Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File:                     In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier:          xghdQmtDMHP8L3la88LdEheGgKFXBAxkVFX2sj0yqlw=
Subject key identifier:   72:94:B3:C7:8C:39:C8:79:C7:8A:64:A2:1A:5B:CB:8E:8B:68:98:62
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer:       /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial:       01984A4111FCB31429ACB49F2CC4091CEDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 05:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:35 +0000
Files and hashes:         1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: VBZaGktdXLYhel2Mw3t9vVc+XR9LqtZAPu7H6YHj99c=)
                          2: eJ7uPrM8JY33NNPBvoVZtJuwfgo.roa (hash: 9nSK/KxQ/IGq4AdrWK6p4xTHdEJaVTMR/Qd+c8XyqcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:11:fc:b3:14:29:ac:b4:9f:2c:c4:09:1c:ed:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
        Validity
            Not Before: Jul 27 05:00:35 2025 GMT
            Not After : Jul 28 05:00:35 2025 GMT
        Subject: CN=7294b3c78c39c879c78a64a21a5bcb8e8b689862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:bf:d6:f2:ce:d7:a0:3a:e4:0f:c0:57:62:
                    99:57:45:22:e9:6e:18:ae:1d:62:99:67:b6:b7:fb:
                    42:25:bf:7e:cf:00:ae:bb:63:98:0b:c2:40:75:5c:
                    94:fc:c9:80:8d:48:0f:f0:ff:a1:a9:e6:eb:60:29:
                    5c:48:de:ac:a6:47:72:52:f0:f7:fe:09:25:be:6b:
                    85:cb:8c:5a:75:17:c9:9b:f9:e1:e1:b7:70:d6:a0:
                    74:a3:59:82:ba:ae:34:00:f7:49:31:93:23:11:b4:
                    43:e8:c3:d3:73:8a:25:90:3e:71:65:0c:95:f4:5b:
                    5e:1b:56:04:23:73:c3:5e:93:1d:ea:1b:2f:50:17:
                    98:11:51:bc:be:54:e5:97:f1:af:c2:ee:1d:d4:16:
                    19:5d:28:9d:92:6b:b8:28:c8:22:e7:29:5f:26:a5:
                    85:a8:a8:31:ca:76:2e:2c:66:bd:c1:b1:05:d0:66:
                    a0:82:17:40:02:bc:8e:62:80:c7:85:d0:f5:af:b2:
                    87:96:79:33:7b:01:e4:57:a5:94:30:80:aa:2f:56:
                    09:ba:5b:34:c9:5e:fb:a5:ec:e9:c2:94:62:cf:3d:
                    cf:2c:f7:88:01:02:5f:dc:c8:35:d6:79:da:2f:bc:
                    23:e1:17:8b:5e:71:02:a4:2b:12:dc:b1:1b:86:26:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:B3:C7:8C:39:C8:79:C7:8A:64:A2:1A:5B:CB:8E:8B:68:98:62
            X509v3 Authority Key Identifier:
                keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:91:a3:3f:84:28:db:49:f0:a7:b8:9b:85:49:0d:84:78:a3:
         0c:9f:6b:0a:c2:80:3e:5d:63:d9:9f:13:cd:3a:7a:f8:81:9f:
         2a:3b:fe:5f:d1:75:63:c6:cd:0c:00:71:bc:16:26:a3:e0:33:
         a8:f0:2a:04:b8:85:a6:37:19:a5:f4:01:51:92:6d:ab:c7:46:
         30:8e:c5:f1:f6:1c:c9:3a:b8:63:db:74:e8:e8:51:92:dd:19:
         6b:b8:05:c0:0c:b1:22:00:72:69:da:10:45:0c:6b:ee:59:1d:
         e3:82:64:99:03:f3:a4:2e:92:55:e9:34:37:a5:08:9b:78:f7:
         07:a2:6b:09:7d:09:03:7c:4f:82:27:31:95:57:c8:76:6a:0d:
         81:ec:3f:16:68:fd:cd:7d:4c:19:d3:54:b1:aa:fb:16:62:48:
         00:f6:9b:5e:f2:bd:2c:71:14:7a:8d:d9:0e:75:a6:c2:7b:31:
         d0:12:47:70:fa:7c:f4:7a:c6:84:36:c7:4d:3b:ee:70:6e:7c:
         46:6d:b9:81:54:d8:79:67:b8:ac:7c:77:33:c0:7e:39:13:b2:
         81:53:e3:23:26:eb:c7:a4:21:ec:94:5d:62:5c:e3:ab:56:5f:
         aa:d8:d5:90:ee:fb:da:ab:7e:8e:eb:e7:28:ce:e1:0c:17:7c:
         90:29:65:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQRH8sxQprLSfLMQJHO3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyN2U5NTgxYTY5YWNmODExOTMyMGUxMzc5ODU3YTUxM2Jk
MjM4ZGIwHhcNMjUwNzI3MDUwMDM1WhcNMjUwNzI4MDUwMDM1WjAzMTEwLwYDVQQD
Eyg3Mjk0YjNjNzhjMzljODc5Yzc4YTY0YTIxYTViY2I4ZThiNjg5ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJu/1vLO16A65A/AV2KZV0Ui6W4Y
rh1imWe2t/tCJb9+zwCuu2OYC8JAdVyU/MmAjUgP8P+hqebrYClcSN6spkdyUvD3
/gklvmuFy4xadRfJm/nh4bdw1qB0o1mCuq40APdJMZMjEbRD6MPTc4olkD5xZQyV
9FteG1YEI3PDXpMd6hsvUBeYEVG8vlTll/Gvwu4d1BYZXSidkmu4KMgi5ylfJqWF
qKgxynYuLGa9wbEF0GagghdAAryOYoDHhdD1r7KHlnkzewHkV6WUMICqL1YJuls0
yV77pezpwpRizz3PLPeIAQJf3Mg11nnaL7wj4ReLXnECpCsS3LEbhiaUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKUs8eMOch5x4pkohpby46LaJhiMB8GA1UdIwQY
MBaAFCJ+lYGmms+BGTIOE3mFelE70jjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2It
ZDlkZjQ1ZGJiYWRmLzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2ItZDlkZjQ1ZGJiYWRm
LzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpGjP4Qo
20nwp7ibhUkNhHijDJ9rCsKAPl1j2Z8TzTp6+IGfKjv+X9F1Y8bNDABxvBYmo+Az
qPAqBLiFpjcZpfQBUZJtq8dGMI7F8fYcyTq4Y9t06OhRkt0Za7gFwAyxIgByadoQ
RQxr7lkd44JkmQPzpC6SVek0N6UIm3j3B6JrCX0JA3xPgicxlVfIdmoNgew/Fmj9
zX1MGdNUsar7FmJIAPabXvK9LHEUeo3ZDnWmwnsx0BJHcPp89HrGhDbHTTvucG58
Rm25gVTYeWe4rHx3M8B+OROygVPjIybrx6Qh7JRdYlzjq1ZfqtjVkO772qt+juvn
KM7hDBd8kCll6Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:46 2025 by rpki-client