Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          0McGWyl85pldoguh7nOwDtToxh1qGOP2JxcR+wYOiF0=
Subject key identifier:   C5:C5:F7:F5:6C:38:AC:CB:4E:42:17:88:4D:C3:37:CA:06:D6:6F:AE
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       01984588E935090B8BB7880D56DE80E5A446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          12FE
Signing time:             Sat 26 Jul 2025 07:00:57 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:57 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:57 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: sPN/Fl/RSSI2fm+prXI4dIekjQBQ8nrEYKyse0JM1IE=)
                          2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
                          3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
                          4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
                          5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:e9:35:09:0b:8b:b7:88:0d:56:de:80:e5:a4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jul 26 07:00:57 2025 GMT
            Not After : Jul 27 07:00:57 2025 GMT
        Subject: CN=c5c5f7f56c38accb4e4217884dc337ca06d66fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:fb:e7:fa:9e:7b:aa:b9:5e:31:20:d2:09:
                    71:a1:f4:a5:65:a7:5e:c3:1a:1e:e9:ce:04:c0:69:
                    1c:59:a1:90:6b:1c:b3:5f:a8:6a:25:35:16:f4:4d:
                    32:e6:38:3e:e2:26:21:8e:1e:36:13:58:fb:a0:7f:
                    27:c1:46:21:bc:71:f7:dd:33:11:4c:e9:f7:5b:ec:
                    a7:5c:6c:3b:d8:5a:e3:45:68:0e:28:d0:71:93:08:
                    0a:78:e3:fe:b3:3f:5e:38:91:67:f3:be:52:f6:d9:
                    6c:37:56:16:ac:12:58:21:78:32:4b:fa:85:d1:fd:
                    38:f7:63:a0:a9:28:aa:ac:b2:75:52:90:b0:04:30:
                    fc:c7:81:cb:90:b1:ba:ce:5d:91:67:3e:ed:74:ae:
                    98:9c:33:73:ed:af:a9:ab:ad:f8:7e:65:6c:ce:6e:
                    06:64:36:ff:fd:dd:aa:2f:87:6d:92:c2:35:8b:c9:
                    fb:07:fb:41:0a:9b:51:13:4a:74:dc:cb:56:50:b4:
                    74:de:51:58:39:4b:91:fe:9e:34:6e:98:80:ee:a3:
                    93:31:7d:75:87:e9:70:b3:e0:e0:6b:52:7a:a1:ef:
                    85:f1:ea:55:79:a5:7c:39:2a:50:a6:3e:97:db:be:
                    cb:b8:d8:bd:52:df:5e:bd:cd:5f:2a:29:b0:5d:e1:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:F7:F5:6C:38:AC:CB:4E:42:17:88:4D:C3:37:CA:06:D6:6F:AE
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:3e:51:84:45:96:82:bb:ee:61:e9:3c:9d:d6:42:76:f2:
         15:56:ee:a8:c3:b2:96:e4:97:bf:f5:b7:f8:2e:00:44:85:15:
         e8:3c:d2:9b:73:a8:ef:0b:f2:d3:7b:d5:a7:52:95:77:c0:a5:
         50:e6:fd:36:0c:72:04:64:48:b3:41:ef:c3:a8:b0:5f:fc:1e:
         11:0d:7f:03:91:9f:9f:f4:c6:74:3d:52:0b:b6:7d:e8:39:b4:
         6b:81:d2:e1:8d:a2:59:41:b7:28:60:a4:d6:1f:78:5b:77:ec:
         86:17:b8:8d:9e:5c:10:cf:e6:59:40:f9:42:82:ba:ed:8f:2e:
         26:6b:a6:e2:f6:cd:90:47:45:99:c4:92:f2:90:53:00:9c:13:
         06:ae:42:e5:d9:ae:70:0b:08:c9:26:1c:6c:1d:eb:1b:94:c3:
         54:17:46:7d:78:44:50:70:fe:32:23:bf:ad:4a:f3:74:d2:a1:
         e3:2d:fe:0f:39:29:2c:a7:47:6a:95:24:04:b1:39:67:6d:d9:
         12:af:d7:42:1b:5b:2d:cf:8d:22:24:fc:53:3f:0e:80:a9:48:
         e5:8d:ba:b7:a0:7c:6f:ec:ab:a8:db:72:24:5a:91:b3:30:7c:
         71:c2:d4:62:77:6d:4e:41:d8:d2:3d:83:9d:58:50:68:2a:e2:
         54:a2:40:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiOk1CQuLt4gNVt6A5aRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjUwNzI2MDcwMDU3WhcNMjUwNzI3MDcwMDU3WjAzMTEwLwYDVQQD
EyhjNWM1ZjdmNTZjMzhhY2NiNGU0MjE3ODg0ZGMzMzdjYTA2ZDY2ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcL75/qee6q5XjEg0glxofSlZade
wxoe6c4EwGkcWaGQaxyzX6hqJTUW9E0y5jg+4iYhjh42E1j7oH8nwUYhvHH33TMR
TOn3W+ynXGw72FrjRWgOKNBxkwgKeOP+sz9eOJFn875S9tlsN1YWrBJYIXgyS/qF
0f0492OgqSiqrLJ1UpCwBDD8x4HLkLG6zl2RZz7tdK6YnDNz7a+pq634fmVszm4G
ZDb//d2qL4dtksI1i8n7B/tBCptRE0p03MtWULR03lFYOUuR/p40bpiA7qOTMX11
h+lws+Dga1J6oe+F8epVeaV8OSpQpj6X277LuNi9Ut9evc1fKimwXeGFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXF9/VsOKzLTkIXiE3DN8oG1m+uMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUk+UYRF
loK77mHpPJ3WQnbyFVbuqMOyluSXv/W3+C4ARIUV6DzSm3Oo7wvy03vVp1KVd8Cl
UOb9NgxyBGRIs0Hvw6iwX/weEQ1/A5Gfn/TGdD1SC7Z96Dm0a4HS4Y2iWUG3KGCk
1h94W3fshhe4jZ5cEM/mWUD5QoK67Y8uJmum4vbNkEdFmcSS8pBTAJwTBq5C5dmu
cAsIySYcbB3rG5TDVBdGfXhEUHD+MiO/rUrzdNKh4y3+DzkpLKdHapUkBLE5Z23Z
Eq/XQhtbLc+NIiT8Uz8OgKlI5Y26t6B8b+yrqNtyJFqRszB8ccLUYndtTkHY0j2D
nVhQaCriVKJAog==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:59:04 2025 by rpki-client