C:1D:4C:2D:E0:55:0D:37:93:80:5E:55:74
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       01984BC15C565A8108A2021CB861D369CB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          1593
Signing time:             Sun 27 Jul 2025 12:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 12:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 12:00:19 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: i8lbDihiAC/RgJHU2gJSDP+BCdmhlXPC/Er6ROg+K0M=)
                          2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:5c:56:5a:81:08:a2:02:1c:b8:61:d3:69:cb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: Jul 27 12:00:19 2025 GMT
            Not After : Jul 28 12:00:19 2025 GMT
        Subject: CN=3af88d69f9af709c1d4c2de0550d3793805e5574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:29:80:e6:ad:f6:24:40:f4:c9:6a:47:88:
                    e8:27:03:43:d8:a4:b0:2c:87:4e:0d:2e:23:87:21:
                    28:e9:98:3f:fb:c3:a2:04:99:f2:cf:ac:84:b8:99:
                    57:a3:39:fe:6e:d7:b8:ef:30:11:8f:d3:ec:fd:64:
                    7b:e7:bf:41:20:93:5e:40:e4:43:15:6d:ee:e8:1a:
                    ba:6c:b7:b8:9d:15:12:03:8d:1d:ed:2e:e4:a6:63:
                    6c:12:97:3c:57:5c:d0:ba:ba:9b:28:d1:13:9a:11:
                    90:40:82:67:6a:83:6b:a4:db:1b:3e:1c:25:ac:07:
                    6f:e7:e4:28:09:a1:e6:64:1f:57:f5:88:3a:ad:6f:
                    83:b0:58:7f:2d:aa:b8:a6:d5:0b:04:83:90:99:23:
                    15:3d:96:b6:54:5b:0a:34:b5:4e:96:1d:5d:38:e9:
                    11:d5:31:2e:c5:d5:9a:30:71:90:de:73:66:9b:41:
                    3e:d7:84:c6:77:36:36:d9:04:65:5e:40:6a:5b:79:
                    bc:de:f6:23:b7:99:62:96:d4:93:b8:af:d7:9a:ed:
                    dc:52:14:0b:8d:74:99:25:ae:ec:c9:1e:b2:5d:f4:
                    96:04:4a:b0:55:0e:d5:da:36:34:8e:53:ee:01:64:
                    29:53:5c:76:14:8e:29:07:d3:18:17:d6:00:da:3d:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:8D:69:F9:AF:70:9C:1D:4C:2D:E0:55:0D:37:93:80:5E:55:74
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:3b:36:4c:8a:26:6b:63:8d:4a:38:6a:90:8c:f9:10:a4:
         e7:d0:7e:f4:6e:e1:f6:a1:f8:d0:44:ff:f1:50:e7:64:67:10:
         d1:cf:97:8c:3b:58:81:71:ab:22:2e:c4:ed:bc:77:d1:97:d6:
         e3:c7:9f:d0:ca:23:8a:17:bd:d6:f3:12:ed:d5:a4:ce:66:f0:
         5c:44:fa:79:17:39:ed:85:e5:81:17:1b:b4:3e:44:aa:ee:67:
         c2:1e:6b:d3:00:f5:d1:5b:91:a1:07:d8:60:1d:c7:87:b8:06:
         9d:88:de:c0:69:f8:c6:2b:05:30:d1:1d:7d:20:f7:3d:44:22:
         c0:b0:0a:61:96:53:8f:cf:93:e7:f5:53:c7:d5:bb:d8:10:13:
         20:fa:8e:2b:2b:a1:b0:82:ef:79:1b:97:7a:91:4b:40:84:d3:
         40:b5:cb:18:05:ed:22:a1:32:0b:a8:34:e9:4f:68:4e:4f:77:
         f5:de:1d:e8:05:36:8f:61:b2:6b:ef:a0:2c:dd:15:3a:96:de:
         37:d3:6b:7f:af:86:97:4b:78:d2:c3:70:8a:39:7d:5c:38:48:
         86:11:02:c1:4c:83:df:4e:3f:ce:4d:8f:b7:a4:b9:0d:45:be:
         f5:9e:83:59:2b:d2:da:99:f9:8c:48:5f:67:a2:05:73:17:e2:
         1b:67:e2:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwVxWWoEIogIcuGHTacsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm
YzFjM2MwHhcNMjUwNzI3MTIwMDE5WhcNMjUwNzI4MTIwMDE5WjAzMTEwLwYDVQQD
EygzYWY4OGQ2OWY5YWY3MDljMWQ0YzJkZTA1NTBkMzc5MzgwNWU1NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a0pgOat9iRA9MlqR4joJwND2KSw
LIdODS4jhyEo6Zg/+8OiBJnyz6yEuJlXozn+bte47zARj9Ps/WR7579BIJNeQORD
FW3u6Bq6bLe4nRUSA40d7S7kpmNsEpc8V1zQurqbKNETmhGQQIJnaoNrpNsbPhwl
rAdv5+QoCaHmZB9X9Yg6rW+DsFh/Laq4ptULBIOQmSMVPZa2VFsKNLVOlh1dOOkR
1TEuxdWaMHGQ3nNmm0E+14TGdzY22QRlXkBqW3m83vYjt5liltSTuK/Xmu3cUhQL
jXSZJa7syR6yXfSWBEqwVQ7V2jY0jlPuAWQpU1x2FI4pB9MYF9YA2j0zXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr4jWn5r3CcHUwt4FUNN5OAXlV0MB8GA1UdIwQY
MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt
YTJlODgwZmQ1ODUwLzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw
LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ87NkyK
JmtjjUo4apCM+RCk59B+9G7h9qH40ET/8VDnZGcQ0c+XjDtYgXGrIi7E7bx30ZfW
48ef0Mojihe91vMS7dWkzmbwXET6eRc57YXlgRcbtD5Equ5nwh5r0wD10VuRoQfY
YB3Hh7gGnYjewGn4xisFMNEdfSD3PUQiwLAKYZZTj8+T5/VTx9W72BATIPqOKyuh
sILveRuXepFLQITTQLXLGAXtIqEyC6g06U9oTk939d4d6AU2j2Gya++gLN0VOpbe
N9Nrf6+Gl0t40sNwijl9XDhIhhECwUyD304/zk2Pt6S5DUW+9Z6DWSvS2pn5jEhf
Z6IFcxfiG2fiNg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:54:39 2025 by rpki-client