Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
File:                     F__x54w3SZ1y0Qi6co7wKbfw5_M.mft (raw, json)
Hash identifier:          7ExD1Wz4zFNGfQH1XbtYzbhz7SukhiNTmZcoqr39J2c=
Subject key identifier:   C8:54:C0:94:6D:87:16:98:74:F8:45:35:FB:4A:4D:DC:69:AC:B7:A6
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Certificate issuer:       /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial:       01984A0A4ABC1E4FDDC42A833C82DEAE060C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 04:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:45 +0000
Files and hashes:         1: F__x54w3SZ1y0Qi6co7wKbfw5_M.crl (hash: XoQul0mziBdyxN5Oz9ylmam2Fj4clL5brmY+8lNGsO4=)
                          2: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (hash: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:4a:bc:1e:4f:dd:c4:2a:83:3c:82:de:ae:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
        Validity
            Not Before: Jul 27 04:00:45 2025 GMT
            Not After : Jul 28 04:00:45 2025 GMT
        Subject: CN=c854c0946d87169874f84535fb4a4ddc69acb7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:2a:0b:a8:46:55:78:5b:08:e8:39:af:e5:
                    b9:b4:28:32:7b:c1:eb:bf:22:6b:39:00:59:cd:4d:
                    ad:1e:af:a4:4d:50:bb:7e:53:94:e6:62:91:ef:fa:
                    63:56:0f:df:94:77:dd:5e:2a:3f:d2:d0:8b:24:84:
                    80:c6:23:db:2c:7d:f9:46:f7:3c:8f:25:87:e4:c5:
                    d9:15:49:fd:46:19:ca:86:72:c4:a1:d4:d3:ce:23:
                    b5:d4:b4:4f:05:73:42:92:96:70:cf:5a:82:c3:41:
                    6a:58:32:39:f2:7b:8b:02:0f:ea:22:00:25:cb:58:
                    af:e4:c8:b1:ad:c6:3e:35:8a:4f:1c:c5:66:e1:c5:
                    4b:45:4a:a3:ad:0f:70:b0:a7:5e:e6:35:95:3b:97:
                    32:fd:99:95:cd:e2:d6:a5:13:ea:d1:e0:37:51:4e:
                    bf:61:cf:33:54:aa:dd:66:91:51:b5:15:92:11:ff:
                    8c:01:b9:80:28:88:f4:4b:74:61:19:5f:1c:00:cc:
                    97:c1:b5:a3:ed:4e:c1:6a:b6:6b:ca:f6:e0:8a:54:
                    03:95:6c:1f:25:7b:00:c8:24:b8:02:93:43:90:4a:
                    aa:b7:4c:f7:1f:0c:dc:25:d3:35:79:1b:82:d8:33:
                    74:65:18:9f:ea:8c:c3:2e:59:c5:88:24:ae:15:be:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:54:C0:94:6D:87:16:98:74:F8:45:35:FB:4A:4D:DC:69:AC:B7:A6
            X509v3 Authority Key Identifier:
                keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:28:b5:ec:6d:ad:ae:bd:cd:95:73:28:e3:0a:bb:e8:e4:70:
         51:03:63:f2:84:fb:a6:fa:8d:e3:35:9c:68:f5:54:31:e1:dd:
         dd:36:b5:7a:bf:b6:19:4f:80:a4:e9:28:a1:bc:c7:f3:d6:2d:
         07:0d:96:c5:53:44:f4:f9:64:99:83:ad:41:50:b1:88:e8:f3:
         36:fc:8f:1f:97:7c:77:ae:33:a8:2c:a1:ac:c3:1a:6c:29:2c:
         85:3f:70:83:5f:8f:2d:38:fa:50:58:ee:5b:37:23:11:84:02:
         ee:4d:e2:8b:47:e2:6b:78:15:c9:00:cc:51:0b:5e:49:60:54:
         68:a2:4d:9d:d4:d9:22:2c:23:99:df:5f:bf:08:97:2a:38:63:
         8c:0f:2f:d2:6d:61:e7:9b:42:10:11:ff:fa:53:db:16:0d:7d:
         f6:02:27:a0:b4:27:a9:52:f9:f5:71:28:8c:eb:42:12:ee:b3:
         fe:6c:a2:df:b6:02:a7:e4:b9:ac:2e:60:d1:17:17:37:46:57:
         0b:a3:09:ac:7e:1e:7b:00:76:c6:ee:7c:ce:7f:26:d3:d7:98:
         01:39:87:f8:38:14:a2:95:17:48:8d:b7:a3:c6:f8:75:07:ea:
         ca:a6:5c:c3:72:32:41:21:c7:97:fe:8c:b0:cf:31:23:1c:15:
         3c:96:cb:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCkq8Hk/dxCqDPILergYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZmMWU3OGMzNzQ5OWQ3MmQxMDhiYTcyOGVmMDI5Yjdm
MGU3ZjMwHhcNMjUwNzI3MDQwMDQ1WhcNMjUwNzI4MDQwMDQ1WjAzMTEwLwYDVQQD
EyhjODU0YzA5NDZkODcxNjk4NzRmODQ1MzVmYjRhNGRkYzY5YWNiN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEqC6hGVXhbCOg5r+W5tCgye8Hr
vyJrOQBZzU2tHq+kTVC7flOU5mKR7/pjVg/flHfdXio/0tCLJISAxiPbLH35Rvc8
jyWH5MXZFUn9RhnKhnLEodTTziO11LRPBXNCkpZwz1qCw0FqWDI58nuLAg/qIgAl
y1iv5MixrcY+NYpPHMVm4cVLRUqjrQ9wsKde5jWVO5cy/ZmVzeLWpRPq0eA3UU6/
Yc8zVKrdZpFRtRWSEf+MAbmAKIj0S3RhGV8cAMyXwbWj7U7BarZryvbgilQDlWwf
JXsAyCS4ApNDkEqqt0z3HwzcJdM1eRuC2DN0ZRif6ozDLlnFiCSuFb7KUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhUwJRthxaYdPhFNftKTdxprLemMB8GA1UdIwQY
MBaAFBf/8eeMN0mdctEIunKO8Cm38OfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEt
M2YzOWQ3NjQyNGZiLzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEtM2YzOWQ3NjQyNGZi
LzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyi17G2t
rr3NlXMo4wq76ORwUQNj8oT7pvqN4zWcaPVUMeHd3Ta1er+2GU+ApOkoobzH89Yt
Bw2WxVNE9PlkmYOtQVCxiOjzNvyPH5d8d64zqCyhrMMabCkshT9wg1+PLTj6UFju
WzcjEYQC7k3ii0fia3gVyQDMUQteSWBUaKJNndTZIiwjmd9fvwiXKjhjjA8v0m1h
55tCEBH/+lPbFg199gInoLQnqVL59XEojOtCEu6z/myi37YCp+S5rC5g0RcXN0ZX
C6MJrH4eewB2xu58zn8m09eYATmH+DgUopUXSI23o8b4dQfqyqZcw3IyQSHHl/6M
sM8xIxwVPJbLhA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:25 2025 by rpki-client