Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File:                     JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier:          r9l7LPXihgob9WzuNd+wkiWVA8INCZL+x8yBQTwYe3Y=
Subject key identifier:   88:C4:24:7A:5C:2A:A8:9A:0F:B5:69:5F:D7:2F:45:55:90:A4:D8:8D
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer:       /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial:       019848C09CCDC43AC997E40EBE890B3460C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 22:00:39 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:39 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:39 +0000
Files and hashes:         1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: ijCJdl8cLrbCAo7klHfdcjQ5sSoB4T/tiOFUVHjW1pc=)
                          2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:9c:cd:c4:3a:c9:97:e4:0e:be:89:0b:34:60:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
        Validity
            Not Before: Jul 26 22:00:39 2025 GMT
            Not After : Jul 27 22:00:39 2025 GMT
        Subject: CN=88c4247a5c2aa89a0fb5695fd72f455590a4d88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:1d:b7:d8:33:f3:b7:19:39:54:f5:bf:d4:
                    18:37:be:2c:6e:e9:52:2a:f8:97:9b:76:62:7f:71:
                    71:70:69:d3:cc:df:20:3b:85:ef:49:6d:e3:fc:d8:
                    05:f0:d6:f7:4d:5c:74:4e:cc:45:b5:90:4c:70:0b:
                    80:7f:27:db:ab:e4:aa:ee:12:84:b5:a8:a1:a7:27:
                    ba:d8:26:48:36:39:a9:30:c9:4c:54:5a:32:55:9e:
                    8e:37:34:16:87:31:20:ff:7b:7b:1a:57:bd:ef:4c:
                    fe:e3:81:d8:1b:9f:c7:e9:27:16:ec:41:bf:08:a4:
                    9a:60:ca:30:af:1c:78:c2:17:bb:21:9e:a2:76:63:
                    7d:1b:60:af:26:0f:2b:1e:ae:02:3a:cd:27:43:c0:
                    ec:0b:8f:45:77:a0:c7:fb:5f:3a:d4:32:65:1f:0f:
                    39:2a:cc:b0:ec:f4:5b:49:30:c8:ec:ef:44:58:5f:
                    4a:11:ad:a1:88:e0:fd:7b:e8:48:e0:0c:5b:64:6c:
                    7b:0d:1a:01:35:10:00:bf:e9:be:a2:d4:9e:6f:b5:
                    04:7e:22:71:a4:c6:fd:32:6e:82:15:81:87:f4:07:
                    5e:bf:c6:44:f1:75:2e:00:8d:9f:c5:d6:4b:70:43:
                    88:80:a6:cf:8c:1e:45:9d:9e:72:65:7c:bc:8b:80:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C4:24:7A:5C:2A:A8:9A:0F:B5:69:5F:D7:2F:45:55:90:A4:D8:8D
            X509v3 Authority Key Identifier:
                keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:3b:4e:18:4f:0d:48:01:85:61:c2:40:89:6c:80:cc:3b:
         9d:aa:ff:c3:44:5f:5e:44:bc:57:c2:ca:51:46:97:a6:6f:52:
         0c:64:61:38:b4:57:c7:6f:76:d0:60:33:61:4b:32:9d:32:64:
         eb:34:07:0e:26:86:73:c4:64:fe:8d:ec:69:88:af:02:3b:e9:
         52:e5:a7:43:fe:06:fa:7a:a0:f3:74:6f:19:c1:55:75:4e:fd:
         1d:a9:64:b4:42:97:95:44:87:2b:ed:a7:48:66:ac:1f:06:60:
         57:78:63:9a:a2:ff:ab:b3:da:fd:50:6c:d2:2f:87:24:78:b8:
         be:49:91:d6:99:d4:13:4a:8b:57:26:f7:8d:d3:4d:ec:da:24:
         e1:51:34:d0:6a:84:ef:b1:b5:ac:22:6f:99:c4:87:ab:6b:e4:
         38:78:2e:9e:08:c9:06:4b:6b:b3:68:dc:44:25:d8:7c:f3:76:
         bc:17:87:ba:9a:bb:35:bf:84:7d:44:14:a3:5c:c4:4b:a5:03:
         d5:d9:cb:0e:84:1c:53:64:86:cc:49:3a:dd:ec:8f:89:6a:e9:
         d9:8f:dd:cd:51:3d:04:33:0e:51:86:7d:93:75:fb:da:1c:86:
         8e:92:9f:ad:0d:91:05:2c:34:e5:38:37:fc:4e:3e:49:0d:62:
         e3:99:7e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwJzNxDrJl+QOvokLNGDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl
MjEwM2MwHhcNMjUwNzI2MjIwMDM5WhcNMjUwNzI3MjIwMDM5WjAzMTEwLwYDVQQD
Eyg4OGM0MjQ3YTVjMmFhODlhMGZiNTY5NWZkNzJmNDU1NTkwYTRkODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkdt9gz87cZOVT1v9QYN74sbulS
KviXm3Zif3FxcGnTzN8gO4XvSW3j/NgF8Nb3TVx0TsxFtZBMcAuAfyfbq+Sq7hKE
taihpye62CZINjmpMMlMVFoyVZ6ONzQWhzEg/3t7Gle970z+44HYG5/H6ScW7EG/
CKSaYMowrxx4whe7IZ6idmN9G2CvJg8rHq4COs0nQ8DsC49Fd6DH+1861DJlHw85
Ksyw7PRbSTDI7O9EWF9KEa2hiOD9e+hI4AxbZGx7DRoBNRAAv+m+otSeb7UEfiJx
pMb9Mm6CFYGH9Adev8ZE8XUuAI2fxdZLcEOIgKbPjB5FnZ5yZXy8i4AZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjEJHpcKqiaD7VpX9cvRVWQpNiNMB8GA1UdIwQY
MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt
YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi
LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNM7ThhP
DUgBhWHCQIlsgMw7nar/w0RfXkS8V8LKUUaXpm9SDGRhOLRXx2920GAzYUsynTJk
6zQHDiaGc8Rk/o3saYivAjvpUuWnQ/4G+nqg83RvGcFVdU79HalktEKXlUSHK+2n
SGasHwZgV3hjmqL/q7Pa/VBs0i+HJHi4vkmR1pnUE0qLVyb3jdNN7Nok4VE00GqE
77G1rCJvmcSHq2vkOHgungjJBktrs2jcRCXYfPN2vBeHupq7Nb+EfUQUo1zES6UD
1dnLDoQcU2SGzEk63eyPiWrp2Y/dzVE9BDMOUYZ9k3X72hyGjpKfrQ2RBSw05Tg3
/E4+SQ1i45l+0Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:44:18 2025 by rpki-client