Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File:                     eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier:          WfbDGKaV2bHzkLLeHRM6KUiia4r7G72gaJgE+cv3lzI=
Subject key identifier:   5E:B5:3C:6E:C4:68:C1:BB:1A:58:38:CD:59:5E:3C:AB:2B:CE:4E:CC
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer:       /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial:       0198439AB266E20796B7B5B70EF3196731B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number:          1600
Signing time:             Fri 25 Jul 2025 22:01:08 +0000
Manifest this update:     Fri 25 Jul 2025 22:01:08 +0000
Manifest next update:     Sat 26 Jul 2025 22:01:08 +0000
Files and hashes:         1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=)
                          2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: 7/5qud9BcDhzURmTq1PQrdhKf8W7AqnqyvbQ6Eu1uSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9a:b2:66:e2:07:96:b7:b5:b7:0e:f3:19:67:31:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
        Validity
            Not Before: Jul 25 22:01:08 2025 GMT
            Not After : Jul 26 22:01:08 2025 GMT
        Subject: CN=5eb53c6ec468c1bb1a5838cd595e3cab2bce4ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:80:9a:22:5c:86:f6:ca:79:fe:d6:db:d6:
                    63:c0:1f:8b:be:17:8f:30:2b:ae:8b:df:6f:dd:29:
                    0c:e4:e5:9b:1c:c4:dc:06:96:bb:7d:2e:b2:ed:75:
                    8c:fe:04:38:0a:b9:5c:ae:f7:d7:16:22:7a:c0:a7:
                    49:51:cc:af:ce:06:fb:f6:a5:c8:e3:7c:14:b6:86:
                    ba:2e:e5:3b:af:02:f9:3e:ab:a2:85:30:52:fa:b2:
                    f2:8e:1a:97:47:06:68:89:46:03:33:cc:8e:0f:34:
                    5d:f2:f4:6e:61:2d:9d:31:90:9d:51:71:c6:67:84:
                    12:b7:05:3b:7a:e7:f8:41:82:92:ce:ad:e8:68:1b:
                    ac:b5:3b:a9:75:47:09:51:55:f0:dc:f0:fa:5c:df:
                    4d:60:e4:eb:77:eb:74:df:c5:ec:59:99:aa:f0:13:
                    44:9e:d5:5d:38:70:1a:f9:08:13:dd:8a:82:ee:93:
                    61:f5:dd:d3:01:36:9d:23:55:c2:4b:28:40:28:6e:
                    da:f5:64:42:32:ff:a4:33:8b:9c:0b:52:66:c5:ce:
                    eb:ab:93:5f:b8:f2:da:d6:fa:32:60:d6:88:65:3c:
                    5a:aa:f8:09:19:5f:09:71:ff:0a:2d:b2:27:67:42:
                    65:ed:0a:49:05:ea:2b:2c:da:a9:68:23:35:fa:4b:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:3C:6E:C4:68:C1:BB:1A:58:38:CD:59:5E:3C:AB:2B:CE:4E:CC
            X509v3 Authority Key Identifier:
                keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:8b:b5:39:b2:2b:99:4c:32:d1:73:4d:85:53:5a:48:18:
         3c:6c:30:4d:ea:87:cd:12:2d:21:1b:f6:ba:9f:82:d4:c4:be:
         f3:4a:95:c4:bc:33:20:5c:6b:7b:ea:37:b1:9d:f0:02:b2:5c:
         7d:01:a3:bb:a8:e9:4f:40:bd:2b:dd:18:b5:ab:f7:e2:6e:36:
         ca:7b:6f:0d:eb:0c:d0:6d:5e:11:a4:7d:ef:15:be:7b:76:11:
         ad:ba:8f:06:78:33:29:cb:26:2a:5b:45:6b:fe:5a:01:0c:78:
         f0:86:3e:17:40:7a:a8:5c:22:17:63:0e:94:30:47:b2:a9:c9:
         fa:29:be:80:29:42:18:2e:76:f0:da:d5:75:ce:b8:5e:fa:fd:
         2c:72:9b:74:4a:35:01:96:85:f2:13:85:65:ee:76:5d:08:f5:
         31:31:56:00:9a:d7:f8:93:ea:44:60:fa:f5:3d:80:84:b8:3d:
         a1:13:09:46:ab:c2:c3:e8:65:c2:c9:a1:0f:80:f7:bb:af:6d:
         1b:36:0e:bb:02:33:8c:d8:1e:b0:53:ae:4a:20:9f:66:cb:78:
         56:ce:79:b1:18:c3:83:e5:38:6c:6d:f7:7a:82:2e:de:b8:54:
         40:b6:28:08:5f:bd:af:d6:0f:68:5d:bd:b3:cf:32:13:0b:7f:
         d6:13:03:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmrJm4geWt7W3DvMZZzGxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjUwNzI1MjIwMTA4WhcNMjUwNzI2MjIwMTA4WjAzMTEwLwYDVQQD
Eyg1ZWI1M2M2ZWM0NjhjMWJiMWE1ODM4Y2Q1OTVlM2NhYjJiY2U0ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJuAmiJchvbKef7W29ZjwB+LvheP
MCuui99v3SkM5OWbHMTcBpa7fS6y7XWM/gQ4CrlcrvfXFiJ6wKdJUcyvzgb79qXI
43wUtoa6LuU7rwL5PquihTBS+rLyjhqXRwZoiUYDM8yODzRd8vRuYS2dMZCdUXHG
Z4QStwU7euf4QYKSzq3oaBustTupdUcJUVXw3PD6XN9NYOTrd+t038XsWZmq8BNE
ntVdOHAa+QgT3YqC7pNh9d3TATadI1XCSyhAKG7a9WRCMv+kM4ucC1Jmxc7rq5Nf
uPLa1voyYNaIZTxaqvgJGV8Jcf8KLbInZ0Jl7QpJBeorLNqpaCM1+kubHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF61PG7EaMG7Glg4zVlePKsrzk7MMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm
LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlyLtTmy
K5lMMtFzTYVTWkgYPGwwTeqHzRItIRv2up+C1MS+80qVxLwzIFxre+o3sZ3wArJc
fQGju6jpT0C9K90Ytav34m42yntvDesM0G1eEaR97xW+e3YRrbqPBngzKcsmKltF
a/5aAQx48IY+F0B6qFwiF2MOlDBHsqnJ+im+gClCGC528NrVdc64Xvr9LHKbdEo1
AZaF8hOFZe52XQj1MTFWAJrX+JPqRGD69T2AhLg9oRMJRqvCw+hlwsmhD4D3u69t
GzYOuwIzjNgesFOuSiCfZst4Vs55sRjDg+U4bG33eoIu3rhUQLYoCF+9r9YPaF29
s88yEwt/1hMDVQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:45 2025 by rpki-client