Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          NKYoev3rUEKyl5QxfPfjg7FXReQ0ZMrtFj6H882YA34=
Subject key identifier:   A1:89:2B:42:6E:1C:F8:A7:3D:D5:DE:21:8A:2E:E2:AA:50:92:B4:8B
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       01984A41383D273E6DCA1807832F0A382112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 05:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:44 +0000
Files and hashes:         1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
                          2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
                          3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
                          4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
                          5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: wTvzj1aEp7IyTeowbNTmzO68zNb7tR/SBroa9jkt2NM=)
                          6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:38:3d:27:3e:6d:ca:18:07:83:2f:0a:38:21:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Jul 27 05:00:44 2025 GMT
            Not After : Jul 28 05:00:44 2025 GMT
        Subject: CN=a1892b426e1cf8a73dd5de218a2ee2aa5092b48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:a3:81:23:fa:24:d2:43:07:69:78:5e:ca:
                    b1:2b:db:03:a3:7c:0f:0f:96:42:f5:ee:6c:38:24:
                    7b:2a:65:73:28:fd:3f:f2:08:16:7b:44:2a:5c:1f:
                    92:2c:ec:bc:cc:54:23:88:d1:0c:05:c6:a5:15:35:
                    b1:87:95:03:7f:58:fd:81:e5:03:18:fc:e1:f7:65:
                    3f:b9:72:db:7b:ba:ec:68:a6:36:e8:7c:b1:38:fb:
                    7f:58:fe:84:d1:58:4e:8a:34:e3:26:32:f7:b4:24:
                    fd:13:fc:0c:29:3e:da:f2:93:62:7b:a9:1f:66:51:
                    4f:09:c2:9b:3e:e3:a7:05:48:ac:da:30:95:bc:12:
                    0c:48:36:96:19:37:07:4a:24:d7:13:40:04:3e:00:
                    35:b6:28:6f:07:cb:a3:31:33:2d:de:9d:61:dd:0a:
                    4f:36:fe:3d:3c:1f:d6:23:a9:12:58:5c:8a:e7:5b:
                    88:90:96:c3:5e:a5:b8:3f:12:c9:42:bb:1c:ef:85:
                    e8:25:53:79:e7:f9:b8:b1:a0:a8:fe:b2:48:0f:10:
                    57:4f:72:16:a9:07:91:71:7e:53:9a:85:4c:0d:42:
                    fd:b4:68:04:82:fc:3b:42:85:0d:8a:e6:2e:67:2d:
                    86:34:7b:1d:55:68:64:eb:45:71:67:ad:e1:d0:f3:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:89:2B:42:6E:1C:F8:A7:3D:D5:DE:21:8A:2E:E2:AA:50:92:B4:8B
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:67:65:94:d5:5b:c3:c0:2c:93:08:c0:14:da:ca:97:67:38:
         c6:d0:9c:d4:20:5e:79:8a:ae:b9:66:4f:88:16:b9:73:a8:16:
         a2:61:f9:c1:7b:54:0f:4a:ac:8d:76:f9:7f:5f:c9:ee:e2:3a:
         b6:3c:60:f1:29:52:4a:15:5e:bd:9f:cd:99:8d:30:20:0a:49:
         9d:bc:1f:49:35:28:67:c3:00:5c:30:ff:84:2e:e3:d9:2e:c8:
         4f:2d:bd:23:37:f9:52:87:1d:cd:c3:39:e6:36:dc:0d:60:ee:
         89:a3:e7:19:cb:42:1d:e8:bb:83:48:cd:67:72:c9:67:a7:af:
         31:1d:eb:30:ed:ac:de:01:af:22:dc:0f:b8:dc:01:e0:6a:b3:
         f9:a9:21:02:76:56:37:6b:b4:6e:43:a2:b8:7c:f7:59:34:85:
         6c:94:67:bd:e1:ba:5e:8c:8e:a0:1a:2d:a1:e2:b4:0e:a1:9b:
         72:8b:51:a9:c6:0e:d1:d3:b1:19:06:74:55:22:35:8c:32:c4:
         b4:57:d6:86:43:80:9a:ed:90:07:fe:0b:3f:e8:22:95:fd:c2:
         2a:46:27:46:16:10:8d:d1:2c:71:59:e5:fd:b8:bc:c1:a0:69:
         91:be:2e:28:79:a7:f7:94:85:73:d6:4a:a6:86:d6:14:37:80:
         a3:f4:79:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQTg9Jz5tyhgHgy8KOCESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh
NDFlNWYwHhcNMjUwNzI3MDUwMDQ0WhcNMjUwNzI4MDUwMDQ0WjAzMTEwLwYDVQQD
EyhhMTg5MmI0MjZlMWNmOGE3M2RkNWRlMjE4YTJlZTJhYTUwOTJiNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcejgSP6JNJDB2l4XsqxK9sDo3wP
D5ZC9e5sOCR7KmVzKP0/8ggWe0QqXB+SLOy8zFQjiNEMBcalFTWxh5UDf1j9geUD
GPzh92U/uXLbe7rsaKY26HyxOPt/WP6E0VhOijTjJjL3tCT9E/wMKT7a8pNie6kf
ZlFPCcKbPuOnBUis2jCVvBIMSDaWGTcHSiTXE0AEPgA1tihvB8ujMTMt3p1h3QpP
Nv49PB/WI6kSWFyK51uIkJbDXqW4PxLJQrsc74XoJVN55/m4saCo/rJIDxBXT3IW
qQeRcX5TmoVMDUL9tGgEgvw7QoUNiuYuZy2GNHsdVWhk60VxZ63h0PPmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGJK0JuHPinPdXeIYou4qpQkrSLMB8GA1UdIwQY
MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt
ZjEzNGU1MWNjMDViLzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi
LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2dllNVb
w8AskwjAFNrKl2c4xtCc1CBeeYquuWZPiBa5c6gWomH5wXtUD0qsjXb5f1/J7uI6
tjxg8SlSShVevZ/NmY0wIApJnbwfSTUoZ8MAXDD/hC7j2S7ITy29Izf5UocdzcM5
5jbcDWDuiaPnGctCHei7g0jNZ3LJZ6evMR3rMO2s3gGvItwPuNwB4Gqz+akhAnZW
N2u0bkOiuHz3WTSFbJRnveG6XoyOoBotoeK0DqGbcotRqcYO0dOxGQZ0VSI1jDLE
tFfWhkOAmu2QB/4LP+gilf3CKkYnRhYQjdEscVnl/bi8waBpkb4uKHmn95SFc9ZK
pobWFDeAo/R52g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:24:49 2025 by rpki-client