Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File:                     Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier:          Qq+IpNFsV80xqnEN0KL2Shir2wXOILUsyxlIxdX85+I=
Subject key identifier:   54:8B:77:2F:BD:99:6A:71:64:3C:94:92:70:D1:E7:3B:AA:FA:4B:73
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer:       /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial:       0198530D346CDBD5A114D34C3F1ED7C18F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number:          11FC
Signing time:             Mon 28 Jul 2025 22:00:30 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:30 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:30 +0000
Files and hashes:         1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 4Qcvu+Zcc6ttztPYG24g0TNYbOdHCMQ+cYvOx/gMknQ=)
                          2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:34:6c:db:d5:a1:14:d3:4c:3f:1e:d7:c1:8f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
        Validity
            Not Before: Jul 28 22:00:30 2025 GMT
            Not After : Jul 29 22:00:30 2025 GMT
        Subject: CN=548b772fbd996a71643c949270d1e73baafa4b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:15:af:9c:3f:55:d9:6b:3b:c6:47:e4:25:
                    09:99:aa:84:31:56:d2:1c:eb:79:1d:a9:55:60:c2:
                    94:65:77:83:c0:29:7f:f0:7d:53:5c:c6:b7:41:e2:
                    dd:85:5a:4f:a5:df:ec:b3:b4:17:54:88:b8:b8:f0:
                    c9:63:34:eb:d4:37:89:df:3e:c3:44:d4:36:7a:c4:
                    9c:9b:40:4a:86:54:b9:5e:97:83:15:e8:33:83:18:
                    e2:61:99:27:42:4d:a3:b6:c7:2c:71:41:01:68:d0:
                    9c:cb:88:9c:e8:08:be:7d:8e:ed:fa:ab:87:c0:3b:
                    e4:0d:2c:37:99:db:d4:a7:4d:78:59:9f:e3:61:ae:
                    b0:7d:e2:21:71:70:99:eb:41:b6:e0:b6:dd:16:ba:
                    76:e8:3e:85:b6:d8:d7:a7:20:8b:74:9e:d5:17:b4:
                    77:f2:60:98:b8:d1:68:14:ac:95:88:00:82:c6:0c:
                    11:c9:ff:26:c9:25:bd:8c:b2:a9:64:25:93:e8:00:
                    0b:59:c4:08:a6:4c:d5:3c:e2:a2:08:58:31:10:35:
                    60:f9:17:35:57:e5:d2:cb:1e:61:eb:3d:9d:61:3b:
                    17:d6:d2:69:12:b1:ab:d2:6a:21:5f:79:52:75:e6:
                    c3:c7:8d:c9:e2:a2:26:bc:a1:6a:80:39:43:27:0d:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:77:2F:BD:99:6A:71:64:3C:94:92:70:D1:E7:3B:AA:FA:4B:73
            X509v3 Authority Key Identifier:
                keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:0e:40:c8:6c:18:77:fb:fc:64:e4:04:e3:68:b5:af:fe:
         dc:f5:13:89:74:8f:de:1f:7d:0e:c9:dd:6a:e7:7e:07:7d:b5:
         72:39:f3:bc:9b:91:ea:32:b8:9a:55:d6:5a:59:4b:0d:7b:40:
         97:b5:50:2b:81:bf:97:f0:d9:0b:43:af:9e:7d:e3:a4:6f:af:
         fc:d3:08:91:d7:f5:c5:62:27:df:07:d3:c2:99:d5:dc:c4:c6:
         2c:78:4d:11:2a:09:03:d0:63:4f:ec:27:4e:32:7b:0e:43:bd:
         1f:04:80:33:ba:43:4e:cb:08:b5:d9:57:99:03:16:18:0a:52:
         f9:34:c0:3e:54:80:7a:67:04:8c:53:d2:de:32:4a:90:2d:1d:
         84:07:40:7d:5b:ca:25:39:c3:32:c4:87:c2:8f:8c:71:e1:1a:
         27:69:86:7c:95:93:d2:f5:d2:77:8b:67:6f:fd:ee:ef:bf:49:
         31:0e:52:1f:d2:04:e8:54:08:e7:bb:44:9e:de:04:22:0d:37:
         d0:43:03:10:25:98:bf:3d:58:c4:4d:d4:d5:30:26:56:4a:8a:
         b7:79:e6:26:71:e4:d4:a1:6a:b0:b7:6d:28:7c:e6:a5:d5:07:
         1c:45:02:f2:91:46:55:1c:4b:fc:7f:d7:1a:b3:15:18:66:c1:
         ee:9b:4d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDTRs29WhFNNMPx7XwY9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmI3ZGEzYjQ0ZTQxYjMyMzY5ZTRhNWM3OTBkMzA4MWZj
NjlhYTkwHhcNMjUwNzI4MjIwMDMwWhcNMjUwNzI5MjIwMDMwWjAzMTEwLwYDVQQD
Eyg1NDhiNzcyZmJkOTk2YTcxNjQzYzk0OTI3MGQxZTczYmFhZmE0YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfgVr5w/VdlrO8ZH5CUJmaqEMVbS
HOt5HalVYMKUZXeDwCl/8H1TXMa3QeLdhVpPpd/ss7QXVIi4uPDJYzTr1DeJ3z7D
RNQ2esScm0BKhlS5XpeDFegzgxjiYZknQk2jtscscUEBaNCcy4ic6Ai+fY7t+quH
wDvkDSw3mdvUp014WZ/jYa6wfeIhcXCZ60G24LbdFrp26D6FttjXpyCLdJ7VF7R3
8mCYuNFoFKyViACCxgwRyf8mySW9jLKpZCWT6AALWcQIpkzVPOKiCFgxEDVg+Rc1
V+XSyx5h6z2dYTsX1tJpErGr0mohX3lSdebDx43J4qImvKFqgDlDJw0xnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSLdy+9mWpxZDyUknDR5zuq+ktzMB8GA1UdIwQY
MBaAFCn7faO0TkGzI2nkpceQ0wgfxpqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYt
YmNhYzhiNTUyYTlhLzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xN2EwMTYtMjZjNy00MjRjLTg2MmYtYmNhYzhiNTUyYTlh
LzEvS2Z0OW83Uk9RYk1qYWVTbHg1RFRDQl9HbXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPUOQMhs
GHf7/GTkBONota/+3PUTiXSP3h99Dsndaud+B321cjnzvJuR6jK4mlXWWllLDXtA
l7VQK4G/l/DZC0Ovnn3jpG+v/NMIkdf1xWIn3wfTwpnV3MTGLHhNESoJA9BjT+wn
TjJ7DkO9HwSAM7pDTssItdlXmQMWGApS+TTAPlSAemcEjFPS3jJKkC0dhAdAfVvK
JTnDMsSHwo+MceEaJ2mGfJWT0vXSd4tnb/3u779JMQ5SH9IE6FQI57tEnt4EIg03
0EMDECWYvz1YxE3U1TAmVkqKt3nmJnHk1KFqsLdtKHzmpdUHHEUC8pFGVRxL/H/X
GrMVGGbB7ptNvw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:38 2025 by rpki-client