Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File:                     dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier:          dx6lGz05sTd8sstMwHKVN+HeBxYRlTMvcIGu3cHEAh4=
Subject key identifier:   04:A7:DB:A5:CF:FB:DC:D1:1A:36:7A:1D:81:16:AC:73:8C:DE:1D:5D
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer:       /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial:       0198469B6D1282976B75EFDB5591F913ABED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number:          1594
Signing time:             Sat 26 Jul 2025 12:00:47 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:47 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:47 +0000
Files and hashes:         1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
                          2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: cCqwfhpYSA1ewZ4VIXhvsnBuQ2FToCZIjPPqW8sx/wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:6d:12:82:97:6b:75:ef:db:55:91:f9:13:ab:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
        Validity
            Not Before: Jul 26 12:00:47 2025 GMT
            Not After : Jul 27 12:00:47 2025 GMT
        Subject: CN=04a7dba5cffbdcd11a367a1d8116ac738cde1d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:57:52:6a:37:f1:f5:bc:a9:05:a5:18:44:
                    aa:05:04:80:cb:79:d6:75:75:72:95:ff:22:b5:c6:
                    08:3a:62:f1:11:58:9b:b6:0b:99:d6:24:ba:a9:a6:
                    21:b8:f5:0f:12:6f:89:6b:74:06:a9:74:ff:a6:61:
                    02:dd:69:56:2d:61:c1:8c:96:4c:d7:c1:e2:45:1e:
                    5a:46:bc:94:75:62:57:27:f8:fa:de:2f:93:d6:82:
                    2a:a7:56:02:58:ea:46:35:3f:c8:8d:b5:5e:a6:de:
                    c0:49:e3:88:1b:c2:5e:13:c1:1f:d8:84:2a:2b:b8:
                    84:f1:e7:38:a2:4b:3d:d3:96:17:11:b4:e1:73:e6:
                    de:de:58:90:5c:98:0b:3f:25:a2:18:3f:96:c9:25:
                    fb:90:e9:f5:b4:fb:cb:e7:19:bf:a3:e9:1c:bf:db:
                    a7:66:a4:ca:af:50:73:97:12:02:71:b7:19:f4:1d:
                    00:a1:ad:0b:47:db:5e:4d:5a:ce:34:5b:b4:7a:86:
                    82:90:e9:b5:cd:e0:d3:14:44:d6:24:0e:57:b2:08:
                    6c:9d:b8:c7:28:7c:b8:9d:2c:43:57:67:db:18:86:
                    3b:86:1b:97:df:0c:77:53:3d:1a:50:ca:73:e7:44:
                    21:9c:c5:cd:7a:ca:14:65:4b:47:a6:7d:9f:88:50:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A7:DB:A5:CF:FB:DC:D1:1A:36:7A:1D:81:16:AC:73:8C:DE:1D:5D
            X509v3 Authority Key Identifier:
                keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:5b:60:a9:8c:d9:93:ad:dd:bb:ee:76:cc:c0:9b:eb:c3:
         75:12:99:f2:04:4c:eb:9e:fa:0a:fa:8d:34:d9:60:4d:22:56:
         8a:e1:41:e2:a6:5e:22:fa:98:5c:6b:65:a7:d5:b1:b4:9e:30:
         78:b0:03:62:8c:e9:46:b7:9a:dc:2d:4c:b0:94:62:c3:c6:11:
         a0:8e:c0:4c:3f:a6:5f:61:c4:c0:9d:89:be:c3:67:c8:4c:a2:
         9b:44:1c:64:be:b9:e4:82:45:42:82:72:85:ff:35:e3:9d:ae:
         88:51:63:66:58:2c:bd:09:84:68:47:6e:87:0a:cc:53:23:2f:
         b6:7c:e6:1d:f9:2d:14:3e:6a:7c:f9:1a:8a:c5:e4:7d:09:a5:
         30:e8:7c:59:e8:04:5f:59:9c:cd:94:44:50:8a:4e:9c:51:c1:
         93:29:e5:e4:ad:25:00:82:f8:86:93:2b:66:28:14:ce:2f:c9:
         52:d6:e9:03:96:85:a6:0b:23:95:63:8b:46:0a:21:bb:8e:00:
         47:c0:99:6a:2e:bc:f3:0c:d2:f4:f3:fe:8a:df:22:47:27:c9:
         4a:59:47:37:27:f8:ef:3b:d1:2f:0e:71:2b:cf:84:12:30:71:
         37:91:9e:d9:ed:e6:a1:80:19:4d:64:c2:26:6d:2c:c1:e7:51:
         40:13:70:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGm20Sgpdrde/bVZH5E6vtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1
ZWI5YWYwHhcNMjUwNzI2MTIwMDQ3WhcNMjUwNzI3MTIwMDQ3WjAzMTEwLwYDVQQD
EygwNGE3ZGJhNWNmZmJkY2QxMWEzNjdhMWQ4MTE2YWM3MzhjZGUxZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjFXUmo38fW8qQWlGESqBQSAy3nW
dXVylf8itcYIOmLxEVibtguZ1iS6qaYhuPUPEm+Ja3QGqXT/pmEC3WlWLWHBjJZM
18HiRR5aRryUdWJXJ/j63i+T1oIqp1YCWOpGNT/IjbVept7ASeOIG8JeE8Ef2IQq
K7iE8ec4oks905YXEbThc+be3liQXJgLPyWiGD+WySX7kOn1tPvL5xm/o+kcv9un
ZqTKr1BzlxICcbcZ9B0Aoa0LR9teTVrONFu0eoaCkOm1zeDTFETWJA5XsghsnbjH
KHy4nSxDV2fbGIY7hhuX3wx3Uz0aUMpz50QhnMXNesoUZUtHpn2fiFDfbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASn26XP+9zRGjZ6HYEWrHOM3h1dMB8GA1UdIwQY
MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt
ODhjZmEzZGNhNmRlLzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl
LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt1bYKmM
2ZOt3bvudszAm+vDdRKZ8gRM6576CvqNNNlgTSJWiuFB4qZeIvqYXGtlp9WxtJ4w
eLADYozpRrea3C1MsJRiw8YRoI7ATD+mX2HEwJ2JvsNnyEyim0QcZL655IJFQoJy
hf81452uiFFjZlgsvQmEaEduhwrMUyMvtnzmHfktFD5qfPkaisXkfQmlMOh8WegE
X1mczZREUIpOnFHBkynl5K0lAIL4hpMrZigUzi/JUtbpA5aFpgsjlWOLRgohu44A
R8CZai688wzS9PP+it8iRyfJSllHNyf47zvRLw5xK8+EEjBxN5Ge2e3moYAZTWTC
Jm0swedRQBNwgA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:06 2025 by rpki-client